last executing test programs: 4m1.535813716s ago: executing program 1 (id=2340): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="5885f60514256542ad1210ddab99ae1c95f2f80431fe37366b44f59821025daf2d46842398da68b1df6099256d44425c1f55300f6887b7ba0d794ef922f465116759a81c796e2dabc8ea32010900148f3f25e9181900de9a6d7ef9f542c201c06a7ec39e39f3613585ec70a2075d4cc2b2f4b1b7c9e1ac7e35d40e488f7fb8da05ec6705ede393e4fefa729193c60bb5f0b3b70c919f464b288792cf058c9cfa0f", 0xa1, 0x8804, &(0x7f000005ffe4)={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_emit_ethernet(0xae, &(0x7f0000000200)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0xd, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @cipso={0x86, 0x18, 0x0, [{0x0, 0xf, "ef15c7a5fdcab994b899f4134f"}, {0x7, 0x3, "cf"}]}, @ra={0x94, 0x4}]}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x4c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}, {@private=0xa010102, 0x1}, {@multicast1, 0xd37b}]}]}}}}}}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20040) syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @multicast1, @local}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010067656e6576496935d2c27d99b94cb6ed647bbc39636530000000000000000000140001007767320000000000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468315f746f5f7465616d"], 0xfc}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f0000000140)=0x8) (fail_nth: 1) 3m59.547663703s ago: executing program 1 (id=2343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="5885f60514256542ad1210ddab99ae1c95f2f80431fe37366b44f59821025daf2d46842398da68b1df6099256d44425c1f55300f6887b7ba0d794ef922f465116759a81c796e2dabc8ea32010900148f3f25e9181900de9a6d7ef9f542c201c06a7ec39e39f3613585ec70a2075d4cc2b2f4b1b7c9e1ac7e35d40e488f7fb8da05ec6705ede393e4fefa729193c60bb5f0b3b70c919f464b288792cf058c9cfa0f", 0xa1, 0x8804, &(0x7f000005ffe4)={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_emit_ethernet(0xae, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffbe2ee937318017043a73dbde08004d0000a00000000000019078ac1e0101ac1414aa00861800000000000fef15c7a5fdcab994b899f4134f0703cf9404000000000005009078e00000e0490000000000000000110000e000000200000000830300444c0003640101010001000000000000000000a0ad14f9aa00000000ac1414bb000000000000000000160000ac1414bb0000000000000000000000000a01010200000001e00000010000d37b0014b816636729dafbc8e51adad957a1e192a617115891dbf193cc0a054a82fadde4ee6de9804a15aa75fa"], 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20040) syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = io_uring_setup(0x4123, &(0x7f0000000200)={0x0, 0x1b, 0x2, 0x2, 0x4c}) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x300, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @multicast1, @local}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010067656e6576496935d2c27d99b94cb6ed647bbc39636530000000000000000000140001007767320000000000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468315f746f5f7465616d"], 0xfc}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffffe}, &(0x7f0000000140)=0x8) 3m57.013921791s ago: executing program 1 (id=2352): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'sy\xa4', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000000)="cffecdbbab2e3a871dbaf25f893d98719e8106c4d41c000000000000000000", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r2, 0x0) setresuid(r2, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlink(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)=""/120, 0x78) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee00, 0x0) keyctl$update(0x2, r4, &(0x7f0000000540)="94f2517ffa880b24fe2497e0ea9c10bcff5ec848fb4f78421273dc8534c8d4ab7131c8c925eb8af3aeafbfd8518de4ab64082a248872f2386ccc44fef360e7adf7b4745b71307d4d56601c955436b22877f3386fa1f85f475dc8e71bcc244eed826605e701153a4c7d28faa859d3615f2f53c18afe02faf4f24ca85dd0bbc30305d80f5403d150f44761b853cff58ee886a7f86c8d7c0e0aa005fc30f75ced1ab54ba8c9033b686132ad7e7e55b7248114e909763f3508b0747f5cababd1ad3b4bec4f24142946584301702c197c822da38f574f8e1998", 0xd7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xffffffff, 0x400}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "e1592bdc6b3a3dfcffffff9b822fb0cd"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40004000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800700010063740000140002800800014000000002080002400000000b100001800900010068617368000000000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4048aec9, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x1}) 3m54.801495037s ago: executing program 1 (id=2362): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000140)={0x0, 0x0}) unshare(0x2a020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x40000480) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f00000000c0)=0x9, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) listen(r2, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f0000000000)) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, 0x0, 0x0, 0x8812, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast1, 0x8, 0x2}, 0xffed) 3m53.994029405s ago: executing program 1 (id=2367): socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3m51.614719067s ago: executing program 1 (id=2381): read$qrtrtun(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) 3m51.178461996s ago: executing program 32 (id=2381): read$qrtrtun(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) 28.372029599s ago: executing program 4 (id=2910): syz_usb_connect(0x3, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x6f, 0x4d, 0x21, 0x40, 0xf3d, 0x68aa, 0x8e4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x9, [{{0x9, 0x4, 0x14, 0x9, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000140)={{@my=0x0, 0xfffffffb}, 0xcf5, 0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3b}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r2) 27.71934299s ago: executing program 3 (id=2911): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x0, 0x32, 0xa, "8bf23a4782635ce5c358"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x0, 0x80, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x10}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x9f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "bd4e"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xd3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "74ad"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 25.447857574s ago: executing program 4 (id=2917): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a900000000109021200010000000009040004008082"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x20}], 0x1, 0x0, 0x2f, 0x894}, 0x4040000) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27031600590214000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba86e4d9d994661b5326ba47effeb816fa926aecb8216ea67a3e4daa2b9c49a1d257b2f554f614b2fa357f90b9491fe19bda9a7ed7804ebc8e81c3e46c498622794f0123d259a89aadfc870dec179b596c6595ce1be70a45d6e0e695714264fe11f4a66c3737f521d0fccb82e01f8c31e0a0cff81ed3658722ad2d8bfae72a9ca90f0adb160ab9a6081478b66db57eff91b90418c3e38e1c352242cff44e20c8cf69f205649af90a49ddf0d4649a6449b2e2b714beabe0da400e", 0xfa}, {&(0x7f0000000640)="63f805d7649496db7295983293042cedc7b7cef3139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000134b", 0x89}, {&(0x7f0000000280)}, {&(0x7f00000001c0)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='L', 0x1, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r4, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1014000}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000900)={0x18, r4, 0x1000, 0x1004000}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)) sendmmsg(r2, &(0x7f00000009c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xf}}], 0x1, 0x0) 23.333477609s ago: executing program 3 (id=2920): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000a00)=""/102384, 0x18ff0) 20.991872148s ago: executing program 4 (id=2924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x4004) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x231, &(0x7f0000000740)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @dccp={{0x49, 0x4, 0x3, 0x3b, 0x21f, 0x68, 0x0, 0x93, 0x21, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, {[@generic={0x83, 0x9, "ca427b17ff3ad6"}, @timestamp_prespec={0x44, 0x1c, 0x7f, 0x3, 0x9, [{@rand_addr=0x64010101, 0x7fff}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x7}]}, @ssrr={0x89, 0x1f, 0xb1, [@rand_addr=0x64010102, @multicast2, @private=0xa010101, @local, @local, @local, @multicast2]}, @cipso={0x86, 0x50, 0x809983cf2f678a9e, [{0x7, 0x7, "80d1379c4a"}, {0x5, 0xb, "6890d4ab8207dc9273"}, {0x5, 0x10, "86ec83d79793d65c326d31a7481d"}, {0x5, 0xe, "4dbd53f711bc8b564573635d"}, {0x5, 0xe, "e63d40983071d0d2dce8896b"}, {0x5, 0xc, "c6879e5b6e007a513d4b"}]}, @cipso={0x86, 0x6a, 0x1, [{0x1, 0x11, "f8f1a774c7578e7eab7799d548169e"}, {0x1, 0xe, "20ff7ac1927c2dfb1d580a76"}, {0x6, 0x6, "a9cac6a6"}, {0x0, 0xb, "5266835f80be0d45c2"}, {0x6, 0x12, "27da29b100eb41dbda4fc20000000000"}, {0xfa1af1de17cf25ba, 0x11, "790a07d5b34ad5cd745186c7a4ea14"}, {0x0, 0x11, "316e931e0242c13cfe61347d7630ef"}]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x5, [{@rand_addr=0x64010101, 0x9}]}, @ra={0x94, 0x4}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0xa, 0x7, "fefbd5", 0x3, "013e59"}, "6de0dc39ff3aaa7be7b57973ca3f88a5deafb58988a6671a9e0272fdf46e74a4939b586137ad4b36b7c5d1a635e5bd45e43a08e7227128f396b76a0a360880b109481fa1a85deba7fc9549a32788b15206a0af14e4b22a1d865ba239f779c735d3052823bdb1d65c9e0828790c1e5f624f380aaa162e97befd7f8c984e681fb94b8bf620a37502198f8159fae2581dba8f3be34e1d64ca910d00811aa2f8ed773811705caf0762156b3ab0ef578f7ecc1fd98c31b1f9f72de8462790ba85039a5de35f3f5c85efadb9211af6790615e4dab96612eb3e196c1adcab2550cae181ade3211a491b0b8a941dd6"}}}}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fanotify_init(0x8, 0x800) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) connect$inet(r1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) sendfile(r1, r5, 0x0, 0x4000000000010046) 19.597604443s ago: executing program 4 (id=2927): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1) 17.366706035s ago: executing program 4 (id=2931): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) mlockall(0x2) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0xc000) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x480, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0xf000) 12.95144935s ago: executing program 3 (id=2940): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0) gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000a00)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0xff45) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x111, 0x4b4, 0x160, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x10, 0x9, 0x1004, 0x4, 0x6, 0x140, 0x4, 0x80, 0x78}, {0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0xfc}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 11.375942191s ago: executing program 3 (id=2945): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000a00)=""/102384, 0x18ff0) 10.131867844s ago: executing program 5 (id=2947): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x0, 0x32, 0xa, "8bf23a4782635ce5c358"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x0, 0x80, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x10}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x9f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "bd4e"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xd3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "74ad"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.807808249s ago: executing program 0 (id=2948): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x20}}, 0xc044880) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4cfcb061bb000305000000000000000400f0ff00", @ANYRES32=0x0, @ANYBLOB="00000000f10000002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="08000a0001000000"], 0x44}}, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b47f99cfbf4c087f74f9b36096eff7fc6e5539b9b18098b9b4a1b2552091b080d29428f0e1ac6e7049b3468959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) prlimit64(r2, 0x4, &(0x7f0000000440)={0x3, 0x4}, &(0x7f0000000600)) sendmmsg(r5, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e", 0x82}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087", 0x74}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b178", 0xc7}, {0x0}, {&(0x7f00000027c0)="8adc6c3009af743dd27f1cded499661bdc60f67cc239ece6923d5bbd9811b958640d7093238b58b060db6ed31873b1a1eab4927051818ac8c57db8508c3b6f832f1bf2218b9bf581b24f79b1ca2cfb9573c072d2b99c96eddc0b90e83f966092a6ab89853cf873592cd1b4f5ece38bf05116ff3e682d139c76e06642ee77d84121da4ea4617a671598dff824f9bfae006aa47018fd717a97aae7ecfa8bc84ead3577753823bb22b6eb07f0ddca413fc7c895566b35141eea0ec8dd74b4697a48bb45eb3d517614ed9284b54b85d7c4bf", 0xd0}, {0x0}], 0x4}}], 0x2, 0x0) 8.655597706s ago: executing program 0 (id=2950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect$hid(0x4, 0xfffffffffffffd71, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100000000000061f60ee0c8d2ace32d0000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16], 0x54}}, 0x0) unshare(0x6a040000) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) 6.096866847s ago: executing program 5 (id=2951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228", @ANYRES64], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 5.065577314s ago: executing program 5 (id=2953): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 5.053229717s ago: executing program 0 (id=2954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 4.951637634s ago: executing program 2 (id=2955): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe2(&(0x7f0000000000), 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x44e6, 0x2, 0x80000001}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f0000000040), 0x8) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socket$packet(0x11, 0xa, 0x300) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 4.833465957s ago: executing program 0 (id=2956): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'wg0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edecc6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d7d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x7, {0x1, 0x8, 0x0, '\x00', {0x1, 0x1, 0xadc, 0x800, 0xee01, 0x0, 0x6000, '\x00', 0x1, 0x8, 0xb4e7, 0x3, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0x9, 0x7}, {0x84a0, 0x943}, 0x8000, 0x2c0dbbd4, 0x0, 0x61}}}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000180)={'wlan1\x00'}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 4.625500807s ago: executing program 5 (id=2957): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) setgroups(0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x1, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x477}, @call_mgmt={0x3, 0x24, 0x1, 0x1}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = fsmount(r0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x6, 0x25, 0x0, &(0x7f0000695ffc)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x6, 0x14, "a34fc8d334300482a8af065cb8da58756583bafc"}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x1000}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 3.494931087s ago: executing program 0 (id=2958): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0xb1, 0xfb, 0x66, 0x10, 0x91e, 0x3, 0x35bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0xce, 0x1, 0x0, 0x6f, 0xda, 0xd}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x6, 0x0) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 3.4793472s ago: executing program 2 (id=2959): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x20}}, 0xc044880) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4cfcb061bb000305000000000000000400f0ff00", @ANYRES32=0x0, @ANYBLOB="00000000f10000002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="08000a0001000000"], 0x44}}, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) prlimit64(r2, 0x4, &(0x7f0000000440)={0x3, 0x4}, &(0x7f0000000600)) sendmmsg(r5, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e", 0x82}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087", 0x74}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b178", 0xc7}, {0x0}, {&(0x7f00000027c0)="8adc6c3009af743dd27f1cded499661bdc60f67cc239ece6923d5bbd9811b958640d7093238b58b060db6ed31873b1a1eab4927051818ac8c57db8508c3b6f832f1bf2218b9bf581b24f79b1ca2cfb9573c072d2b99c96eddc0b90e83f966092a6ab89853cf873592cd1b4f5ece38bf05116ff3e682d139c76e06642ee77d84121da4ea4617a671598dff824f9bfae006aa47018fd717a97aae7ecfa8bc84ead3577753823bb22b6eb07f0ddca413fc7c895566b35141eea0ec8dd74b4697a48bb45eb3d517614ed9284b54b85d7c4bf", 0xd0}, {0x0}], 0x4}}], 0x2, 0x0) 3.41166014s ago: executing program 3 (id=2960): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "c2e2af60d5f8cb20dcb4d25011f14e4292be1d9b98e3de07fe425c567a84726ec61aab6d04c5dedb5497873bbd2f06af57094268286e501e7502dfa771031e36bf19ebce48074a816c217c9dd16cf3b501a3527a7aa8ef9900f86722a165529abfbe686580aec656c9a9a9ac821a1c58021611d3de985933b27e23062466dd933748de2fb10c19667896997764306041cad161e73a53072f3b8d5d2c7d6ff59f6cbdb38ff3ffa31405c86bd4212b3259cb68320c3a75"}}, &(0x7f0000000200)={0x0, 0xf, 0xac, {0x5, 0xf, 0xac, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x3, 0x8, 0xa6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0xb, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x17, 0x4, 0x1, 0x320, 0x5}, @generic={0x82, 0x10, 0xb, "273c4ea3657c67a0cd85f2adfc4c6b53f480a204fc240d69cea33bf4de455656ec61d59384084421017887efe13fc684210799b862c8f00aff89bd412c6a7a5e3a2a9717264686306f6615bae1f91e48c558547f98beb98c84ccdff31e9f2b4c67328af5a0b4930255f22d9433c80f5234fe6b62952e5959f4aaa9c94969f0"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x6d, 0xf00f, 0x7}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0xd1, 0x3, "317355d9", "b58b6388"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x2, 0x10, 0x40, 0x8, 0x5}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x0, 0x32, 0xa, "8bf23a4782635ce5c358"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x0, 0x80, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x10}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x9f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "bd4e"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xd3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "74ad"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.251496887s ago: executing program 2 (id=2961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc00000019000100000000040000400000000080ffc974d50be20900000000000008000000000000000005000000000000000000000000000000002000000000d0b353d257803ba89c53606ab455e0bc3a467a134e038cb9990d1a7aa8d958f4b9209673bee8aeb83b70f4716851ab265a0852dd68c473a4d5f3b75aa3905de6b8f597a9e1e0629b365f6ea82b100c0d97b4925a0a8a0e632182195acb39e6867afd116a8ffe98beb91f0b88eae787c6a623cd76e042a3ad8fb51cb7fa324c4350881d98c5ec84a430c56db76ee20e795e01e012839f13b84855800f8cb66bbc188e87b202f3a503fe2a066913fc54c452ed44ae4d5eeaa7372814e03b7afb5d178db9dd0630989214861022d699082493d9e1993e0acae047cbc0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000400000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00"/90], 0xfc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x5, 0x1}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000000b010800000000002300000a000000090001005d21963a000000000800024000000000"], 0x28}}, 0x800) iopl(0x3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c000280"], 0x24}}, 0x0) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0xb00, &(0x7f0000000340), 0x10) 1.382146317s ago: executing program 2 (id=2962): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228", @ANYRES64], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 566.303114ms ago: executing program 0 (id=2963): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r1}, 0x18) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f00000042c0)=""/4100, 0x1004}], 0x1, 0x8, 0x8d3a) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f000035e000/0x4000)=nil, 0x4000, 0x5, 0x20153, r6, 0x4ee46000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) (async) syz_open_pts(0xffffffffffffffff, 0x0) (async) r8 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa8a008100000086dd60f53a040001"], 0x0) munlock(&(0x7f0000cf4000/0x3000)=nil, 0x3000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000cf6000/0x3000)=nil, &(0x7f0000cf5000/0x1000)=nil, 0x3000, 0x2}) 528.750171ms ago: executing program 2 (id=2964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="2da3", 0x2}], 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="021200"], 0xa0) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 283.78135ms ago: executing program 2 (id=2965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000000002058041150000000000001090224000100000000090400000503000000092100000001029403090581030000000000ad0b95180ebc68e434df248e5d33ca30e4718efc941985157d4aed0c0dc7addc0025f10b20de8414297e490418092c938debd3d068446eb31944a97371d436fba548c16974c5168a4d7832df0fe599eec5ba7b86c72edae27b0f40c0ec7c827dc4e9b17893c68ad529cff54a5bd4f14637835009682a8044813b57e0bddeff99f85038c91db8c4d9292fe7f3f82bbad913421135d550b0c0f761fb3612141d"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x5, 0x1, {0x22, 0x2ad}}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120127060303cac3fd8ccd739d5007eed15e7737391e44eae60000748d4f938a3804962ee68b0d6bd1134b27a12a49247164c14c2453235468987a31ffa5d59c8aa8c35ffab56a46163f4bbef2e36e14f056ae9123d6ca7fd78253babcfdabd4148945b6c799fc631598df1d7acd33dc3466551aa0891b3e215a499dc6756f8df7a4c5e6339e0c3638d5b36f2f84ad56df2fe2c9622c5e614dd8cc1bf1e2b67953809e42ab0e32ac83fa4da0cef96bdf83bc2aa653ec9598fbe16eb286941104721d088a3d88c353b3b07917a3e77c6d45df6fe4395d05b16cd3e5cce996a37b8ed99f54b7a3ae123c16c99862c8490fce57ff"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0xf}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000100000099"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455cb, 0x1) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x24, &(0x7f0000000240)=@string={0x24, 0x3, "f5157206cca5fa4fa1f5251e6e1ee0e9aea575246a53aeb48c0ab1ce7ca0a7fe6142"}}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x10012, r3, 0x4000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x20}}, 0x44850) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 237.104115ms ago: executing program 5 (id=2966): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8242, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="200e655ae05aeed5a811e370365df7235dcd642a4726aaa1fd7c23ed33ede7e920bd726af11a746712b2c0860e254277fe14c14df7378cf8178e9ef0fa823a7d9b3ccbac8f0b6a918b3bbaf48da1e7101f0ed2d10155cfa5f74fa202d2cb635c9b4e1b71e049fc4e82d32cbbb494f25df7ab0fa82ee1f2992899166a2fb608e7ee9ff0a14f95758f5b398c330d9998ece00ea444eead56e3cd74b1a6d49851e60a32322629294893082bf19a54a1154bc05fdb6ffc232a70b8bc215e815a63922e2a8a6a627555fb45bfac24341df86f5bafc87a273045d564b2d2999bc3943c3826a10040f8b2b06d37a8c52e6bf96ee02760e439", 0xf5}], 0x1, 0x9, 0x9) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x4003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x2, {0x0, 0xf0, 0x3}, 0x1}, 0x18) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@canfd={0xd, {{0x2, 0x1, 0x0, 0x1}, 0xf, 0x2, 0x0, 0x0, "83361170f6fe5f4980b02b5fea035f5360890f11332d19cf8e8199ebcc985d6469211b1f95d62beda4e8508761ce1f169bb7f30ed71d2ee229f54ba68a86218e"}}}}, 0x0) 219.913631ms ago: executing program 3 (id=2967): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe2(&(0x7f0000000000), 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r4, 0x44e6, 0x2, 0x80000001}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socket$packet(0x11, 0xa, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 198.340711ms ago: executing program 4 (id=2936): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x1066, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r1, 0xcea) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xfb, 0x97, 0x1, 0x9, 0x2, 0x6, 0x0, 0x305, 0x40, 0xc2, 0x9, 0xde74, 0x38, 0x1, 0x3, 0xfff, 0xb0}, [{0x70000002, 0x6, 0x40, 0x8, 0xe0, 0xe, 0x2, 0x9}], "fadbd41399d394c6d6cf77d7427b66ea6563a4"}, 0x8b) 0s ago: executing program 5 (id=2968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000040)=0x54) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000040)=0x54) (async) kernel console output (not intermixed with test programs): wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.207207][T13516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.252660][ T838] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1043.605104][T13516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.625172][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.700682][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.761201][ T838] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1043.786007][ T838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.086727][ T838] usb 4-1: Product: syz [ 1044.119417][ T838] usb 4-1: Manufacturer: syz [ 1044.148326][ T838] usb 4-1: SerialNumber: syz [ 1044.261347][ T838] usb 4-1: config 0 descriptor?? [ 1044.342105][T14859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.494969][T14859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.551337][T14844] program syz.3.2440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.838049][T14847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 1046.083537][T14876] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2445'. [ 1046.756417][ T838] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1046.784153][ T838] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 1047.464665][ T838] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 1047.494526][ T838] usb 4-1: USB disconnect, device number 85 [ 1047.614518][T14899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2449'. [ 1047.704395][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2450'. [ 1047.793498][T14899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2449'. [ 1047.862752][T14908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.128866][T14903] : entered promiscuous mode [ 1048.454305][T14908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.793430][T14917] syz.4.2453: attempt to access beyond end of device [ 1048.793430][T14917] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1048.806933][T14917] syz.4.2453: attempt to access beyond end of device [ 1048.806933][T14917] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1048.819911][T14917] Mount JFS Failure: -5 [ 1049.616640][T14928] FAULT_INJECTION: forcing a failure. [ 1049.616640][T14928] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.667755][T14928] CPU: 1 UID: 0 PID: 14928 Comm: syz.4.2456 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1049.667779][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1049.667788][T14928] Call Trace: [ 1049.667793][T14928] [ 1049.667800][T14928] dump_stack_lvl+0x241/0x360 [ 1049.667821][T14928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.667835][T14928] ? __pfx__printk+0x10/0x10 [ 1049.667859][T14928] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1049.667875][T14928] ? __pfx___might_resched+0x10/0x10 [ 1049.667897][T14928] should_fail_ex+0x40a/0x550 [ 1049.667923][T14928] should_failslab+0xac/0x100 [ 1049.667950][T14928] __kmalloc_node_noprof+0xe1/0x4d0 [ 1049.667964][T14928] ? __kvmalloc_node_noprof+0x72/0x190 [ 1049.667985][T14928] __kvmalloc_node_noprof+0x72/0x190 [ 1049.668004][T14928] seq_read_iter+0x20c/0xd70 [ 1049.668038][T14928] seq_read+0x3a9/0x4f0 [ 1049.668060][T14928] ? __pfx_seq_read+0x10/0x10 [ 1049.668080][T14928] ? __mutex_trylock_common+0x183/0x2e0 [ 1049.668110][T14928] ? __pfx_seq_read+0x10/0x10 [ 1049.668127][T14928] proc_reg_read+0x201/0x2f0 [ 1049.668144][T14928] ? __pfx_proc_reg_read+0x10/0x10 [ 1049.668163][T14928] vfs_read+0x1f8/0xb40 [ 1049.668183][T14928] ? fdget_pos+0x254/0x320 [ 1049.668200][T14928] ? __pfx___mutex_lock+0x10/0x10 [ 1049.668223][T14928] ? __pfx_vfs_read+0x10/0x10 [ 1049.668243][T14928] ? __fget_files+0x2a/0x410 [ 1049.668259][T14928] ? __fget_files+0x395/0x410 [ 1049.668274][T14928] ? __fget_files+0x2a/0x410 [ 1049.668295][T14928] ksys_read+0x18f/0x2b0 [ 1049.668322][T14928] ? __pfx_ksys_read+0x10/0x10 [ 1049.668370][T14928] ? do_syscall_64+0x100/0x230 [ 1049.668396][T14928] ? do_syscall_64+0xb6/0x230 [ 1049.668421][T14928] do_syscall_64+0xf3/0x230 [ 1049.668443][T14928] ? clear_bhb_loop+0x35/0x90 [ 1049.668468][T14928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.668488][T14928] RIP: 0033:0x7fdf11d8d169 [ 1049.668503][T14928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.668519][T14928] RSP: 002b:00007fdf12c89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1049.668542][T14928] RAX: ffffffffffffffda RBX: 00007fdf11fa6080 RCX: 00007fdf11d8d169 [ 1049.668556][T14928] RDX: 0000000000002020 RSI: 000040000000b040 RDI: 0000000000000005 [ 1049.668569][T14928] RBP: 00007fdf12c89090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.668582][T14928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.668595][T14928] R13: 0000000000000000 R14: 00007fdf11fa6080 R15: 00007ffd29f5f4e8 [ 1049.668628][T14928] [ 1049.953383][ T5923] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1050.094723][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.124624][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 1050.131410][ T5923] usb 4-1: config index 0 descriptor too short (expected 1068, got 27) [ 1050.139883][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1050.151775][ T5923] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 1050.161092][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.170067][ T5923] usb 4-1: Product: syz [ 1050.174410][ T5923] usb 4-1: Manufacturer: syz [ 1050.179226][ T5923] usb 4-1: SerialNumber: syz [ 1050.186378][ T5923] usb 4-1: config 0 descriptor?? [ 1050.204555][ T5918] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1050.880160][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1050.883794][T14920] tipc: Started in network mode [ 1050.886985][ T5918] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1050.891661][T14920] tipc: Node identity , cluster identity 4711 [ 1050.891680][T14920] tipc: Failed to set node id, please configure manually [ 1050.891717][T14920] tipc: Enabling of bearer rejected, failed to enable media [ 1050.900893][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.988378][T14939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.033499][T14939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.042718][ T5918] usb 1-1: config 0 descriptor?? [ 1051.056071][ T5918] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1051.063169][ T838] usb 4-1: USB disconnect, device number 86 [ 1051.206902][T14941] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2460'. [ 1051.663948][ T5918] gspca_sn9c2028: read1 error -110 [ 1051.669723][ T5918] gspca_sn9c2028: read1 error -32 [ 1051.679375][ T5918] gspca_sn9c2028: read1 error -32 [ 1051.712238][ T5918] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1052.395432][ T5923] usb 1-1: USB disconnect, device number 91 [ 1053.663744][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2464'. [ 1054.032986][T14974] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1054.433020][T14974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1054.899814][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'. [ 1057.378876][T15022] netlink: 'syz.3.2478': attribute type 10 has an invalid length. [ 1057.387037][ T5903] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1057.425667][T15022] netlink: 'syz.3.2478': attribute type 10 has an invalid length. [ 1057.453671][T15022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2478'. [ 1057.577978][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1057.595669][ T5903] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1057.649990][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.672893][ T5903] usb 6-1: config 0 descriptor?? [ 1057.683021][T15036] program syz.0.2482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1057.700167][ T5903] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1058.259542][ T5903] gspca_sn9c2028: read1 error -110 [ 1058.536068][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1058.634073][ T5903] gspca_sn9c2028: read1 error -32 [ 1058.935569][ T5903] gspca_sn9c2028: read1 error -32 [ 1058.941623][ T5903] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1059.038241][ T5923] usb 6-1: USB disconnect, device number 2 [ 1059.337336][T15059] wlan0 speed is unknown, defaulting to 1000 [ 1059.497012][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 1060.207171][ T5923] IPVS: starting estimator thread 0... [ 1060.416674][T15071] IPVS: using max 20 ests per chain, 48000 per kthread [ 1063.991438][T10575] Bluetooth: hci2: unexpected event 0x32 length: 8 < 9 [ 1064.213203][ T5903] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1064.330721][T15105] netlink: 'syz.2.2499': attribute type 29 has an invalid length. [ 1064.387099][ T5903] usb 1-1: device descriptor read/64, error -71 [ 1064.425000][T15105] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1064.540220][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2497'. [ 1064.621846][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.636748][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.715579][ T5903] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1064.865167][ T5903] usb 1-1: device descriptor read/64, error -71 [ 1064.983027][ T5903] usb usb1-port1: attempt power cycle [ 1065.352229][ T5903] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1065.417197][ T5903] usb 1-1: device descriptor read/8, error -71 [ 1065.692209][ T5903] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1065.757178][ T5903] usb 1-1: device descriptor read/8, error -71 [ 1065.902371][ T5903] usb usb1-port1: unable to enumerate USB device [ 1067.148343][T15149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.232778][T15147] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2509' resets device [ 1067.234921][T15149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.054789][T15160] tracefs: Unknown parameter 'hash' [ 1068.724179][ T53] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1068.916832][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 1069.055429][ T53] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1069.089081][ T53] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1069.108986][ T53] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1069.127152][ T53] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1069.137404][ T53] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1069.156656][ T53] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1069.171344][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.227715][ T53] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 1069.597903][T15180] misc userio: Can't change port type on an already running userio instance [ 1069.899949][ T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1070.118800][T15191] tracefs: Unknown parameter 'hash' [ 1070.741977][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1070.758753][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.776854][ T53] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1070.808367][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.828588][ T53] usb 6-1: config 0 descriptor?? [ 1070.887604][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.953352][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.274000][T15196] tracefs: Unknown parameter 'hash' [ 1071.760329][ T53] sony 0003:054C:0268.0012: unbalanced collection at end of report description [ 1071.777878][ T53] sony 0003:054C:0268.0012: parse failed [ 1071.784600][ T53] sony 0003:054C:0268.0012: probe with driver sony failed with error -22 [ 1073.060152][ T5903] usb 4-1: USB disconnect, device number 87 [ 1073.316601][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2519'. [ 1073.812644][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'. [ 1074.483824][ T5918] usb 6-1: USB disconnect, device number 3 [ 1074.643903][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.680875][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.710455][ T5903] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1074.920723][ T5903] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1075.044778][T15249] wlan0 speed is unknown, defaulting to 1000 [ 1075.173496][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1075.212548][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1075.290356][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1075.368507][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1075.399730][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1075.426103][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1075.459604][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1075.476390][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1075.524813][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1075.546860][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1075.587863][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1075.624075][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1075.657647][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1075.685974][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1076.080179][ T5903] usb 1-1: config 174 has an invalid descriptor of length 28, skipping remainder of the config [ 1076.091204][ T5903] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 9 [ 1076.126783][ T5903] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1076.359594][T15278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.426676][ T5903] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1076.735338][ T5903] usb 1-1: Product: syz [ 1076.746157][ T5903] usb 1-1: Manufacturer: syz [ 1076.773087][ T5903] usb 1-1: SerialNumber: syz [ 1077.179368][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.190299][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.199065][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.226440][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.237953][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.248618][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.345281][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.524527][T15296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.534093][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.388124][ T5903] usb 1-1: USB disconnect, device number 96 [ 1079.826025][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'. [ 1080.365552][ T30] audit: type=1326 audit(1741693589.478:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1080.439922][ T30] audit: type=1326 audit(1741693589.478:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1080.492914][ T30] audit: type=1326 audit(1741693589.506:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1080.612839][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1080.676681][ T30] audit: type=1326 audit(1741693589.506:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1080.946837][ T30] audit: type=1326 audit(1741693589.506:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1081.122647][ T30] audit: type=1326 audit(1741693589.544:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1081.315480][ T30] audit: type=1326 audit(1741693589.544:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1081.392208][ T30] audit: type=1326 audit(1741693589.544:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1081.482352][ T30] audit: type=1326 audit(1741693589.544:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1081.555962][ T30] audit: type=1326 audit(1741693589.628:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15318 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2cf8d169 code=0x7ffc0000 [ 1081.578310][ T5923] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1081.754097][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 1081.774609][ T5923] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 1081.797524][ T5923] usb 4-1: config 8 has no interface number 0 [ 1081.803665][ T5923] usb 4-1: config 8 interface 206 has no altsetting 0 [ 1081.836093][ T5923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1081.860416][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.882030][ T5923] usb 4-1: Product: syz [ 1081.889218][ T5923] usb 4-1: Manufacturer: syz [ 1081.900018][ T5923] usb 4-1: SerialNumber: syz [ 1082.458183][T15355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.466905][T15355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.486541][T15337] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1082.589043][ T5923] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 1082.614545][ T5923] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1082.637732][ T5923] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1082.673671][ T5923] usb 4-1: USB disconnect, device number 88 [ 1082.694237][ T5923] garmin_gps 4-1:8.206: device disconnected [ 1082.981417][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2541'. [ 1083.178950][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2541'. [ 1083.193351][T15375] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1083.436008][T15380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.341085][T15389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.349854][T15389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.435298][T15384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.646745][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2546'. [ 1085.766138][ T5874] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1086.084391][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1086.479264][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1086.518682][ T5874] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 1086.575077][ T5874] usb 6-1: config index 0 descriptor too short (expected 58596, got 27) [ 1086.616189][ T5874] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 1086.641611][ T5874] usb 6-1: can't read configurations, error -22 [ 1087.034895][ T5874] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1087.195555][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1088.051647][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1088.061945][ T5874] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 1088.072490][ T5874] usb 6-1: config index 0 descriptor too short (expected 58596, got 27) [ 1088.080905][ T5874] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 1088.094159][ T5874] usb 6-1: can't read configurations, error -22 [ 1088.100947][ T5874] usb usb6-port1: attempt power cycle [ 1088.541901][ T5874] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1088.581957][T15448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.170391][ T5874] usb 6-1: device descriptor read/8, error -71 [ 1089.588793][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2558'. [ 1091.376324][ T5874] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1091.395836][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1091.674320][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 1091.742945][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1091.753551][ T5918] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1091.767603][ T5874] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1091.781037][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1091.796089][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.807952][ T5918] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1091.909869][ T5874] usb 4-1: config 0 descriptor?? [ 1091.966044][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.028696][ T5874] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1092.052446][ T5918] usb 6-1: config 0 descriptor?? [ 1092.425275][ T5918] usb 6-1: string descriptor 0 read error: -71 [ 1092.486070][T15496] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2568'. [ 1092.615400][ T5874] gspca_sn9c2028: read1 error -110 [ 1092.636419][ T5874] gspca_sn9c2028: read1 error -32 [ 1092.663019][ T5874] gspca_sn9c2028: read1 error -32 [ 1092.745554][ T5918] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1092.843219][ T5874] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1092.918847][ T5918] usb 6-1: USB disconnect, device number 8 [ 1093.247885][ T5874] usb 4-1: USB disconnect, device number 89 [ 1093.325607][T15501] erspan0: entered promiscuous mode [ 1093.403084][T15501] erspan0: left promiscuous mode [ 1094.545934][ T5874] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1095.276659][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1095.341597][ T5874] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 1095.350431][ T5874] usb 6-1: can't read configurations, error -22 [ 1095.515335][ T5874] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1095.599467][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1095.668178][T15529] netfs: Couldn't get user pages (rc=-14) [ 1095.721417][T15533] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 1095.733848][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1095.742547][T15533] syz_tun: entered promiscuous mode [ 1095.758458][ T5874] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 1095.784638][ T5874] usb 6-1: can't read configurations, error -22 [ 1095.803249][ T5874] usb usb6-port1: attempt power cycle [ 1095.804446][T15533] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1096.212214][T15538] netlink: 'syz.3.2582': attribute type 1 has an invalid length. [ 1096.291078][T15538] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2582'. [ 1096.426834][ T5874] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1096.874069][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1096.883835][ T5874] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 1096.893012][ T5874] usb 6-1: can't read configurations, error -22 [ 1097.028090][T15548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.044615][ T5874] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1097.050860][T15548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.089546][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 1097.532027][ T5874] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1097.558667][ T5874] usb 6-1: can't read configurations, error -71 [ 1097.574667][ T5874] usb usb6-port1: unable to enumerate USB device [ 1098.884184][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2590'. [ 1099.097242][ T5874] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1099.338143][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1099.447541][ T5874] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1099.456815][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.469457][ T5874] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1099.505224][ T5874] usb 4-1: config 1 has no interface number 1 [ 1099.528052][ T5874] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1099.558839][ T5874] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1099.637775][ T5874] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.647085][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.664237][ T5874] usb 4-1: Product: syz [ 1099.673496][ T5874] usb 4-1: Manufacturer: syz [ 1099.684194][ T5874] usb 4-1: SerialNumber: syz [ 1100.118241][ T26] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1100.194576][T15581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2594'. [ 1100.342861][T15567] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1100.394738][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.493814][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.613696][ T26] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1100.715810][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.900832][ T26] usb 6-1: config 0 descriptor?? [ 1101.189424][T15586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.487160][T15585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.510422][ T5874] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1101.523734][T15585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.626363][ T5874] usb 4-1: MIDIStreaming interface descriptor not found [ 1101.698489][ T26] hid-led 0003:0FC5:B080.0013: probe with driver hid-led failed with error -71 [ 1101.795756][ T26] usb 6-1: USB disconnect, device number 13 [ 1101.949956][ T5874] usb 4-1: USB disconnect, device number 90 [ 1102.000486][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 1102.053790][ T5923] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1102.566274][ T5923] usb 1-1: device descriptor read/64, error -71 [ 1102.612681][T13881] udevd[13881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.706373][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1103.103781][T15597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.145530][T15597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.228805][ T5923] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1103.378526][ T5923] usb 1-1: device descriptor read/64, error -71 [ 1103.496992][ T5923] usb usb1-port1: attempt power cycle [ 1103.571242][T11887] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1103.754664][T11887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1103.761950][T11887] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1103.777177][T11887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.789111][T11887] usb 6-1: config 0 descriptor?? [ 1103.800522][T11887] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1104.070532][T15621] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1104.120852][ T5923] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1104.164940][ T5923] usb 1-1: device descriptor read/8, error -71 [ 1104.326994][T15625] overlayfs: missing 'lowerdir' [ 1104.335500][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1104.335571][ T30] audit: type=1800 audit(1741693611.856:204): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2606" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1104.433193][T15626] fuse: Invalid rootmode [ 1104.500358][T11887] gspca_sn9c2028: read1 error -110 [ 1104.566580][ T5923] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1104.685085][T11887] gspca_sn9c2028: read1 error -32 [ 1104.992773][T11887] gspca_sn9c2028: read1 error -32 [ 1104.998293][T11887] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1105.232295][ T5923] usb 1-1: device descriptor read/8, error -71 [ 1105.388518][ T5923] usb usb1-port1: unable to enumerate USB device [ 1106.010601][T15638] xt_connbytes: Forcing CT accounting to be enabled [ 1106.018363][T15638] --map-set only usable from mangle table [ 1106.566987][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2611'. [ 1107.732196][T15650] netlink: 'syz.3.2610': attribute type 29 has an invalid length. [ 1107.750457][T15645] netlink: 'syz.3.2610': attribute type 29 has an invalid length. [ 1107.910123][ T5923] usb 6-1: USB disconnect, device number 14 [ 1107.938962][T15651] 9pnet_virtio: no channels available for device ./cgroup [ 1108.051541][T15645] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2610'. [ 1108.128817][T15645] unsupported nla_type 58 [ 1108.151793][T15654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.180758][T15654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.228740][T15664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.238179][T15662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2618'. [ 1109.273368][T15664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.711996][T15670] misc userio: Can't change port type on an already running userio instance [ 1110.899707][T15670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.595863][T15670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.897876][ T5874] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1112.101793][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2625'. [ 1112.111589][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 1112.178273][T15692] 9pnet_fd: Insufficient options for proto=fd [ 1112.316948][ T5874] usb 4-1: config 9 has an invalid interface number: 50 but max is 3 [ 1112.549812][ T5874] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1112.559074][ T5874] usb 4-1: config 9 has an invalid interface number: 142 but max is 3 [ 1112.577621][ T5874] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1112.610907][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2624'. [ 1112.624738][ T5874] usb 4-1: config 9 has an invalid interface number: 179 but max is 3 [ 1112.646101][ T5874] usb 4-1: config 9 has an invalid interface number: 51 but max is 3 [ 1112.750904][ T5874] usb 4-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 1112.804402][ T5874] usb 4-1: config 9 has no interface number 0 [ 1112.819127][ T5874] usb 4-1: config 9 has no interface number 1 [ 1112.835969][ T5874] usb 4-1: config 9 has no interface number 2 [ 1112.866630][ T5874] usb 4-1: config 9 has no interface number 4 [ 1112.887881][ T5874] usb 4-1: config 9 interface 50 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1112.956057][ T5874] usb 4-1: config 9 interface 50 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1112.982321][ T5874] usb 4-1: config 9 interface 50 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1113.026137][ T5874] usb 4-1: config 9 interface 50 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1113.261480][ T5874] usb 4-1: config 9 interface 50 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1113.294904][ T5874] usb 4-1: config 9 interface 50 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1113.317184][ T5874] usb 4-1: config 9 interface 50 altsetting 0 endpoint 0xB has invalid maxpacket 1088, setting to 1024 [ 1113.383957][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1113.402756][ T5874] usb 4-1: config 9 interface 50 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1113.684516][ T5874] usb 4-1: config 9 interface 50 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 1113.737076][ T5874] usb 4-1: too many endpoints for config 9 interface 142 altsetting 5: 155, using maximum allowed: 30 [ 1113.769852][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1113.805682][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1113.824871][ T5874] usb 4-1: config 9 interface 142 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1113.845466][ T10] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1113.869683][ T5874] usb 4-1: config 9 interface 142 altsetting 5 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1113.913897][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1113.921902][ T5874] usb 4-1: config 9 interface 142 altsetting 5 endpoint 0x81 has invalid maxpacket 61595, setting to 1024 [ 1113.934353][ T10] usb 6-1: can't read configurations, error -61 [ 1114.121163][ T5874] usb 4-1: config 9 interface 142 altsetting 5 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1114.806163][ T5874] usb 4-1: config 9 interface 142 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 1114.839814][ T5874] usb 4-1: config 9 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1114.925952][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1114.940061][ T5874] usb 4-1: config 9 interface 142 altsetting 5 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1114.951743][ T5874] usb 4-1: config 9 interface 142 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 155 [ 1114.976281][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 1115.019365][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0x8, skipping [ 1115.032496][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 1115.067707][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0x9, skipping [ 1115.118191][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 1115.133593][T15729] veth0_to_bond: entered promiscuous mode [ 1115.134341][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1115.165476][T15728] veth0_to_bond: left promiscuous mode [ 1115.167741][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 1115.190347][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1115.209136][ T10] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1115.232815][ T5874] usb 4-1: config 9 interface 3 altsetting 250 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1115.275854][ T5874] usb 4-1: config 9 interface 3 altsetting 250 endpoint 0x6 has an invalid bInterval 238, changing to 11 [ 1115.287466][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1115.295117][ T10] usb 6-1: can't read configurations, error -61 [ 1115.319233][ T10] usb usb6-port1: attempt power cycle [ 1115.339790][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0x4, skipping [ 1115.381438][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0xA, skipping [ 1115.426940][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0xA, skipping [ 1115.468299][ T5874] usb 4-1: config 9 interface 3 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 1115.517156][ T5874] usb 4-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1115.542653][ T5874] usb 4-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1115.593217][ T5874] usb 4-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1115.636063][ T5874] usb 4-1: config 9 interface 179 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1115.679426][ T5874] usb 4-1: config 9 interface 179 altsetting 0 has an endpoint descriptor with address 0x2D, changing to 0xD [ 1115.706713][ T5874] usb 4-1: config 9 interface 179 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1115.722402][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1115.754774][ T5874] usb 4-1: config 9 interface 179 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1115.781087][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.794162][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1115.802744][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1115.821603][ T5874] usb 4-1: config 9 interface 142 has no altsetting 0 [ 1115.828643][ T10] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1115.845448][ T5874] usb 4-1: config 9 interface 3 has no altsetting 0 [ 1115.854193][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1115.861813][ T10] usb 6-1: can't read configurations, error -61 [ 1115.874165][ T5874] usb 4-1: config 9 interface 51 has no altsetting 0 [ 1115.891266][ T5874] usb 4-1: string descriptor 0 read error: -71 [ 1115.899769][ T5874] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=95.49 [ 1116.085243][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1116.109012][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.126931][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1116.135370][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1116.148422][ T5874] usb 4-1: can't set config #9, error -71 [ 1116.154329][ T10] usb 6-1: too many configurations: 159, using maximum allowed: 8 [ 1116.205147][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'. [ 1116.235952][T15756] 9pnet_fd: Insufficient options for proto=fd [ 1116.548987][ T5874] usb 4-1: USB disconnect, device number 91 [ 1116.593218][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1116.605228][ T10] usb 6-1: can't read configurations, error -71 [ 1116.615747][ T10] usb usb6-port1: unable to enumerate USB device [ 1116.974693][T15763] bridge0: entered promiscuous mode [ 1117.207716][T15758] bridge0: left promiscuous mode [ 1117.263873][ T5874] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1117.296109][T15764] misc userio: Can't change port type on an already running userio instance [ 1117.333285][T15764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.342187][T15764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.561124][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1117.627266][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1118.164678][ T5874] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1118.450675][ T5874] usb 4-1: device descriptor read/64, error -71 [ 1118.616384][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1118.623223][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1118.635902][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.657268][ T10] usb 6-1: config 0 descriptor?? [ 1118.669327][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1118.739455][ T5874] usb usb4-port1: attempt power cycle [ 1119.220184][ T10] gspca_sn9c2028: read1 error -110 [ 1119.287092][ T5923] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1119.360572][ T10] gspca_sn9c2028: read1 error -32 [ 1119.408917][ T10] gspca_sn9c2028: read1 error -32 [ 1119.456701][ T10] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1119.542059][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1119.564695][ T5923] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1119.749408][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.769545][ T5923] usb 1-1: config 0 descriptor?? [ 1119.780330][ T5874] usb 6-1: USB disconnect, device number 19 [ 1121.380699][T15802] netlink: 'syz.3.2650': attribute type 29 has an invalid length. [ 1121.389517][T15802] netlink: 'syz.3.2650': attribute type 29 has an invalid length. [ 1121.398153][T15802] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2650'. [ 1121.925712][ T5923] video4linux radio48: keene_cmd_set failed (-110) [ 1122.063408][ T5923] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1123.568121][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 1124.276503][ T5874] usb 1-1: USB disconnect, device number 101 [ 1125.773936][T15824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.826158][T15824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.144886][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 1127.531115][T15840] misc userio: Can't change port type on an already running userio instance [ 1127.554055][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.613896][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.659416][T15842] netlink: 'syz.0.2662': attribute type 29 has an invalid length. [ 1127.773495][T15842] netlink: 'syz.0.2662': attribute type 29 has an invalid length. [ 1127.815355][T15842] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2662'. [ 1128.042730][T15778] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1128.737704][T15778] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1128.785782][T15778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.828339][T15778] usb 4-1: Product: syz [ 1128.850631][T15778] usb 4-1: Manufacturer: syz [ 1128.868773][T15778] usb 4-1: SerialNumber: syz [ 1129.437883][T15778] usb 4-1: config 0 descriptor?? [ 1129.461038][T15778] hub 4-1:0.0: bad descriptor, ignoring hub [ 1129.483863][T15778] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1129.536952][T15778] f81232 4-1:0.0: f81534a converter detected [ 1129.892612][T15778] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1129.929614][T15778] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1129.997653][T15778] usb 4-1: USB disconnect, device number 95 [ 1130.073812][T15778] f81232 4-1:0.0: device disconnected [ 1131.259532][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2670'. [ 1131.491734][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1132.153959][T11887] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1132.217351][ T10] usb 1-1: no configurations [ 1132.225162][ T10] usb 1-1: can't read configurations, error -22 [ 1132.357210][T11887] usb 6-1: Using ep0 maxpacket: 8 [ 1132.370941][T11887] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1132.383932][T11887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.399828][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1132.419130][T11887] usb 6-1: config 0 descriptor?? [ 1132.571594][ T10] usb 1-1: no configurations [ 1132.580929][ T10] usb 1-1: can't read configurations, error -22 [ 1132.608504][ T10] usb usb1-port1: attempt power cycle [ 1132.987756][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1133.031880][ T10] usb 1-1: no configurations [ 1133.036540][ T10] usb 1-1: can't read configurations, error -22 [ 1133.140557][T15798] Set syz1 is full, maxelem 65536 reached [ 1133.222671][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1133.267192][ T10] usb 1-1: no configurations [ 1133.272298][ T10] usb 1-1: can't read configurations, error -22 [ 1133.298289][ T10] usb usb1-port1: unable to enumerate USB device [ 1133.336907][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.397046][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.106075][T11887] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1134.125091][T11887] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1134.152967][T11887] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1134.172767][T11887] usb 6-1: USB disconnect, device number 20 [ 1134.330771][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.341555][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.413666][T15905] misc userio: Can't change port type on an already running userio instance [ 1134.515108][T15911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1134.554102][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2682'. [ 1134.676770][ T838] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1135.318321][T15925] pimreg: entered allmulticast mode [ 1135.651217][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1135.662340][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.672386][ T838] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1135.683111][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.697831][ T838] usb 4-1: config 0 descriptor?? [ 1136.314444][ T838] sony 0003:054C:0268.0014: unbalanced collection at end of report description [ 1136.463880][ T838] sony 0003:054C:0268.0014: parse failed [ 1136.505896][ T838] sony 0003:054C:0268.0014: probe with driver sony failed with error -22 [ 1136.747332][T15941] wlan0 speed is unknown, defaulting to 1000 [ 1136.938361][T11887] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1136.991961][T15949] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2694'. [ 1137.114652][T11887] usb 6-1: no configurations [ 1137.119289][T11887] usb 6-1: can't read configurations, error -22 [ 1137.262189][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 1137.275793][T11887] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1137.281710][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 1137.525850][T11887] usb 6-1: no configurations [ 1137.555380][T11887] usb 6-1: can't read configurations, error -22 [ 1137.644635][T11887] usb usb6-port1: attempt power cycle [ 1137.941173][T15956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.941526][T15603] usb 4-1: USB disconnect, device number 96 [ 1137.954545][T15956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.014616][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1138.033339][T15956] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1138.250804][T11887] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1138.291395][T11887] usb 6-1: no configurations [ 1138.296295][T11887] usb 6-1: can't read configurations, error -22 [ 1138.403801][T15966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2698'. [ 1138.422329][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.432109][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.155522][T11887] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1139.184441][T15971] FAULT_INJECTION: forcing a failure. [ 1139.184441][T15971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.198201][T10575] Bluetooth: hci4: command 0x0c1a tx timeout [ 1139.199702][T11887] usb 6-1: no configurations [ 1139.209512][T15971] CPU: 1 UID: 0 PID: 15971 Comm: syz.2.2702 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1139.209547][T15971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1139.209561][T15971] Call Trace: [ 1139.209569][T15971] [ 1139.209579][T15971] dump_stack_lvl+0x241/0x360 [ 1139.209609][T15971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1139.209630][T15971] ? __pfx__printk+0x10/0x10 [ 1139.209664][T15971] ? __pfx_lock_release+0x10/0x10 [ 1139.209702][T15971] should_fail_ex+0x40a/0x550 [ 1139.209739][T15971] _copy_from_user+0x2d/0xb0 [ 1139.209767][T15971] __sys_bpf+0x1be/0x820 [ 1139.209796][T15971] ? __pfx___sys_bpf+0x10/0x10 [ 1139.209836][T15971] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1139.209869][T15971] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1139.209900][T15971] ? do_syscall_64+0x100/0x230 [ 1139.209937][T15971] __x64_sys_bpf+0x7c/0x90 [ 1139.209962][T15971] do_syscall_64+0xf3/0x230 [ 1139.209993][T15971] ? clear_bhb_loop+0x35/0x90 [ 1139.210025][T15971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.210053][T15971] RIP: 0033:0x7f0e5ff8d169 [ 1139.210073][T15971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.210091][T15971] RSP: 002b:00007f0e60d73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1139.210113][T15971] RAX: ffffffffffffffda RBX: 00007f0e601a5fa0 RCX: 00007f0e5ff8d169 [ 1139.210129][T15971] RDX: 0000000000000050 RSI: 0000400000000300 RDI: 0000000000000000 [ 1139.210143][T15971] RBP: 00007f0e60d73090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.210155][T15971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.210168][T15971] R13: 0000000000000000 R14: 00007f0e601a5fa0 R15: 00007ffd2b9ff898 [ 1139.210198][T15971] [ 1139.217379][T11887] usb 6-1: can't read configurations, error -22 [ 1139.413599][T11887] usb usb6-port1: unable to enumerate USB device [ 1139.477830][T15603] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1139.797986][T15603] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1139.807417][T15603] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1139.829808][T15603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.987986][T15603] usb 4-1: config 0 descriptor?? [ 1139.992142][T15975] wlan0 speed is unknown, defaulting to 1000 [ 1140.178314][T15603] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1140.611523][ T838] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 1140.900944][T15603] gspca_sn9c2028: read1 error -110 [ 1141.026526][T15603] gspca_sn9c2028: read1 error -32 [ 1141.041961][T15603] gspca_sn9c2028: read1 error -32 [ 1141.069088][T15603] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1141.116318][T15603] usb 4-1: USB disconnect, device number 97 [ 1141.135213][ T838] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1141.222930][ T838] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1141.365946][ T838] usb 6-1: string descriptor 0 read error: -22 [ 1141.389522][ T838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.432250][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.455915][T15998] misc userio: Can't change port type on an already running userio instance [ 1141.487237][T15998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.495911][T15998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.515032][ T838] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1142.568724][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1142.579527][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1142.587846][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1142.595533][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1142.603150][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1142.610473][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1142.746776][T16010] wlan0 speed is unknown, defaulting to 1000 [ 1142.858084][T16014] FAULT_INJECTION: forcing a failure. [ 1142.858084][T16014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.871674][T16014] CPU: 0 UID: 0 PID: 16014 Comm: syz.0.2712 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1142.871703][T16014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1142.871717][T16014] Call Trace: [ 1142.871725][T16014] [ 1142.871735][T16014] dump_stack_lvl+0x241/0x360 [ 1142.871765][T16014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1142.871788][T16014] ? __pfx__printk+0x10/0x10 [ 1142.871834][T16014] should_fail_ex+0x40a/0x550 [ 1142.871872][T16014] _copy_to_user+0x31/0xb0 [ 1142.871905][T16014] simple_read_from_buffer+0xca/0x150 [ 1142.871943][T16014] proc_fail_nth_read+0x1e9/0x250 [ 1142.871970][T16014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.871996][T16014] ? rw_verify_area+0x243/0x630 [ 1142.872024][T16014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.872049][T16014] vfs_read+0x1f8/0xb40 [ 1142.872078][T16014] ? fdget_pos+0x254/0x320 [ 1142.872104][T16014] ? __pfx___mutex_lock+0x10/0x10 [ 1142.872137][T16014] ? __pfx_vfs_read+0x10/0x10 [ 1142.872168][T16014] ? __rcu_read_unlock+0xa1/0x110 [ 1142.872196][T16014] ? __fget_files+0x2a/0x410 [ 1142.872221][T16014] ? __fget_files+0x395/0x410 [ 1142.872243][T16014] ? __fget_files+0x2a/0x410 [ 1142.872276][T16014] ksys_read+0x18f/0x2b0 [ 1142.872307][T16014] ? __pfx_ksys_read+0x10/0x10 [ 1142.872349][T16014] do_syscall_64+0xf3/0x230 [ 1142.872381][T16014] ? clear_bhb_loop+0x35/0x90 [ 1142.872417][T16014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.872446][T16014] RIP: 0033:0x7fbcb038bb7c [ 1142.872465][T16014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1142.872484][T16014] RSP: 002b:00007fbcb119f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.872507][T16014] RAX: ffffffffffffffda RBX: 00007fbcb05a6080 RCX: 00007fbcb038bb7c [ 1142.872533][T16014] RDX: 000000000000000f RSI: 00007fbcb119f0a0 RDI: 0000000000000005 [ 1142.872547][T16014] RBP: 00007fbcb119f090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.872561][T16014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.872574][T16014] R13: 0000000000000000 R14: 00007fbcb05a6080 R15: 00007ffc2a37d5b8 [ 1142.872606][T16014] [ 1143.133025][T11887] usb 3-1: USB disconnect, device number 4 [ 1143.477093][T15778] usb 6-1: USB disconnect, device number 25 [ 1144.247897][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.498992][ T838] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1144.568248][T15778] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1144.723581][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.783255][ T838] usb 1-1: Using ep0 maxpacket: 16 [ 1144.793523][T15778] usb 6-1: no configurations [ 1144.833468][ T5839] Bluetooth: hci5: command tx timeout [ 1144.840659][T15778] usb 6-1: can't read configurations, error -22 [ 1144.973057][ T838] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1144.984354][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.006464][ T838] usb 1-1: Product: syz [ 1145.013379][ T838] usb 1-1: Manufacturer: syz [ 1145.018019][ T838] usb 1-1: SerialNumber: syz [ 1145.030215][ T838] usb 1-1: config 0 descriptor?? [ 1145.057993][ T838] as10x_usb: device has been detected [ 1145.064289][ T838] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1145.078610][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.109423][T15778] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1145.181661][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.200475][ T838] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1145.263105][T16010] chnl_net:caif_netlink_parms(): no params data found [ 1145.289963][ T838] as10x_usb: error during firmware upload part1 [ 1145.302034][T15778] usb 6-1: no configurations [ 1145.306691][T15778] usb 6-1: can't read configurations, error -22 [ 1145.323756][ T838] Registered device Sky IT Digital Key (green led) [ 1145.336061][T15778] usb usb6-port1: attempt power cycle [ 1145.410951][T16036] netlink: 'syz.4.2717': attribute type 4 has an invalid length. [ 1145.483294][T16041] netlink: 'syz.4.2717': attribute type 4 has an invalid length. [ 1145.796421][T15778] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1145.870500][T15778] usb 6-1: no configurations [ 1145.883013][T15778] usb 6-1: can't read configurations, error -22 [ 1145.896497][T16010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.916021][T16010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.941901][T16010] bridge_slave_0: entered allmulticast mode [ 1145.990247][T16010] bridge_slave_0: entered promiscuous mode [ 1146.036866][T16010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.049199][T16010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.062328][T16010] bridge_slave_1: entered allmulticast mode [ 1146.062691][T15778] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1146.069797][T16010] bridge_slave_1: entered promiscuous mode [ 1146.117128][T15778] usb 6-1: no configurations [ 1146.132662][T15778] usb 6-1: can't read configurations, error -22 [ 1146.158322][T15778] usb usb6-port1: unable to enumerate USB device [ 1146.228803][T16010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.488347][T15778] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1146.631265][ T65] bond0 (unregistering): Released all slaves [ 1146.643940][ T30] audit: type=1326 audit(1741693651.494:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf11d8d169 code=0x7fc00000 [ 1146.644664][T16010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.677626][T15778] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1146.684985][T15778] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1146.694368][T15778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.705928][T15778] usb 4-1: config 0 descriptor?? [ 1146.717173][T15778] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1146.756210][ T65] : left promiscuous mode [ 1146.784407][T16010] team0: Port device team_slave_0 added [ 1146.808218][T16010] team0: Port device team_slave_1 added [ 1146.896813][ T65] tipc: Left network mode [ 1146.907696][T16010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.932173][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.958098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.055592][ T5839] Bluetooth: hci5: command tx timeout [ 1147.091044][T16010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.130158][T16010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.246297][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.529413][ T5874] usb 1-1: USB disconnect, device number 106 [ 1147.546123][T15778] gspca_sn9c2028: read1 error -110 [ 1147.576752][T15778] gspca_sn9c2028: read1 error -32 [ 1147.621303][T16010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.631064][T15778] gspca_sn9c2028: read1 error -32 [ 1147.638184][ T5874] Unregistered device Sky IT Digital Key (green led) [ 1147.642030][ T5874] as10x_usb: device has been disconnected [ 1147.662510][T15778] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1147.799433][T15778] usb 4-1: USB disconnect, device number 98 [ 1148.368640][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2722'. [ 1148.933103][T16010] hsr_slave_0: entered promiscuous mode [ 1148.951344][T16010] hsr_slave_1: entered promiscuous mode [ 1148.990842][T16010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.037244][T16010] Cannot create hsr debugfs directory [ 1149.280417][ T5839] Bluetooth: hci5: command tx timeout [ 1150.016345][T15778] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 1150.036576][T16084] misc userio: Can't change port type on an already running userio instance [ 1150.336487][T11887] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1150.454545][ T65] hsr_slave_0: left promiscuous mode [ 1150.458084][T15778] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1150.470670][T15778] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1150.488166][T15778] usb 4-1: string descriptor 0 read error: -22 [ 1150.490951][ T65] hsr_slave_1: left promiscuous mode [ 1150.494457][T15778] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.509063][T15778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.532173][T15778] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1151.370749][T11887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1151.407624][T11887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.437741][T11887] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1151.448156][ T65] veth1_macvtap: left promiscuous mode [ 1151.453739][ T65] veth0_macvtap: left promiscuous mode [ 1151.501637][ T5839] Bluetooth: hci5: command tx timeout [ 1151.570105][T11887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.578405][ T65] veth1_vlan: left promiscuous mode [ 1151.583756][ T65] veth0_vlan: left promiscuous mode [ 1151.591516][T11887] usb 6-1: config 0 descriptor?? [ 1151.795942][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2728'. [ 1152.270873][ T5923] usb 4-1: USB disconnect, device number 99 [ 1152.410649][T11887] sony 0003:054C:0268.0015: unbalanced collection at end of report description [ 1152.470989][T11887] sony 0003:054C:0268.0015: parse failed [ 1152.495637][T11887] sony 0003:054C:0268.0015: probe with driver sony failed with error -22 [ 1152.965524][ T5903] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1153.156647][ T5903] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1153.169814][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.181902][ T5903] usb 4-1: Product: syz [ 1153.186122][ T5903] usb 4-1: Manufacturer: syz [ 1153.201578][ T5903] usb 4-1: SerialNumber: syz [ 1153.208380][ T5903] usb 4-1: config 0 descriptor?? [ 1153.222043][ T5903] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 100 [ 1153.291777][T16123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.305471][T16123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.564775][T16128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.577245][T16128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.683528][ T5903] (null): failure reading functionality [ 1153.887536][ T5876] usb 6-1: USB disconnect, device number 30 [ 1153.984735][ T5903] i2c i2c-1: connected i2c-tiny-usb device [ 1154.421670][ T5876] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1154.614317][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.640372][ T5876] usb 6-1: config 0 has no interfaces? [ 1154.665005][ T5876] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1154.685322][ T5903] usb 4-1: USB disconnect, device number 100 [ 1154.711713][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.752888][ T5876] usb 6-1: config 0 descriptor?? [ 1155.756454][T11887] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1155.960787][T11887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1155.990293][T11887] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1156.002417][T16010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1156.013730][T11887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.047573][T11887] usb 4-1: config 0 descriptor?? [ 1156.058279][T16010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1156.073422][T11887] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1156.084570][T16010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1156.108081][T16010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1156.792656][T11887] gspca_sn9c2028: read1 error -110 [ 1156.916042][T11887] gspca_sn9c2028: read1 error -32 [ 1156.931991][T11887] gspca_sn9c2028: read1 error -32 [ 1156.956168][T11887] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1157.022493][T16010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.056696][T11887] usb 4-1: USB disconnect, device number 101 [ 1157.346967][T16010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.474099][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.481307][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.500797][ T5874] usb 6-1: USB disconnect, device number 31 [ 1157.733859][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.740988][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.999293][T16178] netlink: 'syz.4.2737': attribute type 4 has an invalid length. [ 1158.155198][T16010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1158.170371][T16010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.318593][T16186] smk_cipso_doi:690 cipso add rc = -17 [ 1158.325637][T16186] smk_cipso_doi:677 remove rc = -2 [ 1158.330819][T16186] smk_cipso_doi:690 cipso add rc = -17 [ 1158.433331][ T5874] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 1158.489453][T16194] misc userio: Can't change port type on an already running userio instance [ 1158.707810][ T5874] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1158.816503][T16200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.875021][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1158.961969][ T5903] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1159.148003][T16010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.166565][ T5874] usb 6-1: string descriptor 0 read error: -22 [ 1159.172864][ T5874] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.222685][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.275131][ T5874] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1159.301723][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1159.330953][T16010] veth0_vlan: entered promiscuous mode [ 1159.344851][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.372152][ T5903] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1159.391867][T16010] veth1_vlan: entered promiscuous mode [ 1159.398577][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.445823][ T5903] usb 1-1: config 0 descriptor?? [ 1159.498546][T16010] veth0_macvtap: entered promiscuous mode [ 1159.503504][T11887] usb 6-1: USB disconnect, device number 32 [ 1159.510237][T16010] veth1_macvtap: entered promiscuous mode [ 1159.541495][T16211] x_tables: duplicate underflow at hook 1 [ 1159.806293][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.839210][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.849289][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.904856][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.041945][T16216] netlink: 'syz.4.2744': attribute type 17 has an invalid length. [ 1160.207233][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.292105][ T5903] sony 0003:054C:0268.0016: unbalanced collection at end of report description [ 1160.539779][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.550547][ T5903] sony 0003:054C:0268.0016: parse failed [ 1160.566238][ T5903] sony 0003:054C:0268.0016: probe with driver sony failed with error -22 [ 1160.598295][T16010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.636805][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.686975][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.750109][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.810705][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.843975][T16010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.879524][T16010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.910082][T16010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.189198][T16010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.202032][T16010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.216199][T16010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.261431][T16010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.331342][T16236] SET target dimension over the limit! [ 1162.034082][T15778] usb 1-1: USB disconnect, device number 107 [ 1162.069566][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.136087][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.161706][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.191850][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.306455][T16271] wlan0 speed is unknown, defaulting to 1000 [ 1164.428177][T16279] wlan0 speed is unknown, defaulting to 1000 [ 1165.072260][T16298] netlink: zone id is out of range [ 1165.094923][T16298] netlink: zone id is out of range [ 1165.108920][T16298] netlink: zone id is out of range [ 1165.156683][T16298] netlink: zone id is out of range [ 1165.161946][T16298] netlink: zone id is out of range [ 1165.167410][T16298] netlink: zone id is out of range [ 1165.172637][T16298] netlink: zone id is out of range [ 1165.199003][T16298] netlink: zone id is out of range [ 1165.233059][T16298] netlink: zone id is out of range [ 1165.260777][T16298] netlink: zone id is out of range [ 1165.305000][T16306] misc userio: Can't change port type on an already running userio instance [ 1165.963694][ T26] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1166.153458][T16317] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1166.318493][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1166.338974][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.167612][ T26] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1167.178838][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.210167][ T26] usb 1-1: config 0 descriptor?? [ 1167.696949][ T26] sony 0003:054C:0268.0017: unbalanced collection at end of report description [ 1167.727805][ T26] sony 0003:054C:0268.0017: parse failed [ 1167.734617][ T26] sony 0003:054C:0268.0017: probe with driver sony failed with error -22 [ 1168.048851][ T5876] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1168.380303][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 1168.492311][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.544407][ T5876] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1168.614208][ T5876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1168.667281][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.742667][ T5876] usb 3-1: Product: syz [ 1168.811034][ T5876] usb 3-1: Manufacturer: syz [ 1168.888803][ T5876] usb 3-1: SerialNumber: syz [ 1169.232329][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2768'. [ 1171.532202][T15778] usb 1-1: USB disconnect, device number 108 [ 1171.762346][ T5876] usb 3-1: 0:2 : does not exist [ 1171.786745][ T5876] usb 3-1: cannot find UAC_HEADER [ 1171.823170][ T5876] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1171.867221][ T5876] usb 3-1: USB disconnect, device number 5 [ 1173.064948][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2771'. [ 1173.281880][T16373] wlan0 speed is unknown, defaulting to 1000 [ 1173.755564][T15593] udevd[15593]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1175.159368][ T5923] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1175.331032][T16414] program syz.4.2783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1175.383874][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.415956][ T5923] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.466880][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1175.491018][ T5923] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1175.522673][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1175.533461][ T5923] usb 3-1: Product: syz [ 1175.537693][ T5923] usb 3-1: Manufacturer: syz [ 1175.550214][ T5923] usb 3-1: SerialNumber: syz [ 1175.651050][T16420] random: crng reseeded on system resumption [ 1176.558909][ T5923] usb 3-1: config 0 descriptor?? [ 1176.582023][ T5923] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1176.664577][T16418] program syz.4.2784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1176.862890][T16424] FAULT_INJECTION: forcing a failure. [ 1176.862890][T16424] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.876029][ T5923] usb 3-1: USB disconnect, device number 6 [ 1176.882768][T15593] udevd[15593]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.945420][T16424] CPU: 1 UID: 0 PID: 16424 Comm: syz.2.2782 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1176.945450][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1176.945463][T16424] Call Trace: [ 1176.945471][T16424] [ 1176.945481][T16424] dump_stack_lvl+0x241/0x360 [ 1176.945510][T16424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1176.945526][T16424] ? __pfx__printk+0x10/0x10 [ 1176.945551][T16424] ? __kmalloc_cache_noprof+0x48/0x390 [ 1176.945568][T16424] ? __pfx___might_resched+0x10/0x10 [ 1176.945586][T16424] ? __mutex_unlock_slowpath+0x227/0x800 [ 1176.945613][T16424] should_fail_ex+0x40a/0x550 [ 1176.945639][T16424] should_failslab+0xac/0x100 [ 1176.945665][T16424] __kmalloc_cache_noprof+0x70/0x390 [ 1176.945680][T16424] ? kobject_uevent_env+0x28b/0x8e0 [ 1176.945695][T16424] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1176.945717][T16424] ? __pfx_dev_uevent_name+0x10/0x10 [ 1176.945738][T16424] kobject_uevent_env+0x28b/0x8e0 [ 1176.945760][T16424] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1176.945781][T16424] device_release_driver_internal+0x4a9/0x7c0 [ 1176.945805][T16424] driver_detach+0x1fb/0x2d0 [ 1176.945823][T16424] bus_remove_driver+0x1f3/0x320 [ 1176.945846][T16424] usb_gadget_unregister_driver+0x4e/0x70 [ 1176.945867][T16424] raw_release+0xf6/0x1e0 [ 1176.945882][T16424] ? __pfx_raw_release+0x10/0x10 [ 1176.945899][T16424] __fput+0x3e9/0x9f0 [ 1176.945923][T16424] __x64_sys_close+0x7f/0x110 [ 1176.945941][T16424] do_syscall_64+0xf3/0x230 [ 1176.945964][T16424] ? clear_bhb_loop+0x35/0x90 [ 1176.945988][T16424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.946008][T16424] RIP: 0033:0x7fa4b558bdca [ 1176.946022][T16424] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 1176.946035][T16424] RSP: 002b:00007fa4b33f5ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1176.946052][T16424] RAX: ffffffffffffffda RBX: 00007fa4b57a6080 RCX: 00007fa4b558bdca [ 1176.946064][T16424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1176.946073][T16424] RBP: 00007fa4b33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.946082][T16424] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000001 [ 1176.946091][T16424] R13: 0000000000000000 R14: 00007fa4b57a6080 R15: 00007ffe1f246738 [ 1176.946113][T16424] [ 1177.514941][T16427] net_ratelimit: 24 callbacks suppressed [ 1177.514967][T16427] IPv6: addrconf: prefix option has invalid lifetime [ 1177.533534][T16428] netlink: 'syz.0.2787': attribute type 29 has an invalid length. [ 1177.555106][T16428] netlink: 'syz.0.2787': attribute type 29 has an invalid length. [ 1177.566658][T16427] IPv6: addrconf: prefix option has invalid lifetime [ 1177.612067][T16430] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2787'. [ 1177.901029][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 1178.359821][T16438] delete_channel: no stack [ 1178.499642][T16441] wlan0 speed is unknown, defaulting to 1000 [ 1179.410332][T16453] program syz.0.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.647730][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 1181.423736][T16475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.436705][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.443199][ T5903] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1181.458843][T16475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.470116][T16482] 9pnet_fd: Insufficient options for proto=fd [ 1181.491629][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2801'. [ 1181.591983][ T5874] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1181.630719][ T5903] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 1181.642270][ T5903] usb 4-1: config 0 has no interface number 0 [ 1181.673565][ T5903] usb 4-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 1181.686267][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.721824][ T5903] usb 4-1: Product: syz [ 1181.732316][ T5903] usb 4-1: Manufacturer: syz [ 1181.738574][ T5903] usb 4-1: SerialNumber: syz [ 1181.762912][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 1181.781072][ T5874] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1181.799619][ T5874] usb 3-1: config 0 has no interface number 0 [ 1181.828713][ T5903] usb 4-1: config 0 descriptor?? [ 1181.841904][ T5874] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1181.854757][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.899331][ T5874] usb 3-1: Product: syz [ 1181.908889][ T5874] usb 3-1: Manufacturer: syz [ 1181.916842][ T5874] usb 3-1: SerialNumber: syz [ 1181.930420][ T5874] usb 3-1: config 0 descriptor?? [ 1181.951096][ T5874] smsc95xx v2.0.0 [ 1182.067747][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2799'. [ 1182.109781][ T5903] usb 4-1: USB disconnect, device number 102 [ 1182.124663][T16488] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2804'. [ 1182.812460][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1182.878697][T16496] wlan0 speed is unknown, defaulting to 1000 [ 1183.064569][T16502] program syz.5.2808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1183.247417][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2810'. [ 1183.256491][T16449] netlink: 'syz.2.2794': attribute type 16 has an invalid length. [ 1183.256519][T16449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2794'. [ 1183.333967][ T5874] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1183.384525][ T5874] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1184.420758][ T5874] usb 3-1: USB disconnect, device number 7 [ 1185.203687][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2812'. [ 1185.954636][T16523] ip6t_srh: unknown srh match flags 4000 [ 1186.994771][ T30] audit: type=1326 audit(1741693689.242:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf11d8d169 code=0x7ffc0000 [ 1187.021872][T16530] random: crng reseeded on system resumption [ 1187.056502][ T30] audit: type=1326 audit(1741693689.261:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf11d8d169 code=0x7ffc0000 [ 1187.116056][ T30] audit: type=1326 audit(1741693689.261:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf11d8bad0 code=0x7ffc0000 [ 1187.214580][ T30] audit: type=1326 audit(1741693689.261:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdf11d8e997 code=0x7ffc0000 [ 1187.247222][ T30] audit: type=1326 audit(1741693689.261:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf11d8d169 code=0x7ffc0000 [ 1187.916101][ T5903] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1187.935767][ T30] audit: type=1326 audit(1741693689.261:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdf11d8e997 code=0x7ffc0000 [ 1187.959132][ T30] audit: type=1326 audit(1741693689.261:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf11d8bdca code=0x7ffc0000 [ 1187.992332][ T30] audit: type=1326 audit(1741693689.261:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf11d8d169 code=0x7ffc0000 [ 1188.113840][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1188.128805][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.140709][ T5903] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice= 0.00 [ 1188.150797][ T30] audit: type=1326 audit(1741693689.261:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf11d8d169 code=0x7ffc0000 [ 1188.176384][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.186751][ T30] audit: type=1326 audit(1741693689.261:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16529 comm="syz.4.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdf11d8d169 code=0x7ffc0000 [ 1188.225707][ T5903] usb 6-1: config 0 descriptor?? [ 1188.229053][T16538] program syz.2.2820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1188.252697][ T5903] hub 6-1:0.0: USB hub found [ 1188.340104][T16543] fuse: Bad value for 'fd' [ 1188.410740][T16543] wlan0 speed is unknown, defaulting to 1000 [ 1188.478008][ T5903] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1188.733548][ T838] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1188.823734][ T5903] sierra 6-1:0.0: Sierra USB modem converter detected [ 1189.021073][ T838] usb 4-1: Using ep0 maxpacket: 16 [ 1189.128145][T10575] Bluetooth: hci0: command 0x0406 tx timeout [ 1189.187701][ T838] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 1189.198677][ T5903] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 1189.206632][ T838] usb 4-1: config 8 has no interface number 0 [ 1189.215511][ T838] usb 4-1: config 8 interface 206 has no altsetting 0 [ 1189.242777][ T5903] usb 6-1: USB disconnect, device number 33 [ 1189.278094][ T5903] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1189.298294][ T838] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1189.329170][ T838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.351090][ T5903] sierra 6-1:0.0: device disconnected [ 1189.357740][ T838] usb 4-1: Product: syz [ 1189.362223][ T838] usb 4-1: Manufacturer: syz [ 1189.374391][ T838] usb 4-1: SerialNumber: syz [ 1189.848162][T16536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2818'. [ 1189.858344][T16536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2818'. [ 1191.111762][T16547] SET target dimension over the limit! [ 1191.146088][ T838] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 1191.190343][ T838] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1191.241768][ T838] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1191.296115][T16563] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1191.306984][ T838] usb 4-1: USB disconnect, device number 103 [ 1191.396622][ T838] garmin_gps 4-1:8.206: device disconnected [ 1192.649681][T16576] FAULT_INJECTION: forcing a failure. [ 1192.649681][T16576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.663372][T16576] CPU: 0 UID: 0 PID: 16576 Comm: syz.0.2826 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1192.663402][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1192.663416][T16576] Call Trace: [ 1192.663424][T16576] [ 1192.663433][T16576] dump_stack_lvl+0x241/0x360 [ 1192.663462][T16576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1192.663484][T16576] ? __pfx__printk+0x10/0x10 [ 1192.663519][T16576] ? __pfx_lock_release+0x10/0x10 [ 1192.663560][T16576] should_fail_ex+0x40a/0x550 [ 1192.663597][T16576] _copy_from_user+0x2d/0xb0 [ 1192.663627][T16576] __sys_bpf+0x1be/0x820 [ 1192.663658][T16576] ? __pfx___sys_bpf+0x10/0x10 [ 1192.663708][T16576] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1192.663742][T16576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1192.663774][T16576] ? do_syscall_64+0x100/0x230 [ 1192.663810][T16576] __x64_sys_bpf+0x7c/0x90 [ 1192.663836][T16576] do_syscall_64+0xf3/0x230 [ 1192.663867][T16576] ? clear_bhb_loop+0x35/0x90 [ 1192.663900][T16576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.663928][T16576] RIP: 0033:0x7fbcb038d169 [ 1192.663948][T16576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.663966][T16576] RSP: 002b:00007fbcb119f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1192.663989][T16576] RAX: ffffffffffffffda RBX: 00007fbcb05a6080 RCX: 00007fbcb038d169 [ 1192.664006][T16576] RDX: 0000000000000048 RSI: 00004000000054c0 RDI: 0000000000000005 [ 1192.664020][T16576] RBP: 00007fbcb119f090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.664034][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.664046][T16576] R13: 0000000000000000 R14: 00007fbcb05a6080 R15: 00007ffc2a37d5b8 [ 1192.664076][T16576] [ 1192.842262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1194.770542][T16587] program syz.5.2831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1195.216340][T16592] wlan0 speed is unknown, defaulting to 1000 [ 1195.230991][ T5903] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1195.431785][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.118558][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.172601][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2838'. [ 1196.428490][ T5903] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1196.437602][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.451303][ T5903] usb 1-1: config 0 descriptor?? [ 1197.050689][T16614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2839'. [ 1197.057458][ T5903] aquacomputer_d5next 0003:0C70:F00D.0018: unknown main item tag 0x0 [ 1197.084006][ T5903] aquacomputer_d5next 0003:0C70:F00D.0018: unknown main item tag 0x0 [ 1197.132317][ T5903] aquacomputer_d5next 0003:0C70:F00D.0018: unknown main item tag 0x0 [ 1197.144725][ T5903] aquacomputer_d5next 0003:0C70:F00D.0018: unknown main item tag 0x0 [ 1197.168182][T16614] syz.4.2839: attempt to access beyond end of device [ 1197.168182][T16614] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1197.364018][T16614] XFS (nbd4): SB validate failed with error -5. [ 1197.410111][ T5903] aquacomputer_d5next 0003:0C70:F00D.0018: unknown main item tag 0x0 [ 1198.236741][ T5903] aquacomputer_d5next 0003:0C70:F00D.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 1198.275335][T16611] : entered promiscuous mode [ 1198.483123][ T5903] usb 1-1: USB disconnect, device number 109 [ 1198.704967][T16638] program syz.4.2844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1199.950003][T16651] SET target dimension over the limit! [ 1201.374836][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2849'. [ 1202.756585][ T5918] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1202.813825][T16682] program syz.3.2856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1202.945401][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 1202.956226][ T5918] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1202.964851][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.013139][ T5918] usb 1-1: config 0 has no interface number 0 [ 1203.023894][ T5918] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1203.057279][ T5918] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 256 [ 1203.421729][ T5918] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1203.459620][ T5918] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1203.474623][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.491839][ T5918] usb 1-1: Product: syz [ 1203.519063][ T5918] usb 1-1: Manufacturer: syz [ 1203.528593][ T5918] usb 1-1: SerialNumber: syz [ 1203.557731][ T5918] usb 1-1: config 0 descriptor?? [ 1203.586098][T16671] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1204.197337][ T5839] Bluetooth: hci4: adv larger than maximum supported [ 1204.197403][ T5839] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1204.524507][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2862'. [ 1205.919443][T16707] fuse: Unknown parameter 'group_i00000000000000000000' [ 1206.044853][ T5918] usb 1-1: NFC: intf ffff88802721e000 id ffffffff8f5132c0 [ 1206.079205][ T5918] usb 1-1: USB disconnect, device number 110 [ 1206.496729][T16721] netfs: Couldn't get user pages (rc=-14) [ 1206.557968][T16727] openvswitch: netlink: Multiple metadata blocks provided [ 1206.562869][T16728] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 1206.743020][T16728] syz_tun: entered promiscuous mode [ 1207.538939][T16728] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1207.691838][T16702] SET target dimension over the limit! [ 1207.799142][T16733] wlan0 speed is unknown, defaulting to 1000 [ 1207.838094][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2873'. [ 1208.603762][ T838] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1209.519418][ T5918] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1209.626910][ T838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.684413][ T838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1210.008167][ T838] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1210.143484][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1210.152544][ T838] usb 4-1: SerialNumber: syz [ 1210.159559][ T5918] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 1210.168428][ T5918] usb 6-1: config 160 has no interface number 0 [ 1210.186546][ T5918] usb 6-1: config 160 interface 200 has no altsetting 0 [ 1210.215484][ T5918] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1210.224998][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.246568][ T5918] usb 6-1: Product: syz [ 1210.262735][ T5918] usb 6-1: Manufacturer: syz [ 1210.278816][ T5918] usb 6-1: SerialNumber: syz [ 1210.351011][T16776] netfs: Couldn't get user pages (rc=-14) [ 1210.406472][T16776] netlink: 'syz.4.2885': attribute type 10 has an invalid length. [ 1210.425844][ T838] usb 4-1: 0:2 : does not exist [ 1210.430810][ T838] usb 4-1: unit 5: unexpected type 0x0b [ 1210.437197][T16776] syz_tun: entered promiscuous mode [ 1210.466900][T16776] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1210.478072][ T838] usb 4-1: USB disconnect, device number 104 [ 1210.555797][ T5918] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1210.565875][ T5918] usb 6-1: MIDIStreaming interface descriptor not found [ 1210.602355][ T5918] usb 6-1: USB disconnect, device number 34 [ 1210.739472][T16777] udevd[16777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1210.893263][T16713] udevd[16713]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.484504][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1213.054718][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.073911][ T5918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1213.151693][T16802] FAULT_INJECTION: forcing a failure. [ 1213.151693][T16802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.419473][T16798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1214.065220][ T5918] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1214.090154][T16802] CPU: 0 UID: 0 PID: 16802 Comm: syz.3.2892 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1214.090185][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1214.090199][T16802] Call Trace: [ 1214.090207][T16802] [ 1214.090217][T16802] dump_stack_lvl+0x241/0x360 [ 1214.090247][T16802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1214.090270][T16802] ? __pfx__printk+0x10/0x10 [ 1214.090309][T16802] ? snprintf+0xda/0x120 [ 1214.090337][T16802] should_fail_ex+0x40a/0x550 [ 1214.090374][T16802] _copy_to_user+0x31/0xb0 [ 1214.090406][T16802] simple_read_from_buffer+0xca/0x150 [ 1214.090444][T16802] proc_fail_nth_read+0x1e9/0x250 [ 1214.090470][T16802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1214.090497][T16802] ? rw_verify_area+0x243/0x630 [ 1214.090524][T16802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1214.090548][T16802] vfs_read+0x1f8/0xb40 [ 1214.090577][T16802] ? fdget_pos+0x254/0x320 [ 1214.090601][T16802] ? __pfx___mutex_lock+0x10/0x10 [ 1214.090634][T16802] ? __pfx_vfs_read+0x10/0x10 [ 1214.090658][T16802] ? do_sys_openat2+0x17a/0x1d0 [ 1214.090685][T16802] ? __fget_files+0x2a/0x410 [ 1214.090717][T16802] ? __fget_files+0x395/0x410 [ 1214.090738][T16802] ? __fget_files+0x2a/0x410 [ 1214.090771][T16802] ksys_read+0x18f/0x2b0 [ 1214.090801][T16802] ? __pfx_ksys_read+0x10/0x10 [ 1214.090830][T16802] ? do_syscall_64+0x100/0x230 [ 1214.090866][T16802] ? do_syscall_64+0xb6/0x230 [ 1214.090901][T16802] do_syscall_64+0xf3/0x230 [ 1214.090933][T16802] ? clear_bhb_loop+0x35/0x90 [ 1214.090968][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.090997][T16802] RIP: 0033:0x7f7e6898bb7c [ 1214.091017][T16802] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1214.091035][T16802] RSP: 002b:00007f7e6985f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1214.091058][T16802] RAX: ffffffffffffffda RBX: 00007f7e68ba6160 RCX: 00007f7e6898bb7c [ 1214.091074][T16802] RDX: 000000000000000f RSI: 00007f7e6985f0a0 RDI: 0000000000000008 [ 1214.091088][T16802] RBP: 00007f7e6985f090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.091101][T16802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.091114][T16802] R13: 0000000000000000 R14: 00007f7e68ba6160 R15: 00007ffd7ca24f58 [ 1214.091146][T16802] [ 1214.319419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1214.348877][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.361918][ T5918] usb 3-1: config 0 descriptor?? [ 1214.421278][T16809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.463485][T16809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.795062][ T838] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1215.164563][T16816] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1216.843567][T15778] usb 3-1: USB disconnect, device number 8 [ 1218.396170][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1219.569504][T16794] delete_channel: no stack [ 1221.184898][ T5876] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1221.385737][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2906'. [ 1221.399168][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 1221.533857][ T5876] usb 3-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2 [ 1221.606165][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.653741][ T5876] usb 3-1: Product: syz [ 1221.722018][ T5876] usb 3-1: Manufacturer: syz [ 1221.776408][ T5876] usb 3-1: SerialNumber: syz [ 1221.844029][ T5876] usb 3-1: config 0 descriptor?? [ 1221.974487][ T5876] xr_serial 3-1:0.0: invalid descriptor buffer length [ 1223.498237][ T838] usb 3-1: USB disconnect, device number 9 [ 1223.804927][ T5876] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1223.844191][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.858725][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.549435][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.573371][ T5876] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1224.582537][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.655836][ T5876] usb 4-1: config 0 descriptor?? [ 1224.689891][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 1225.993126][T16887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.022662][T16887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.029926][T16882] wlan0 speed is unknown, defaulting to 1000 [ 1226.155359][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1226.167203][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 1226.202760][T16889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=603979776 (9663676416 ns) > initial count (36700928 ns). Using initial count to start timer. [ 1226.241959][T16889] 9pnet_fd: Insufficient options for proto=fd [ 1226.320111][ T5876] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1226.717891][ T5876] pwc: recv_control_msg error -71 req 04 val 1000 [ 1226.798109][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2919'. [ 1226.838847][ T5876] pwc: recv_control_msg error -71 req 04 val 1300 [ 1227.013884][ T5876] pwc: recv_control_msg error -71 req 04 val 1400 [ 1227.113883][ T5876] pwc: recv_control_msg error -71 req 02 val 2000 [ 1227.194075][ T5876] pwc: recv_control_msg error -71 req 02 val 2100 [ 1227.256031][ T5876] pwc: recv_control_msg error -71 req 04 val 1500 [ 1227.263373][ T5876] pwc: recv_control_msg error -71 req 02 val 2500 [ 1227.276586][ T5876] pwc: recv_control_msg error -71 req 02 val 2400 [ 1227.285240][ T5876] pwc: recv_control_msg error -71 req 02 val 2600 [ 1227.293852][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 1227.302287][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 1227.309234][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 1227.333295][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 1227.341587][ T5876] pwc: Registered as video103. [ 1227.348760][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 1227.370798][ T5876] usb 4-1: USB disconnect, device number 105 [ 1231.145579][T16923] SET target dimension over the limit! [ 1231.853446][T11887] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1232.067236][T11887] usb 1-1: Using ep0 maxpacket: 16 [ 1232.074505][T11887] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 1232.101834][T11887] usb 1-1: config 8 has no interface number 0 [ 1232.138517][T11887] usb 1-1: config 8 interface 206 has no altsetting 0 [ 1232.152093][ T26] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1232.166335][T11887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1232.176200][T11887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.185564][T11887] usb 1-1: Product: syz [ 1232.190044][T11887] usb 1-1: Manufacturer: syz [ 1232.195430][T11887] usb 1-1: SerialNumber: syz [ 1232.314817][ T26] usb 6-1: config 54 has an invalid interface number: 154 but max is 0 [ 1232.323645][ T26] usb 6-1: config 54 has an invalid descriptor of length 225, skipping remainder of the config [ 1232.339705][ T26] usb 6-1: config 54 has no interface number 0 [ 1232.349558][ T26] usb 6-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1232.367239][ T26] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1232.387604][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.396649][ T26] usb 6-1: Product: syz [ 1232.401209][ T26] usb 6-1: Manufacturer: syz [ 1232.406794][ T26] usb 6-1: SerialNumber: syz [ 1232.471039][T11887] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 1232.613725][T11887] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1233.151163][ T26] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1233.165249][T11887] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1233.180028][T13504] usb 6-1: Failed to submit usb control message: -71 [ 1233.187382][T13504] usb 6-1: unable to send the bmi data to the device: -71 [ 1233.244578][ T26] usb 6-1: USB disconnect, device number 35 [ 1233.250705][T13504] usb 6-1: unable to get target info from device [ 1233.254114][T11887] usb 1-1: USB disconnect, device number 112 [ 1233.281568][T11887] garmin_gps 1-1:8.206: device disconnected [ 1233.289042][T13504] usb 6-1: could not get target info (-71) [ 1233.327301][T13504] usb 6-1: could not probe fw (-71) [ 1233.510427][ T5918] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1233.573486][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2931'. [ 1233.858452][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.910124][ T5918] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1234.977268][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.168720][ T5918] usb 3-1: config 0 descriptor?? [ 1235.189530][ T5918] pwc: Askey VC010 type 2 USB webcam detected. [ 1235.975454][ T5918] pwc: recv_control_msg error -32 req 02 val 2700 [ 1236.000053][ T5918] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1236.079139][ T5918] pwc: recv_control_msg error -71 req 04 val 1000 [ 1236.088843][ T5918] pwc: recv_control_msg error -71 req 04 val 1300 [ 1236.095654][ T5918] pwc: recv_control_msg error -71 req 04 val 1400 [ 1236.118972][ T5918] pwc: recv_control_msg error -71 req 02 val 2000 [ 1236.125811][ T5918] pwc: recv_control_msg error -71 req 02 val 2100 [ 1236.140903][ T5918] pwc: recv_control_msg error -71 req 04 val 1500 [ 1236.150524][ T5918] pwc: recv_control_msg error -71 req 02 val 2500 [ 1236.181578][ T5918] pwc: recv_control_msg error -71 req 02 val 2400 [ 1236.192181][ T5918] pwc: recv_control_msg error -71 req 02 val 2600 [ 1236.203622][ T5918] pwc: recv_control_msg error -71 req 02 val 2900 [ 1236.214569][ T5918] pwc: recv_control_msg error -71 req 02 val 2800 [ 1236.231516][ T5918] pwc: recv_control_msg error -71 req 04 val 1100 [ 1236.251728][ T5918] pwc: recv_control_msg error -71 req 04 val 1200 [ 1236.321566][ T5918] pwc: Registered as video103. [ 1236.594965][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 1236.637370][ T5918] usb 3-1: USB disconnect, device number 10 [ 1236.933899][ T5876] usb 5-1: USB disconnect, device number 76 [ 1237.120559][T16977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1237.402111][T16975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1237.674144][T11727] bond0: (slave syz_tun): Releasing backup interface [ 1237.710633][ T26] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 1237.835628][T16986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2941'. [ 1237.911589][ T26] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1237.961297][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1238.036164][ T26] usb 1-1: string descriptor 0 read error: -22 [ 1238.096565][T10575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1238.515328][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.531729][T10575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1238.540349][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.550717][T10575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1238.569854][T10575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.577589][T10575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1238.584946][T10575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.641048][T16990] SET target dimension over the limit! [ 1239.075423][ T26] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1239.130221][T16987] wlan0 speed is unknown, defaulting to 1000 [ 1239.339196][T16987] chnl_net:caif_netlink_parms(): no params data found [ 1240.287334][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1240.444254][T16987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.453560][T16987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.464788][T16987] bridge_slave_0: entered allmulticast mode [ 1240.472637][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 1240.491034][ T26] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 1240.516879][ T26] usb 3-1: config 8 has no interface number 0 [ 1240.533015][T16987] bridge_slave_0: entered promiscuous mode [ 1240.539532][ T26] usb 3-1: config 8 interface 206 has no altsetting 0 [ 1240.562785][T16987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.573008][ T26] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1240.582938][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.591795][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.599569][ T26] usb 3-1: Product: syz [ 1240.601580][ T838] usb 1-1: USB disconnect, device number 113 [ 1240.604184][T16987] bridge_slave_1: entered allmulticast mode [ 1240.616758][ T26] usb 3-1: Manufacturer: syz [ 1240.637361][ T26] usb 3-1: SerialNumber: syz [ 1240.647844][T16987] bridge_slave_1: entered promiscuous mode [ 1240.810735][ T5839] Bluetooth: hci1: command tx timeout [ 1241.001187][T16987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.015060][ T26] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 1241.023236][ T26] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1241.029685][T16987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.039741][T15778] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1241.228840][T15778] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.330999][T15778] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1241.456887][T16987] team0: Port device team_slave_0 added [ 1241.465620][T15778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.619939][T15778] usb 6-1: config 0 descriptor?? [ 1241.750372][T16987] team0: Port device team_slave_1 added [ 1241.770014][T15778] pwc: Askey VC010 type 2 USB webcam detected. [ 1241.864435][T16987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.876060][ T26] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1241.894323][ T26] usb 3-1: USB disconnect, device number 11 [ 1241.908129][ T26] garmin_gps 3-1:8.206: device disconnected [ 1241.920851][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.020632][T16987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.069340][T16987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.254403][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.281649][T16987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.347542][T16987] hsr_slave_0: entered promiscuous mode [ 1242.354420][T16987] hsr_slave_1: entered promiscuous mode [ 1242.360989][T16987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.368637][T16987] Cannot create hsr debugfs directory [ 1242.469075][T15778] pwc: recv_control_msg error -32 req 02 val 2700 [ 1242.489254][T15778] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1242.518333][T15778] pwc: recv_control_msg error -71 req 04 val 1000 [ 1242.543165][T15778] pwc: recv_control_msg error -71 req 04 val 1300 [ 1242.605737][T15778] pwc: recv_control_msg error -71 req 04 val 1400 [ 1243.029383][ T5839] Bluetooth: hci1: command tx timeout [ 1243.622515][T15778] pwc: recv_control_msg error -71 req 02 val 2000 [ 1243.646799][T15778] pwc: recv_control_msg error -71 req 02 val 2100 [ 1243.672432][T15778] pwc: recv_control_msg error -71 req 04 val 1500 [ 1243.862719][T15778] pwc: recv_control_msg error -71 req 02 val 2500 [ 1243.892550][T17027] wlan0 speed is unknown, defaulting to 1000 [ 1243.993613][T15778] pwc: recv_control_msg error -71 req 02 val 2400 [ 1243.994765][T15778] pwc: recv_control_msg error -71 req 02 val 2600 [ 1244.004216][T15778] pwc: recv_control_msg error -71 req 02 val 2900 [ 1244.005664][T15778] pwc: recv_control_msg error -71 req 02 val 2800 [ 1244.010821][T15778] pwc: recv_control_msg error -71 req 04 val 1100 [ 1244.011892][T15778] pwc: recv_control_msg error -71 req 04 val 1200 [ 1244.079337][T15778] pwc: Registered as video103. [ 1244.148539][T15778] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 1244.362993][T15778] usb 6-1: USB disconnect, device number 36 [ 1244.717630][T16987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.761495][T17035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.867555][T16987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.893448][T17033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.004327][T16987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.133837][T16987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.225185][ T5839] Bluetooth: hci1: command tx timeout [ 1245.724565][T16987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1245.836346][T16987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1245.880488][T16987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1245.911712][T17048] xt_TCPMSS: Only works on TCP SYN packets [ 1245.923065][T16987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1247.109077][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.188357][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.229265][T16987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.265478][T16987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1247.276421][T16987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1247.287171][ T838] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1247.308352][T13524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.315611][T13524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.325486][T13524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.332678][T13524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.438059][T15778] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1247.448522][ T5839] Bluetooth: hci1: command tx timeout [ 1247.461926][ T838] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1247.476781][ T838] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1247.493264][ T5903] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1248.337628][ T838] usb 6-1: string descriptor 0 read error: -22 [ 1248.337913][T16987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.343911][ T838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1248.372853][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.410500][T15778] usb 1-1: Using ep0 maxpacket: 16 [ 1248.442853][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.469469][ T838] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1248.478273][T15778] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 1248.497219][ T5903] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1248.524461][T15778] usb 1-1: config 8 has no interface number 0 [ 1248.609243][T15778] usb 1-1: config 8 interface 206 has no altsetting 0 [ 1248.652004][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.667203][T17075] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2961'. [ 1248.796748][T17075] x_tables: unsorted underflow at hook 3 [ 1248.939637][ T5903] usb 4-1: config 0 descriptor?? [ 1248.977968][T15778] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1249.009266][T15778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.051923][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'. [ 1249.069930][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 1249.076737][T15778] usb 1-1: Product: syz [ 1249.080945][T15778] usb 1-1: Manufacturer: syz [ 1249.090515][T15778] usb 1-1: SerialNumber: syz [ 1249.259005][T17081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.311412][ T5923] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1249.337809][ T5923] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1249.340789][T15778] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 1249.365729][T15778] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1249.373991][T15778] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1249.386946][T15778] usb 1-1: USB disconnect, device number 114 [ 1249.401768][T16987] veth0_vlan: entered promiscuous mode [ 1249.407883][T15778] garmin_gps 1-1:8.206: device disconnected [ 1249.410460][T17081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.442608][T16987] veth1_vlan: entered promiscuous mode [ 1249.482236][T13524] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1249.504086][T16987] veth0_macvtap: entered promiscuous mode [ 1249.517439][T16987] veth1_macvtap: entered promiscuous mode [ 1249.535204][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.552809][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.563122][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.575650][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.585755][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.597985][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.608273][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.618803][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.630796][T16987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.631349][T13516] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1249.653123][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.664168][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.674273][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.684834][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.694780][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.705361][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.715363][T16987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.725913][T16987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.736041][ T5903] pwc: recv_control_msg error -71 req 02 val 2700 [ 1249.745938][ T5903] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1249.754521][T16987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.762777][ T5903] pwc: recv_control_msg error -71 req 04 val 1000 [ 1249.768846][T13524] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1249.771102][ T5903] pwc: recv_control_msg error -71 req 04 val 1300 [ 1249.784343][ T5903] pwc: recv_control_msg error -71 req 04 val 1400 [ 1249.795800][T16987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.804819][ T5903] pwc: recv_control_msg error -71 req 02 val 2000 [ 1249.811443][T16987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.820245][T16987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.829202][T16987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.838069][ T5903] pwc: recv_control_msg error -71 req 02 val 2100 [ 1249.845656][ T5903] pwc: recv_control_msg error -71 req 04 val 1500 [ 1249.854772][ T5903] pwc: recv_control_msg error -71 req 02 val 2500 [ 1249.869252][ T5903] pwc: recv_control_msg error -71 req 02 val 2400 [ 1249.882691][ T5903] pwc: recv_control_msg error -71 req 02 val 2600 [ 1249.924709][ T5903] pwc: recv_control_msg error -71 req 02 val 2900 [ 1249.938356][ T5903] pwc: recv_control_msg error -71 req 02 val 2800 [ 1249.957839][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.971189][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 1249.981273][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.982056][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 1250.025274][ T5903] pwc: Registered as video103. [ 1250.040212][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 1250.058716][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.073531][ T5903] usb 4-1: USB disconnect, device number 106 [ 1250.093762][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.162213][ T838] usb 6-1: USB disconnect, device number 37 [ 1250.309732][T17085] wlan0 speed is unknown, defaulting to 1000 [ 1250.546389][T17097] wlan0 speed is unknown, defaulting to 1000 [ 1250.640243][ T5839] [ 1250.642648][ T5839] ====================================================== [ 1250.649690][ T5839] WARNING: possible circular locking dependency detected [ 1250.656731][ T5839] 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 Not tainted [ 1250.663858][ T5839] ------------------------------------------------------ [ 1250.670901][ T5839] kworker/u9:8/5839 is trying to acquire lock: [ 1250.677070][ T5839] ffff88805acd3258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x439/0xae0 [ 1250.687843][ T5839] [ 1250.687843][ T5839] but task is already holding lock: [ 1250.695228][ T5839] ffff8880334b4620 (&conn->lock#3){+.+.}-{3:3}, at: sco_connect_cfm+0x262/0xae0 [ 1250.704378][ T5839] [ 1250.704378][ T5839] which lock already depends on the new lock. [ 1250.704378][ T5839] [ 1250.714799][ T5839] [ 1250.714799][ T5839] the existing dependency chain (in reverse order) is: [ 1250.723833][ T5839] [ 1250.723833][ T5839] -> #1 (&conn->lock#3){+.+.}-{3:3}: [ 1250.731359][ T5839] lock_acquire+0x1ed/0x550 [ 1250.736425][ T5839] _raw_spin_lock+0x2e/0x40 [ 1250.741479][ T5839] sco_sock_connect+0x34c/0x9b0 [ 1250.746880][ T5839] __sys_connect+0x288/0x2d0 [ 1250.750183][ T5903] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1250.752010][ T5839] __x64_sys_connect+0x7a/0x90 [ 1250.752045][ T5839] do_syscall_64+0xf3/0x230 [ 1250.752078][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.776313][ T5839] [ 1250.776313][ T5839] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 1250.785464][ T5839] validate_chain+0x18ef/0x5920 [ 1250.790841][ T5839] __lock_acquire+0x1397/0x2100 [ 1250.796244][ T5839] lock_acquire+0x1ed/0x550 [ 1250.801293][ T5839] lock_sock_nested+0x48/0x100 [ 1250.806628][ T5839] sco_connect_cfm+0x439/0xae0 [ 1250.811951][ T5839] hci_conn_request_evt+0x8e9/0xf00 [ 1250.817688][ T5839] hci_event_packet+0xac1/0x1540 [ 1250.823155][ T5839] hci_rx_work+0x3f3/0xdb0 [ 1250.828111][ T5839] process_scheduled_works+0xabe/0x18e0 [ 1250.834190][ T5839] worker_thread+0x870/0xd30 [ 1250.839329][ T5839] kthread+0x7a9/0x920 [ 1250.843944][ T5839] ret_from_fork+0x4b/0x80 [ 1250.848906][ T5839] ret_from_fork_asm+0x1a/0x30 [ 1250.854197][ T5839] [ 1250.854197][ T5839] other info that might help us debug this: [ 1250.854197][ T5839] [ 1250.864443][ T5839] Possible unsafe locking scenario: [ 1250.864443][ T5839] [ 1250.871992][ T5839] CPU0 CPU1 [ 1250.877369][ T5839] ---- ---- [ 1250.882767][ T5839] lock(&conn->lock#3); [ 1250.887031][ T5839] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 1250.895471][ T5839] lock(&conn->lock#3); [ 1250.902253][ T5839] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 1250.908174][ T5839] [ 1250.908174][ T5839] *** DEADLOCK *** [ 1250.908174][ T5839] [ 1250.916337][ T5839] 3 locks held by kworker/u9:8/5839: [ 1250.921643][ T5839] #0: ffff88807c01c148 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 1250.932652][ T5839] #1: ffffc90004377c60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 1250.944697][ T5839] #2: ffff8880334b4620 (&conn->lock#3){+.+.}-{3:3}, at: sco_connect_cfm+0x262/0xae0 [ 1250.954243][ T5839] [ 1250.954243][ T5839] stack backtrace: [ 1250.960147][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:8 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1250.960172][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1250.960189][ T5839] Workqueue: hci1 hci_rx_work [ 1250.960208][ T5839] Call Trace: [ 1250.960214][ T5839] [ 1250.960221][ T5839] dump_stack_lvl+0x241/0x360 [ 1250.960238][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.960260][ T5839] ? __pfx__printk+0x10/0x10 [ 1250.960298][ T5839] print_circular_bug+0x13a/0x1b0 [ 1250.960341][ T5839] check_noncircular+0x36a/0x4a0 [ 1250.960359][ T5839] ? __pfx_stack_trace_save+0x10/0x10 [ 1250.960378][ T5839] ? __pfx_check_noncircular+0x10/0x10 [ 1250.960395][ T5839] ? lockdep_lock+0x123/0x2b0 [ 1250.960436][ T5839] ? lockdep_unlock+0x16a/0x300 [ 1250.960461][ T5839] ? __pfx_lockdep_unlock+0x10/0x10 [ 1250.960492][ T5839] validate_chain+0x18ef/0x5920 [ 1250.960515][ T5839] ? __pfx_validate_chain+0x10/0x10 [ 1250.960530][ T5839] ? __pfx_validate_chain+0x10/0x10 [ 1250.960557][ T5839] ? register_lock_class+0x102/0x980 [ 1250.960591][ T5839] ? __pfx_register_lock_class+0x10/0x10 [ 1250.960620][ T5839] ? mark_lock+0x9a/0x360 [ 1250.960651][ T5839] __lock_acquire+0x1397/0x2100 [ 1250.960680][ T5839] lock_acquire+0x1ed/0x550 [ 1250.960704][ T5839] ? sco_connect_cfm+0x439/0xae0 [ 1250.960738][ T5839] ? __pfx_lock_acquire+0x10/0x10 [ 1250.960766][ T5839] ? __pfx_lock_acquire+0x10/0x10 [ 1250.960795][ T5839] ? sco_connect_cfm+0x40b/0xae0 [ 1250.960815][ T5839] ? __pfx_lock_release+0x10/0x10 [ 1250.960836][ T5839] ? do_raw_spin_lock+0x14f/0x370 [ 1250.960859][ T5839] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1250.960887][ T5839] lock_sock_nested+0x48/0x100 [ 1250.960914][ T5839] ? sco_connect_cfm+0x439/0xae0 [ 1250.960941][ T5839] sco_connect_cfm+0x439/0xae0 [ 1250.960965][ T5839] ? hci_cb_lookup+0x1b3/0x3c0 [ 1250.960986][ T5839] ? __pfx_sco_connect_cfm+0x10/0x10 [ 1250.961011][ T5839] ? hci_cb_lookup+0x3a0/0x3c0 [ 1250.961040][ T5839] ? __pfx_sco_connect_cfm+0x10/0x10 [ 1250.961068][ T5839] hci_conn_request_evt+0x8e9/0xf00 [ 1250.961095][ T5839] ? __pfx_hci_conn_request_evt+0x10/0x10 [ 1250.961114][ T5839] ? __mutex_unlock_slowpath+0x227/0x800 [ 1250.961139][ T5839] ? __skb_clone+0x5c/0x6c0 [ 1250.961156][ T5839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1250.961196][ T5839] ? skb_pull_data+0x112/0x230 [ 1250.961223][ T5839] hci_event_packet+0xac1/0x1540 [ 1250.961248][ T5839] ? __pfx_hci_conn_request_evt+0x10/0x10 [ 1250.961269][ T5839] ? __pfx_hci_event_packet+0x10/0x10 [ 1250.961285][ T5839] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1250.961304][ T5839] ? kcov_remote_start+0x440/0x7d0 [ 1250.961336][ T5839] ? insn_decode_mmio+0x2c0/0x580 [ 1250.961366][ T5839] ? hci_send_to_monitor+0xdc/0x530 [ 1250.961396][ T5839] hci_rx_work+0x3f3/0xdb0 [ 1250.961425][ T5839] ? process_scheduled_works+0x9c6/0x18e0 [ 1250.961443][ T5839] process_scheduled_works+0xabe/0x18e0 [ 1250.961479][ T5839] ? __pfx_process_scheduled_works+0x10/0x10 [ 1250.961510][ T5839] ? assign_work+0x364/0x3d0 [ 1250.961535][ T5839] worker_thread+0x870/0xd30 [ 1250.961565][ T5839] ? __kthread_parkme+0x169/0x1d0 [ 1250.961586][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 1250.961605][ T5839] kthread+0x7a9/0x920 [ 1250.961635][ T5839] ? __pfx_kthread+0x10/0x10 [ 1250.961666][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 1250.961691][ T5839] ? __pfx_kthread+0x10/0x10 [ 1250.961717][ T5839] ? __pfx_kthread+0x10/0x10 [ 1250.961740][ T5839] ? __pfx_kthread+0x10/0x10 [ 1250.961761][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 1250.961791][ T5839] ? lockdep_hardirqs_on+0x99/0x150 [ 1250.961820][ T5839] ? __pfx_kthread+0x10/0x10 [ 1250.961848][ T5839] ret_from_fork+0x4b/0x80 [ 1250.961871][ T5839] ? __pfx_kthread+0x10/0x10 [ 1250.961892][ T5839] ret_from_fork_asm+0x1a/0x30 [ 1250.961920][ T5839] [ 1251.322755][ T5839] BUG: sleeping function called from invalid context at net/core/sock.c:3664 [ 1251.331784][ T5839] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5839, name: kworker/u9:8 [ 1251.341005][ T5839] preempt_count: 1, expected: 0 [ 1251.345874][ T5839] RCU nest depth: 0, expected: 0 [ 1251.351062][ T5839] INFO: lockdep is turned off. [ 1251.355818][ T5839] Preemption disabled at: [ 1251.355828][ T5839] [<0000000000000000>] 0x0 [ 1251.364771][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:8 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 1251.364791][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1251.364802][ T5839] Workqueue: hci1 hci_rx_work [ 1251.364823][ T5839] Call Trace: [ 1251.364830][ T5839] [ 1251.364836][ T5839] dump_stack_lvl+0x241/0x360 [ 1251.364854][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1251.364869][ T5839] ? __pfx__printk+0x10/0x10 [ 1251.364892][ T5839] ? lock_acquire+0x264/0x550 [ 1251.364916][ T5839] __might_resched+0x5d4/0x780 [ 1251.364934][ T5839] ? __pfx_lock_acquire+0x10/0x10 [ 1251.364956][ T5839] ? __pfx___might_resched+0x10/0x10 [ 1251.364974][ T5839] ? __pfx_lock_release+0x10/0x10 [ 1251.365004][ T5839] ? do_raw_spin_lock+0x14f/0x370 [ 1251.365031][ T5839] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1251.365051][ T5839] lock_sock_nested+0x5d/0x100 [ 1251.365073][ T5839] sco_connect_cfm+0x439/0xae0 [ 1251.365094][ T5839] ? hci_cb_lookup+0x1b3/0x3c0 [ 1251.365115][ T5839] ? __pfx_sco_connect_cfm+0x10/0x10 [ 1251.365135][ T5839] ? hci_cb_lookup+0x3a0/0x3c0 [ 1251.365155][ T5839] ? __pfx_sco_connect_cfm+0x10/0x10 [ 1251.365190][ T5839] hci_conn_request_evt+0x8e9/0xf00 [ 1251.365209][ T5839] ? __pfx_hci_conn_request_evt+0x10/0x10 [ 1251.365226][ T5839] ? __mutex_unlock_slowpath+0x227/0x800 [ 1251.365250][ T5839] ? __skb_clone+0x5c/0x6c0 [ 1251.365273][ T5839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1251.365322][ T5839] ? skb_pull_data+0x112/0x230 [ 1251.365349][ T5839] hci_event_packet+0xac1/0x1540 [ 1251.365371][ T5839] ? __pfx_hci_conn_request_evt+0x10/0x10 [ 1251.365390][ T5839] ? __pfx_hci_event_packet+0x10/0x10 [ 1251.365440][ T5839] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1251.365458][ T5839] ? kcov_remote_start+0x440/0x7d0 [ 1251.365479][ T5839] ? insn_decode_mmio+0x2c0/0x580 [ 1251.365501][ T5839] ? hci_send_to_monitor+0xdc/0x530 [ 1251.365525][ T5839] hci_rx_work+0x3f3/0xdb0 [ 1251.365544][ T5839] ? process_scheduled_works+0x9c6/0x18e0 [ 1251.365563][ T5839] process_scheduled_works+0xabe/0x18e0 [ 1251.365590][ T5839] ? __pfx_process_scheduled_works+0x10/0x10 [ 1251.365611][ T5839] ? assign_work+0x364/0x3d0 [ 1251.365629][ T5839] worker_thread+0x870/0xd30 [ 1251.365652][ T5839] ? __kthread_parkme+0x169/0x1d0 [ 1251.365674][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 1251.365692][ T5839] kthread+0x7a9/0x920 [ 1251.365713][ T5839] ? __pfx_kthread+0x10/0x10 [ 1251.365735][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 1251.365754][ T5839] ? __pfx_kthread+0x10/0x10 [ 1251.365775][ T5839] ? __pfx_kthread+0x10/0x10 [ 1251.365797][ T5839] ? __pfx_kthread+0x10/0x10 [ 1251.365818][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 1251.365838][ T5839] ? lockdep_hardirqs_on+0x99/0x150 [ 1251.365859][ T5839] ? __pfx_kthread+0x10/0x10 [ 1251.365880][ T5839] ret_from_fork+0x4b/0x80 [ 1251.365900][ T5839] ? __pfx_kthread+0x10/0x10 [ 1251.365921][ T5839] ret_from_fork_asm+0x1a/0x30 [ 1251.365943][ T5839] [ 1251.766953][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 1251.917929][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.310227][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.322596][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1252.336422][ T5903] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1252.346050][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.357403][ T5903] usb 3-1: config 0 descriptor?? [ 1252.366832][ T5903] usbhid 3-1:0.0: can't add hid device: -22 [ 1252.372954][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1252.959893][T17110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.969951][T17110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.085494][ T5903] usb 3-1: USB disconnect, device number 12