last executing test programs: 15m20.044306941s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000a00)=@file={0x1, './file1\x00'}, 0x6e) listen(r2, 0x3) r3 = syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10100}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x5f}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) io_uring_enter(r6, 0x5e5a, 0xb1e3, 0xa, 0x0, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x4) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)=0x2) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) userfaultfd(0x40002) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000058c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000005a00)=""/175, 0xaf}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000740)=""/238, 0xee}, {&(0x7f0000000480)=""/107, 0x6b}], 0x8, &(0x7f00000008c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000018c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f00000019c0)=""/182, 0xb6}, 0x8}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/239, 0xef}, {&(0x7f0000001b80)=""/114, 0x72}, {&(0x7f0000001c00)=""/127, 0x7f}, {&(0x7f0000001c80)=""/237, 0xed}, {&(0x7f0000001d80)=""/175, 0xaf}], 0x6, &(0x7f0000001e40)=""/135, 0x87}, 0x4ff}, {{&(0x7f0000001f00)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000001f80)=""/202, 0xca}, {&(0x7f0000002080)=""/130, 0x82}, {&(0x7f0000002140)=""/212, 0xd4}, {&(0x7f0000002240)=""/198, 0xc6}], 0x4}, 0x2}, {{&(0x7f0000003440)=@qipcrtr, 0x80, &(0x7f0000004980)=[{&(0x7f00000034c0)=""/216, 0xd8}, {&(0x7f00000045c0)=""/212, 0xd4}, {&(0x7f00000047c0)=""/52, 0x34}, {0x0}, {&(0x7f00000048c0)=""/13, 0xd}, {&(0x7f0000004900)=""/115, 0x73}], 0x6, &(0x7f00000049c0)=""/232, 0xe8}, 0x100}, {{&(0x7f0000004ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004b40)}, {&(0x7f0000004b80)=""/145, 0x91}, {&(0x7f0000004c40)=""/89, 0x59}, {&(0x7f0000004cc0)=""/12, 0xc}, {&(0x7f0000004b40)=""/20, 0x14}], 0x5, &(0x7f0000004d80)=""/74, 0x4a}, 0x5}, {{&(0x7f0000004e00)=@isdn, 0x80, &(0x7f0000005400)=[{&(0x7f0000004e80)=""/214, 0xd6}, {&(0x7f0000004f80)=""/185, 0xb9}, {&(0x7f0000005040)=""/55, 0x37}, {0x0}, {&(0x7f00000051c0)=""/117, 0x75}, {&(0x7f0000005240)=""/156, 0x9c}, {&(0x7f0000005300)=""/199, 0xc7}], 0x7, &(0x7f0000005440)=""/106, 0x6a}, 0x1}, {{&(0x7f00000054c0)=@tipc, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005540)=""/39, 0x27}, {&(0x7f0000005580)=""/198, 0xc6}, {&(0x7f0000005680)=""/9, 0x9}, {&(0x7f00000056c0)=""/234, 0xea}], 0x4, &(0x7f0000005800)=""/169, 0xa9}, 0x6}], 0x8, 0x0, &(0x7f00000059c0)) 15m13.693615555s ago: executing program 2 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) read(r5, &(0x7f0000000000)=""/34, 0x22) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f00000002c0)={0xffffffff, 0xfffffff8, 0x8000004, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r10 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xae\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x13\x8cs\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5k)\xc5\x98\x84\x8a\x82\x19\x8d\x8b\x9e\xb1\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H/1\x02\x10\xfe\f]`\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) close(r10) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x2c, r4, 0x4, 0x70bd23, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0x0, 0x99, {0x1ff, 0x57}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x1, 0x2d, 0x0, 0x1, [{0xa, 0x0, @random="72ea92aa019d085c3c14b8"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008884) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000580)) 15m11.445860461s ago: executing program 2 (id=20): pipe(&(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 15m10.445105871s ago: executing program 2 (id=22): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15m7.686531148s ago: executing program 2 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x50, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) 14m53.710291024s ago: executing program 2 (id=44): r0 = inotify_init1(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x8000011, r4, 0x0) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 14m38.00304794s ago: executing program 32 (id=44): r0 = inotify_init1(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x8000011, r4, 0x0) ftruncate(r2, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m57.674269468s ago: executing program 5 (id=1330): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000000000000b7080000000000007b8af8ff00000000b70800006c3200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r1, @ANYBLOB="00000000000f0000b7112000080000008500000076000000950000000000c3f3"], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0xfffffd50) socket$inet6(0xa, 0x80000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a1000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x1, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0xfffffffffffffefa, 0x0, r5, r4, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @sk_skb=0x5, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x3000008, 0x0) 6m57.013078564s ago: executing program 5 (id=1333): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x3, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x420101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x111, 0x3}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x7e0, r1}, 0x38) 6m56.353948875s ago: executing program 5 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x541b, &(0x7f0000000040)=0x5) 6m55.317468947s ago: executing program 5 (id=1338): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000640)={0x7ec935bf, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) 6m54.126152333s ago: executing program 5 (id=1341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x10000000000000, 0x2a0000) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x41, @any, 0x400}, 0xe) listen(r6, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) 6m51.707222478s ago: executing program 5 (id=1348): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xec776000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYBLOB="800002010800000008001b000000"], 0x38}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x320480b, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x10000009, 0xff7ffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) 6m35.976896644s ago: executing program 33 (id=1348): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xec776000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYBLOB="800002010800000008001b000000"], 0x38}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x320480b, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x10000009, 0xff7ffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) 12.583245817s ago: executing program 3 (id=2385): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x2000007, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x26d1, "fa02791d2a69a2610f0200000000000000110001000000010000800000000007", 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x7de6, 0x10100, 0xfffffffd, 0x400170}, 0x0, 0x0, &(0x7f0000000000)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0xff03) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2, @ANYRESHEX=r1]) 11.929662103s ago: executing program 0 (id=2386): r0 = syz_socket_connect_nvme_tcp() r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x4, 0x0, 0x2, {}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) close(r0) 11.812485033s ago: executing program 0 (id=2388): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$dsp(r0, &(0x7f0000000180)=""/187, 0xbb) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0xd) 10.785368351s ago: executing program 0 (id=2391): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x4897) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000100)="f5", 0x1}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac5"], 0xe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000047c0)) dup2(r2, r2) 10.784047891s ago: executing program 3 (id=2392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0xff01) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300), 0x1042, &(0x7f0000002180)=[@init={0x18, 0x84, 0x0, {0x40, 0xb, 0x101, 0xa}}], 0x18, 0x40010}], 0x1, 0x240000c0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xfad4d87013c8c761, 0x1a7) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000100)={0x9, 0x0, 0xc872, 0xe}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000fddbdf27170000003400308005000200aa0000001400018008000100010000000500020003000000140004004260c4005074316d3bb1f8cbd5f38f6c08000300", @ANYRES32=r8, @ANYBLOB="8ea71dc4f2f2ca3f6004c97053f5e71c534aad843ffc4f3a8079a4c90d9f94b9558ef3e62445870ba52234688c9d59c33aa4624a52e0cb4b08739ea75d5be2f7284c0d2da04b8a652ec95b4e91fdbe63728d712a154ecb7dcfb685f725c5c888341b84aaf6286b26e782a8da4b285487d00b186d2c0e88d0c8bedfb88c200b6be763e680031297c59a055adb04e10ccddbd4ccff9fae0c96e2a4d1a171ff3073abc820831b4f9225ea0dd18e92576a3e2a254c30a755d0dd4a"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x200440c4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x5, 0x1, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x1c}}, 0x20000000) 9.748850016s ago: executing program 3 (id=2394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0xff01) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300), 0x1042, &(0x7f0000002180)=[@init={0x18, 0x84, 0x0, {0x40, 0xb, 0x101, 0xa}}], 0x18, 0x40010}], 0x1, 0x240000c0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xfad4d87013c8c761, 0x1a7) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000100)={0x9, 0x0, 0xc872, 0xe}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000fddbdf27170000003400308005000200aa0000001400018008000100010000000500020003000000140004004260c4005074316d3bb1f8cbd5f38f6c08000300", @ANYRES32, @ANYBLOB="8ea71dc4f2f2ca3f6004c97053f5e71c534aad843ffc4f3a8079a4c90d9f94b9558ef3e62445870ba52234688c9d59c33aa4624a52e0cb4b08739ea75d5be2f7284c0d2da04b8a652ec95b4e91fdbe63728d712a154ecb7dcfb685f725c5c888341b84aaf6286b26e782a8da4b285487d00b186d2c0e88d0c8bedfb88c200b6be763e680031297c59a055adb04e10ccddbd4ccff9fae0c96e2a4d1a171ff3073abc820831b4f9225ea0dd18e92576a3e2a254c30a755d0dd4a"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x200440c4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x5, 0x1, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x1c}}, 0x20000000) 8.739429293s ago: executing program 3 (id=2397): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000200)={[{}]}) socket$netlink(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @local, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'nicvf0\x00'}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0xb, 0x0, 0x1b, 0x0, 0x4f, 0x0, 0xe7}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f00000002c0)=0xad) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) 8.513266356s ago: executing program 1 (id=2398): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) setpgid(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000010101020000000000000000020000092000018006000340000400001400018008000100ac14141508000200ac1414bb24001980080002001800000008000200800a000008000200010400ef07"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 8.171933774s ago: executing program 1 (id=2401): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871998d2dda7, 0xdcf, 0x400, 0xb, 0x800, 0x0, 0x0, 0x2, 0xd56}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x2, {0x4, 0xffffffff, 0x0, {0x5, 0x80000, 0x63f, 0x80000001, 0x0, 0x700000000000000, 0x2, 0x35741060, 0x5b9, 0x8000, 0x9ea, 0x0, 0xee01, 0x41, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x5, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r3, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.642976358s ago: executing program 6 (id=2403): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x46020, &(0x7f0000000100)={@_ha_fsid={[0x7, 0x7]}, {0x3, 0x7, 0x1, 0x3}}, 0x5, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x145881, 0x17e, 0xb}, 0x18) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 7.535253429s ago: executing program 4 (id=2404): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x3554000) mbind(&(0x7f0000838000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0xb, 0x9, 0x7e64cfa484fcc86b) 7.534835977s ago: executing program 6 (id=2405): ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {0xa, 0x10}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 6.676833984s ago: executing program 4 (id=2406): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}, {@verity_on}]}) chdir(0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000002c0), 0x5005) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0x24009001}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d7930000000000000000000003f7a1b13c43bfda75668693a3e6915a07863834ce0db8ffdf878a671b37c5284cc39c384a1fcb6e5031ac0a435ef03dbc01f90b876debbee45a106c6cb674b50d1ad1c78322d0d5e28707519cada97cde2f6606b3a452dd94a134cc6ec9e075274f32af3202a3e1d04c3"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2503", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x101000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) 6.52770726s ago: executing program 1 (id=2407): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1000000000000098, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.576355462s ago: executing program 0 (id=2408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) 5.500848692s ago: executing program 0 (id=2409): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0xf755, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(0x0, 0x66, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x1}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe(&(0x7f0000000240)) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0xc0, &(0x7f0000000040)=ANY=[@ANYBLOB='defcontext']) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x5e) 4.327105568s ago: executing program 3 (id=2410): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000003767eb68145f24370000000000000000"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtfilter={0xc7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc48, 0x2, [@TCA_U32_POLICE={0xc20, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x10, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0x9, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x6, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x1, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x7, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0x4, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x7fff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x400003, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x7ff, 0x2, 0x1, 0x2, 0x3, 0x3815, 0x2, 0xcd1, 0x0, 0x401, 0x1000, 0x9, 0x5, 0x5, 0x6, 0x10001, 0x3, 0xa8b, 0x8000, 0x5, 0xeb1, 0x1000, 0x10000, 0x9, 0x1, 0x5, 0x4, 0x0, 0x40, 0xfffffe01, 0x8, 0x7, 0x81, 0x7b8, 0x8b51, 0x8c, 0x8, 0x6, 0xffffff14, 0x5, 0x1000, 0x5, 0x844d, 0x8, 0x7, 0x0, 0x8, 0x0, 0x7fff, 0xffff, 0x7, 0x5, 0x0, 0x8, 0x9, 0xd, 0x7, 0x1, 0x9, 0x1, 0x9e8, 0x9, 0x9, 0x5, 0x3, 0x800, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x9, 0x4, 0x43c, 0xe, 0x1, 0x9eef, 0x31a7, 0x9, 0x80000000, 0x7668c383, 0x4c51, 0xc, 0x0, 0xdc28, 0x5, 0xd, 0x1, 0x6, 0xffffffff, 0x5, 0xabc3, 0x6, 0x4, 0x3, 0x10001, 0x0, 0x1ff, 0x8, 0x0, 0x7, 0xeb, 0x1450000, 0x4, 0x4, 0x6, 0x6, 0xc05e, 0xed, 0x6b2c, 0x4, 0x80, 0x5, 0x1ff, 0x6, 0x3, 0x6, 0x0, 0x4, 0x1, 0x7f, 0x2, 0x6, 0x8, 0x3, 0x2, 0x71c0000, 0x6d, 0x0, 0x0, 0xf3, 0xffffff81, 0x8, 0x6, 0x5, 0x9, 0x6, 0x9, 0x7f, 0xe2d, 0x0, 0x1, 0x3ff, 0x890a, 0x400, 0xe812, 0x1, 0x5, 0x2, 0x3, 0x7, 0x2c2, 0x1, 0x8, 0x10, 0x0, 0x0, 0x2, 0x3261, 0x15b3, 0x4, 0x1, 0x7, 0x7, 0xf0a31f4b, 0x2, 0x5, 0x89, 0x1, 0xa48, 0x4b7ea0b8, 0x9, 0x2, 0x3, 0xfff, 0x9, 0x4, 0x7, 0x6, 0xf468, 0x5, 0xafd, 0x0, 0x5, 0x9, 0x1, 0xfb9, 0x9, 0x1ff, 0x31eb, 0x0, 0x40, 0x5, 0xa00, 0x7, 0x100, 0xc8c, 0x400, 0x3, 0x7, 0x73, 0x8, 0x8, 0x0, 0x0, 0x10, 0x1, 0xc, 0x2, 0x51f2, 0x4, 0x287f, 0x2, 0x1, 0x2f, 0x5, 0x6, 0xa79, 0xfffffffc, 0x6, 0x7cdb77e9, 0x6, 0x0, 0x7, 0x9, 0x3, 0x5, 0x3, 0xffff7fff, 0x7127, 0x0, 0x9d8, 0x4, 0x6, 0x8, 0x8, 0x7, 0x5, 0x80, 0x800, 0x6, 0x7ff, 0xd70, 0xfffffffa, 0x80000000, 0x9, 0x6, 0x7, 0xa, 0x43f69563, 0x180000, 0x3, 0xa]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xc7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 4.190987005s ago: executing program 0 (id=2411): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x0, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 2.678601579s ago: executing program 3 (id=2412): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[], 0x48}}, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000400)={{0x2, 0x4e24, @private=0xa010101}, {0x1}, 0x4, {0x2, 0x4e24, @local}, 'erspan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000001c0)={@hyper, 0x85c47af9790eeb80}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b0002012030230904000000010130000a2401100a0009000000090401"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xfffd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0), 0x60}, 0x884) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r7, 0x0, 0x201f00) 2.648710397s ago: executing program 1 (id=2413): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/183, 0xb7) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40010000060a010400000000000000000a0000010900010073797a310000000034000480300001800b0001006f626a7265660000200002800900020073797a3200000000080003400000001008000140000000070900020073797a32"], 0x168}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000040)={0x18, r6}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r3, r6, 0x0, 0x0, 0x0, 0xac, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672ce75b91a3413ec474254df25eda7c67d2d93902d976d9346108b11f41f67b4ffc919167d0d18fb3f883de31"}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.558367481s ago: executing program 6 (id=2414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, 0x0, 0x880) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180), 0x0, 0xffffffffffffffff) sendfile(r4, r4, 0x0, 0x201300) 1.72736301s ago: executing program 4 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) flock(0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0x8}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x2a, 0x2, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000100)={0x10, 0xd, 0x8, 0x2, 0x5, 0x10, 0x6}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x28fd5460e96c939b}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x8004) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r9, @ANYBLOB="2000000026a4aabe400012800e0001006970366772657461700000002c00028014000e0020"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10040080) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d00000000af00000000000000000005000600000000000a00000000000000fc010000000000000000000000020000000000000000000005000500000000000a00000000000000000000000000007fc306665067477a00001e0000000000000a00120002000200000000000000000010080000000000000000000000000000fe880000000000000000000000000001fc0100000000000000000000000000000400040000000000000200000004000000000000000000000000000000000000c8537a48abff76768c80ebeba7c454c4232cf6055f7ace0bf244d4088b38b3a1ba0b89acea4ad4e1078991e596c4cdb317881b3c20fa65f707bfc54f83ccfbc4cd6416830fbdbc68b116490c56ad32642f4744a55fa7d78d99364d26501c3fffa5a88612f37a33ab6969538ae384137e4a31f932"], 0xc0}}, 0x0) 1.369720729s ago: executing program 1 (id=2416): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980912, 0x0, '\x00', @ptr}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) ioctl$KVM_SMI(r3, 0xaeb7) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x19) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, &(0x7f0000000080)) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000140)={0x1, 0x1, [0x6, 0x1, 0x0, 0x0, 0x1, 0x3ff, 0x401, 0x80000001]}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r5, @ANYBLOB="89040400000000001804008008000100736901004631fa47bc9266b4269a2d256b8ca1ebc0381c47b3a1092a94aa279f650e4adea16f714eb5e33014e05be52d7cbd8e29b527cd26db9778af66bda0f327785c6eefb8cf8466f9d9287d3d4a0a4d9d2a20e3f5cbd67936cd1fa5fdc2de5f", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000390426bd700000000000000003e4", @ANYRES32=r5, @ANYBLOB="00000000000000002000128008000100736974001400028008000200ac1414bb0600e800db0000005a750bb043d817dce245c89801df9a8a710d96631db749930a752c7675416b7ef32dca105165d5fd8060736d90728a11258676e39c82bdba7835bf7f65298ab833e2715ccd82f01b10a2fbeac1824b3019224805ae6cb8f389388c02b2a0c20315eac7e79749478d"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) read$msr(r0, &(0x7f0000000080)=""/166, 0xa6) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x10400000000d, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x47504a4d, 0x8}}) 1.046576769s ago: executing program 4 (id=2417): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYRES16, @ANYBLOB="050026bd7000040000000f000000080003", @ANYBLOB], 0x44}}, 0x20000014) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x41) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f0000001040)=ANY=[@ANYBLOB="6e725f696e6f64651ef8222ef5bbbd733d312c00"]) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x45c203, 0x5b4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 961.996791ms ago: executing program 1 (id=2418): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x4897) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000100)="f5", 0x1}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac5"], 0xe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000047c0)) dup2(r2, r2) 943.136275ms ago: executing program 4 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x10000000000000, 0x2a0000) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x41, @any, 0x400}, 0xe) listen(r6, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) 234.86107ms ago: executing program 6 (id=2420): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tun(r0, &(0x7f0000002340)={@void, @val={0x0, 0x0, 0x0, 0x0, 0xbe, 0x200}, @eth={@remote, @multicast, @void, {@mpls_uc={0x8847, {[{0xffff7}], @generic="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"}}}}}, 0xff9) 198.379806ms ago: executing program 6 (id=2421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="300000003c000701feffffff0000000001"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 61.975697ms ago: executing program 6 (id=2422): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xd}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff1}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000300)=""/219, 0xdb) 0s ago: executing program 4 (id=2423): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000380)={0x6, 0x0, @pic={0xe, 0xfd, 0x4, 0x4, 0x5, 0x3, 0x2, 0x2, 0xb8, 0x0, 0x2, 0xfc, 0x3, 0x0, 0x7, 0xba}}) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) r3 = syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000500)=0x9) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0303000000000000000006"], 0x1c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x400) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000000)="a82046de392b33df4db6527742412596c89e52aa40fa1aba59d26953c37021398f1d4391ae2d9a102cd5b83350a83a34b76e", 0x32}, {&(0x7f0000000240)="5d85c65a107a86a9ad5b992490c5802da17b1fc9565f58df88c8ed343133b0f9d2c13037625112b90db690295b99568ffbbfb5029a8011377216018e5d575913b448b31cf58444a026393fa7e3c97d8d2347d6f3efa5cdbbd9c97ca613b877e22fb31522e976eb37d8c5562add88620a34e6c80bbebc4e8b7c82429f523ab2e573ea99b1951956e653b05c174955881762513c63e0cb52847620c8d556c2d12aca9f4225efc625757b8c420b1d43d1927803bd3c8326a9", 0xb7}, {&(0x7f00000005c0)="6f2c37b3d26ac232146524d97dac2c6416b562db20f722ee5189153f44485e92ed23f66bca92a03aa7cfcd1cf67aabdded887e84ad686e4d2410182316ce071fbee34ac43383b833a3bf27a74c7f3f9207e675655880d0c7a1d9cf2c44c020c30bf85268a6be5dc3f71305d17a4b1bf87456df71546cfe92fc2993007ffe422d032f46c1f2285cf7aa6e917751c41fd420726aedb753ced0f153c2cd4823d3e4b5b86e3cc9b8c46ebc63a03ba76d241895ae5bffcf4222757acd78ca3ff165128b08f28f26f4b0b953e82d8d5a3cc6a3fbc92548f1043688af1fecb4a242e5f4535aad64d05af22c891b", 0xea}, {&(0x7f00000006c0)="9a3f1207b1443c599e225cc777aafff6e0fbdeea1dc60fcf02c58904a7fa15bad502e69e5438614ae6dddf3ffacb3cabdcb879c03a266f6d1ec72ad851b476f11ebe03068f220f873fd48adb209ecde91040b51a60931935cd83ab9dd50f4f3a6dc3c8dcaf8ff05d7fb4405f422b0170aca1573db7f40151ec667b0eebd3243a932e526c2b3f30a1d1f23d11ae657d14bb71b1c113a989b14f86b8ecce93e6c3ef207cbd2173d76f1fc26c248027c5c8fafe538c8e0cf5a415d8942a01cd4877f57f6d09", 0xc4}, {&(0x7f00000007c0)="6a6b34e33712c2f81b3036124dc6e10bf9a10353addd1f8a834da7f63ce7a1481f22b466bbed683ec5cd53c73158217f5ca54deaa5a4a43054c87b249b36242af1f3a1c81f78c16fad9d64bbb81a6abb1f8851387eb0ee9537cea65208c7a5281903e88d95c36449a036574486f08feb47bed17791d4142223fe8d15900a8fae86cf70048eb81d06fb673f86d85d52f43952df16b0cae7c342659c83c137a465acaed041e720fbb807b85832f41363625b20b1c9a5831ba8ae9c11b70c9f9315f873dbb804232a176d99261b76629609c3410b9a0cdfca5cf7bf995e3a3f9856f2209dabc905f1a9b5cb0ede5f08", 0xee}, {&(0x7f0000000300)="2753652c4b287344088d063a02f3647574dd796df92e120998b88a665bae24adc72e2bf73ce43c443729ab692d383677f734ff7c40dd9e89c67bab2582a894707b1a5fd44d65ba03e4a174399c45d9d22a753e3d6872ec5427ad30", 0x5b}, {&(0x7f00000008c0)="ede3b5625e2bbfb469ddd2b6f96a141a39fe42fecc05f67a2e879ce1315afb57cb1dcabd3c75c251be8567da530eab3980ef7d4681967d88b66408f3e06f3d6e600978fcf91f30aae1a13b7a47381d9aab925caea68e5bcadda43d4386a0874674677137d5e8e236b58e099ef6872d75ad4938", 0x73}], 0x7) syz_usb_disconnect(r3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x115, 0x70bd2b, 0x25dfdbfd, {0x2, 0x18, 0x10, 0x0, 0xff, 0x4, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): tributes in process `syz.0.2035'. [ 850.646362][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.660944][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.667820][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.673845][ T5879] usb 2-1: USB disconnect, device number 70 [ 850.674454][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.686393][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 850.723691][ T5871] tipc: Node number set to 2115586615 [ 850.734568][T12176] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 850.746148][T12176] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 850.807515][T13815] tipc: Resetting bearer [ 850.864940][T12176] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 850.945501][T12176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 851.005062][T12176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 851.023206][T13815] tipc: Disabling bearer [ 851.046147][T12176] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 851.055509][T12176] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 851.063903][T12176] usb 5-1: Product: syz [ 851.068080][T12176] usb 5-1: Manufacturer: syz [ 851.124774][T13851] xt_TCPMSS: Only works on TCP SYN packets [ 851.155351][ T5879] usb 4-1: USB disconnect, device number 70 [ 851.207082][T13851] sit1: entered allmulticast mode [ 851.698804][T12176] cdc_wdm 5-1:1.0: skipping garbage [ 851.731696][T12176] cdc_wdm 5-1:1.0: skipping garbage [ 852.150250][T12176] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 852.252245][T12176] cdc_wdm 5-1:1.0: Unknown control protocol [ 852.552711][ T5871] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 852.837003][T13847] SELinux: failed to load policy [ 852.886508][ T5871] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 853.104353][ T5871] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 853.165103][ T5871] usb 7-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 853.247244][ T5871] usb 7-1: config 220 has no interface number 2 [ 853.272389][ T5871] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 853.300679][ T5871] usb 7-1: config 220 interface 0 has no altsetting 0 [ 853.311794][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 853.320573][ T5871] usb 7-1: config 220 interface 76 has no altsetting 0 [ 853.349119][ T5871] usb 7-1: config 220 interface 1 has no altsetting 0 [ 853.374419][ T5871] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 853.419020][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.462368][ T5871] usb 7-1: Product: syz [ 853.473466][ T5871] usb 7-1: Manufacturer: syz [ 853.478198][ T5871] usb 7-1: SerialNumber: syz [ 853.736931][T13865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2039'. [ 853.736984][ T5871] usb 7-1: selecting invalid altsetting 0 [ 853.817292][ T5871] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 853.828759][ T5871] uvcvideo 7-1:220.0: No valid video chain found. [ 853.885293][ T5871] usb 7-1: selecting invalid altsetting 0 [ 853.892236][ T5871] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 853.913785][ T5871] usb 7-1: USB disconnect, device number 20 [ 853.963067][T13868] nbd1: detected capacity change from 0 to 63 [ 854.084917][T13872] block nbd1: NBD_DISCONNECT [ 854.384856][T13872] block nbd1: Disconnected due to user request. [ 854.413252][T13872] block nbd1: shutting down sockets [ 854.453567][ T5871] usb 5-1: USB disconnect, device number 65 [ 854.612152][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 854.621991][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 854.629846][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 854.639313][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 854.647095][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 854.656579][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 854.664448][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 854.673953][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 854.683168][ T6018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 854.742414][ T6018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 854.866127][ T6018] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 854.897122][ T6018] Buffer I/O error on dev nbd1, logical block 1, async page read [ 855.110252][ T6018] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.122441][ T6018] Buffer I/O error on dev nbd1, logical block 2, async page read [ 855.138999][ T6018] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.149429][ T6018] Buffer I/O error on dev nbd1, logical block 3, async page read [ 855.180504][ T6018] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.196056][ T6018] Buffer I/O error on dev nbd1, logical block 0, async page read [ 855.208138][ T6018] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.319180][ T6018] Buffer I/O error on dev nbd1, logical block 1, async page read [ 855.334181][ T6018] ldm_validate_partition_table(): Disk read failed. [ 855.341777][ T6018] Dev nbd1: unable to read RDB block 0 [ 855.351500][ T6018] nbd1: unable to read partition table [ 855.503547][ T6018] ldm_validate_partition_table(): Disk read failed. [ 855.510401][ T6018] Dev nbd1: unable to read RDB block 0 [ 855.525803][ T6018] nbd1: unable to read partition table [ 855.563928][ T5915] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 855.571611][T13889] nbd2: detected capacity change from 0 to 63 [ 855.710443][T13896] netlink: 'syz.1.2048': attribute type 4 has an invalid length. [ 855.720245][T13896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2048'. [ 855.793144][ T5915] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 855.803099][ T5915] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 855.844440][T13896] .`: renamed from bond0 (while UP) [ 855.890055][ T5915] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 855.930346][ T5915] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 855.951117][ T5915] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 855.987927][ T5915] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 855.999183][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.090367][ T5915] usb 7-1: Product: syz [ 856.094726][ T5915] usb 7-1: Manufacturer: syz [ 856.143313][ T5915] cdc_wdm 7-1:1.0: skipping garbage [ 856.149581][ T5915] cdc_wdm 7-1:1.0: skipping garbage [ 856.232109][ T5809] block nbd2: Receive control failed (result -104) [ 856.241995][ T5915] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 856.248264][ T5915] cdc_wdm 7-1:1.0: Unknown control protocol [ 856.443933][T12176] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 857.082894][T12176] usb 2-1: device descriptor read/64, error -71 [ 857.418375][T12176] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 857.565967][T13912] [U]  [ 857.586135][T12176] usb 2-1: device descriptor read/64, error -71 [ 858.039366][T13913] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 858.047022][T13913] [U] J"—e:ÀÆ" [ 858.140201][T12176] usb usb2-port1: attempt power cycle [ 858.192980][T13919] netlink: 'syz.3.2055': attribute type 13 has an invalid length. [ 858.230874][T13919] netlink: 'syz.3.2055': attribute type 17 has an invalid length. [ 858.415375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 858.602585][T12176] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 858.816797][T13927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 858.995919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 859.024679][T12176] usb 2-1: device descriptor read/8, error -71 [ 859.044324][ T5856] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 859.354184][ T5856] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 859.863103][ T5856] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.916805][ T5856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 859.955247][ T5856] usb 1-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 859.965721][ T5927] usb 7-1: USB disconnect, device number 21 [ 859.999207][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.041853][ T5856] usb 1-1: config 0 descriptor?? [ 860.126615][ T29] audit: type=1400 audit(1774943794.252:499): avc: denied { mounton } for pid=13946 comm="syz.1.2061" path="/proc/1415/task" dev="proc" ino=42194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 860.193709][T13938] bond1: entered allmulticast mode [ 860.199242][T13938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 860.215626][T13942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2060'. [ 860.460089][ T5856] hid_parser_main: 2713 callbacks suppressed [ 860.460115][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.495110][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.502077][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.509844][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.517192][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.531103][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.539855][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.550794][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.559600][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.571256][ T5856] apple 0003:05AC:0320.002E: unknown main item tag 0x0 [ 860.582448][T12176] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 860.594056][ T5856] apple 0003:05AC:0320.002E: hidraw0: USB HID v7f.fd Device [HID 05ac:0320] on usb-dummy_hcd.0-1/input0 [ 860.623126][T12176] usb 2-1: Using ep0 maxpacket: 16 [ 860.652296][T12176] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.675580][T12176] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 860.704461][T12176] usb 2-1: config 0 interface 0 has no altsetting 0 [ 860.708846][ T5856] usb 1-1: USB disconnect, device number 77 [ 860.719986][T12176] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 860.743847][T12176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.808449][T12176] usb 2-1: config 0 descriptor?? [ 860.943299][ T29] audit: type=1400 audit(1774943795.062:500): avc: denied { unmount } for pid=11296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 861.387121][T12176] smartjoyplus 0003:6666:8801.002F: hidraw0: USB HID v0.08 Device [HID 6666:8801] on usb-dummy_hcd.1-1/input0 [ 861.442686][T12176] smartjoyplus 0003:6666:8801.002F: no output reports found [ 861.637388][T12176] usb 2-1: USB disconnect, device number 74 [ 861.749616][T13965] [U]  [ 861.772990][ T5915] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 861.803934][T13967] FAULT_INJECTION: forcing a failure. [ 861.803934][T13967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.840432][T13967] CPU: 1 UID: 0 PID: 13967 Comm: syz.4.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.840469][T13967] Tainted: [L]=SOFTLOCKUP [ 861.840477][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.840490][T13967] Call Trace: [ 861.840498][T13967] [ 861.840507][T13967] dump_stack_lvl+0x100/0x190 [ 861.840546][T13967] should_fail_ex.cold+0x5/0xa [ 861.840576][T13967] _copy_from_iter+0x1f4/0x1690 [ 861.840603][T13967] ? __asan_memset+0x23/0x50 [ 861.840633][T13967] ? __pfx__copy_from_iter+0x10/0x10 [ 861.840655][T13967] ? __pfx___alloc_skb+0x10/0x10 [ 861.840701][T13967] netlink_sendmsg+0x808/0xda0 [ 861.840739][T13967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.840768][T13967] ? __might_fault+0x90/0x140 [ 861.840807][T13967] ____sys_sendmsg+0x9e1/0xb70 [ 861.840828][T13967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.840862][T13967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.840888][T13967] ? __schedule+0x1000/0x6120 [ 861.840927][T13967] ___sys_sendmsg+0x190/0x1e0 [ 861.840953][T13967] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.840989][T13967] ? irqentry_exit+0x180/0x670 [ 861.841018][T13967] ? lockdep_hardirqs_on+0x78/0x100 [ 861.841068][T13967] __sys_sendmsg+0x170/0x220 [ 861.841097][T13967] ? __pfx___sys_sendmsg+0x10/0x10 [ 861.841135][T13967] ? rcu_is_watching+0x12/0xc0 [ 861.841168][T13967] do_syscall_64+0x106/0xf80 [ 861.841197][T13967] ? clear_bhb_loop+0x40/0x90 [ 861.841223][T13967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.841246][T13967] RIP: 0033:0x7f56f919c819 [ 861.841265][T13967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.841286][T13967] RSP: 002b:00007f56fa09f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.841307][T13967] RAX: ffffffffffffffda RBX: 00007f56f9415fa0 RCX: 00007f56f919c819 [ 861.841322][T13967] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 861.841335][T13967] RBP: 00007f56fa09f090 R08: 0000000000000000 R09: 0000000000000000 [ 861.841348][T13967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.841361][T13967] R13: 00007f56f9416038 R14: 00007f56f9415fa0 R15: 00007ffcf88e5f58 [ 861.841391][T13967] [ 862.202453][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 862.256355][ T5915] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 862.265685][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.276614][ T5915] usb 4-1: Product: syz [ 862.280908][ T5915] usb 4-1: Manufacturer: syz [ 862.285788][ T5915] usb 4-1: SerialNumber: syz [ 862.317435][ T5915] usb 4-1: config 0 descriptor?? [ 862.358395][ T5915] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 863.144062][ T5927] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 863.504209][T13983] cgroup2: Bad value for 'defcontext' [ 864.529134][ T5915] gspca_ov534_9: reg_w failed -110 [ 864.656228][ T5927] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 864.766284][ T5927] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 864.904767][ T5915] gspca_ov534_9: Unknown sensor 0000 [ 864.905610][ T5915] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 864.912426][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 864.972817][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 865.012526][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 865.057905][ T5927] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 865.072163][T13986] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 865.089451][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 865.111946][ T5927] usb 2-1: Product: syz [ 865.122379][ T5927] usb 2-1: Manufacturer: syz [ 865.154912][ T5927] cdc_wdm 2-1:1.0: skipping garbage [ 865.167297][ T5927] cdc_wdm 2-1:1.0: skipping garbage [ 865.192830][ T5927] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 865.198805][ T5927] cdc_wdm 2-1:1.0: Unknown control protocol [ 865.308090][T13993] FAULT_INJECTION: forcing a failure. [ 865.308090][T13993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.321612][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.4.2077 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.321641][T13993] Tainted: [L]=SOFTLOCKUP [ 865.321649][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 865.321660][T13993] Call Trace: [ 865.321666][T13993] [ 865.321673][T13993] dump_stack_lvl+0x100/0x190 [ 865.321710][T13993] should_fail_ex.cold+0x5/0xa [ 865.321736][T13993] _copy_from_user+0x2e/0xd0 [ 865.321759][T13993] vhost_vsock_dev_ioctl+0x3f8/0xb60 [ 865.321790][T13993] ? __fget_files+0x215/0x3d0 [ 865.321813][T13993] ? hook_file_ioctl_common+0x146/0x410 [ 865.321835][T13993] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 865.321867][T13993] ? selinux_file_ioctl+0xb4/0x290 [ 865.321895][T13993] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 865.321924][T13993] __x64_sys_ioctl+0x18e/0x210 [ 865.321952][T13993] do_syscall_64+0x106/0xf80 [ 865.321979][T13993] ? clear_bhb_loop+0x40/0x90 [ 865.322002][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.322023][T13993] RIP: 0033:0x7f56f919c819 [ 865.322041][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.322059][T13993] RSP: 002b:00007f56fa07e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.322079][T13993] RAX: ffffffffffffffda RBX: 00007f56f9416090 RCX: 00007f56f919c819 [ 865.322091][T13993] RDX: 0000200000000080 RSI: 000000004008af00 RDI: 0000000000000003 [ 865.322112][T13993] RBP: 00007f56fa07e090 R08: 0000000000000000 R09: 0000000000000000 [ 865.322126][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.322137][T13993] R13: 00007f56f9416128 R14: 00007f56f9416090 R15: 00007ffcf88e5f58 [ 865.322162][T13993] [ 865.849456][T12176] usb 2-1: USB disconnect, device number 75 [ 865.963787][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 866.063200][T14002] [U]  [ 866.492885][T14004] FAULT_INJECTION: forcing a failure. [ 866.492885][T14004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.621829][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.0.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.621863][T14004] Tainted: [L]=SOFTLOCKUP [ 866.621869][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.621881][T14004] Call Trace: [ 866.621888][T14004] [ 866.621897][T14004] dump_stack_lvl+0x100/0x190 [ 866.621940][T14004] should_fail_ex.cold+0x5/0xa [ 866.621966][T14004] _copy_from_user+0x2e/0xd0 [ 866.621984][T14004] sctp_setsockopt+0x8cc/0xb370 [ 866.622001][T14004] ? __pfx_sctp_setsockopt+0x10/0x10 [ 866.622013][T14004] ? __fget_files+0x215/0x3d0 [ 866.622028][T14004] ? selinux_socket_setsockopt+0x6a/0x80 [ 866.622043][T14004] ? sock_common_setsockopt+0x2e/0xf0 [ 866.622060][T14004] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 866.622078][T14004] do_sock_setsockopt+0xf3/0x1d0 [ 866.622098][T14004] __sys_setsockopt+0x195/0x220 [ 866.622115][T14004] __x64_sys_setsockopt+0xbd/0x160 [ 866.622130][T14004] ? do_syscall_64+0x95/0xf80 [ 866.622147][T14004] ? lockdep_hardirqs_on+0x78/0x100 [ 866.622164][T14004] do_syscall_64+0x106/0xf80 [ 866.622180][T14004] ? clear_bhb_loop+0x40/0x90 [ 866.622195][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.622207][T14004] RIP: 0033:0x7fb67439c819 [ 866.622218][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.622229][T14004] RSP: 002b:00007fb6725b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 866.622241][T14004] RAX: ffffffffffffffda RBX: 00007fb674616180 RCX: 00007fb67439c819 [ 866.622249][T14004] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000006 [ 866.622255][T14004] RBP: 00007fb6725b4090 R08: 000000000000009c R09: 0000000000000000 [ 866.622262][T14004] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 866.622270][T14004] R13: 00007fb674616218 R14: 00007fb674616180 R15: 00007fffa9949468 [ 866.622285][T14004] [ 866.974959][ T5871] usb 4-1: USB disconnect, device number 71 [ 868.548909][T14032] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2076'. [ 869.983158][T14043] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 869.987652][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.996626][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.804861][T14060] [U]  [ 871.235756][T12176] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 871.514358][ T5871] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 871.988246][T12176] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 872.960028][T12176] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 873.416481][T12176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 873.444402][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.477584][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 873.523674][T12176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 873.832613][T12176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 873.850748][ T5871] usb 5-1: string descriptor 0 read error: -71 [ 873.862550][ T5871] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 873.885495][T12176] usb 1-1: string descriptor 0 read error: -71 [ 873.896581][T12176] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 873.906975][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.916192][T12176] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 873.931215][ T5871] usb 5-1: config 0 descriptor?? [ 873.981754][ T5871] usb 5-1: can't set config #0, error -71 [ 874.050993][T14077] FAULT_INJECTION: forcing a failure. [ 874.050993][T14077] name failslab, interval 1, probability 0, space 0, times 0 [ 874.064512][T14077] CPU: 0 UID: 0 PID: 14077 Comm: syz.0.2098 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.064547][T14077] Tainted: [L]=SOFTLOCKUP [ 874.064552][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.064559][T14077] Call Trace: [ 874.064565][T14077] [ 874.064571][T14077] dump_stack_lvl+0x100/0x190 [ 874.064596][T14077] should_fail_ex.cold+0x5/0xa [ 874.064612][T14077] should_failslab+0xc2/0x120 [ 874.064626][T14077] __kmalloc_cache_noprof+0x7a/0x6f0 [ 874.064641][T14077] ? snd_seq_port_connect+0x61/0x560 [ 874.064656][T14077] snd_seq_port_connect+0x61/0x560 [ 874.064671][T14077] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 874.064686][T14077] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 874.064699][T14077] ? preempt_schedule_thunk+0x16/0x30 [ 874.064719][T14077] call_seq_client_ctl+0xa3/0x130 [ 874.064738][T14077] snd_seq_kernel_client_ctl+0x77/0xd0 [ 874.064757][T14077] snd_seq_oss_midi_open+0x5ad/0x6b0 [ 874.064773][T14077] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 874.064787][T14077] ? __pfx___schedule+0x10/0x10 [ 874.064811][T14077] snd_seq_oss_process_event+0x30b/0x2590 [ 874.064826][T14077] ? __pfx_snd_seq_oss_process_event+0x10/0x10 [ 874.064844][T14077] snd_seq_oss_write+0x22c/0x7f0 [ 874.064861][T14077] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 874.064877][T14077] ? snd_seq_oss_write+0x20/0x7f0 [ 874.064893][T14077] odev_write+0x51/0xa0 [ 874.064904][T14077] vfs_write+0x2aa/0x1070 [ 874.064916][T14077] ? __pfx_odev_write+0x10/0x10 [ 874.064929][T14077] ? __pfx_vfs_write+0x10/0x10 [ 874.064938][T14077] ? find_held_lock+0x2b/0x80 [ 874.064953][T14077] ? __fget_files+0x215/0x3d0 [ 874.064965][T14077] ? __fget_files+0x215/0x3d0 [ 874.064987][T14077] ? __fget_files+0x21f/0x3d0 [ 874.065015][T14077] ksys_write+0x12a/0x250 [ 874.065033][T14077] ? __pfx_ksys_write+0x10/0x10 [ 874.065056][T14077] do_syscall_64+0x106/0xf80 [ 874.065073][T14077] ? clear_bhb_loop+0x40/0x90 [ 874.065087][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.065099][T14077] RIP: 0033:0x7fb67439c819 [ 874.065111][T14077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.065122][T14077] RSP: 002b:00007fb6725d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 874.065134][T14077] RAX: ffffffffffffffda RBX: 00007fb674616090 RCX: 00007fb67439c819 [ 874.065141][T14077] RDX: 0000000000000237 RSI: 0000200000000580 RDI: 0000000000000003 [ 874.065148][T14077] RBP: 00007fb6725d5090 R08: 0000000000000000 R09: 0000000000000000 [ 874.065155][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.065161][T14077] R13: 00007fb674616128 R14: 00007fb674616090 R15: 00007fffa9949468 [ 874.065185][T14077] [ 874.594278][T12176] usb 1-1: can't set config #1, error -71 [ 874.613606][T12176] usb 1-1: USB disconnect, device number 78 [ 874.624551][ T5871] usb 5-1: USB disconnect, device number 66 [ 874.795473][ T29] audit: type=1400 audit(1774943808.922:501): avc: denied { setattr } for pid=14082 comm="syz.0.2102" name="sequencer" dev="devtmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 874.867325][T14087] vlan2: entered promiscuous mode [ 874.872799][T14087] bridge0: entered promiscuous mode [ 874.904398][T14089] mac80211_hwsim hwsim9 : renamed from wlan1 [ 874.911101][ T29] audit: type=1400 audit(1774943809.032:502): avc: denied { ioctl } for pid=14082 comm="syz.0.2102" path="socket:[43067]" dev="sockfs" ino=43067 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 875.369348][ T5871] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 875.562447][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 875.673092][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 875.693228][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 875.708295][ T5871] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 875.722171][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.731330][ T5871] usb 5-1: Product: syz [ 875.905404][ T5871] usb 5-1: Manufacturer: syz [ 875.910041][ T5871] usb 5-1: SerialNumber: syz [ 875.940776][ T5871] usb 5-1: config 0 descriptor?? [ 876.195953][ T5871] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 876.373119][ T2420] block nbd0: Possible stuck request ffff888027ea8000: control (read@0,1024B). Runtime 30 seconds [ 876.393377][ T2420] block nbd0: Possible stuck request ffff888027ea8200: control (read@1024,1024B). Runtime 30 seconds [ 876.406237][ T2420] block nbd0: Possible stuck request ffff888027ea8400: control (read@2048,1024B). Runtime 30 seconds [ 876.417318][ T2420] block nbd0: Possible stuck request ffff888027ea8600: control (read@3072,1024B). Runtime 30 seconds [ 876.444127][ T5915] usb 5-1: USB disconnect, device number 67 [ 877.518188][T14130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2116'. [ 878.349118][ T5915] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 879.293841][ T5915] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 879.304378][ T5915] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 879.317433][ T5915] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 879.336701][ T5915] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 879.350986][ T5915] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 879.383713][ T5915] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 879.402629][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 879.410871][ T5915] usb 7-1: Product: syz [ 879.431080][ T5915] usb 7-1: Manufacturer: syz [ 879.483661][ T5915] cdc_wdm 7-1:1.0: skipping garbage [ 879.503101][ T5915] cdc_wdm 7-1:1.0: skipping garbage [ 879.535810][ T5915] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 879.536612][T14144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.541926][ T5915] cdc_wdm 7-1:1.0: Unknown control protocol [ 879.723012][T14145] Device name cannot be null; rc = [-22] [ 880.219789][T14149] Failed to initialize the IGMP autojoin socket (err -2) [ 880.598341][T14158] FAULT_INJECTION: forcing a failure. [ 880.598341][T14158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.620431][T14158] CPU: 0 UID: 0 PID: 14158 Comm: syz.0.2125 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.620466][T14158] Tainted: [L]=SOFTLOCKUP [ 880.620473][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.620484][T14158] Call Trace: [ 880.620491][T14158] [ 880.620500][T14158] dump_stack_lvl+0x100/0x190 [ 880.620537][T14158] should_fail_ex.cold+0x5/0xa [ 880.620564][T14158] _copy_from_iter+0x1f4/0x1690 [ 880.620591][T14158] ? __asan_memset+0x23/0x50 [ 880.620616][T14158] ? __pfx__copy_from_iter+0x10/0x10 [ 880.620635][T14158] ? __pfx___alloc_skb+0x10/0x10 [ 880.620670][T14158] netlink_sendmsg+0x808/0xda0 [ 880.620705][T14158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.620736][T14158] ? __might_fault+0x90/0x140 [ 880.620774][T14158] ____sys_sendmsg+0x9e1/0xb70 [ 880.620795][T14158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.620828][T14158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 880.620863][T14158] ___sys_sendmsg+0x190/0x1e0 [ 880.620888][T14158] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.620952][T14158] __sys_sendmsg+0x170/0x220 [ 880.620980][T14158] ? __pfx___sys_sendmsg+0x10/0x10 [ 880.621027][T14158] do_syscall_64+0x106/0xf80 [ 880.621057][T14158] ? clear_bhb_loop+0x40/0x90 [ 880.621083][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.621103][T14158] RIP: 0033:0x7fb67439c819 [ 880.621121][T14158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.621140][T14158] RSP: 002b:00007fb6725f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.621160][T14158] RAX: ffffffffffffffda RBX: 00007fb674615fa0 RCX: 00007fb67439c819 [ 880.621175][T14158] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 880.621187][T14158] RBP: 00007fb6725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 880.621198][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.621209][T14158] R13: 00007fb674616038 R14: 00007fb674615fa0 R15: 00007fffa9949468 [ 880.621233][T14158] [ 880.833707][T14149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2122'. [ 881.087295][T14160] 9p: Bad value for 'rfdno' [ 881.735161][T14172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2129'. [ 882.588763][ T975] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 882.830818][ T5871] usb 7-1: USB disconnect, device number 22 [ 882.974165][T14179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.058060][T14179] Device name cannot be null; rc = [-22] [ 883.281763][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.312652][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 883.365399][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 883.410097][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 883.884371][T14187] cgroup2: Bad value for 'defcontext' [ 884.571081][ T975] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.580298][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.610505][ T975] usb 2-1: config 0 descriptor?? [ 884.868625][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 884.935037][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 885.432159][ T975] usb 2-1: USB disconnect, device number 76 [ 885.500865][ T5871] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 885.982612][ T9113] block nbd2: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 30 seconds [ 885.998918][ T9113] block nbd2: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 30 seconds [ 886.030649][ T9113] block nbd2: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 30 seconds [ 886.062108][ T9113] block nbd2: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 30 seconds [ 886.783701][ T5871] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 886.803843][ T5871] usb 7-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 886.833471][T14201] netlink: 'syz.1.2137': attribute type 15 has an invalid length. [ 886.841347][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2137'. [ 886.886219][ T5871] usb 7-1: config 220 has no interface number 2 [ 887.089166][ T5871] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 887.277780][ T5871] usb 7-1: config 220 interface 0 has no altsetting 0 [ 887.953478][ T5871] usb 7-1: config 220 interface 76 has no altsetting 0 [ 887.961490][ T5871] usb 7-1: config 220 interface 1 has no altsetting 0 [ 887.966270][T14183] SELinux: failed to load policy [ 888.074166][ T5871] usb 7-1: string descriptor 0 read error: -71 [ 888.085713][ T5871] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 888.296223][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.335655][ T5871] usb 7-1: can't set config #220, error -71 [ 888.382056][ T5871] usb 7-1: USB disconnect, device number 23 [ 888.662630][T12176] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 888.822404][T12176] usb 5-1: Using ep0 maxpacket: 16 [ 888.828834][T12176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 888.846768][T12176] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 888.860349][T12176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.888458][T12176] usb 5-1: Product: syz [ 888.902155][T12176] usb 5-1: Manufacturer: syz [ 888.913193][T12176] usb 5-1: SerialNumber: syz [ 888.935578][T12176] usb 5-1: config 0 descriptor?? [ 888.965184][T12176] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 889.085611][T12176] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 889.527618][T14222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.535325][T14222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.543769][T14222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.551159][T14222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.689190][T14231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.013587][T12176] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 890.025986][T14231] Device name cannot be null; rc = [-22] [ 890.155177][ T5809] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 890.836575][T12176] em28xx 5-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 891.043968][T12176] em28xx 5-1:0.0: board has no eeprom [ 891.662515][T12176] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 891.670468][T12176] em28xx 5-1:0.0: dvb set to bulk mode. [ 891.677514][ T975] em28xx 5-1:0.0: Binding DVB extension [ 891.687158][T12176] usb 5-1: USB disconnect, device number 68 [ 891.703620][T12176] em28xx 5-1:0.0: Disconnecting em28xx [ 891.833936][ T975] em28xx 5-1:0.0: Registering input extension [ 891.872685][ T5871] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 891.880430][T12176] em28xx 5-1:0.0: Closing input extension [ 891.977825][T12176] em28xx 5-1:0.0: Freeing device [ 892.072671][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 892.086678][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.101678][ T5871] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 892.111532][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.138207][ T5871] usb 7-1: Product: syz [ 892.143985][ T5871] usb 7-1: Manufacturer: syz [ 892.148669][ T5871] usb 7-1: SerialNumber: syz [ 892.163538][ T5871] usb 7-1: config 0 descriptor?? [ 892.182414][ T5915] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 892.184938][ T5871] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 892.211181][ T5871] usb 7-1: selecting invalid altsetting 1 [ 892.618210][T14273] cgroup2: Bad value for 'defcontext' [ 893.664582][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 893.672036][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 893.686224][ T5871] gspca_stk014: reg_r err -110 [ 893.687270][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 893.691076][ T5871] stk014 7-1:0.0: probe with driver stk014 failed with error -110 [ 893.711053][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 893.722446][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 893.735012][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 893.742612][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 893.767148][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 893.801535][ T5914] usb 7-1: USB disconnect, device number 24 [ 893.822114][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 893.916621][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 894.053162][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 894.107358][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 894.184621][ T5809] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 894.207687][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.222925][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 894.236656][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 894.255410][ T5915] usb 2-1: string descriptor 0 read error: -22 [ 894.261845][ T5915] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 894.271191][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.296945][ T5915] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 894.330633][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 894.654461][T14265] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2154'. [ 895.127846][T14293] tipc: Failed to remove unknown binding: 66,0,0/2115586615:1508303063/1508303064 [ 895.146310][ T5915] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 895.194544][T14293] tipc: Failed to remove unknown binding: 66,0,0/2115586615:1508303063/1508303064 [ 895.573166][T14294] cgroup2: Bad value for 'defcontext' [ 896.413901][ T5915] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.429643][ T5915] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 896.440623][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.451075][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 896.472956][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 896.488597][ T5915] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.502491][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.670002][ T5915] usb 1-1: Product: syz [ 896.675069][ T5915] usb 1-1: Manufacturer: syz [ 896.685444][ T5915] cdc_wdm 1-1:1.0: skipping garbage [ 896.690676][ T5915] cdc_wdm 1-1:1.0: skipping garbage [ 896.697881][ T5915] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 896.704498][ T5915] cdc_wdm 1-1:1.0: Unknown control protocol [ 896.804415][ T5915] usb 2-1: USB disconnect, device number 77 [ 897.652635][ T5856] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 897.696526][ T5915] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 897.844342][ T5856] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 897.854017][ T5856] usb 5-1: config 0 has no interface number 0 [ 897.863134][ T5856] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.881345][ T5856] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 897.891254][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.902527][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 897.908248][ T5856] usb 5-1: Product: syz [ 897.919642][ T5856] usb 5-1: Manufacturer: syz [ 897.928619][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.938872][ T5856] usb 5-1: SerialNumber: syz [ 897.949314][ T5856] usb 5-1: config 0 descriptor?? [ 897.957804][ T5915] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 897.968527][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.976869][ T5915] usb 4-1: Product: syz [ 897.981078][ T5915] usb 4-1: Manufacturer: syz [ 897.986179][ T5915] usb 4-1: SerialNumber: syz [ 897.994819][ T5915] usb 4-1: config 0 descriptor?? [ 898.006260][ T5915] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 898.012600][ T5915] usb 4-1: selecting invalid altsetting 1 [ 898.183107][ T5856] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 898.204680][ T5856] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 898.215634][ T5915] gspca_stk014: reg_r err -71 [ 898.222859][ T5915] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 898.232879][ T5856] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 898.247448][ T5915] usb 4-1: USB disconnect, device number 72 [ 898.254204][ T5856] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 898.270701][ T5856] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 899.661783][T12176] usb 5-1: USB disconnect, device number 69 [ 899.692761][T12176] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 899.729900][T12176] keyspan 5-1:0.133: device disconnected [ 900.047933][ T5871] usb 1-1: USB disconnect, device number 79 [ 900.728338][ T29] audit: type=1400 audit(1774943834.842:503): avc: denied { ioctl } for pid=14344 comm="syz.3.2179" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 902.982505][ T29] audit: type=1400 audit(1774943837.102:504): avc: denied { getopt } for pid=14366 comm="syz.0.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 903.442998][ T29] audit: type=1400 audit(1774943837.132:505): avc: denied { accept } for pid=14366 comm="syz.0.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 904.975084][ T5809] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 905.113448][T14391] nbd1: detected capacity change from 0 to 63 [ 906.122617][ T5809] block nbd1: Receive control failed (result -104) [ 906.463683][ T2420] block nbd0: Possible stuck request ffff888027ea8000: control (read@0,1024B). Runtime 60 seconds [ 906.475780][ T2420] block nbd0: Possible stuck request ffff888027ea8200: control (read@1024,1024B). Runtime 60 seconds [ 906.488405][ T2420] block nbd0: Possible stuck request ffff888027ea8400: control (read@2048,1024B). Runtime 60 seconds [ 906.501707][ T2420] block nbd0: Possible stuck request ffff888027ea8600: control (read@3072,1024B). Runtime 60 seconds [ 906.543864][T14408] [U]  [ 906.996096][T14411] Failed to initialize the IGMP autojoin socket (err -2) [ 907.015968][T14401] tipc: Failed to remove unknown binding: 66,0,0/134418688:243263015/243263016 [ 907.026023][T14401] tipc: Failed to remove unknown binding: 66,0,0/134418688:243263015/243263016 [ 907.046920][T14414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 907.637207][ T29] audit: type=1400 audit(1774943841.762:506): avc: denied { ioctl } for pid=14422 comm="syz.3.2202" path="socket:[44144]" dev="sockfs" ino=44144 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 907.712490][ T5915] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 907.821311][T14425] pim6reg1: tun_chr_ioctl cmd 1074025672 [ 907.829060][T14425] pim6reg1: ignored: set checksum disabled [ 908.027562][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 908.042401][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.060641][ T5915] usb 2-1: Product: syz [ 908.065253][ T5915] usb 2-1: Manufacturer: syz [ 908.070045][ T5915] usb 2-1: SerialNumber: syz [ 908.092186][ T5915] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 908.113152][T10531] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 908.346944][T14433] tipc: Failed to remove unknown binding: 66,0,0/2115586615:761582204/761582205 [ 908.360725][T14433] tipc: Failed to remove unknown binding: 66,0,0/2115586615:761582204/761582205 [ 908.377083][ T29] audit: type=1400 audit(1774943842.502:507): avc: denied { map } for pid=14431 comm="syz.4.2207" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 908.612450][ T5879] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 908.807102][ T5879] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 909.313051][T10531] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 909.320652][T10531] ath9k_htc: Failed to initialize the device [ 909.344975][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.351018][T10531] usb 2-1: ath9k_htc: USB layer deinitialized [ 909.386874][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 909.406299][ T5879] usb 5-1: config 1 has no interface number 0 [ 909.420275][ T5879] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 909.437989][ T5879] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 909.454226][ T5879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.463912][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.472019][ T5879] usb 5-1: Product: syz [ 909.476778][ T5879] usb 5-1: Manufacturer: syz [ 909.482651][ T5879] usb 5-1: SerialNumber: syz [ 909.797756][T14446] [U]  [ 910.200904][ T5879] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 910.220281][ T5879] usb 5-1: USB disconnect, device number 70 [ 910.283683][T14444] nbd3: detected capacity change from 0 to 63 [ 910.480521][ T5914] usb 2-1: USB disconnect, device number 78 [ 910.801762][ T5809] block nbd3: Receive control failed (result -104) [ 910.927167][T14457] Failed to initialize the IGMP autojoin socket (err -2) [ 910.999102][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2212'. [ 911.012867][ T5914] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 911.192516][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 911.204801][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.223372][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.572558][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 911.584625][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.603425][ T5914] usb 2-1: config 0 descriptor?? [ 911.629726][ T5914] hub 2-1:0.0: USB hub found [ 911.693602][T14464] nbd4: detected capacity change from 0 to 63 [ 911.735812][T14465] block nbd4: NBD_DISCONNECT [ 911.814712][T14465] block nbd4: Disconnected due to user request. [ 911.815234][T14471] pim6reg1: tun_chr_ioctl cmd 1074025672 [ 911.827086][T14471] pim6reg1: ignored: set checksum disabled [ 911.872877][T14465] block nbd4: shutting down sockets [ 911.882127][ T6077] blk_print_req_error: 138 callbacks suppressed [ 911.882165][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.902664][ T6077] buffer_io_error: 138 callbacks suppressed [ 911.902772][ T6077] Buffer I/O error on dev nbd4, logical block 0, async page read [ 911.920894][ T6077] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.931493][ T6077] Buffer I/O error on dev nbd4, logical block 1, async page read [ 912.279438][ T5914] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 912.349191][ T2420] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 912.360728][ T2420] Buffer I/O error on dev nbd4, logical block 2, async page read [ 912.369412][ T2420] Buffer I/O error on dev nbd4, logical block 3, async page read [ 912.384500][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 912.405098][ T6077] Buffer I/O error on dev nbd4, logical block 0, async page read [ 912.413183][ T6077] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 912.422910][ T6077] Buffer I/O error on dev nbd4, logical block 1, async page read [ 912.430790][ T6077] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 912.440605][ T6077] Buffer I/O error on dev nbd4, logical block 2, async page read [ 912.452722][ T6077] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 912.462261][ T6077] Buffer I/O error on dev nbd4, logical block 3, async page read [ 912.472208][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 912.482046][ T6077] Buffer I/O error on dev nbd4, logical block 0, async page read [ 912.490220][ T6077] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 912.513565][ T6077] Buffer I/O error on dev nbd4, logical block 1, async page read [ 912.538043][ T6077] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 912.549961][ T6077] ldm_validate_partition_table(): Disk read failed. [ 912.558005][ T6077] Dev nbd4: unable to read RDB block 0 [ 912.568369][ T6077] nbd4: unable to read partition table [ 912.610060][ T6077] ldm_validate_partition_table(): Disk read failed. [ 912.662964][ T6077] Dev nbd4: unable to read RDB block 0 [ 912.669035][ T6077] nbd4: unable to read partition table [ 912.716757][ T5914] hid-generic 0003:046D:C31C.0030: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 912.812728][ T5915] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 913.047968][ T5915] usb 4-1: device descriptor read/64, error -71 [ 913.227872][T14490] Failed to initialize the IGMP autojoin socket (err -2) [ 913.275296][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2223'. [ 913.353169][ T5914] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 913.392427][ T5915] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 913.516116][ T5914] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 913.528778][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.538777][ T5915] usb 4-1: device descriptor read/64, error -71 [ 913.549128][ T5914] usb 7-1: Product: syz [ 913.560096][ T5914] usb 7-1: Manufacturer: syz [ 913.565429][ T5914] usb 7-1: SerialNumber: syz [ 913.614336][ T5914] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 913.627759][T14498] tipc: Failed to remove unknown binding: 66,0,0/0:934399985/934399986 [ 913.630431][ T5856] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 913.676125][ T5915] usb usb4-port1: attempt power cycle [ 913.752281][T14498] tipc: Failed to remove unknown binding: 66,0,0/0:934399985/934399986 [ 914.062445][ T5915] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 914.221506][ T5915] usb 4-1: device descriptor read/8, error -71 [ 914.864781][ T5856] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 914.871980][ T5856] ath9k_htc: Failed to initialize the device [ 914.912182][ T5856] usb 7-1: ath9k_htc: USB layer deinitialized [ 915.002580][ T5915] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 915.033346][ T5915] usb 4-1: device descriptor read/8, error -71 [ 915.058898][T14502] FAULT_INJECTION: forcing a failure. [ 915.058898][T14502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.072530][T14502] CPU: 1 UID: 0 PID: 14502 Comm: syz.0.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.072564][T14502] Tainted: [L]=SOFTLOCKUP [ 915.072572][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 915.072584][T14502] Call Trace: [ 915.072597][T14502] [ 915.072604][T14502] dump_stack_lvl+0x100/0x190 [ 915.072642][T14502] should_fail_ex.cold+0x5/0xa [ 915.072670][T14502] _copy_from_user+0x2e/0xd0 [ 915.072694][T14502] ppp_ioctl+0x84f/0x2800 [ 915.072727][T14502] ? __pfx_ppp_ioctl+0x10/0x10 [ 915.072761][T14502] ? selinux_file_ioctl+0xb4/0x290 [ 915.072782][T14502] ? __pfx_ppp_ioctl+0x10/0x10 [ 915.072797][T14502] __x64_sys_ioctl+0x18e/0x210 [ 915.072827][T14502] do_syscall_64+0x106/0xf80 [ 915.072855][T14502] ? clear_bhb_loop+0x40/0x90 [ 915.072878][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.072890][T14502] RIP: 0033:0x7fb67439c819 [ 915.072901][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.072913][T14502] RSP: 002b:00007fb6725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.072924][T14502] RAX: ffffffffffffffda RBX: 00007fb674615fa0 RCX: 00007fb67439c819 [ 915.072932][T14502] RDX: 0000200000000080 RSI: 0000000040107447 RDI: 0000000000000003 [ 915.072940][T14502] RBP: 00007fb6725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 915.072946][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.072953][T14502] R13: 00007fb674616038 R14: 00007fb674615fa0 R15: 00007fffa9949468 [ 915.072969][T14502] [ 915.246602][ T5915] usb usb4-port1: unable to enumerate USB device [ 915.888151][T14510] cgroup2: Bad value for 'defcontext' [ 916.918526][ T25] block nbd2: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 60 seconds [ 916.929923][T12176] usb 7-1: USB disconnect, device number 25 [ 916.936031][ T25] block nbd2: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 60 seconds [ 916.947470][ T25] block nbd2: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 60 seconds [ 916.967341][ T25] block nbd2: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 60 seconds [ 917.295037][T14517] fuse: Bad value for 'group_id' [ 917.300054][T14517] fuse: Bad value for 'group_id' [ 917.802447][T12176] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 917.966031][T12176] usb 7-1: Using ep0 maxpacket: 16 [ 918.015489][T12176] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 918.039716][T12176] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.062642][T12176] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.081004][T12176] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.101985][T12176] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 918.126542][T12176] usb 7-1: config 0 has no interface number 0 [ 918.145013][T12176] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 918.175496][T12176] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 918.235807][T12176] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 918.280261][T12176] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 918.297488][T12176] usb 7-1: config 0 interface 125 has no altsetting 0 [ 918.308349][T12176] usb 7-1: config 0 interface 125 has no altsetting 2 [ 918.319506][T12176] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 918.331541][T12176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.340113][T12176] usb 7-1: Product: syz [ 918.352477][T14525] nbd4: detected capacity change from 0 to 63 [ 918.930796][T10531] usb 2-1: USB disconnect, device number 79 [ 918.988168][T14526] block nbd4: NBD_DISCONNECT [ 919.002259][T12176] usb 7-1: Manufacturer: syz [ 919.026938][T14526] block nbd4: Disconnected due to user request. [ 919.035200][T14526] block nbd4: shutting down sockets [ 919.039504][ C1] blk_print_req_error: 137 callbacks suppressed [ 919.039526][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.039557][ C1] buffer_io_error: 138 callbacks suppressed [ 919.039569][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 919.039671][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.039699][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 919.039764][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.039791][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 919.039856][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.039883][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 919.048814][T12176] usb 7-1: SerialNumber: syz [ 919.054354][T12176] usb 7-1: config 0 descriptor?? [ 919.054647][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 919.054708][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 919.054724][ T25] Buffer I/O error on dev nbd4, logical block 1, async page read [ 919.054734][ T25] Buffer I/O error on dev nbd4, logical block 2, async page read [ 919.054743][ T25] Buffer I/O error on dev nbd4, logical block 3, async page read [ 919.114076][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.114121][ T6077] Buffer I/O error on dev nbd4, logical block 0, async page read [ 919.114150][ T6077] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.114172][ T6077] Buffer I/O error on dev nbd4, logical block 1, async page read [ 919.114195][ T6077] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.114238][ T6077] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.114275][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 919.114649][ T6077] ldm_validate_partition_table(): Disk read failed. [ 919.114895][ T6077] Dev nbd4: unable to read RDB block 0 [ 919.115227][ T6077] nbd4: unable to read partition table [ 919.117635][ T6077] ldm_validate_partition_table(): Disk read failed. [ 919.117874][ T6077] Dev nbd4: unable to read RDB block 0 [ 919.120324][ T6077] nbd4: unable to read partition table [ 919.187158][T12176] usb 7-1: selecting invalid altsetting 2 [ 919.320121][ C0] usb 7-1: async_complete: urb error -71 [ 919.506787][ C0] usb 7-1: async_complete: urb error -71 [ 919.512516][ C0] usb 7-1: async_complete: urb error -71 [ 919.518202][ C0] usb 7-1: async_complete: urb error -71 [ 919.542637][T12176] get_1284_register: usb error -71 [ 919.682821][T12176] usb 7-1: USB disconnect, device number 26 [ 919.987760][T14542] Failed to initialize the IGMP autojoin socket (err -2) [ 920.048128][T14538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2234'. [ 920.232779][T14550] sit1: entered allmulticast mode [ 921.600494][T14561] cgroup2: Bad value for 'defcontext' [ 922.450163][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2241'. [ 925.167262][T14596] sit1: entered allmulticast mode [ 925.722456][T10531] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 926.180864][T14608] syzkaller0: entered promiscuous mode [ 926.206712][T14608] syzkaller0: entered allmulticast mode [ 926.228076][T14608] FAULT_INJECTION: forcing a failure. [ 926.228076][T14608] name failslab, interval 1, probability 0, space 0, times 0 [ 926.284267][T14608] CPU: 0 UID: 0 PID: 14608 Comm: syz.1.2242 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.284302][T14608] Tainted: [L]=SOFTLOCKUP [ 926.284309][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.284321][T14608] Call Trace: [ 926.284327][T14608] [ 926.284336][T14608] dump_stack_lvl+0x100/0x190 [ 926.284367][T14608] should_fail_ex.cold+0x5/0xa [ 926.284383][T14608] should_failslab+0xc2/0x120 [ 926.284396][T14608] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 926.284413][T14608] ? __alloc_skb+0x140/0x710 [ 926.284431][T14608] __alloc_skb+0x140/0x710 [ 926.284449][T14608] ? __alloc_skb+0x5b7/0x710 [ 926.284463][T14608] ? __pfx___alloc_skb+0x10/0x10 [ 926.284482][T14608] alloc_skb_with_frags+0xe0/0x810 [ 926.284498][T14608] ? __might_fault+0xc5/0x140 [ 926.284513][T14608] ? __might_fault+0xc5/0x140 [ 926.284531][T14608] sock_alloc_send_pskb+0x801/0x980 [ 926.284546][T14608] ? _copy_from_iter+0x270/0x1690 [ 926.284562][T14608] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 926.284576][T14608] ? find_held_lock+0x2b/0x80 [ 926.284591][T14608] ? dev_get_by_index+0x180/0x380 [ 926.284605][T14608] ? dev_get_by_index+0x180/0x380 [ 926.284624][T14608] packet_sendmsg+0x20e0/0x53c0 [ 926.284639][T14608] ? avc_has_perm+0xea/0x1e0 [ 926.284656][T14608] ? __lock_acquire+0x4a5/0x2630 [ 926.284669][T14608] ? sock_has_perm+0x258/0x2f0 [ 926.284684][T14608] ? __pfx_sock_has_perm+0x10/0x10 [ 926.284699][T14608] ? __pfx_packet_sendmsg+0x10/0x10 [ 926.284720][T14608] ____sys_sendmsg+0x9e1/0xb70 [ 926.284731][T14608] ? __pfx_packet_sendmsg+0x10/0x10 [ 926.284745][T14608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.284764][T14608] ___sys_sendmsg+0x190/0x1e0 [ 926.284778][T14608] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.284808][T14608] __sys_sendmsg+0x170/0x220 [ 926.284823][T14608] ? __pfx___sys_sendmsg+0x10/0x10 [ 926.284848][T14608] do_syscall_64+0x106/0xf80 [ 926.284865][T14608] ? clear_bhb_loop+0x40/0x90 [ 926.284879][T14608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.284891][T14608] RIP: 0033:0x7f16f999c819 [ 926.284902][T14608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.284913][T14608] RSP: 002b:00007f16fa7c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.284924][T14608] RAX: ffffffffffffffda RBX: 00007f16f9c15fa0 RCX: 00007f16f999c819 [ 926.284932][T14608] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 926.284939][T14608] RBP: 00007f16fa7c8090 R08: 0000000000000000 R09: 0000000000000000 [ 926.284946][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.284953][T14608] R13: 00007f16f9c16038 R14: 00007f16f9c15fa0 R15: 00007ffd01cb97b8 [ 926.284968][T14608] [ 926.632451][T10531] usb 4-1: Using ep0 maxpacket: 8 [ 926.653340][T10531] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 926.661526][T10531] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 926.722462][T10531] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 926.732241][T10531] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 926.805536][T10531] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.282387][T10531] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 928.291826][T10531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.487574][T10531] usb 4-1: usb_control_msg returned -71 [ 928.519012][T10531] usbtmc 4-1:16.0: can't read capabilities [ 928.806869][T10531] usb 4-1: USB disconnect, device number 77 [ 929.215868][T14632] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2258'. [ 929.273421][T14633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.035829][T14631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2251'. [ 930.094168][T14641] FAULT_INJECTION: forcing a failure. [ 930.094168][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 930.107024][T14641] CPU: 1 UID: 0 PID: 14641 Comm: syz.3.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.107059][T14641] Tainted: [L]=SOFTLOCKUP [ 930.107067][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 930.107080][T14641] Call Trace: [ 930.107087][T14641] [ 930.107096][T14641] dump_stack_lvl+0x100/0x190 [ 930.107132][T14641] should_fail_ex.cold+0x5/0xa [ 930.107160][T14641] should_failslab+0xc2/0x120 [ 930.107182][T14641] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 930.107212][T14641] ? skb_clone+0x190/0x400 [ 930.107246][T14641] skb_clone+0x190/0x400 [ 930.107274][T14641] netlink_deliver_tap+0xaed/0xcc0 [ 930.107328][T14641] netlink_unicast+0x650/0x870 [ 930.107363][T14641] ? __pfx_netlink_unicast+0x10/0x10 [ 930.107405][T14641] netlink_sendmsg+0x8b0/0xda0 [ 930.107440][T14641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.107469][T14641] ? __might_fault+0x90/0x140 [ 930.107507][T14641] ____sys_sendmsg+0x9e1/0xb70 [ 930.107527][T14641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.107560][T14641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.107596][T14641] ___sys_sendmsg+0x190/0x1e0 [ 930.107621][T14641] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.107680][T14641] __sys_sendmsg+0x170/0x220 [ 930.107707][T14641] ? __pfx___sys_sendmsg+0x10/0x10 [ 930.107752][T14641] do_syscall_64+0x106/0xf80 [ 930.107780][T14641] ? clear_bhb_loop+0x40/0x90 [ 930.107804][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.107825][T14641] RIP: 0033:0x7fe051b9c819 [ 930.107843][T14641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.107863][T14641] RSP: 002b:00007fe052ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.107882][T14641] RAX: ffffffffffffffda RBX: 00007fe051e15fa0 RCX: 00007fe051b9c819 [ 930.107902][T14641] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 930.107914][T14641] RBP: 00007fe052ab3090 R08: 0000000000000000 R09: 0000000000000000 [ 930.107927][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.107940][T14641] R13: 00007fe051e16038 R14: 00007fe051e15fa0 R15: 00007fff5bca80c8 [ 930.107969][T14641] [ 930.874687][T14650] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 930.882979][T14650] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 930.891544][T14650] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 930.979702][T14649] tipc: Failed to remove unknown binding: 66,0,0/134418688:1003010045/1003010046 [ 931.029885][T14652] overlayfs: overlapping lowerdir path [ 931.067032][T14649] tipc: Failed to remove unknown binding: 66,0,0/134418688:1003010045/1003010046 [ 931.436609][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.454298][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.583947][ T5856] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 931.748381][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.787124][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.859306][ T5856] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 931.919834][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.691226][ T5856] usb 4-1: config 0 descriptor?? [ 933.175849][T14665] cgroup2: Bad value for 'defcontext' [ 934.262450][ T5856] usbhid 4-1:0.0: can't add hid device: -71 [ 934.268684][ T5856] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 934.352125][ T5856] usb 4-1: USB disconnect, device number 78 [ 934.622628][T14676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2271'. [ 934.912535][ T5856] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 935.120023][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 935.206467][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 935.333837][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 935.470381][ T5914] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 935.659227][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 935.681192][ T5856] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 935.690949][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.699209][ T5856] usb 4-1: Product: syz [ 935.704447][ T5856] usb 4-1: Manufacturer: syz [ 935.709136][ T5856] usb 4-1: SerialNumber: syz [ 935.729405][ T5856] usb 4-1: config 0 descriptor?? [ 935.785136][T14673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 935.827384][ T5856] usb 4-1: ucan: probing device on interface #0 [ 935.847908][ T5914] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 935.891162][ T5856] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 935.919535][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 935.936849][ T5856] usb 4-1: ucan: probe failed; try to update the device firmware [ 935.978639][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 936.061623][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 936.127092][ T5914] usb 2-1: Product: syz [ 936.131295][ T5914] usb 2-1: Manufacturer: syz [ 936.235193][ T5914] usb 2-1: SerialNumber: syz [ 936.312598][ T5914] usb 2-1: config 0 descriptor?? [ 936.343249][ T5856] usb 4-1: USB disconnect, device number 79 [ 936.438758][ T5914] usb 2-1: selecting invalid altsetting 0 [ 936.533020][ T2420] block nbd0: Possible stuck request ffff888027ea8000: control (read@0,1024B). Runtime 90 seconds [ 936.543763][ T2420] block nbd0: Possible stuck request ffff888027ea8200: control (read@1024,1024B). Runtime 90 seconds [ 936.554916][ T2420] block nbd0: Possible stuck request ffff888027ea8400: control (read@2048,1024B). Runtime 90 seconds [ 936.565889][ T2420] block nbd0: Possible stuck request ffff888027ea8600: control (read@3072,1024B). Runtime 90 seconds [ 936.602439][ T25] block nbd1: Possible stuck request ffff888027f82800: control (read@0,1024B). Runtime 30 seconds [ 936.613158][ T25] block nbd1: Possible stuck request ffff888027f82a00: control (read@1024,1024B). Runtime 30 seconds [ 936.624371][ T25] block nbd1: Possible stuck request ffff888027f82c00: control (read@2048,1024B). Runtime 30 seconds [ 936.637825][ T25] block nbd1: Possible stuck request ffff888027f82e00: control (read@3072,1024B). Runtime 30 seconds [ 936.753479][ T5879] usb 2-1: USB disconnect, device number 80 [ 936.782706][ T5914] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 936.954000][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 936.972694][ T5914] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 936.999789][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 10991, setting to 1024 [ 937.030149][ T5914] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 937.056315][ T5914] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 937.081497][ T5914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 937.091717][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 937.219348][T14693] tipc: Failed to remove unknown binding: 66,0,0/3875610124:1538629898/1538629899 [ 937.235657][ T5914] usb 5-1: SerialNumber: syz [ 937.236581][T14693] tipc: Failed to remove unknown binding: 66,0,0/3875610124:1538629898/1538629899 [ 937.785682][T14687] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 937.816231][T14687] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 938.412571][ T5879] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 938.593063][T14687] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 938.600366][T14687] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 938.814197][ T5914] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 938.872408][ T5879] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 938.962079][ T5879] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 938.971290][ T5914] usb 5-1: USB disconnect, device number 71 [ 939.113091][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 939.135889][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 939.183213][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 939.222539][ T5879] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 939.236127][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 939.338460][ T5879] usb 4-1: Product: syz [ 939.343452][ T5879] usb 4-1: Manufacturer: syz [ 939.511337][ T29] audit: type=1400 audit(1774943873.622:508): avc: denied { connect } for pid=14710 comm="syz.0.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 939.726198][ T5879] cdc_wdm 4-1:1.0: skipping garbage [ 939.731449][ T5879] cdc_wdm 4-1:1.0: skipping garbage [ 939.780099][ T5879] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 939.788402][ T5879] cdc_wdm 4-1:1.0: Unknown control protocol [ 941.007582][ T2420] block nbd3: Possible stuck request ffff888028028000: control (read@0,1024B). Runtime 30 seconds [ 941.020404][ T2420] block nbd3: Possible stuck request ffff888028028200: control (read@1024,1024B). Runtime 30 seconds [ 941.031732][ T2420] block nbd3: Possible stuck request ffff888028028400: control (read@2048,1024B). Runtime 30 seconds [ 941.043250][ T2420] block nbd3: Possible stuck request ffff888028028600: control (read@3072,1024B). Runtime 30 seconds [ 941.580946][ T5914] usb 4-1: USB disconnect, device number 80 [ 941.938110][ T5879] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 942.032925][ T5914] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 942.267675][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 942.346620][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 942.442976][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 942.515928][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 942.747002][ T5914] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 942.823782][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.899150][ T5914] usb 5-1: Product: syz [ 942.937283][ T5914] usb 5-1: Manufacturer: syz [ 942.977158][ T5914] usb 5-1: SerialNumber: syz [ 943.088716][ T5914] usb 5-1: config 0 descriptor?? [ 943.157063][T14731] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 943.258071][ T5914] usb 5-1: ucan: probing device on interface #0 [ 943.309292][ T5914] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 943.365222][ T5914] usb 5-1: ucan: probe failed; try to update the device firmware [ 943.902712][ T5914] usb 5-1: USB disconnect, device number 72 [ 944.002930][ T5879] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 944.010933][ T5879] usb 7-1: can't read configurations, error -71 [ 944.187943][T14738] FAULT_INJECTION: forcing a failure. [ 944.187943][T14738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.201200][T14738] CPU: 0 UID: 0 PID: 14738 Comm: syz.6.2287 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.201235][T14738] Tainted: [L]=SOFTLOCKUP [ 944.201243][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 944.201256][T14738] Call Trace: [ 944.201263][T14738] [ 944.201272][T14738] dump_stack_lvl+0x100/0x190 [ 944.201310][T14738] should_fail_ex.cold+0x5/0xa [ 944.201339][T14738] _copy_from_iter+0x1f4/0x1690 [ 944.201367][T14738] ? __asan_memset+0x23/0x50 [ 944.201397][T14738] ? __pfx__copy_from_iter+0x10/0x10 [ 944.201420][T14738] ? __pfx___alloc_skb+0x10/0x10 [ 944.201459][T14738] netlink_sendmsg+0x808/0xda0 [ 944.201495][T14738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.201523][T14738] ? __might_fault+0x90/0x140 [ 944.201562][T14738] ____sys_sendmsg+0x9e1/0xb70 [ 944.201583][T14738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.201616][T14738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.201652][T14738] ___sys_sendmsg+0x190/0x1e0 [ 944.201678][T14738] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.201737][T14738] __sys_sendmsg+0x170/0x220 [ 944.201771][T14738] ? __pfx___sys_sendmsg+0x10/0x10 [ 944.201819][T14738] do_syscall_64+0x106/0xf80 [ 944.201849][T14738] ? clear_bhb_loop+0x40/0x90 [ 944.201875][T14738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.201897][T14738] RIP: 0033:0x7f7bdcd9c819 [ 944.201916][T14738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.201936][T14738] RSP: 002b:00007f7bddbcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.201957][T14738] RAX: ffffffffffffffda RBX: 00007f7bdd015fa0 RCX: 00007f7bdcd9c819 [ 944.201972][T14738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 944.201985][T14738] RBP: 00007f7bddbcc090 R08: 0000000000000000 R09: 0000000000000000 [ 944.201999][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.202012][T14738] R13: 00007f7bdd016038 R14: 00007f7bdd015fa0 R15: 00007fff6e052b28 [ 944.202042][T14738] [ 944.680548][T14740] FAULT_INJECTION: forcing a failure. [ 944.680548][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.693782][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.0.2288 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.693817][T14740] Tainted: [L]=SOFTLOCKUP [ 944.693825][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 944.693838][T14740] Call Trace: [ 944.693844][T14740] [ 944.693853][T14740] dump_stack_lvl+0x100/0x190 [ 944.693891][T14740] should_fail_ex.cold+0x5/0xa [ 944.693919][T14740] _copy_to_user+0x32/0xd0 [ 944.693944][T14740] simple_read_from_buffer+0xcb/0x170 [ 944.693968][T14740] proc_fail_nth_read+0x1af/0x230 [ 944.693999][T14740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 944.694030][T14740] ? rw_verify_area+0xce/0x6d0 [ 944.694055][T14740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 944.694082][T14740] vfs_read+0x1e4/0xb30 [ 944.694114][T14740] ? __pfx_vfs_read+0x10/0x10 [ 944.694142][T14740] ? __fget_files+0x215/0x3d0 [ 944.694171][T14740] ? __fget_files+0x21f/0x3d0 [ 944.694201][T14740] ksys_read+0x12a/0x250 [ 944.694219][T14740] ? __pfx_ksys_read+0x10/0x10 [ 944.694244][T14740] do_syscall_64+0x106/0xf80 [ 944.694275][T14740] ? clear_bhb_loop+0x40/0x90 [ 944.694301][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.694323][T14740] RIP: 0033:0x7fb67435d04e [ 944.694338][T14740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 944.694358][T14740] RSP: 002b:00007fb6725f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 944.694378][T14740] RAX: ffffffffffffffda RBX: 00007fb6725f66c0 RCX: 00007fb67435d04e [ 944.694392][T14740] RDX: 000000000000000f RSI: 00007fb6725f60a0 RDI: 000000000000000c [ 944.694406][T14740] RBP: 00007fb6725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 944.694417][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.694428][T14740] R13: 00007fb674616038 R14: 00007fb674615fa0 R15: 00007fffa9949468 [ 944.694456][T14740] [ 945.059678][T14743] tipc: Failed to remove unknown binding: 66,0,0/3875610124:1866389221/1866389222 [ 945.074370][T14743] tipc: Failed to remove unknown binding: 66,0,0/3875610124:1866389221/1866389222 [ 945.676874][ T29] audit: type=1400 audit(1774943879.802:509): avc: denied { read } for pid=14751 comm="syz.6.2293" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 945.724783][T14749] syzkaller0: entered promiscuous mode [ 945.734768][T14749] syzkaller0: entered allmulticast mode [ 945.745364][ T29] audit: type=1400 audit(1774943879.832:510): avc: denied { open } for pid=14751 comm="syz.6.2293" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 945.929713][T14759] syzkaller0: entered promiscuous mode [ 945.950011][T14759] syzkaller0: entered allmulticast mode [ 946.052467][ T5879] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 946.381353][T14763] tipc: Failed to remove unknown binding: 66,0,0/0:2392219393/2392219394 [ 946.390147][ T5879] usb 7-1: device descriptor read/64, error -71 [ 946.456319][T14767] [U]  [ 946.886766][T14763] tipc: Failed to remove unknown binding: 66,0,0/0:2392219393/2392219394 [ 947.162551][ T5879] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 947.465987][ T25] block nbd2: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 90 seconds [ 947.481749][ T25] block nbd2: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 90 seconds [ 947.493240][ T25] block nbd2: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 90 seconds [ 947.504259][ T25] block nbd2: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 90 seconds [ 947.522584][ T5879] usb 7-1: device descriptor read/64, error -71 [ 947.687034][ T5879] usb usb7-port1: attempt power cycle [ 947.863119][T10531] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 948.049763][T10531] usb 5-1: Using ep0 maxpacket: 8 [ 948.059592][ T5879] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 948.068065][T10531] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 948.082402][T10531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.094892][T10531] usb 5-1: Product: syz [ 948.099070][T10531] usb 5-1: Manufacturer: syz [ 948.104457][ T5879] usb 7-1: device descriptor read/8, error -71 [ 948.114754][T10531] usb 5-1: SerialNumber: syz [ 948.219505][T10531] usb 5-1: config 0 descriptor?? [ 948.222439][ T975] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 948.235790][T10531] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 948.243832][T10531] pctv452e: pctv452e_power_ctrl: 1 [ 948.243832][T10531] [ 948.251126][T10531] usb 5-1: selecting invalid altsetting 3 [ 948.262770][T10531] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 948.262770][T10531] [ 948.273191][T10531] dvb-usb: bulk message failed: -22 (5/0) [ 948.446955][T10531] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 948.474978][T14776] dvb-usb: bulk message failed: -22 (7/0) [ 948.480993][T14776] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 948.509944][ T29] audit: type=1400 audit(1774943882.602:511): avc: denied { kexec_image_load } for pid=14775 comm="syz.4.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 948.732058][T10531] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 948.752492][T10531] usb 5-1: media controller created [ 948.758420][T10531] dvb-usb: bulk message failed: -22 (8/0) [ 948.765719][T10531] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 948.773770][ T5879] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 948.800612][ T975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 948.817191][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 948.828025][T10531] dvb-usb: MAC address reading failed. [ 948.829912][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 948.844623][ T975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 948.858191][ T975] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 948.867796][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.882393][ T975] usb 2-1: Product: syz [ 948.886870][ T975] usb 2-1: Manufacturer: syz [ 948.895612][ T975] usb 2-1: SerialNumber: syz [ 948.903353][T10531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.930233][ T975] usb 2-1: config 0 descriptor?? [ 948.941731][T14780] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 948.951890][ T975] usb 2-1: ucan: probing device on interface #0 [ 948.958273][ T975] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 949.022453][ T5879] usb 7-1: device not accepting address 32, error -71 [ 949.761811][ T5879] usb usb7-port1: unable to enumerate USB device [ 950.365592][ T975] usb 2-1: ucan: probe failed; try to update the device firmware [ 950.382603][ T975] usb 2-1: USB disconnect, device number 81 [ 950.547976][T10531] DVB: Unable to find symbol stb0899_attach() [ 950.554517][T10531] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 950.690908][T14798] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2303'. [ 950.748375][T14799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 951.082260][T10531] rc_core: IR keymap rc-tt-1500 not found [ 951.102856][T10531] Registered IR keymap rc-empty [ 951.108563][T10531] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 951.133183][T10531] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input60 [ 951.155760][T10531] dvb-usb: schedule remote query interval to 100 msecs. [ 951.168760][T10531] pctv452e: pctv452e_power_ctrl: 0 [ 951.168760][T10531] [ 951.294174][ T5856] dvb-usb: bulk message failed: -22 (4/0) [ 951.352743][ T5856] dvb-usb: error -22 while querying for an remote control event. [ 951.364842][T10531] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 951.377889][T10531] usb 5-1: USB disconnect, device number 73 [ 951.432863][T14804] nbd4: detected capacity change from 0 to 63 [ 951.486321][T14805] block nbd4: NBD_DISCONNECT [ 951.810550][ T5879] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 951.832498][T14805] block nbd4: Disconnected due to user request. [ 951.838795][T14805] block nbd4: shutting down sockets [ 951.890910][T14811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2307'. [ 951.914278][T10531] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 951.940694][ T2420] blk_print_req_error: 135 callbacks suppressed [ 951.940714][ T2420] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 951.959105][ T2420] buffer_io_error: 138 callbacks suppressed [ 951.959120][ T2420] Buffer I/O error on dev nbd4, logical block 0, async page read [ 951.973086][ T2420] Buffer I/O error on dev nbd4, logical block 1, async page read [ 951.980865][ T2420] Buffer I/O error on dev nbd4, logical block 2, async page read [ 951.988820][ T2420] Buffer I/O error on dev nbd4, logical block 3, async page read [ 951.999016][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.008629][ T6077] Buffer I/O error on dev nbd4, logical block 0, async page read [ 952.016561][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 952.021899][ T6077] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.032213][ T6077] Buffer I/O error on dev nbd4, logical block 1, async page read [ 952.040893][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.052991][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 952.072487][ T6077] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.082447][ T5879] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 952.091524][ T6077] Buffer I/O error on dev nbd4, logical block 2, async page read [ 952.102393][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.110585][ T6077] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.121578][ T6077] Buffer I/O error on dev nbd4, logical block 3, async page read [ 952.130825][ T5879] usb 1-1: config 0 descriptor?? [ 952.136619][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.148711][ T6077] Buffer I/O error on dev nbd4, logical block 0, async page read [ 952.159087][ T6077] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.168773][ T6077] Buffer I/O error on dev nbd4, logical block 1, async page read [ 952.181099][ T6077] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.196428][ T6077] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.212939][ T6077] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 952.324961][ T6077] ldm_validate_partition_table(): Disk read failed. [ 952.343185][ T6077] Dev nbd4: unable to read RDB block 0 [ 952.350913][ T6077] nbd4: unable to read partition table [ 952.375004][ T5879] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 952.472572][T14817] [U]  [ 952.912154][ T6077] ldm_validate_partition_table(): Disk read failed. [ 952.920229][ T5879] usb 1-1: USB disconnect, device number 80 [ 953.121098][T14816] netlink: 400 bytes leftover after parsing attributes in process `syz.1.2309'. [ 953.164529][ T6077] Dev nbd4: unable to read RDB block 0 [ 953.191034][ T6077] nbd4: unable to read partition table [ 953.594934][T12176] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 953.764118][T12176] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.872014][T12176] usb 2-1: config 0 has no interfaces? [ 953.889285][T12176] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 953.901661][T12176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.960996][T12176] usb 2-1: config 0 descriptor?? [ 954.304816][T14837] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 954.313689][T14837] overlayfs: missing 'lowerdir' [ 954.457086][T14843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.579727][T14844] Device name cannot be null; rc = [-22] [ 955.847142][T14854] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2317'. [ 956.520642][ T5856] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 956.569226][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 956.688202][ T5856] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 956.779549][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.859095][ T5856] usb 4-1: config 0 has no interface number 0 [ 957.008908][ T5856] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 957.143783][ T5856] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 957.184009][ T5914] usb 2-1: USB disconnect, device number 82 [ 957.332060][ T5856] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.514452][ T5856] usb 4-1: config 0 interface 52 has no altsetting 0 [ 957.615236][ T5856] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 957.714787][ T5856] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 957.800304][ T5856] usb 4-1: Manufacturer: syz [ 957.960787][ T5856] usb 4-1: config 0 descriptor?? [ 958.860131][T14863] [U]  [ 958.863543][ T5856] hub 4-1:0.52: bad descriptor, ignoring hub [ 958.869741][ T5856] hub 4-1:0.52: probe with driver hub failed with error -5 [ 958.901713][ T5856] usb 4-1: Can not set alternate setting to 1, error: -71 [ 958.939556][ T5856] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 959.197623][ T5856] usb 4-1: reset full-speed USB device number 81 using dummy_hcd [ 959.277108][ T29] audit: type=1400 audit(1774943893.402:512): avc: denied { execute } for pid=14870 comm="syz.0.2322" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=46277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 959.318119][ T29] audit: type=1800 audit(1774943893.402:513): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2322" name="[kvm-gmem]" dev="guest_memfd" ino=46277 res=0 errno=0 [ 959.424885][ T5856] usb 4-1: device firmware changed [ 959.440682][ T5856] usb 4-1: USB disconnect, device number 81 [ 959.752438][ T5856] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 959.961881][ T5856] usb 4-1: config 8 has an invalid interface number: 33 but max is 0 [ 959.984339][ T5856] usb 4-1: config 8 has no interface number 0 [ 959.995739][ T5856] usb 4-1: config 8 interface 33 has no altsetting 0 [ 960.307812][ T29] audit: type=1400 audit(1774943894.152:514): avc: denied { bind } for pid=14892 comm="syz.6.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 960.330080][T14895] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 960.418467][ T5856] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 960.422391][ T29] audit: type=1400 audit(1774943894.472:515): avc: denied { ioctl } for pid=14892 comm="syz.6.2329" path="socket:[47336]" dev="sockfs" ino=47336 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 960.427710][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.460829][T14895] overlayfs: missing 'lowerdir' [ 960.502947][ T5856] usb 4-1: Product: syz [ 960.507148][ T5856] usb 4-1: Manufacturer: syz [ 960.511744][ T5856] usb 4-1: SerialNumber: syz [ 960.581447][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'. [ 960.672515][T14904] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2331'. [ 960.732231][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2331'. [ 961.895389][ T5856] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 962.185043][ T5856] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 962.509790][ T5856] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 962.633654][ T5856] usb 4-1: media controller created [ 963.229292][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 963.423735][ T5856] DVB: Unable to find symbol dib7000p_attach() [ 963.462536][ T5856] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 963.540553][T14935] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2335'. [ 963.597896][T14936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 963.922400][ T5856] rc_core: IR keymap rc-dib0700-rc5 not found [ 963.928679][ T5856] Registered IR keymap rc-empty [ 963.937438][ T5856] dvb-usb: could not initialize remote control. [ 963.943892][ T5856] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 963.991272][ T5856] usb 4-1: USB disconnect, device number 82 [ 964.047900][ T5856] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 964.403356][T14945] ptrace attach of "./syz-executor exec"[5812] was attempted by " [ 964.920346][ T5856] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 965.272609][ T5856] usb 5-1: device descriptor read/64, error -71 [ 965.512440][ T5856] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 965.626790][T14955] FAULT_INJECTION: forcing a failure. [ 965.626790][T14955] name failslab, interval 1, probability 0, space 0, times 0 [ 965.652711][ T5856] usb 5-1: device descriptor read/64, error -71 [ 965.662460][T14955] CPU: 1 UID: 0 PID: 14955 Comm: syz.0.2341 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.662500][T14955] Tainted: [L]=SOFTLOCKUP [ 965.662506][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 965.662517][T14955] Call Trace: [ 965.662525][T14955] [ 965.662534][T14955] dump_stack_lvl+0x100/0x190 [ 965.662571][T14955] should_fail_ex.cold+0x5/0xa [ 965.662600][T14955] should_failslab+0xc2/0x120 [ 965.662623][T14955] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 965.662655][T14955] ? sidtab_sid2str_get+0x17a/0x670 [ 965.662692][T14955] kmemdup_noprof+0x29/0x60 [ 965.662724][T14955] sidtab_sid2str_get+0x17a/0x670 [ 965.662758][T14955] security_sid_to_context_core+0x35a/0x6d0 [ 965.662789][T14955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 965.662821][T14955] avc_audit_post_callback+0x109/0x910 [ 965.662846][T14955] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 965.662877][T14955] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 965.662898][T14955] ? skb_put+0x138/0x180 [ 965.662920][T14955] ? audit_log_n_string+0x256/0x550 [ 965.662955][T14955] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 965.662977][T14955] common_lsm_audit+0x23f/0x2b0 [ 965.663008][T14955] ? __pfx_common_lsm_audit+0x10/0x10 [ 965.663038][T14955] ? lockdep_hardirqs_on+0x78/0x100 [ 965.663069][T14955] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 965.663102][T14955] slow_avc_audit+0x186/0x210 [ 965.663126][T14955] ? __pfx_slow_avc_audit+0x10/0x10 [ 965.663153][T14955] ? avc_denied+0x14a/0x190 [ 965.663177][T14955] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 965.663206][T14955] avc_has_perm+0x1a6/0x1e0 [ 965.663231][T14955] ? __pfx_avc_has_perm+0x10/0x10 [ 965.663266][T14955] sock_has_perm+0x251/0x2f0 [ 965.663292][T14955] ? __pfx_sock_has_perm+0x10/0x10 [ 965.663331][T14955] ? find_held_lock+0x2b/0x80 [ 965.663361][T14955] security_socket_getsockopt+0x9b/0x230 [ 965.663390][T14955] do_sock_getsockopt+0x11f/0x3d0 [ 965.663428][T14955] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 965.663470][T14955] __sys_getsockopt+0x148/0x260 [ 965.663507][T14955] ? __x64_sys_getsockopt+0xbd/0x160 [ 965.663533][T14955] __x64_sys_getsockopt+0xbd/0x160 [ 965.663559][T14955] ? do_syscall_64+0x95/0xf80 [ 965.663589][T14955] ? lockdep_hardirqs_on+0x78/0x100 [ 965.663619][T14955] do_syscall_64+0x106/0xf80 [ 965.663646][T14955] ? clear_bhb_loop+0x40/0x90 [ 965.663673][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.663694][T14955] RIP: 0033:0x7fb67439c819 [ 965.663712][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.663734][T14955] RSP: 002b:00007fb6725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 965.663754][T14955] RAX: ffffffffffffffda RBX: 00007fb674615fa0 RCX: 00007fb67439c819 [ 965.663769][T14955] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 965.663781][T14955] RBP: 00007fb6725f6090 R08: 0000200000000580 R09: 0000000000000000 [ 965.663795][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.663808][T14955] R13: 00007fb674616038 R14: 00007fb674615fa0 R15: 00007fffa9949468 [ 965.663839][T14955] [ 965.692363][ T29] audit: type=1400 audit(1774943899.752:516): avc: denied { getopt } for pid=14954 comm="syz.0.2341" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 965.762650][ T5856] usb usb5-port1: attempt power cycle [ 966.623647][ T2420] block nbd0: Possible stuck request ffff888027ea8000: control (read@0,1024B). Runtime 120 seconds [ 966.634736][ T2420] block nbd0: Possible stuck request ffff888027ea8200: control (read@1024,1024B). Runtime 120 seconds [ 966.646643][ T2420] block nbd0: Possible stuck request ffff888027ea8400: control (read@2048,1024B). Runtime 120 seconds [ 966.657936][ T2420] block nbd0: Possible stuck request ffff888027ea8600: control (read@3072,1024B). Runtime 120 seconds [ 966.912604][ T5856] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 966.933835][ T5856] usb 5-1: device descriptor read/8, error -71 [ 967.244524][T14975] netlink: 'syz.1.2347': attribute type 2 has an invalid length. [ 967.252678][T14975] netlink: 'syz.1.2347': attribute type 2 has an invalid length. [ 967.268307][ T25] block nbd1: Possible stuck request ffff888027f82800: control (read@0,1024B). Runtime 60 seconds [ 967.279060][ T25] block nbd1: Possible stuck request ffff888027f82a00: control (read@1024,1024B). Runtime 60 seconds [ 967.290838][ T25] block nbd1: Possible stuck request ffff888027f82c00: control (read@2048,1024B). Runtime 60 seconds [ 967.302046][ T25] block nbd1: Possible stuck request ffff888027f82e00: control (read@3072,1024B). Runtime 60 seconds [ 968.535732][T14978] Process accounting resumed [ 969.638022][T14996] tipc: Failed to remove unknown binding: 66,0,0/134418688:1058229932/1058229933 [ 969.708931][T14996] tipc: Failed to remove unknown binding: 66,0,0/134418688:1058229932/1058229933 [ 970.208266][ T5178] udevd[5178]: worker [6803] /devices/virtual/block/nbd0 is taking a long time [ 970.218538][ T5178] udevd[5178]: worker [5795] /devices/virtual/block/nbd2 is taking a long time [ 970.228300][ T5178] udevd[5178]: worker [6018] /devices/virtual/block/nbd1 is taking a long time [ 970.620181][ T29] audit: type=1400 audit(1774943904.702:517): avc: denied { read } for pid=15003 comm="syz.6.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 971.030975][T15015] FAULT_INJECTION: forcing a failure. [ 971.030975][T15015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 971.059733][T15015] CPU: 0 UID: 0 PID: 15015 Comm: syz.0.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.059770][T15015] Tainted: [L]=SOFTLOCKUP [ 971.059779][T15015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 971.059792][T15015] Call Trace: [ 971.059799][T15015] [ 971.059808][T15015] dump_stack_lvl+0x100/0x190 [ 971.059846][T15015] should_fail_ex.cold+0x5/0xa [ 971.059870][T15015] ? prepare_alloc_pages+0x16d/0x5f0 [ 971.059897][T15015] should_fail_alloc_page+0xeb/0x140 [ 971.059921][T15015] prepare_alloc_pages+0x1f0/0x5f0 [ 971.059951][T15015] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 971.059998][T15015] ? rcu_is_watching+0x12/0xc0 [ 971.060026][T15015] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 971.060055][T15015] ? __kasan_kmalloc+0xaa/0xb0 [ 971.060087][T15015] ? __alloc_skb+0x185/0x710 [ 971.060113][T15015] ? trace_kmem_cache_alloc+0x61/0x120 [ 971.060145][T15015] ? selinux_socket_sock_rcv_skb+0x186/0x730 [ 971.060184][T15015] ? __lock_acquire+0x4a5/0x2630 [ 971.060205][T15015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 971.060237][T15015] ? policy_nodemask+0xed/0x4f0 [ 971.060262][T15015] alloc_pages_mpol+0x1fb/0x550 [ 971.060289][T15015] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 971.060312][T15015] ? __lock_acquire+0x4a5/0x2630 [ 971.060333][T15015] ? __lock_acquire+0x4a5/0x2630 [ 971.060358][T15015] folio_alloc_mpol_noprof+0x36/0x340 [ 971.060386][T15015] vma_alloc_folio_noprof+0xed/0x1d0 [ 971.060411][T15015] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 971.060435][T15015] ? rcu_read_unlock+0x2d/0xb0 [ 971.060463][T15015] ? rcu_read_unlock+0x2d/0xb0 [ 971.060490][T15015] ? __lock_acquire+0x4a5/0x2630 [ 971.060516][T15015] do_wp_page+0xf28/0x4e90 [ 971.060550][T15015] ? __pfx_do_wp_page+0x10/0x10 [ 971.060577][T15015] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 971.060611][T15015] __handle_mm_fault+0x1ace/0x2b60 [ 971.060644][T15015] ? mt_find+0x45e/0x8e0 [ 971.060667][T15015] ? __pfx___handle_mm_fault+0x10/0x10 [ 971.060693][T15015] ? __pfx_mt_find+0x10/0x10 [ 971.060731][T15015] ? find_vma+0xbf/0x140 [ 971.060752][T15015] ? __pfx_find_vma+0x10/0x10 [ 971.060778][T15015] handle_mm_fault+0x36d/0xa20 [ 971.060812][T15015] do_user_addr_fault+0x74c/0x12f0 [ 971.060847][T15015] exc_page_fault+0x6f/0xd0 [ 971.060876][T15015] asm_exc_page_fault+0x26/0x30 [ 971.060895][T15015] RIP: 0010:__put_user_4+0xd/0x20 [ 971.060922][T15015] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 971.060943][T15015] RSP: 0018:ffffc9000e1bfcd0 EFLAGS: 00050202 [ 971.060959][T15015] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000001c38 [ 971.060972][T15015] RDX: ffff8880285ea4c0 RSI: ffffffff8257dd81 RDI: ffffffff8c1b1a20 [ 971.060986][T15015] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001c9 [ 971.060998][T15015] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000040840 [ 971.061010][T15015] R13: 0000000000000158 R14: 0000000000000159 R15: 0000200000001c00 [ 971.061031][T15015] ? __might_fault+0x111/0x140 [ 971.061061][T15015] __sys_sendmmsg+0x239/0x430 [ 971.061093][T15015] ? __pfx___sys_sendmmsg+0x10/0x10 [ 971.061132][T15015] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 971.061183][T15015] ? fput+0x79/0x100 [ 971.061208][T15015] ? ksys_write+0x1ac/0x250 [ 971.061228][T15015] ? __pfx_ksys_write+0x10/0x10 [ 971.061254][T15015] __x64_sys_sendmmsg+0x9c/0x100 [ 971.061282][T15015] ? lockdep_hardirqs_on+0x78/0x100 [ 971.061312][T15015] do_syscall_64+0x106/0xf80 [ 971.061341][T15015] ? clear_bhb_loop+0x40/0x90 [ 971.061367][T15015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.061389][T15015] RIP: 0033:0x7fb67439c819 [ 971.061407][T15015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.061428][T15015] RSP: 002b:00007fb6725d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 971.061448][T15015] RAX: ffffffffffffffda RBX: 00007fb674616090 RCX: 00007fb67439c819 [ 971.061462][T15015] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 971.061476][T15015] RBP: 00007fb6725d5090 R08: 0000000000000000 R09: 0000000000000000 [ 971.061490][T15015] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 971.061504][T15015] R13: 00007fb674616128 R14: 00007fb674616090 R15: 00007fffa9949468 [ 971.061535][T15015] [ 971.678903][ T2420] block nbd3: Possible stuck request ffff888028028000: control (read@0,1024B). Runtime 60 seconds [ 971.690121][ T2420] block nbd3: Possible stuck request ffff888028028200: control (read@1024,1024B). Runtime 60 seconds [ 971.701463][ T2420] block nbd3: Possible stuck request ffff888028028400: control (read@2048,1024B). Runtime 60 seconds [ 971.712436][ T2420] block nbd3: Possible stuck request ffff888028028600: control (read@3072,1024B). Runtime 60 seconds [ 971.955282][T15018] tipc: Failed to remove unknown binding: 66,0,0/3875610124:2270427132/2270427133 [ 971.965541][T15018] tipc: Failed to remove unknown binding: 66,0,0/3875610124:2270427132/2270427133 [ 972.678888][T15029] tipc: Failed to remove unknown binding: 66,0,0/0:1524772234/1524772235 [ 972.689141][T15029] tipc: Failed to remove unknown binding: 66,0,0/0:1524772234/1524772235 [ 972.803976][T15024] nbd4: detected capacity change from 0 to 63 [ 973.265160][ T5809] block nbd4: Receive control failed (result -104) [ 974.443066][ T975] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 975.428508][ T975] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 975.465051][ T975] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 975.554784][ T975] usb 4-1: config 220 has an invalid descriptor of length 114, skipping remainder of the config [ 975.622046][ T975] usb 4-1: config 220 has no interface number 2 [ 975.660586][ T975] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 975.734208][ T975] usb 4-1: config 220 interface 0 has no altsetting 0 [ 975.788612][ T975] usb 4-1: config 220 interface 76 has no altsetting 0 [ 975.802370][ T975] usb 4-1: config 220 interface 1 has no altsetting 0 [ 975.848215][ T975] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 975.904689][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.941015][ T975] usb 4-1: Product: syz [ 975.951480][ T975] usb 4-1: Manufacturer: syz [ 975.992144][ T975] usb 4-1: SerialNumber: syz [ 976.318584][T15035] SELinux: failed to load policy [ 976.495929][ T975] usb 4-1: selecting invalid altsetting 0 [ 976.510060][ T975] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 976.517768][ T975] uvcvideo 4-1:220.0: No valid video chain found. [ 976.665926][ T975] usb 4-1: selecting invalid altsetting 0 [ 976.684636][ T975] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 977.669903][ T25] block nbd2: Possible stuck request ffff888027fe8000: control (read@0,1024B). Runtime 120 seconds [ 977.681431][ T25] block nbd2: Possible stuck request ffff888027fe8200: control (read@1024,1024B). Runtime 120 seconds [ 977.700937][ T25] block nbd2: Possible stuck request ffff888027fe8400: control (read@2048,1024B). Runtime 120 seconds [ 977.711978][ T25] block nbd2: Possible stuck request ffff888027fe8600: control (read@3072,1024B). Runtime 120 seconds [ 977.838851][ T975] usb 4-1: USB disconnect, device number 83 [ 980.302469][ T975] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 980.505878][ T975] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 980.517664][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.554016][ T975] usb 5-1: Product: syz [ 980.558224][ T975] usb 5-1: Manufacturer: syz [ 980.596230][ T975] usb 5-1: SerialNumber: syz [ 980.630542][ T975] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 980.697569][ T5879] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 981.862337][ T5879] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 981.869482][ T5879] ath9k_htc: Failed to initialize the device [ 982.270879][ T975] usb 5-1: USB disconnect, device number 78 [ 982.286194][ T975] usb 5-1: ath9k_htc: USB layer deinitialized [ 983.712536][T15124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.348469][T15134] binder: 15127:15134 ioctl c0306201 2000000003c0 returned -14 [ 984.452731][ T29] audit: type=1400 audit(1774943918.512:518): avc: denied { transfer } for pid=15127 comm="syz.6.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 984.484558][ T5879] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 985.156354][ T5879] usb 2-1: device descriptor read/64, error -71 [ 985.459462][ T5879] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 985.664361][ T5879] usb 2-1: device descriptor read/64, error -71 [ 985.772666][ T5879] usb usb2-port1: attempt power cycle [ 986.372990][ T5914] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 986.603173][ T5879] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 986.732758][ T5879] usb 2-1: device descriptor read/8, error -71 [ 986.854090][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 986.861856][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 986.873519][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.919818][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.974071][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 987.433731][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 987.457795][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 987.470246][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 987.489103][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 987.524409][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 987.552072][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 987.654095][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 987.688790][ T5914] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 988.004693][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 988.022867][ T5914] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 988.076343][ T5914] usb 1-1: string descriptor 0 read error: -22 [ 988.084644][ T5914] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 988.087861][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2398'. [ 988.111465][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.149581][ T5914] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 988.274692][T15194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.373311][ T5914] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 988.409603][T15198] Device name cannot be null; rc = [-22] [ 988.777750][ T29] audit: type=1400 audit(1774943922.902:519): avc: denied { bind } for pid=15200 comm="syz.4.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 988.825665][ T5914] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 988.852937][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.861178][ T5914] usb 4-1: Product: syz [ 988.880223][ T5914] usb 4-1: Manufacturer: syz [ 988.885544][ T5914] usb 4-1: SerialNumber: syz [ 989.001288][ T5914] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 989.019327][ T5915] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 989.170520][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 989.179663][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2404'. [ 989.188807][T15213] netlink: 'syz.4.2404': attribute type 13 has an invalid length. [ 989.196723][T15213] netlink: 'syz.4.2404': attribute type 12 has an invalid length. [ 990.052481][ T5915] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 990.059552][ T5915] ath9k_htc: Failed to initialize the device [ 990.202957][ T5856] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 990.465614][ T5915] usb 4-1: ath9k_htc: USB layer deinitialized [ 990.486524][T15223] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 990.496097][T15223] overlayfs: missing 'lowerdir' [ 990.622674][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 990.629536][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.640885][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.665175][ T5856] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 990.758203][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.762919][ T5879] usb 1-1: USB disconnect, device number 81 [ 990.810818][ T5856] usb 2-1: config 0 descriptor?? [ 991.164249][T15228] cgroup2: Bad value for 'defcontext' [ 992.209077][ T975] usb 4-1: USB disconnect, device number 84 [ 993.662273][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.668654][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.703027][ T5856] hid_parser_main: 473 callbacks suppressed [ 993.703052][ T5856] ft260 0003:0403:6030.0031: unknown main item tag 0x0 [ 993.742391][ T5856] ft260 0003:0403:6030.0031: unknown main item tag 0x0 [ 993.803151][ T5856] ft260 0003:0403:6030.0031: failed to retrieve chip version [ 993.810891][ T5856] ft260 0003:0403:6030.0031: probe with driver ft260 failed with error -71 [ 993.856827][ T5856] usb 2-1: USB disconnect, device number 87 [ 994.097613][T15241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2413'. [ 994.128722][T15241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.493393][ T29] audit: type=1400 audit(1774943928.612:520): avc: denied { open } for pid=15237 comm="syz.6.2414" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 994.977454][T15246] netlink: 'syz.4.2415': attribute type 14 has an invalid length. [ 994.985382][T15246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2415'. [ 995.346703][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2416'. [ 995.919230][ T5856] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 995.942420][ T975] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 996.072498][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 996.088130][ T5856] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 996.104994][ T975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 996.112983][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 996.114039][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.138312][ T975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 996.138702][ T5856] usb 1-1: Product: syz [ 996.154656][ T5856] usb 1-1: Manufacturer: syz [ 996.159261][ T5856] usb 1-1: SerialNumber: syz [ 996.162620][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 996.177635][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 996.195044][ T975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 996.203529][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 996.215253][ T975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 996.227452][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 996.239294][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 996.252232][ T975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 996.263997][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 996.277769][ T975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 996.277899][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2421'. [ 996.290064][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 996.312634][ T5915] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 996.315600][ T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 996.335347][ T975] usb 2-1: string descriptor 0 read error: -22 [ 996.341807][ T975] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 996.351890][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.368753][ T975] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 996.396037][ T5856] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 996.435171][ T5856] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 996.448435][ T5856] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 996.461585][ T5856] usb 1-1: media controller created [ 996.473179][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 996.482178][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.498480][ T5915] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 996.510584][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 996.522794][ T5915] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 996.531842][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.543948][ T5915] usb 4-1: Product: syz [ 996.551062][ T5915] usb 4-1: Manufacturer: syz [ 996.556406][ T5915] usb 4-1: SerialNumber: syz [ 996.588058][ T5914] usb 2-1: USB disconnect, device number 88 [ 996.692746][T10531] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 996.692864][ T2420] block nbd0: Possible stuck request ffff888027ea8000: control (read@0,1024B). Runtime 150 seconds [ 996.711266][ T2420] block nbd0: Possible stuck request ffff888027ea8200: control (read@1024,1024B). Runtime 150 seconds [ 996.723676][ T2420] block nbd0: Possible stuck request ffff888027ea8400: control (read@2048,1024B). Runtime 150 seconds [ 996.734840][ T2420] block nbd0: Possible stuck request ffff888027ea8600: control (read@3072,1024B). Runtime 150 seconds [ 996.752576][ T5813] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 996.761244][ T5856] zl10353_read_register: readreg error (reg=127, ret==-110) [ 996.761465][T15257] ------------[ cut here ]------------ [ 996.774981][T15257] usb 1-1: BOGUS control dir, pipe 80005280 doesn't match bRequestType c0 [ 996.783724][T15257] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.0.2411/15257 [ 996.794252][T15257] Modules linked in: [ 996.798733][T15257] CPU: 0 UID: 0 PID: 15257 Comm: syz.0.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.809793][T15257] Tainted: [L]=SOFTLOCKUP [ 996.814190][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 996.824345][T15257] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 996.830007][T15257] Code: d2 74 5d 48 89 54 24 40 e8 0f 5e b7 fa 4c 89 ef e8 67 9b de fe 48 89 c6 48 8d 3d 2d e9 94 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 e3 5d b7 fa 89 ee bf ff 00 00 00 [ 996.849980][T15257] RSP: 0018:ffffc9000ff67610 EFLAGS: 00010283 [ 996.856293][T15257] RAX: ffffffff8c80f1e0 RBX: ffff888035cfc600 RCX: 0000000080005280 [ 996.864408][T15257] RDX: ffff8880506b6a80 RSI: ffffffff8c80f1e0 RDI: ffffffff90e68310 [ 996.872469][T15257] RBP: ffff88805b10e058 R08: 00000000000000c0 R09: 0000000000000000 [ 996.880461][T15257] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888049e09380 [ 996.888525][T15257] R13: ffff88805b10e0b0 R14: 0000000080005280 R15: 00000000000000c0 [ 996.894176][T10531] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 996.896571][T15257] FS: 00007fb6725f66c0(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 996.896598][T15257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.920905][T15257] CR2: 00007fb6725d5d58 CR3: 0000000094e7c000 CR4: 00000000003526f0 [ 996.928964][T15257] Call Trace: [ 996.932265][T15257] [ 996.935280][T15257] ? __init_swait_queue_head+0xca/0x150 [ 996.940847][T15257] usb_start_wait_urb+0x10e/0x580 [ 996.945992][T15257] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 996.951710][T15257] ? __asan_memset+0x23/0x50 [ 996.956500][T15257] usb_control_msg+0x328/0x4b0 [ 996.961276][T15257] ? __pfx_usb_control_msg+0x10/0x10 [ 996.966621][T15257] ? lock_acquire+0x1cf/0x380 [ 996.971313][T15257] ? find_held_lock+0x2b/0x80 [ 996.976061][T15257] gl861_ctrl_msg+0x1a5/0x4a0 [ 996.980746][T15257] ? __lock_acquire+0x4c0/0x2630 [ 996.985736][T15257] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 996.990941][T15257] ? trace_raw_output_sched_migrate_task+0x90/0x1f0 [ 996.997644][T15257] gl861_i2c_master_xfer+0x545/0x690 [ 996.998226][ T5813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 997.003003][T15257] ? find_held_lock+0x2b/0x80 [ 997.003043][T15257] __i2c_transfer+0x5d9/0x17f0 [ 997.003072][T15257] ? try_to_take_rt_mutex+0x5a5/0xf90 [ 997.017836][T10531] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 997.022552][T15257] ? __pfx___i2c_transfer+0x10/0x10 [ 997.040607][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 997.043319][T15257] ? _raw_spin_lock_irq+0x45/0x50 [ 997.043361][T15257] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 997.043395][T15257] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 997.043427][T15257] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x790 [ 997.060248][T10531] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 997.060319][T10531] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 997.065922][T15257] __i2c_smbus_xfer+0x5b7/0x1080 [ 997.072079][T10531] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 997.078885][T15257] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 997.120260][T15257] i2c_smbus_xfer+0x185/0x3c0 [ 997.125015][T15257] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 997.130032][T15257] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 997.135633][T15257] ? __might_fault+0xc5/0x140 [ 997.140302][T15257] ? __might_fault+0xc5/0x140 [ 997.145125][T15257] i2cdev_ioctl+0x3cf/0x830 [ 997.149754][T15257] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 997.154932][T15257] ? selinux_file_ioctl+0x139/0x290 [ 997.160148][T15257] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 997.165320][T15257] __x64_sys_ioctl+0x18e/0x210 [ 997.170091][T15257] do_syscall_64+0x106/0xf80 [ 997.174772][T15257] ? clear_bhb_loop+0x40/0x90 [ 997.179443][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.185410][T15257] RIP: 0033:0x7fb67439c819 [ 997.189837][T15257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.209537][T15257] RSP: 002b:00007fb6725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.217994][T15257] RAX: ffffffffffffffda RBX: 00007fb674615fa0 RCX: 00007fb67439c819 [ 997.226046][T15257] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000006 [ 997.234100][T15257] RBP: 00007fb674432c91 R08: 0000000000000000 R09: 0000000000000000 [ 997.242057][T15257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.250070][T15257] R13: 00007fb674616038 R14: 00007fb674615fa0 R15: 00007fffa9949468 [ 997.258837][T15257] [ 997.261860][T15257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 997.269126][T15257] CPU: 0 UID: 0 PID: 15257 Comm: syz.0.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.280047][T15257] Tainted: [L]=SOFTLOCKUP [ 997.284346][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 997.294394][T15257] Call Trace: [ 997.297665][T15257] [ 997.300584][T15257] dump_stack_lvl+0x100/0x190 [ 997.305263][T15257] vpanic+0x552/0x970 [ 997.309242][T15257] ? __pfx_vpanic+0x10/0x10 [ 997.313748][T15257] panic+0xd1/0xe0 [ 997.317448][T15257] ? __pfx_panic+0x10/0x10 [ 997.321844][T15257] check_panic_on_warn.cold+0x19/0x34 [ 997.327206][T15257] ? usb_submit_urb+0x1573/0x1910 [ 997.332221][T15257] __warn.cold+0x191/0x348 [ 997.336644][T15257] __report_bug+0x296/0x3d0 [ 997.341140][T15257] ? usb_submit_urb+0x1573/0x1910 [ 997.346178][T15257] ? __pfx___report_bug+0x10/0x10 [ 997.351202][T15257] ? mark_held_locks+0x40/0x70 [ 997.355959][T15257] report_bug_entry+0xe1/0x290 [ 997.360707][T15257] ? usb_submit_urb+0x157e/0x1910 [ 997.365729][T15257] handle_bug+0x1cd/0x2a0 [ 997.370055][T15257] exc_invalid_op+0x17/0x50 [ 997.374555][T15257] asm_exc_invalid_op+0x1a/0x20 [ 997.379404][T15257] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 997.385031][T15257] Code: d2 74 5d 48 89 54 24 40 e8 0f 5e b7 fa 4c 89 ef e8 67 9b de fe 48 89 c6 48 8d 3d 2d e9 94 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 e3 5d b7 fa 89 ee bf ff 00 00 00 [ 997.404617][T15257] RSP: 0018:ffffc9000ff67610 EFLAGS: 00010283 [ 997.410670][T15257] RAX: ffffffff8c80f1e0 RBX: ffff888035cfc600 RCX: 0000000080005280 [ 997.418634][T15257] RDX: ffff8880506b6a80 RSI: ffffffff8c80f1e0 RDI: ffffffff90e68310 [ 997.426590][T15257] RBP: ffff88805b10e058 R08: 00000000000000c0 R09: 0000000000000000 [ 997.434557][T15257] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888049e09380 [ 997.442507][T15257] R13: ffff88805b10e0b0 R14: 0000000080005280 R15: 00000000000000c0 [ 997.450497][T15257] ? __init_swait_queue_head+0xca/0x150 [ 997.456045][T15257] usb_start_wait_urb+0x10e/0x580 [ 997.461071][T15257] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 997.466603][T15257] ? __asan_memset+0x23/0x50 [ 997.471291][T15257] usb_control_msg+0x328/0x4b0 [ 997.476054][T15257] ? __pfx_usb_control_msg+0x10/0x10 [ 997.481329][T15257] ? lock_acquire+0x1cf/0x380 [ 997.485993][T15257] ? find_held_lock+0x2b/0x80 [ 997.490676][T15257] gl861_ctrl_msg+0x1a5/0x4a0 [ 997.495352][T15257] ? __lock_acquire+0x4c0/0x2630 [ 997.500268][T15257] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 997.505467][T15257] ? trace_raw_output_sched_migrate_task+0x90/0x1f0 [ 997.512057][T15257] gl861_i2c_master_xfer+0x545/0x690 [ 997.517325][T15257] ? find_held_lock+0x2b/0x80 [ 997.521981][T15257] __i2c_transfer+0x5d9/0x17f0 [ 997.526722][T15257] ? try_to_take_rt_mutex+0x5a5/0xf90 [ 997.532080][T15257] ? __pfx___i2c_transfer+0x10/0x10 [ 997.537260][T15257] ? _raw_spin_lock_irq+0x45/0x50 [ 997.542267][T15257] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 997.547804][T15257] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 997.553773][T15257] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x790 [ 997.560707][T15257] __i2c_smbus_xfer+0x5b7/0x1080 [ 997.565646][T15257] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 997.570996][T15257] i2c_smbus_xfer+0x185/0x3c0 [ 997.575657][T15257] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 997.580695][T15257] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 997.586244][T15257] ? __might_fault+0xc5/0x140 [ 997.590933][T15257] ? __might_fault+0xc5/0x140 [ 997.595639][T15257] i2cdev_ioctl+0x3cf/0x830 [ 997.600150][T15257] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 997.605155][T15257] ? selinux_file_ioctl+0x139/0x290 [ 997.610360][T15257] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 997.615381][T15257] __x64_sys_ioctl+0x18e/0x210 [ 997.620136][T15257] do_syscall_64+0x106/0xf80 [ 997.624735][T15257] ? clear_bhb_loop+0x40/0x90 [ 997.629409][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.635306][T15257] RIP: 0033:0x7fb67439c819 [ 997.639721][T15257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.659325][T15257] RSP: 002b:00007fb6725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.667723][T15257] RAX: ffffffffffffffda RBX: 00007fb674615fa0 RCX: 00007fb67439c819 [ 997.675683][T15257] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000006 [ 997.683651][T15257] RBP: 00007fb674432c91 R08: 0000000000000000 R09: 0000000000000000 [ 997.691614][T15257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.699576][T15257] R13: 00007fb674616038 R14: 00007fb674615fa0 R15: 00007fffa9949468 [ 997.707539][T15257] [ 997.710861][T15257] Kernel Offset: disabled [ 997.715174][T15257] Rebooting in 86400 seconds..