last executing test programs: 20m17.900439294s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r3}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 20m16.529282702s ago: executing program 3 (id=6): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000906010600000000ffff0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 20m7.85568819s ago: executing program 0 (id=26): io_uring_setup(0x95a, &(0x7f0000000180)={0x0, 0x58bb, 0x2, 0x2, 0x383}) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 20m6.57524666s ago: executing program 0 (id=28): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') close(r0) 20m4.910359814s ago: executing program 0 (id=31): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20m4.488533942s ago: executing program 0 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x2e, 0xa2131ad153ade8d2]}}, &(0x7f0000000480)=""/118, 0x1e, 0x76, 0x1, 0x5, 0x10000}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 20m2.976569821s ago: executing program 0 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) 20m2.238472265s ago: executing program 0 (id=39): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000906010600000000ffff0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 20m0.246865647s ago: executing program 32 (id=6): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000906010600000000ffff0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 19m47.199040715s ago: executing program 33 (id=39): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000906010600000000ffff0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 14.953844201s ago: executing program 2 (id=4653): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) 14.140248327s ago: executing program 6 (id=4659): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414001ed159"], 0x24}}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) dup(r1) (async, rerun: 32) r6 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xffffffffffffffff, 0x244940) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 13.078385955s ago: executing program 6 (id=4662): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000180)=[@acquire, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 12.978612007s ago: executing program 2 (id=4663): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f0000000140)) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x24, 0x3c, {0x3c, 0x11, "022212dc5ee7d458fe7682c1a505bc09428aaca944d5d93ee1293dc7dfe998ac84a4304ca8f090590327bd2da8d5b9a739ce7736c4fcdaaedd63"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000240)={0x0, 0xf, 0x2b, "ddd7f42c2ef6a0a08873805a8d529a64c4bd2484951e933c058b6c97470270c5f51668089a6024a4a1e2dd"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0xc0, 0xa1, 0x4}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "233d56b786a3aeb3d8548d0d4516594fad2cff3883229c6854f26801d9db58e27badbab7a380eef594d82d33ea0aef"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 11.903661635s ago: executing program 4 (id=4666): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, 0x0) 10.633393947s ago: executing program 4 (id=4668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (fail_nth: 1) 10.571566658s ago: executing program 6 (id=4669): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) userfaultfd(0x80801) (async) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbbaffd8b1adfd071}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4a}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}]}, 0x7c}}, 0x8800) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000340)="167d723f435a852d2d2f5ebee4066b6bfea780f5ce735092e70631b120435424e1c8614cd58dd136c161ef27ad6c1916b51cc1ce76790e14120bb05fc096caab7160fa4da89bab14340df43a7e6bbfe93e411594925dcdf74f4646ddb01d04f9e67fc23027734de2676b4b5813bc24952b2278101b59c257d4cc45e9ae247f1abfa843c2ea6a35c210fe86", 0x8b}, {&(0x7f0000000400)="8e3f1468f2b9d7004314a1873dcaa19f14f0dea1f9a552d900249d6258aa296cd416b8f5b17d850b8d9674d0805661d427a6c704963dfde2834bef1c65e8935558653bd787af6ee22dc3d2a01d04aea54827f9b89b570808a9c25c33d02ae52c2dc77602169ea5f1371a8a968c2ba9c3968633ce8a417467e1f133c27f8bbe76b6", 0x81}], 0x2) userfaultfd(0x801) getpid() (async) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 10.457619447s ago: executing program 1 (id=4671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0xce20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000700), 0x1, 0x800) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x18, 0x8, &(0x7f00000004c0)={0x0, "a52422ffd60775c221c4021d467d664800ff0000002200"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000600)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\x00', 0x3a, '/dev/fuse\x00', 0x3a, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x9c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006dc0)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e415e5c2b06a32abeab7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d80bc50e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c228cc319e9d079d89d2ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffff5, 0xe81, {0x6, 0x800003, 0x1, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x3ffffffffffc, 0xffffffffffffffff, 0x202, 0x11e0, 0x1, 0x2000, 0x7, r6, r7, 0x6, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0/../file0/file0\x00', r8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800006b07b000000000000c0000000c0000000500000001000000000000070000000000e15f5c006a9b3e7b53151e538e7cdd441d3a1093e4f4b401f342d303d615e464782cfc8621e1d4099587c9694aa8c18a684fc56990e32a028be1d8fdcb76fec572df36220395b673c9da8885a10b3e5c82c616dafb54442d08874153577bdda43438550ba7658fcee3adbfc28d726c26a1b2534dbaab0ce086bbf8aef75861b42e22fb3d"], 0x0, 0x29, 0x0, 0x1}, 0x28) 10.101460568s ago: executing program 2 (id=4672): mkdir(&(0x7f0000000140)='./control\x00', 0x5) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000e6a) rmdir(&(0x7f0000000100)='./control\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="19002dbd7000fcffffff1b00000018000180140002"], 0x2c}}, 0x0) 9.910322243s ago: executing program 4 (id=4674): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb02080002020509050412"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xffff}, {0x0, 0xfff1}, {0xfff2, 0xfff2}}}, 0x24}}, 0x4041080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_create(0xaa22) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 8.5741801s ago: executing program 2 (id=4675): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed841572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134fba55526983dabf2f189c70ddec701b55256d383dd802b4b09b801fb6cbe3408c9eb6d1fd85bf93b60b966680485d4550a3aa3454d888d6f8e81f669d4d87914041ac313e39f0ae29f31dedba1c5964c6729045cbd010e4469a7220335f76983c7d22a53401cb25444b9103643843726bdbb28d4032f9258f8539b9a7dfd6558b2c524d38c9e2e1c23fd7a6a42bf4bb5ebdf0b75ecc547ef15865536ee1de07155bc5e6b5a227c1170a6e4e44991f0685219c417d7194a4cdbce6a1e76f830fdd07887b49a3b648772b6e1b6fda08931540cc521e44f3fb221ce86438759704ce2422653a35f62c483a21ae6b34b14e6d900172dddecf8846a9423d784341296e141423f1c1efed6a0c334430647c0408af67c54a8cad69a43bf28ebe4a650343151223969bafa661999342df2a160f45b950f258f1e444575d6251a917bfcbb4dc834bd08d4deeb3be0dabade5f46060e54bc71f137f47e4233804eb9de", 0x589}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f0000010000000038000000000000000000000007"], 0x58}, 0x4) 8.188470887s ago: executing program 5 (id=4676): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f0000010000000038000000000000000000000007"], 0x58}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) read$FUSE(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25010000000800390003000000b4d1206aee30ccdbbeea61c47bcfaf6c5db501b99834e9"], 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x2004001) 8.140607453s ago: executing program 2 (id=4677): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) 7.886514054s ago: executing program 5 (id=4678): socket(0x1, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) io_uring_setup(0x36, &(0x7f0000000340)={0x0, 0x94f9, 0x407, 0x0, 0x253}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, &(0x7f0000000000)) 7.427601042s ago: executing program 1 (id=4679): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, 0x0) 7.269125404s ago: executing program 5 (id=4680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(0x0, 0x0) read$FUSE(r3, &(0x7f00000040c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000280)=@newtaction={0x1ac, 0x31, 0x12f, 0xfffffffc, 0xffffffff, {}, [{0x198, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x3e, 0x6, "d5271a1bc19bb1e0da4c8b590ecfb576244a692343e90d5de7d2be0cb3d27e5d9f42dd0c8103d7431f277883766b3d1594a51bff7fc99bebb912"}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x1}}}}, @m_bpf={0x128, 0x15, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x8000, 0x3, 0x2, 0x7}, {0x2fd1, 0x2, 0x10, 0x1}, {0x173, 0x1, 0x1, 0x81}, {0x3, 0x6, 0xc, 0xea6}, {0x5, 0x7d, 0x80, 0x7}]}]}, {0xc3, 0x6, "e6b4fb3640e2aaf97192b15d69bce46a7e0e59995572a951f7b9affec5a7c0a78d1ba39cd71c783f2b9940b2084dd574ef63740dd6ee86747962cfa92b6c1726c559b02759dce40445f50337ca644cc0b08d871e36c40fe930b594da91fabdf6d4e36944860306de06cb9128b4a571233a7a5c5d8b177b7ea638192a10a9a195e7b19549a568865661a9bbc82e8aaa37e4542d5b7952c603ba987b4e9cc170644123d2b5fa6dac379d8325b6d2b70b6ab4ff90c109e138f70808c243611c11"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80091}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20, 0x0, r4, {0x100, 0x4, 0xfffffe01, 0x3}}, 0x20) 5.752260501s ago: executing program 1 (id=4681): r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xaa22) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.558860482s ago: executing program 2 (id=4682): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r0, &(0x7f0000000000)='net/wireless\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x8008af00, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x35, 0x25, 0x9f, 0x40, 0xcf3, 0x5, 0xe980, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0xe, 0x10, 0x32, [{{0x9, 0x4, 0xf, 0xfb, 0x1, 0xeb, 0x27, 0x58, 0x2, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0xb0, 0xf4, 0xf7}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x20004e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000000000000001, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x8, 0xfffffffffffffffd}, {0x40000, 0xfffffffe, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 4.429666188s ago: executing program 4 (id=4683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="d3", 0x1}], 0x1}}], 0x2, 0x4004090) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x141140) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, &(0x7f0000000140)=0x4) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, r7}) 4.312091132s ago: executing program 5 (id=4684): sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x2000, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@deltaction={0xbc, 0x31, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0xbc}}, 0x0) r4 = dup(r1) ioctl$TIOCCONS(r1, 0x541d) write$UHID_INPUT(r4, 0x0, 0x0) 4.202569004s ago: executing program 1 (id=4685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x24, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.184151536s ago: executing program 6 (id=4686): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) 4.143908806s ago: executing program 4 (id=4687): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x4) r1 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x5, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x6, 0xb, 0xffe, 0x1, 0x0, 0x40001, 0x6, 0x6, 0xffff, 0x6, 0x10006, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0xfff000, 0x3, 0x1, 0x4, 0x8049]}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0xc}, {0x0, 0x4}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd6, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xf4, 0x2, 0x5, 0xe0, 0x1, 0xc, 0x40}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0xc0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) socket(0x10, 0x3, 0x4) (async) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x5, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x6, 0xb, 0xffe, 0x1, 0x0, 0x40001, 0x6, 0x6, 0xffff, 0x6, 0x10006, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0xfff000, 0x3, 0x1, 0x4, 0x8049]}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0xc}, {0x0, 0x4}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd6, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0xf4, 0x2, 0x5, 0xe0, 0x1, 0xc, 0x40}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0xc0) (async) 4.120806568s ago: executing program 5 (id=4688): syz_usb_connect(0x2, 0x285, &(0x7f00000013c0)={{0x12, 0x1, 0x300, 0xb6, 0x88, 0x5e, 0x20, 0x19d2, 0xffcb, 0x77e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x273, 0x1, 0x4, 0x4, 0xe0, 0xe, [{{0x9, 0x4, 0x4b, 0x4, 0xd, 0xff, 0xff, 0xff, 0x5d, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x1, 0x3, 0xff, [@generic={0x45, 0xb, "c36fed72a17c77583c0ba3e1fbb0e32bb7cf90dc4c92c09b7a9fca70e6aa38431b7bdcfa90804543594258d35bf38a447a9df93811b2a54b30f6167c6f8b0cdea03e49"}, @generic={0xb, 0x8, "c7d7c150dde43c34f1"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x1, 0x9, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xa}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x6, 0x0, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xe, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x9}, @generic={0x9c, 0x5, "f78104a096c990fde5125ce233c25d4df847ef89059ee1d9d0977dd2c102a2740b2c7e2af563398857e134a8e5cf49fe105169b22a2824a3be6782c6483a9af8378554b1225ff4db592ffab4e0c3709dd0fcb3c6c2106a3337de41813726b56994f972aec6c78031883d328401798ac468ea229317bf18dbba1ecab127bde79a94469b174d14ffe05fa8467f27fec47312e3b4fffc3d10c849db"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x7, 0x1, 0x24}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x53, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xc, 0xd, 0xdb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0xd}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x81, 0xa5, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x450, 0x4, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x5, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0xe, 0x4, 0x1, [@generic={0xdd, 0xa, "9218ecc51b70ea633ffb268df0f5224bc0aaa610baa93dadbf27ff504873209ca349de2fe0b01bb5c2c4e3db0f920d08c476c31334b55423731fd407a3f62c91661067a127ced26c3153ef676638b5ea6b4854569f6c0b686aeed8c6ee255596322aecf780cc2c7c8dccfd0b6ab09bfd49beacee3298af13d8058d83e307c42eef2e4c19db7cb5fad497742f5928e50240b71c661b8ba309084a4df57df1720cc7ade94dbbbf00a7c2622c02481840227b56f1759e9fc7389b8ed3664442ce37ee0b6a5f074294343775f20d30a692f144f02bf16d4624b545f3c1"}]}}]}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x3, 0xa4, 0xc, 0x40, 0x7}, 0x2f, &(0x7f0000000680)={0x5, 0xf, 0x2f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x36, 0xa4, 0x7f, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0xf11, 0x1, [0x30, 0x0, 0x3f00]}]}, 0x8, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0xc, &(0x7f0000000800)=@string={0xc, 0x3, "942eb3b6d6da102ca892"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xc9, &(0x7f0000000880)=@string={0xc9, 0x3, "4fe0425b8a6b14ea67e0cf7df21bc1aeced5bfbb639f233d28a73caa406d870663c0e105cc658ee7915a60697803861b92722dad65181623324dc2f53ad0782bbaa992c38ffa6897a5a9df969f3023847281988bfa0c25d647d81f3b8e8deccecb9b4cc2710ba14212d9c9bcf34318f5917b483642edcc30f37fd9345e7260a6e805a56650ea8923e64269ed87a911cf605a3e9a5fd3de1d81b81cb2e10287d29d87242b19d29f9b6a3efbb2843470f0ffa307ce7d009097372845bad41f2cf3acc30bbeae8735"}}, {0x1d, &(0x7f0000000980)=@string={0x1d, 0x3, "29955d4c249d41cd28550db0ca143f30c2df1b73f8c4b2b79180f2"}}, {0x39, &(0x7f00000009c0)=@string={0x39, 0x3, "df821e52760fdfaaf0fa1142db69362b0a5063dd600817163e2e06d920626ebb20be06d4934a1ef0e4d783704a202cb62f44a849a7d42a"}}, {0xfb, &(0x7f0000001200)=@string={0xfb, 0x3, "3290ed8a6775f8c927e2ec7ceef69a20cbc24918f9c1eda125ef43df3d15ecd7e9981dbe19ded7e64d7990b4f94a80984a6dd9367471ee66372621c0ec240017becea56cee8d4db6833f01a2e9b7742dd00e207853a86e526e547518f90f80ade7804fbcd5c33ee3e3156375e2ef0f66d6ff53cd1200b1e3ccef0b8b1247e81f8caa6fa4102deb1b5a310801804108fcaf2d5ea7564b6dc25333a53d7f46d885cd617f6dcd858a4026064b485e84b2b894d1665747f7ad9f4a9c82bdbad0382704435bb3e42e3861c8ebef78eccde4eeea313e5395c2511bc75347ef1096c3f362e0f861965bd795c0eb5b6f865da698d84d963e8d7504e30d"}}, {0xbf, &(0x7f0000000a00)=@string={0xbf, 0x3, "61dd79302acda6f8dd71d912c206952e2c57c36be9aef2e324bb5a9c6aab2ec4e5ea22995778cbaf97c7b25198d53b73d57b42edadace23cd326c790d41a200d35e77919ebcb523520bd3cf6e1845f106129befa79e5d97693b1776544cd08779f05883077997bd9c300c49c02da310f33b2fbaa76898c4eeef98d76d9f2704a86b40fb695f2fd35842465647b0697381d30f7ace6fe32fdfcb7b7a7f4790c21831ad678e951ea6f40fe3d9b6ae72b4b76cb05a796dde02e2b7345cc6c"}}]}) 4.023488513s ago: executing program 4 (id=4689): syz_usb_connect(0x2, 0x285, &(0x7f00000013c0)={{0x12, 0x1, 0x300, 0xb6, 0x88, 0x5e, 0x20, 0x19d2, 0xffcb, 0x77e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x273, 0x1, 0x4, 0x4, 0xe0, 0xe, [{{0x9, 0x4, 0x4b, 0x4, 0xd, 0xff, 0xff, 0xff, 0x5d, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x1, 0x3, 0xff, [@generic={0x45, 0xb, "c36fed72a17c77583c0ba3e1fbb0e32bb7cf90dc4c92c09b7a9fca70e6aa38431b7bdcfa90804543594258d35bf38a447a9df93811b2a54b30f6167c6f8b0cdea03e49"}, @generic={0xb, 0x8, "c7d7c150dde43c34f1"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x1, 0x9, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x1, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xa}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x6, 0x0, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xe, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x9}, @generic={0x9c, 0x5, "f78104a096c990fde5125ce233c25d4df847ef89059ee1d9d0977dd2c102a2740b2c7e2af563398857e134a8e5cf49fe105169b22a2824a3be6782c6483a9af8378554b1225ff4db592ffab4e0c3709dd0fcb3c6c2106a3337de41813726b56994f972aec6c78031883d328401798ac468ea229317bf18dbba1ecab127bde79a94469b174d14ffe05fa8467f27fec47312e3b4fffc3d10c849db"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x7, 0x1, 0x24}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x53, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xc, 0xd, 0xdb}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0xd}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x81, 0xa5, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x450, 0x4, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x5, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0xe, 0x4, 0x1, [@generic={0xdd, 0xa, "9218ecc51b70ea633ffb268df0f5224bc0aaa610baa93dadbf27ff504873209ca349de2fe0b01bb5c2c4e3db0f920d08c476c31334b55423731fd407a3f62c91661067a127ced26c3153ef676638b5ea6b4854569f6c0b686aeed8c6ee255596322aecf780cc2c7c8dccfd0b6ab09bfd49beacee3298af13d8058d83e307c42eef2e4c19db7cb5fad497742f5928e50240b71c661b8ba309084a4df57df1720cc7ade94dbbbf00a7c2622c02481840227b56f1759e9fc7389b8ed3664442ce37ee0b6a5f074294343775f20d30a692f144f02bf16d4624b545f3c1"}]}}]}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x3, 0xa4, 0xc, 0x40, 0x7}, 0x2f, &(0x7f0000000680)={0x5, 0xf, 0x2f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x36, 0xa4, 0x7f, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0xf11, 0x1, [0x30, 0x0, 0x3f00]}]}, 0x8, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0xc, &(0x7f0000000800)=@string={0xc, 0x3, "942eb3b6d6da102ca892"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xc9, &(0x7f0000000880)=@string={0xc9, 0x3, "4fe0425b8a6b14ea67e0cf7df21bc1aeced5bfbb639f233d28a73caa406d870663c0e105cc658ee7915a60697803861b92722dad65181623324dc2f53ad0782bbaa992c38ffa6897a5a9df969f3023847281988bfa0c25d647d81f3b8e8deccecb9b4cc2710ba14212d9c9bcf34318f5917b483642edcc30f37fd9345e7260a6e805a56650ea8923e64269ed87a911cf605a3e9a5fd3de1d81b81cb2e10287d29d87242b19d29f9b6a3efbb2843470f0ffa307ce7d009097372845bad41f2cf3acc30bbeae8735"}}, {0x1d, &(0x7f0000000980)=@string={0x1d, 0x3, "29955d4c249d41cd28550db0ca143f30c2df1b73f8c4b2b79180f2"}}, {0x39, &(0x7f00000009c0)=@string={0x39, 0x3, "df821e52760fdfaaf0fa1142db69362b0a5063dd600817163e2e06d920626ebb20be06d4934a1ef0e4d783704a202cb62f44a849a7d42a"}}, {0xfb, &(0x7f0000001200)=@string={0xfb, 0x3, "3290ed8a6775f8c927e2ec7ceef69a20cbc24918f9c1eda125ef43df3d15ecd7e9981dbe19ded7e64d7990b4f94a80984a6dd9367471ee66372621c0ec240017becea56cee8d4db6833f01a2e9b7742dd00e207853a86e526e547518f90f80ade7804fbcd5c33ee3e3156375e2ef0f66d6ff53cd1200b1e3ccef0b8b1247e81f8caa6fa4102deb1b5a310801804108fcaf2d5ea7564b6dc25333a53d7f46d885cd617f6dcd858a4026064b485e84b2b894d1665747f7ad9f4a9c82bdbad0382704435bb3e42e3861c8ebef78eccde4eeea313e5395c2511bc75347ef1096c3f362e0f861965bd795c0eb5b6f865da698d84d963e8d7504e30d"}}, {0xbf, &(0x7f0000000a00)=@string={0xbf, 0x3, "61dd79302acda6f8dd71d912c206952e2c57c36be9aef2e324bb5a9c6aab2ec4e5ea22995778cbaf97c7b25198d53b73d57b42edadace23cd326c790d41a200d35e77919ebcb523520bd3cf6e1845f106129befa79e5d97693b1776544cd08779f05883077997bd9c300c49c02da310f33b2fbaa76898c4eeef98d76d9f2704a86b40fb695f2fd35842465647b0697381d30f7ace6fe32fdfcb7b7a7f4790c21831ad678e951ea6f40fe3d9b6ae72b4b76cb05a796dde02e2b7345cc6c"}}]}) 1.672219951s ago: executing program 6 (id=4690): socket(0x1, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) io_uring_setup(0x36, &(0x7f0000000340)={0x0, 0x94f9, 0x407, 0x0, 0x253}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, &(0x7f0000000000)) 1.590069165s ago: executing program 1 (id=4691): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, 0x0) 305.92863ms ago: executing program 6 (id=4692): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) 121.127317ms ago: executing program 5 (id=4693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880fdff0c80"], 0x30}}, 0x20000810) 0s ago: executing program 1 (id=4694): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) kernel console output (not intermixed with test programs): hci0: Opcode 0x0c1a failed: -110 [ 1232.160170][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.211274][T19911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1232.245187][T19911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1232.245556][T19911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1232.246206][T19911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1232.249290][T19911] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1232.355012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.366285][T19911] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1232.411756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.465913][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.508562][ T5883] snd_usb_toneport 7-1:0.0: set_interface failed [ 1232.508804][ T5883] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1232.508984][ T5883] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1232.584106][ T5883] usb 7-1: USB disconnect, device number 66 [ 1232.585185][T19933] netlink: 16211 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1232.657615][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.747229][ T6025] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1232.864228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.899239][ T6025] usb 5-1: device descriptor read/64, error -71 [ 1232.932143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.157242][T19879] Bluetooth: hci4: command 0x0406 tx timeout [ 1234.197254][ T6025] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1234.317257][ T5117] Bluetooth: hci1: command 0x0c1a tx timeout [ 1234.317305][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 1234.317372][T19879] Bluetooth: hci2: command 0x0419 tx timeout [ 1234.339354][ T6025] usb 5-1: device descriptor read/64, error -71 [ 1234.455613][ T6025] usb usb5-port1: attempt power cycle [ 1234.827265][ T6025] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1234.858353][ T6025] usb 5-1: device descriptor read/8, error -71 [ 1235.165584][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4439'. [ 1235.227222][ T6045] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1235.334448][ T6025] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1235.347756][ T6025] usb 5-1: device descriptor read/8, error -71 [ 1235.379483][ T6045] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1235.379512][ T6045] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1235.379534][ T6045] usb 2-1: config 150 has no interface number 0 [ 1235.379578][ T6045] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1235.383830][ T6045] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1235.383859][ T6045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.383881][ T6045] usb 2-1: Product: syz [ 1235.383896][ T6045] usb 2-1: Manufacturer: syz [ 1235.383911][ T6045] usb 2-1: SerialNumber: syz [ 1235.671453][ T6045] xr_serial 2-1:150.204: skipping garbage [ 1235.671512][ T6045] xr_serial 2-1:150.204: xr_serial converter detected [ 1235.850478][ T6025] usb usb5-port1: unable to enumerate USB device [ 1236.181712][ T6045] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 1236.181771][ T6045] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1236.221577][ T6045] usb 2-1: USB disconnect, device number 61 [ 1236.223920][ T6045] xr_serial 2-1:150.204: device disconnected [ 1236.270762][T19951] overlay: Unknown parameter 'euid<00000000000000000000' [ 1236.397499][T19879] Bluetooth: hci2: command 0x0419 tx timeout [ 1236.428120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.543471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.038005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.007171][ T6045] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1238.151401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.167514][ T6045] usb 5-1: Using ep0 maxpacket: 16 [ 1238.173054][ T6045] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 1238.173082][ T6045] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1238.173120][ T6045] usb 5-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 1238.173141][ T6045] usb 5-1: config 0 has no interface number 0 [ 1238.190351][ T6045] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1238.190387][ T6045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.190471][ T6045] usb 5-1: Product: syz [ 1238.190489][ T6045] usb 5-1: Manufacturer: syz [ 1238.190508][ T6045] usb 5-1: SerialNumber: syz [ 1238.197400][ T6045] usb 5-1: config 0 descriptor?? [ 1238.204697][ T6045] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1238.204738][ T6045] uvcvideo 5-1:0.105: No valid video chain found. [ 1238.278642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.420125][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.449952][ T6045] usb 5-1: USB disconnect, device number 72 [ 1238.478503][T19879] Bluetooth: hci2: command 0x0419 tx timeout [ 1238.526134][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.587938][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.697889][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.741619][ T12] bond0 (unregistering): Released all slaves [ 1238.788943][T19878] chnl_net:caif_netlink_parms(): no params data found [ 1238.904945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.910183][T19965] bridge0: entered promiscuous mode [ 1238.910317][T19965] macvlan2: entered promiscuous mode [ 1239.033363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.078772][T19969] netlink: 16211 bytes leftover after parsing attributes in process `syz.6.4446'. [ 1239.376393][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.045316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.212285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.442701][T19978] overlay: Unknown parameter 'euid<00000000000000000000' [ 1240.566695][T19879] Bluetooth: hci2: command 0x0419 tx timeout [ 1240.642770][T19987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.031574][T19878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.031661][T19878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.031904][T19878] bridge_slave_0: entered allmulticast mode [ 1241.035850][T19878] bridge_slave_0: entered promiscuous mode [ 1241.048774][T19878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.048916][T19878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.049293][T19878] bridge_slave_1: entered allmulticast mode [ 1241.055676][T19878] bridge_slave_1: entered promiscuous mode [ 1241.197407][ T5863] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1241.388588][ T5863] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1241.388621][ T5863] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1241.388644][ T5863] usb 6-1: config 150 has no interface number 0 [ 1241.388694][ T5863] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1241.393530][ T5863] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1241.393561][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.393583][ T5863] usb 6-1: Product: syz [ 1241.393598][ T5863] usb 6-1: Manufacturer: syz [ 1241.393614][ T5863] usb 6-1: SerialNumber: syz [ 1241.755326][ T5863] xr_serial 6-1:150.204: skipping garbage [ 1241.755396][ T5863] xr_serial 6-1:150.204: xr_serial converter detected [ 1242.359724][ T5863] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 1242.359784][ T5863] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1242.394640][ T5863] usb 6-1: USB disconnect, device number 53 [ 1242.412317][ T5863] xr_serial 6-1:150.204: device disconnected [ 1242.465755][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4455'. [ 1242.613635][T19878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.089118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.097786][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.153116][T19878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.167172][ T5863] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1244.303022][T20009] bridge0: entered promiscuous mode [ 1244.303141][T20009] macvlan2: entered promiscuous mode [ 1244.343505][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 1244.355549][ T5863] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.355614][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1244.355641][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1244.355725][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1244.355749][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1244.430068][ T5863] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1244.430111][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1244.430145][ T5863] usb 6-1: Product: syz [ 1244.430162][ T5863] usb 6-1: Manufacturer: syz [ 1244.430178][ T5863] usb 6-1: SerialNumber: syz [ 1244.520028][ T5863] usb 6-1: config 0 descriptor?? [ 1244.562567][ T5863] usb 6-1: no audio or video endpoints found [ 1244.775760][ T991] usb 6-1: USB disconnect, device number 54 [ 1244.967856][ T5863] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1245.120386][ T5863] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1245.120417][ T5863] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1245.120440][ T5863] usb 5-1: config 150 has no interface number 0 [ 1245.120488][ T5863] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1245.124237][ T5863] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1245.124265][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.124286][ T5863] usb 5-1: Product: syz [ 1245.124300][ T5863] usb 5-1: Manufacturer: syz [ 1245.124315][ T5863] usb 5-1: SerialNumber: syz [ 1245.247253][ T12] hsr_slave_0: left promiscuous mode [ 1245.293023][ T12] hsr_slave_1: left promiscuous mode [ 1245.334857][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.334890][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.370440][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.370472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.410452][ T5863] xr_serial 5-1:150.204: skipping garbage [ 1245.410507][ T5863] xr_serial 5-1:150.204: xr_serial converter detected [ 1245.561397][ T12] veth1_macvtap: left promiscuous mode [ 1245.561513][ T12] veth0_macvtap: left promiscuous mode [ 1245.561801][ T12] veth1_vlan: left promiscuous mode [ 1245.561992][ T12] veth0_vlan: left promiscuous mode [ 1245.750050][T13406] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1245.891338][ T5863] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 1245.891847][ T5863] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1245.927950][T13406] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1245.927983][T13406] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1245.928006][T13406] usb 6-1: config 150 has no interface number 0 [ 1245.928051][T13406] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1245.936287][T13406] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1245.936319][T13406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.936341][T13406] usb 6-1: Product: syz [ 1245.936356][T13406] usb 6-1: Manufacturer: syz [ 1245.936372][T13406] usb 6-1: SerialNumber: syz [ 1246.019603][ T5863] usb 5-1: USB disconnect, device number 73 [ 1246.022557][ T5863] xr_serial 5-1:150.204: device disconnected [ 1246.166523][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1246.274562][T13406] xr_serial 6-1:150.204: skipping garbage [ 1246.274627][T13406] xr_serial 6-1:150.204: xr_serial converter detected [ 1246.476259][T13406] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1246.476303][T13406] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1246.503431][T13406] usb 6-1: USB disconnect, device number 55 [ 1246.517348][T13406] xr_serial 6-1:150.204: device disconnected [ 1246.867275][ T5883] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1247.021157][ T5883] usb 5-1: not running at top speed; connect to a high speed hub [ 1247.022988][ T5883] usb 5-1: config 4 has an invalid interface number: 75 but max is 0 [ 1247.023008][ T5883] usb 5-1: config 4 has no interface number 0 [ 1247.023043][ T5883] usb 5-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1247.023060][ T5883] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1247.023080][ T5883] usb 5-1: config 4 interface 75 altsetting 4 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1247.023098][ T5883] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x87 has an invalid bInterval 150, changing to 4 [ 1247.023117][ T5883] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x87 has invalid maxpacket 40964, setting to 1023 [ 1247.023136][ T5883] usb 5-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1247.023152][ T5883] usb 5-1: config 4 interface 75 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1247.023168][ T5883] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1247.023186][ T5883] usb 5-1: config 4 interface 75 altsetting 4 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 1247.023206][ T5883] usb 5-1: config 4 interface 75 has no altsetting 0 [ 1247.025819][ T5883] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffcb, bcdDevice=77.e8 [ 1247.025840][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.025862][ T5883] usb 5-1: Product: Ⰺ [ 1247.025873][ T5883] usb 5-1: Manufacturer: ⺔뚳Ⱀ銨 [ 1247.025884][ T5883] usb 5-1: SerialNumber: 孂殊総᯲껁헎뮿齣㴣Ꜩ꨼浀ڇ쁣ס旌媑楠͸ᮆ犒괭ᡥ⌖䴲퀺⭸ꦺ쎒摒靨ꦥ雟ゟ萣腲讘೺혥㬟趎컬鯋쉌ୱ䊡볉䏳箑㙈ヌ翳㓙牞Ꙡר暥⎉䋦ꦇ켑婠騾퍟ᷞ뢁눜ˡ튇螝⬤툙鮟㹪닻㒄ꏿ츇}鞐⠷멅῔쎬븋螮 [ 1247.306487][ T5883] option 5-1:4.75: GSM modem (1-port) converter detected [ 1247.323585][ T5883] usb 5-1: USB disconnect, device number 74 [ 1247.334012][ T5883] option 5-1:4.75: device disconnected [ 1247.557298][ T6045] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1247.775754][ T6045] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1247.775819][ T6045] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 1247.775838][ T6045] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.775854][ T6045] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1247.775884][ T6045] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1247.775901][ T6045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.203627][T20044] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4470'. [ 1248.203663][T20044] block nbd0: not configured, cannot reconfigure [ 1248.910685][ T6045] ath6kl: Failed to submit usb control message: -110 [ 1248.910740][ T6045] ath6kl: unable to send the bmi data to the device: -110 [ 1248.910757][ T6045] ath6kl: Unable to send get target info: -110 [ 1248.911872][ T6045] ath6kl: Failed to init ath6kl core: -110 [ 1248.912439][ T6045] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1249.182987][ T6025] usb 6-1: USB disconnect, device number 56 [ 1249.487405][ T5897] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1249.671543][ T5897] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1249.671576][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.671591][ T5897] usb 5-1: Product: syz [ 1249.671602][ T5897] usb 5-1: Manufacturer: syz [ 1249.671612][ T5897] usb 5-1: SerialNumber: syz [ 1249.675379][ T5897] usb 5-1: config 0 descriptor?? [ 1250.008728][ T5897] usb 5-1: USB disconnect, device number 75 [ 1250.239910][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1250.488331][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1250.715644][T20062] FAULT_INJECTION: forcing a failure. [ 1250.715644][T20062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.715669][T20062] CPU: 0 UID: 0 PID: 20062 Comm: syz.4.4475 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1250.715686][T20062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1250.715696][T20062] Call Trace: [ 1250.715701][T20062] [ 1250.715708][T20062] dump_stack_lvl+0x189/0x250 [ 1250.715752][T20062] ? __pfx____ratelimit+0x10/0x10 [ 1250.715771][T20062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.715794][T20062] ? __pfx__printk+0x10/0x10 [ 1250.715813][T20062] ? __might_fault+0xb0/0x130 [ 1250.715843][T20062] should_fail_ex+0x46c/0x600 [ 1250.715868][T20062] _copy_from_user+0x2d/0xb0 [ 1250.715885][T20062] ___sys_sendmsg+0x158/0x2a0 [ 1250.715905][T20062] ? __pfx____sys_sendmsg+0x10/0x10 [ 1250.715948][T20062] ? __fget_files+0x2a/0x420 [ 1250.715968][T20062] ? __fget_files+0x3a6/0x420 [ 1250.715997][T20062] __x64_sys_sendmsg+0x1a1/0x260 [ 1250.716016][T20062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1250.716041][T20062] ? __pfx_ksys_write+0x10/0x10 [ 1250.716063][T20062] ? do_syscall_64+0xbe/0xfa0 [ 1250.716084][T20062] do_syscall_64+0xfa/0xfa0 [ 1250.716102][T20062] ? lockdep_hardirqs_on+0x9c/0x150 [ 1250.716127][T20062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.716142][T20062] ? clear_bhb_loop+0x60/0xb0 [ 1250.716161][T20062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.716175][T20062] RIP: 0033:0x7f23dce9efc9 [ 1250.716196][T20062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.716210][T20062] RSP: 002b:00007f23db0fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.716227][T20062] RAX: ffffffffffffffda RBX: 00007f23dd0f5fa0 RCX: 00007f23dce9efc9 [ 1250.716238][T20062] RDX: 0000000004000080 RSI: 0000200000000680 RDI: 0000000000000005 [ 1250.716266][T20062] RBP: 00007f23db0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.716275][T20062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.716285][T20062] R13: 00007f23dd0f6038 R14: 00007f23dd0f5fa0 R15: 00007ffff5f0ba58 [ 1250.716323][T20062] [ 1253.924212][ T6045] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1254.090031][ T6045] usb 5-1: config 166 has an invalid interface number: 59 but max is 0 [ 1254.090053][ T6045] usb 5-1: config 166 has no interface number 0 [ 1254.090077][ T6045] usb 5-1: config 166 interface 59 has no altsetting 0 [ 1254.092429][ T6045] usb 5-1: New USB device found, idVendor=08ca, idProduct=2028, bcdDevice=34.d2 [ 1254.092457][ T6045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.092498][ T6045] usb 5-1: Product: syz [ 1254.092516][ T6045] usb 5-1: Manufacturer: syz [ 1254.092528][ T6045] usb 5-1: SerialNumber: syz [ 1254.353161][ T6045] gspca_main: sunplus-2.14.0 probing 08ca:2028 [ 1254.353647][ T6045] gspca_sunplus: reg_r err -71 [ 1254.353732][ T6045] sunplus 5-1:166.59: probe with driver sunplus failed with error -71 [ 1254.356842][ T6045] usb 5-1: USB disconnect, device number 76 [ 1254.602795][T19878] team0: Port device team_slave_0 added [ 1254.684022][T20057] bridge0: entered promiscuous mode [ 1254.684141][T20057] macvlan2: entered promiscuous mode [ 1254.700065][T19878] team0: Port device team_slave_1 added [ 1255.188923][T20088] netlink: 'syz.6.4481': attribute type 3 has an invalid length. [ 1256.187201][T20095] FAULT_INJECTION: forcing a failure. [ 1256.187201][T20095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.187357][T20095] CPU: 1 UID: 0 PID: 20095 Comm: syz.6.4486 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1256.187380][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1256.187394][T20095] Call Trace: [ 1256.187403][T20095] [ 1256.187412][T20095] dump_stack_lvl+0x189/0x250 [ 1256.187448][T20095] ? __pfx____ratelimit+0x10/0x10 [ 1256.187474][T20095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.187505][T20095] ? __pfx__printk+0x10/0x10 [ 1256.187530][T20095] ? __might_fault+0xb0/0x130 [ 1256.187570][T20095] should_fail_ex+0x46c/0x600 [ 1256.187611][T20095] _copy_from_user+0x2d/0xb0 [ 1256.187635][T20095] __sys_bpf+0x1e3/0x860 [ 1256.187667][T20095] ? __pfx___sys_bpf+0x10/0x10 [ 1256.187692][T20095] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1256.187730][T20095] ? ksys_write+0x230/0x260 [ 1256.187759][T20095] ? __pfx_ksys_write+0x10/0x10 [ 1256.187790][T20095] __x64_sys_bpf+0x7c/0x90 [ 1256.187818][T20095] do_syscall_64+0xfa/0xfa0 [ 1256.187843][T20095] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.187868][T20095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.187889][T20095] ? clear_bhb_loop+0x60/0xb0 [ 1256.187915][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.187935][T20095] RIP: 0033:0x7fd19640efc9 [ 1256.187953][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.187971][T20095] RSP: 002b:00007fd194676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1256.187992][T20095] RAX: ffffffffffffffda RBX: 00007fd196665fa0 RCX: 00007fd19640efc9 [ 1256.188009][T20095] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 1256.188022][T20095] RBP: 00007fd194676090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.188036][T20095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.188049][T20095] R13: 00007fd196666038 R14: 00007fd196665fa0 R15: 00007ffe9c4b5ab8 [ 1256.188083][T20095] [ 1256.454772][T20098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4487'. [ 1256.784443][T19878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.784462][T19878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.784492][T19878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.440662][T19878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.440682][T19878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.440712][T19878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.590530][T20107] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4491'. [ 1258.023005][T20118] macvlan3: entered promiscuous mode [ 1258.041939][T19878] hsr_slave_0: entered promiscuous mode [ 1258.043388][T19878] hsr_slave_1: entered promiscuous mode [ 1258.044403][T19878] debugfs: 'hsr0' already exists in 'hsr' [ 1258.044429][T19878] Cannot create hsr debugfs directory [ 1258.229860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.343797][T20126] netlink: 'syz.4.4495': attribute type 3 has an invalid length. [ 1258.994641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.239326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.383727][T20134] random: crng reseeded on system resumption [ 1259.833557][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.861161][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.949206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.216989][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.277950][T20141] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4501'. [ 1260.346733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.431796][ T6045] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1260.432319][T13406] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1260.461392][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4503'. [ 1260.577145][ T6045] usb 2-1: Using ep0 maxpacket: 16 [ 1260.584019][ T6045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.584111][ T6045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.584162][ T6045] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1260.584194][ T6045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.584362][T13406] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1260.584385][T13406] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1260.584408][T13406] usb 5-1: config 150 has no interface number 0 [ 1260.584461][T13406] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1260.602670][T13406] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1260.602693][T13406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.602708][T13406] usb 5-1: Product: syz [ 1260.602718][T13406] usb 5-1: Manufacturer: syz [ 1260.602728][T13406] usb 5-1: SerialNumber: syz [ 1260.677127][ T5863] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1260.716435][ T6045] usb 2-1: config 0 descriptor?? [ 1260.788135][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.851768][ T5863] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1260.853580][ T5863] usb 7-1: config 14 has an invalid interface number: 15 but max is 0 [ 1260.853605][ T5863] usb 7-1: config 14 has no interface number 0 [ 1260.853762][ T5863] usb 7-1: config 14 interface 15 altsetting 251 bulk endpoint 0xC has invalid maxpacket 1024 [ 1260.853852][ T5863] usb 7-1: config 14 interface 15 has no altsetting 0 [ 1260.904289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.914078][ T5863] usb 7-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=e9.80 [ 1260.914110][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.914197][ T5863] usb 7-1: Product: syz [ 1260.914214][ T5863] usb 7-1: Manufacturer: syz [ 1260.914229][ T5863] usb 7-1: SerialNumber: syz [ 1260.960373][T13406] xr_serial 5-1:150.204: skipping garbage [ 1260.960630][T13406] xr_serial 5-1:150.204: xr_serial converter detected [ 1260.983677][T20143] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1261.024815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.150686][T13406] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1261.154680][T13406] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1261.193459][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.193503][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.193792][T13406] usb 5-1: USB disconnect, device number 77 [ 1261.193925][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.193955][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.193992][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.194239][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.194268][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.194297][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.194325][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.194573][ T6045] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 1261.280919][T13406] xr_serial 5-1:150.204: device disconnected [ 1261.306216][ T6045] logitech 0003:046D:C29C.000D: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 1261.459245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.493882][ T6045] logitech 0003:046D:C29C.000D: no inputs found [ 1261.819914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.448842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.462238][ T6045] usb 2-1: USB disconnect, device number 62 [ 1262.479390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.706575][T20159] macvlan3: entered promiscuous mode [ 1263.197886][T20165] netlink: 'syz.5.4508': attribute type 3 has an invalid length. [ 1264.871541][ T5863] usb 7-1: Could not find all expected endpoints [ 1264.883363][ T5863] usb 7-1: USB disconnect, device number 67 [ 1265.422285][T20182] random: crng reseeded on system resumption [ 1265.438107][T20182] Restarting kernel threads ... [ 1265.439835][T20182] Done restarting kernel threads. [ 1265.610297][ T5863] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1265.813557][T20180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4513'. [ 1266.130121][ T5863] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1266.130166][ T5863] usb 7-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1266.130188][ T5863] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1266.130226][ T5863] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1266.130248][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.369758][T20178] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4511'. [ 1266.369790][T20178] block nbd0: not configured, cannot reconfigure [ 1266.487909][ T5897] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1266.666026][T19878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1266.683899][ T5897] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1266.683932][ T5897] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1266.683956][ T5897] usb 5-1: config 150 has no interface number 0 [ 1266.684007][ T5897] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1266.720268][ T5897] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1266.720303][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.720326][ T5897] usb 5-1: Product: syz [ 1266.720342][ T5897] usb 5-1: Manufacturer: syz [ 1266.720358][ T5897] usb 5-1: SerialNumber: syz [ 1266.726745][T19878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1266.853443][T19878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1267.157204][ T5897] xr_serial 5-1:150.204: skipping garbage [ 1267.157265][ T5897] xr_serial 5-1:150.204: xr_serial converter detected [ 1267.269312][T20203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1267.736502][ T5863] ath6kl: Failed to submit usb control message: -110 [ 1267.736561][ T5863] ath6kl: unable to send the bmi data to the device: -110 [ 1267.736578][ T5863] ath6kl: Unable to send get target info: -110 [ 1267.778890][T19878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1267.840743][ T5863] ath6kl: Failed to init ath6kl core: -110 [ 1267.841330][ T5863] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1267.862175][T13406] usb 7-1: USB disconnect, device number 68 [ 1267.962646][ T5897] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1267.962692][ T5897] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1267.965954][ T5897] usb 5-1: USB disconnect, device number 78 [ 1267.970648][ T5897] xr_serial 5-1:150.204: device disconnected [ 1268.149639][T19878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.236280][T19878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.255392][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.255683][ T7308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.272615][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.272851][ T7023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.467137][ T6045] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1268.644153][ T6045] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1268.644183][ T6045] usb 2-1: config 5 has no interface number 0 [ 1268.644233][ T6045] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1268.644261][ T6045] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1268.644286][ T6045] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1268.657667][ T5897] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1268.668088][ T6045] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1268.668125][ T6045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.668150][ T6045] usb 2-1: Product: syz [ 1268.668168][ T6045] usb 2-1: Manufacturer: syz [ 1268.668185][ T6045] usb 2-1: SerialNumber: syz [ 1268.822109][ T5897] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1268.822164][ T5897] usb 6-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1268.822187][ T5897] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1268.822232][ T5897] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1268.822258][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.136080][T20219] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4523'. [ 1269.136111][T20219] block nbd0: not configured, cannot reconfigure [ 1269.338274][ T5897] ath6kl: Failed to submit usb control message: -71 [ 1269.338333][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 1269.338349][ T5897] ath6kl: Unable to send get target info: -71 [ 1269.339417][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 1269.339956][ T5897] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1269.424588][ T5897] usb 6-1: USB disconnect, device number 57 [ 1269.438590][T19878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.506054][ T6045] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1269.562350][ T6045] usb 2-1: USB disconnect, device number 63 [ 1269.656145][T19878] veth0_vlan: entered promiscuous mode [ 1269.683796][T19878] veth1_vlan: entered promiscuous mode [ 1269.740794][T19878] veth0_macvtap: entered promiscuous mode [ 1269.747004][T19878] veth1_macvtap: entered promiscuous mode [ 1269.794507][T19878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.797195][ T991] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1269.836161][T19878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.861583][ T7303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.861844][ T7303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.861884][ T7303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.861921][ T7303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.926843][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4529'. [ 1270.503594][ T991] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 1270.503626][ T991] usb 7-1: config 5 has no interface number 0 [ 1270.503678][ T991] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1270.503709][ T991] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1270.503734][ T991] usb 7-1: config 5 interface 123 has no altsetting 0 [ 1270.506771][ T991] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1270.506801][ T991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.506823][ T991] usb 7-1: Product: syz [ 1270.506838][ T991] usb 7-1: Manufacturer: syz [ 1270.506853][ T991] usb 7-1: SerialNumber: syz [ 1270.919040][ T5883] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1271.136640][ T6025] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1271.206978][ T5883] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1271.207006][ T5883] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1271.207902][ T5883] usb 2-1: config 150 has no interface number 0 [ 1271.207951][ T5883] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1271.227200][ T5883] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1271.227238][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.227261][ T5883] usb 2-1: Product: syz [ 1271.227276][ T5883] usb 2-1: Manufacturer: syz [ 1271.227293][ T5883] usb 2-1: SerialNumber: syz [ 1271.296897][T13406] hid_parser_main: 150 callbacks suppressed [ 1271.296921][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.297006][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.318859][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.318942][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.318970][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.318997][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.319024][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.319101][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.319135][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.319163][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: unknown main item tag 0x0 [ 1271.344378][ T6025] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1271.344407][ T6025] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1271.344432][ T6025] usb 5-1: config 150 has no interface number 0 [ 1271.344538][ T6025] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1271.358985][ T6025] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1271.359076][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.359099][ T6025] usb 5-1: Product: syz [ 1271.359115][ T6025] usb 5-1: Manufacturer: syz [ 1271.359130][ T6025] usb 5-1: SerialNumber: syz [ 1271.447174][ T6045] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1271.512324][T13406] hid-generic 0007:FFFFFFF8:0FFF.000E: hidraw0: HID v0.07 Device [syz1] on syz0 [ 1271.536634][ T5883] xr_serial 2-1:150.204: skipping garbage [ 1271.540834][ T5883] xr_serial 2-1:150.204: xr_serial converter detected [ 1271.599767][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1271.600464][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1271.644808][ T6025] xr_serial 5-1:150.204: skipping garbage [ 1271.645250][ T6025] xr_serial 5-1:150.204: xr_serial converter detected [ 1271.672274][ T6025] xr_serial ttyUSB1: Failed to set reg 0x60: -71 [ 1271.672572][ T6025] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 1271.731757][ T5883] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1271.731819][ T5883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1271.739537][ T6025] usb 5-1: USB disconnect, device number 79 [ 1271.742397][ T6025] xr_serial 5-1:150.204: device disconnected [ 1271.754916][ T5883] usb 2-1: USB disconnect, device number 64 [ 1271.763002][ T5883] xr_serial 2-1:150.204: device disconnected [ 1271.823770][ T6045] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1271.825078][ T6045] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1271.825178][ T6045] usb 6-1: can't read configurations, error -71 [ 1272.019683][ T7308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.019706][ T7308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.095963][ T991] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1272.096437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.096456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.137962][ T991] usb 7-1: USB disconnect, device number 69 [ 1272.296197][T20263] vivid-007: disconnect [ 1272.307907][T20264] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.4535'. [ 1272.438395][T20270] FAULT_INJECTION: forcing a failure. [ 1272.438395][T20270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.438431][T20270] CPU: 1 UID: 0 PID: 20270 Comm: syz.4.4538 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1272.438456][T20270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1272.438470][T20270] Call Trace: [ 1272.438479][T20270] [ 1272.438488][T20270] dump_stack_lvl+0x189/0x250 [ 1272.438526][T20270] ? __pfx____ratelimit+0x10/0x10 [ 1272.438553][T20270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1272.438585][T20270] ? __pfx__printk+0x10/0x10 [ 1272.438612][T20270] ? __might_fault+0xb0/0x130 [ 1272.438657][T20270] should_fail_ex+0x46c/0x600 [ 1272.438692][T20270] _copy_from_user+0x2d/0xb0 [ 1272.438716][T20270] __sys_bpf+0x1e3/0x860 [ 1272.438749][T20270] ? __pfx___sys_bpf+0x10/0x10 [ 1272.438777][T20270] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1272.438817][T20270] ? ksys_write+0x230/0x260 [ 1272.438846][T20270] ? __pfx_ksys_write+0x10/0x10 [ 1272.438879][T20270] __x64_sys_bpf+0x7c/0x90 [ 1272.438906][T20270] do_syscall_64+0xfa/0xfa0 [ 1272.438935][T20270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.438956][T20270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1272.438999][T20270] ? clear_bhb_loop+0x60/0xb0 [ 1272.439026][T20270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.439048][T20270] RIP: 0033:0x7f23dce9efc9 [ 1272.439068][T20270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.439087][T20270] RSP: 002b:00007f23db0fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1272.439112][T20270] RAX: ffffffffffffffda RBX: 00007f23dd0f5fa0 RCX: 00007f23dce9efc9 [ 1272.439129][T20270] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000010 [ 1272.439144][T20270] RBP: 00007f23db0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.439158][T20270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.439172][T20270] R13: 00007f23dd0f6038 R14: 00007f23dd0f5fa0 R15: 00007ffff5f0ba58 [ 1272.439206][T20270] [ 1272.757255][ T5883] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1272.909412][ T5883] usb 2-1: config 166 has an invalid interface number: 59 but max is 0 [ 1272.909444][ T5883] usb 2-1: config 166 has no interface number 0 [ 1272.909480][ T5883] usb 2-1: config 166 interface 59 has no altsetting 0 [ 1272.912069][ T5883] usb 2-1: New USB device found, idVendor=08ca, idProduct=2028, bcdDevice=34.d2 [ 1272.912096][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.912110][ T5883] usb 2-1: Product: syz [ 1272.912121][ T5883] usb 2-1: Manufacturer: syz [ 1272.912133][ T5883] usb 2-1: SerialNumber: syz [ 1272.947240][ T6045] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1272.977202][T16423] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1272.984988][ T991] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1273.110750][ T6045] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 1273.110779][ T6045] usb 6-1: config 5 has no interface number 0 [ 1273.110825][ T6045] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1273.110853][ T6045] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1273.110877][ T6045] usb 6-1: config 5 interface 123 has no altsetting 0 [ 1273.113866][ T6045] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1273.113895][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.113917][ T6045] usb 6-1: Product: syz [ 1273.113938][ T6045] usb 6-1: Manufacturer: syz [ 1273.113954][ T6045] usb 6-1: SerialNumber: syz [ 1273.127391][T20262] vivid-007: reconnect [ 1273.127563][T16423] usb 5-1: Using ep0 maxpacket: 8 [ 1273.150938][T16423] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.151080][T16423] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1273.151107][T16423] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.151138][T16423] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1273.163597][T16423] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1273.163678][T16423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.163699][T16423] usb 5-1: Product: syz [ 1273.163713][T16423] usb 5-1: Manufacturer: syz [ 1273.163727][T16423] usb 5-1: SerialNumber: syz [ 1273.256421][ T991] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1273.278103][ T991] usb 7-1: config 14 has an invalid interface number: 15 but max is 0 [ 1273.278131][ T991] usb 7-1: config 14 has no interface number 0 [ 1273.278177][ T991] usb 7-1: config 14 interface 15 altsetting 251 bulk endpoint 0xC has invalid maxpacket 1024 [ 1273.278204][ T991] usb 7-1: config 14 interface 15 has no altsetting 0 [ 1273.316306][ T991] usb 7-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=e9.80 [ 1273.316338][ T991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.316360][ T991] usb 7-1: Product: syz [ 1273.316376][ T991] usb 7-1: Manufacturer: syz [ 1273.316393][ T991] usb 7-1: SerialNumber: syz [ 1273.371955][T16423] usb 5-1: config 0 descriptor?? [ 1273.373587][T20276] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1273.389908][T16423] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1273.827165][T16423] snd_usb_toneport 5-1:0.0: set_interface failed [ 1273.827481][T16423] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1273.827690][T16423] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1273.840828][ T5883] gspca_main: sunplus-2.14.0 probing 08ca:2028 [ 1273.841678][T16423] usb 5-1: USB disconnect, device number 80 [ 1273.846235][ T5883] gspca_sunplus: reg_r err -71 [ 1273.846339][ T5883] sunplus 2-1:166.59: probe with driver sunplus failed with error -71 [ 1273.895032][ T5883] usb 2-1: USB disconnect, device number 65 [ 1274.173926][ T6025] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1274.458981][ T6025] usb 3-1: Using ep0 maxpacket: 32 [ 1274.894422][ T6025] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1274.894487][ T6025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1274.894513][ T6025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 255, changing to 11 [ 1274.894542][ T6025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 59391, setting to 1024 [ 1274.894571][ T6025] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1274.943512][T20284] fuse: Unknown parameter 'grou00000000000000000000' [ 1274.962580][ T6025] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1274.962657][ T6025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1274.962681][ T6025] usb 3-1: Product: syz [ 1274.962697][ T6025] usb 3-1: Manufacturer: syz [ 1274.962713][ T6025] usb 3-1: SerialNumber: syz [ 1274.999232][ T6025] usb 3-1: config 0 descriptor?? [ 1275.004106][T20280] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1275.026681][ T6025] usb 3-1: no audio or video endpoints found [ 1275.206941][T20290] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.4547'. [ 1275.209846][ T6045] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1275.236661][T13406] usb 3-1: USB disconnect, device number 65 [ 1275.293649][ T6045] usb 6-1: USB disconnect, device number 59 [ 1275.327559][ T6025] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1275.457208][ T6025] usb 5-1: device descriptor read/64, error -71 [ 1275.627162][ T5883] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1275.697203][ T6025] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1275.783191][ T5883] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1275.783224][ T5883] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1275.783247][ T5883] usb 2-1: config 150 has no interface number 0 [ 1275.783298][ T5883] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1275.798523][ T5883] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1275.798556][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.798579][ T5883] usb 2-1: Product: syz [ 1275.798594][ T5883] usb 2-1: Manufacturer: syz [ 1275.798610][ T5883] usb 2-1: SerialNumber: syz [ 1275.850267][ T6025] usb 5-1: device descriptor read/64, error -71 [ 1275.957680][ T6025] usb usb5-port1: attempt power cycle [ 1276.023569][ T991] usb 7-1: Could not find all expected endpoints [ 1276.047337][T20298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4552'. [ 1276.081963][ T5883] xr_serial 2-1:150.204: skipping garbage [ 1276.082061][ T5883] xr_serial 2-1:150.204: xr_serial converter detected [ 1276.146805][ T991] usb 7-1: USB disconnect, device number 70 [ 1276.286021][ T5883] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1276.286083][ T5883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1276.307226][ T6025] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1276.310143][ T5883] usb 2-1: USB disconnect, device number 66 [ 1276.312888][ T5883] xr_serial 2-1:150.204: device disconnected [ 1276.448181][ T6025] usb 5-1: device descriptor read/8, error -71 [ 1277.441252][T20313] fuse: Unknown parameter 'grou00000000000000000000' [ 1277.467179][ T6025] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1277.488352][ T6025] usb 5-1: device descriptor read/8, error -71 [ 1277.540141][ T991] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1277.597718][ T6025] usb usb5-port1: unable to enumerate USB device [ 1277.697539][ T5883] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1277.701809][ T991] usb 7-1: config 166 has an invalid interface number: 59 but max is 0 [ 1277.701831][ T991] usb 7-1: config 166 has no interface number 0 [ 1277.701854][ T991] usb 7-1: config 166 interface 59 has no altsetting 0 [ 1277.703791][ T991] usb 7-1: New USB device found, idVendor=08ca, idProduct=2028, bcdDevice=34.d2 [ 1277.703810][ T991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.703825][ T991] usb 7-1: Product: syz [ 1277.703836][ T991] usb 7-1: Manufacturer: syz [ 1277.703846][ T991] usb 7-1: SerialNumber: syz [ 1277.847305][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 1277.849888][ T5883] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1277.849943][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1277.849968][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 255, changing to 11 [ 1277.849997][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 59391, setting to 1024 [ 1277.850024][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1277.852935][ T5883] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1277.852965][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1277.852987][ T5883] usb 2-1: Product: syz [ 1277.853002][ T5883] usb 2-1: Manufacturer: syz [ 1277.853017][ T5883] usb 2-1: SerialNumber: syz [ 1277.858452][ T5883] usb 2-1: config 0 descriptor?? [ 1277.877322][ T6025] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1277.880744][T20311] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1277.910267][ T5883] usb 2-1: no audio or video endpoints found [ 1277.927162][T16423] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1278.060456][ T6025] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1278.061915][ T6025] usb 6-1: config 14 has an invalid interface number: 15 but max is 0 [ 1278.061940][ T6025] usb 6-1: config 14 has no interface number 0 [ 1278.061989][ T6025] usb 6-1: config 14 interface 15 altsetting 251 bulk endpoint 0xC has invalid maxpacket 1024 [ 1278.062016][ T6025] usb 6-1: config 14 interface 15 has no altsetting 0 [ 1278.064923][ T6025] usb 6-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=e9.80 [ 1278.064949][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.064969][ T6025] usb 6-1: Product: syz [ 1278.064984][ T6025] usb 6-1: Manufacturer: syz [ 1278.064998][ T6025] usb 6-1: SerialNumber: syz [ 1278.092825][T20319] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1278.143132][T16423] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 1278.143178][T16423] usb 3-1: config 5 has no interface number 0 [ 1278.143284][T16423] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1278.143316][T16423] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1278.143343][T16423] usb 3-1: config 5 interface 123 has no altsetting 0 [ 1278.157472][T16423] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1278.157555][T16423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.157576][T16423] usb 3-1: Product: syz [ 1278.157589][T16423] usb 3-1: Manufacturer: syz [ 1278.157604][T16423] usb 3-1: SerialNumber: syz [ 1278.246795][ T5883] usb 2-1: USB disconnect, device number 67 [ 1279.013783][ T991] gspca_main: sunplus-2.14.0 probing 08ca:2028 [ 1279.048223][ T991] gspca_sunplus: reg_r err -71 [ 1279.055321][ T991] sunplus 7-1:166.59: probe with driver sunplus failed with error -71 [ 1279.521030][ T991] usb 7-1: USB disconnect, device number 71 [ 1279.563836][T15934] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1279.707352][T15934] usb 5-1: Using ep0 maxpacket: 32 [ 1279.726355][T15934] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1279.726421][T15934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1279.726446][T15934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 255, changing to 11 [ 1279.726473][T15934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 59391, setting to 1024 [ 1279.726502][T15934] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1279.761975][T15934] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1279.762007][T15934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1279.762022][T15934] usb 5-1: Product: syz [ 1279.762033][T15934] usb 5-1: Manufacturer: syz [ 1279.762050][T15934] usb 5-1: SerialNumber: syz [ 1279.823821][T15934] usb 5-1: config 0 descriptor?? [ 1279.876003][T20324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1279.892020][T15934] usb 5-1: no audio or video endpoints found [ 1279.995694][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1279.995712][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1280.064758][T16423] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1280.083756][T16423] usb 3-1: USB disconnect, device number 66 [ 1280.088585][ T991] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1280.098228][ T5897] usb 5-1: USB disconnect, device number 85 [ 1280.280826][ T991] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1280.280858][ T991] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 54560, setting to 64 [ 1280.280882][ T991] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1280.280912][ T991] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1280.280938][ T991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.467301][ T5883] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1280.499423][ T991] usb 7-1: usb_control_msg returned -32 [ 1280.499639][ T991] usbtmc 7-1:16.0: can't read capabilities [ 1280.646170][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1280.649676][ T5883] usb 2-1: config 14 has an invalid interface number: 15 but max is 0 [ 1280.649718][ T5883] usb 2-1: config 14 has no interface number 0 [ 1280.649837][ T5883] usb 2-1: config 14 interface 15 altsetting 251 bulk endpoint 0xC has invalid maxpacket 1024 [ 1280.649862][ T5883] usb 2-1: config 14 interface 15 has no altsetting 0 [ 1280.656479][ T5883] usb 2-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=e9.80 [ 1280.656525][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.656548][ T5883] usb 2-1: Product: syz [ 1280.656567][ T5883] usb 2-1: Manufacturer: syz [ 1280.656819][ T5883] usb 2-1: SerialNumber: syz [ 1280.705958][T20336] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1280.785571][ T6025] usb 6-1: Could not find all expected endpoints [ 1280.808787][ T6025] usb 6-1: USB disconnect, device number 60 [ 1281.087230][ T991] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1281.108710][T20343] vivid-007: disconnect [ 1281.239643][T20344] fuse: Unknown parameter 'group_i00000000000000000000' [ 1281.256899][ T991] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1281.256949][ T991] usb 3-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1281.256965][ T991] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1281.256999][ T991] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1281.309957][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.210755][T20342] vivid-007: reconnect [ 1282.591516][T20338] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4565'. [ 1282.591667][T20338] block nbd0: not configured, cannot reconfigure [ 1282.825551][ T991] ath6kl: Failed to submit usb control message: -71 [ 1282.825601][ T991] ath6kl: unable to send the bmi data to the device: -71 [ 1282.825622][ T991] ath6kl: Unable to send get target info: -71 [ 1282.855851][ T5897] usb 7-1: USB disconnect, device number 72 [ 1282.855914][ T991] ath6kl: Failed to init ath6kl core: -71 [ 1282.856467][ T991] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1282.927958][ T991] usb 3-1: USB disconnect, device number 67 [ 1283.097372][ T6025] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1285.245827][ T6025] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1285.245876][ T6025] usb 5-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1285.245899][ T6025] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1285.246001][ T6025] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1285.246029][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.523596][ T5883] usb 2-1: Could not find all expected endpoints [ 1285.574330][ T5883] usb 2-1: USB disconnect, device number 68 [ 1285.660102][T20395] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.4573'. [ 1285.914119][T20354] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1285.914154][T20354] block nbd0: not configured, cannot reconfigure [ 1286.035511][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1286.035535][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1286.274603][T20401] veth1: entered promiscuous mode [ 1286.274634][T20401] veth1: entered allmulticast mode [ 1286.397639][ T6025] ath6kl: Failed to submit usb control message: -110 [ 1286.397678][ T6025] ath6kl: unable to send the bmi data to the device: -110 [ 1286.397690][ T6025] ath6kl: Unable to send get target info: -110 [ 1286.437083][ T6025] ath6kl: Failed to init ath6kl core: -110 [ 1286.437703][ T6025] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1286.441579][ T5883] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1286.623187][ T5883] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1286.623221][ T5883] usb 2-1: config 5 has no interface number 0 [ 1286.623269][ T5883] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1286.623300][ T5883] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1286.623324][ T5883] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1286.648879][ T5883] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1286.648915][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.648938][ T5883] usb 2-1: Product: syz [ 1286.648955][ T5883] usb 2-1: Manufacturer: syz [ 1286.648972][ T5883] usb 2-1: SerialNumber: syz [ 1286.672752][ T6025] usb 5-1: USB disconnect, device number 86 [ 1287.037414][T13648] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1287.037674][ T5897] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1287.207422][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 1287.213332][T13648] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1287.213414][T13648] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1287.213489][T13648] usb 6-1: config 150 has no interface number 0 [ 1287.213661][T13648] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1287.227766][T13648] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1287.227804][T13648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.227829][T13648] usb 6-1: Product: syz [ 1287.227941][T13648] usb 6-1: Manufacturer: syz [ 1287.227961][T13648] usb 6-1: SerialNumber: syz [ 1287.280235][ T5897] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1287.280371][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1287.280398][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 255, changing to 11 [ 1287.280429][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 59391, setting to 1024 [ 1287.280531][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1287.333369][ T5897] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1287.333477][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1287.333530][ T5897] usb 7-1: Product: syz [ 1287.333548][ T5897] usb 7-1: Manufacturer: syz [ 1287.333567][ T5897] usb 7-1: SerialNumber: syz [ 1287.393401][ T5897] usb 7-1: config 0 descriptor?? [ 1287.395495][T20408] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1287.431032][ T5897] usb 7-1: no audio or video endpoints found [ 1287.437201][T20153] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1287.482099][T13648] xr_serial 6-1:150.204: skipping garbage [ 1287.482155][T13648] xr_serial 6-1:150.204: xr_serial converter detected [ 1287.604999][ T6045] usb 7-1: USB disconnect, device number 73 [ 1287.612620][T20153] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1287.614233][T20153] usb 3-1: config 14 has an invalid interface number: 15 but max is 0 [ 1287.614260][T20153] usb 3-1: config 14 has no interface number 0 [ 1287.614312][T20153] usb 3-1: config 14 interface 15 altsetting 251 bulk endpoint 0xC has invalid maxpacket 1024 [ 1287.614340][T20153] usb 3-1: config 14 interface 15 has no altsetting 0 [ 1287.632022][T20153] usb 3-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=e9.80 [ 1287.632055][T20153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.632076][T20153] usb 3-1: Product: syz [ 1287.632091][T20153] usb 3-1: Manufacturer: syz [ 1287.632107][T20153] usb 3-1: SerialNumber: syz [ 1287.704406][T20412] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1287.786718][ T5883] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1287.815054][ T5883] usb 2-1: USB disconnect, device number 69 [ 1289.052941][T13648] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1289.052990][T13648] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1289.080556][T13648] usb 6-1: USB disconnect, device number 61 [ 1289.085502][T13648] xr_serial 6-1:150.204: device disconnected [ 1289.436093][T20427] fuse: Unknown parameter 'group_i00000000000000000000' [ 1289.727233][T13648] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1290.260630][T20431] random: crng reseeded on system resumption [ 1291.037997][T13648] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1291.038029][T13648] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 54560, setting to 64 [ 1291.038062][T13648] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.038107][T13648] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1291.038139][T13648] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.290596][T13648] usb 7-1: usb_control_msg returned -32 [ 1291.290655][T13648] usbtmc 7-1:16.0: can't read capabilities [ 1291.392566][T20153] usb 3-1: Could not find all expected endpoints [ 1291.413760][T20153] usb 3-1: USB disconnect, device number 68 [ 1291.660175][T20439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4585'. [ 1291.765067][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1291.765114][T20446] bond_slave_0: entered promiscuous mode [ 1291.765136][T20446] bond_slave_0: entered allmulticast mode [ 1291.880596][T20451] FAULT_INJECTION: forcing a failure. [ 1291.880596][T20451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.880634][T20451] CPU: 1 UID: 0 PID: 20451 Comm: syz.2.4590 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1291.880663][T20451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1291.880677][T20451] Call Trace: [ 1291.880686][T20451] [ 1291.880696][T20451] dump_stack_lvl+0x189/0x250 [ 1291.880734][T20451] ? __pfx____ratelimit+0x10/0x10 [ 1291.880762][T20451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1291.880795][T20451] ? __pfx__printk+0x10/0x10 [ 1291.880822][T20451] ? __might_fault+0xb0/0x130 [ 1291.880865][T20451] should_fail_ex+0x46c/0x600 [ 1291.880898][T20451] _copy_from_user+0x2d/0xb0 [ 1291.880924][T20451] __sys_bpf+0x1e3/0x860 [ 1291.880958][T20451] ? __pfx___sys_bpf+0x10/0x10 [ 1291.880985][T20451] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1291.881025][T20451] ? ksys_write+0x230/0x260 [ 1291.881055][T20451] ? __pfx_ksys_write+0x10/0x10 [ 1291.881086][T20451] __x64_sys_bpf+0x7c/0x90 [ 1291.881114][T20451] do_syscall_64+0xfa/0xfa0 [ 1291.881141][T20451] ? lockdep_hardirqs_on+0x9c/0x150 [ 1291.881168][T20451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.881190][T20451] ? clear_bhb_loop+0x60/0xb0 [ 1291.881217][T20451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.881238][T20451] RIP: 0033:0x7fed4a51efc9 [ 1291.881257][T20451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.881276][T20451] RSP: 002b:00007fed4877e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1291.881298][T20451] RAX: ffffffffffffffda RBX: 00007fed4a775fa0 RCX: 00007fed4a51efc9 [ 1291.881315][T20451] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1291.881329][T20451] RBP: 00007fed4877e090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.881344][T20451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.881357][T20451] R13: 00007fed4a776038 R14: 00007fed4a775fa0 R15: 00007fff424756a8 [ 1291.881393][T20451] [ 1292.143236][T20457] FAULT_INJECTION: forcing a failure. [ 1292.143236][T20457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.143279][T20457] CPU: 1 UID: 0 PID: 20457 Comm: syz.1.4592 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1292.143305][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1292.143319][T20457] Call Trace: [ 1292.143328][T20457] [ 1292.143338][T20457] dump_stack_lvl+0x189/0x250 [ 1292.143376][T20457] ? __pfx____ratelimit+0x10/0x10 [ 1292.143404][T20457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1292.143437][T20457] ? __pfx__printk+0x10/0x10 [ 1292.143463][T20457] ? __might_fault+0xb0/0x130 [ 1292.143506][T20457] should_fail_ex+0x46c/0x600 [ 1292.143542][T20457] _copy_from_user+0x2d/0xb0 [ 1292.143566][T20457] ___sys_sendmsg+0x158/0x2a0 [ 1292.143596][T20457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.143657][T20457] ? __fget_files+0x2a/0x420 [ 1292.143687][T20457] ? __fget_files+0x3a6/0x420 [ 1292.143728][T20457] __x64_sys_sendmsg+0x1a1/0x260 [ 1292.143757][T20457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1292.143793][T20457] ? __pfx_ksys_write+0x10/0x10 [ 1292.143825][T20457] ? do_syscall_64+0xbe/0xfa0 [ 1292.143858][T20457] do_syscall_64+0xfa/0xfa0 [ 1292.143885][T20457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1292.143913][T20457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.143936][T20457] ? clear_bhb_loop+0x60/0xb0 [ 1292.143963][T20457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.143984][T20457] RIP: 0033:0x7f99bb39efc9 [ 1292.144003][T20457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.144024][T20457] RSP: 002b:00007f99b9606038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.144048][T20457] RAX: ffffffffffffffda RBX: 00007f99bb5f5fa0 RCX: 00007f99bb39efc9 [ 1292.144065][T20457] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 1292.144080][T20457] RBP: 00007f99b9606090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.144094][T20457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.144108][T20457] R13: 00007f99bb5f6038 R14: 00007f99bb5f5fa0 R15: 00007ffcb4e1ee78 [ 1292.144144][T20457] [ 1292.288648][T16423] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1292.778950][T16423] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 1292.778972][T16423] usb 6-1: config 5 has no interface number 0 [ 1292.779005][T16423] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1292.779026][T16423] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1292.779043][T16423] usb 6-1: config 5 interface 123 has no altsetting 0 [ 1292.781634][T16423] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1292.781654][T16423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.781669][T16423] usb 6-1: Product: syz [ 1292.781679][T16423] usb 6-1: Manufacturer: syz [ 1292.781690][T16423] usb 6-1: SerialNumber: syz [ 1292.877965][T20468] random: crng reseeded on system resumption [ 1293.723540][T13648] usb 7-1: USB disconnect, device number 74 [ 1293.986512][T20480] fuse: Unknown parameter 'group_i00000000000000000000' [ 1294.117209][ T5897] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1294.176866][T20485] FAULT_INJECTION: forcing a failure. [ 1294.176866][T20485] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.177704][T20485] CPU: 0 UID: 0 PID: 20485 Comm: syz.4.4600 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1294.177730][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1294.177743][T20485] Call Trace: [ 1294.177752][T20485] [ 1294.177762][T20485] dump_stack_lvl+0x189/0x250 [ 1294.177801][T20485] ? __pfx____ratelimit+0x10/0x10 [ 1294.177834][T20485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.177865][T20485] ? __pfx__printk+0x10/0x10 [ 1294.177896][T20485] ? __pfx___might_resched+0x10/0x10 [ 1294.177924][T20485] should_fail_ex+0x46c/0x600 [ 1294.177958][T20485] should_failslab+0xa8/0x100 [ 1294.177990][T20485] __kmalloc_noprof+0xcc/0x7d0 [ 1294.178016][T20485] ? kfree+0x51/0x950 [ 1294.178038][T20485] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1294.178069][T20485] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1294.178095][T20485] ? tomoyo_domain+0xda/0x130 [ 1294.178123][T20485] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1294.178154][T20485] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1294.178187][T20485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1294.178215][T20485] ? __seccomp_filter+0xaa6/0x1e10 [ 1294.178295][T20485] ? __fget_files+0x2a/0x420 [ 1294.178331][T20485] ? __fget_files+0x3a6/0x420 [ 1294.178360][T20485] ? __fget_files+0x2a/0x420 [ 1294.178395][T20485] security_file_ioctl+0xcb/0x2d0 [ 1294.178420][T20485] __se_sys_ioctl+0x47/0x170 [ 1294.178448][T20485] do_syscall_64+0xfa/0xfa0 [ 1294.178478][T20485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.178510][T20485] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1294.178531][T20485] ? clear_bhb_loop+0x60/0xb0 [ 1294.178556][T20485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.178576][T20485] RIP: 0033:0x7f23dce9efc9 [ 1294.178594][T20485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.178612][T20485] RSP: 002b:00007f23db0fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.178635][T20485] RAX: ffffffffffffffda RBX: 00007f23dd0f5fa0 RCX: 00007f23dce9efc9 [ 1294.178650][T20485] RDX: 0000000000000000 RSI: 0000000040046201 RDI: 0000000000000004 [ 1294.178664][T20485] RBP: 00007f23db0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.178677][T20485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.178689][T20485] R13: 00007f23dd0f6038 R14: 00007f23dd0f5fa0 R15: 00007ffff5f0ba58 [ 1294.178723][T20485] [ 1294.190125][T20485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1294.319365][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1294.337322][ T5897] usb 2-1: config 14 has an invalid interface number: 15 but max is 0 [ 1294.337358][ T5897] usb 2-1: config 14 has no interface number 0 [ 1294.337508][ T5897] usb 2-1: config 14 interface 15 altsetting 251 bulk endpoint 0xC has invalid maxpacket 1024 [ 1294.337540][ T5897] usb 2-1: config 14 interface 15 has no altsetting 0 [ 1294.393613][ T5897] usb 2-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=e9.80 [ 1294.393650][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.393676][ T5897] usb 2-1: Product: syz [ 1294.393693][ T5897] usb 2-1: Manufacturer: syz [ 1294.394355][ T5897] usb 2-1: SerialNumber: syz [ 1294.477549][T20471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1294.709250][T16423] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1294.735240][T16423] usb 6-1: USB disconnect, device number 62 [ 1295.693629][ T5883] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1295.823271][T20489] tipc: Can't bind to reserved service type 0 [ 1295.997187][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 1296.014943][ T5883] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.00 [ 1296.015402][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.015426][ T5883] usb 3-1: Product: syz [ 1296.015441][ T5883] usb 3-1: Manufacturer: syz [ 1296.015457][ T5883] usb 3-1: SerialNumber: syz [ 1296.050405][ T5883] usb 3-1: config 0 descriptor?? [ 1296.115067][T20497] FAULT_INJECTION: forcing a failure. [ 1296.115067][T20497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.115103][T20497] CPU: 1 UID: 0 PID: 20497 Comm: syz.5.4604 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1296.115129][T20497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1296.115143][T20497] Call Trace: [ 1296.115153][T20497] [ 1296.115163][T20497] dump_stack_lvl+0x189/0x250 [ 1296.115203][T20497] ? __pfx____ratelimit+0x10/0x10 [ 1296.115229][T20497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.115263][T20497] ? __pfx__printk+0x10/0x10 [ 1296.115306][T20497] should_fail_ex+0x46c/0x600 [ 1296.115342][T20497] _copy_to_user+0x31/0xb0 [ 1296.115369][T20497] simple_read_from_buffer+0xe1/0x170 [ 1296.115403][T20497] proc_fail_nth_read+0x1b6/0x220 [ 1296.115430][T20497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1296.115457][T20497] ? rw_verify_area+0x2ac/0x4e0 [ 1296.115484][T20497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1296.115510][T20497] vfs_read+0x206/0xa30 [ 1296.115544][T20497] ? __pfx_vfs_read+0x10/0x10 [ 1296.115566][T20497] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1296.115602][T20497] ? mutex_lock_nested+0x154/0x1d0 [ 1296.115622][T20497] ? fdget_pos+0x253/0x320 [ 1296.115668][T20497] ksys_read+0x14b/0x260 [ 1296.115690][T20497] ? __pfx_ksys_read+0x10/0x10 [ 1296.115714][T20497] ? do_syscall_64+0xbe/0xfa0 [ 1296.115738][T20497] do_syscall_64+0xfa/0xfa0 [ 1296.115757][T20497] ? lockdep_hardirqs_on+0x9c/0x150 [ 1296.115778][T20497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.115794][T20497] ? clear_bhb_loop+0x60/0xb0 [ 1296.115814][T20497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.115829][T20497] RIP: 0033:0x7facf461d9dc [ 1296.115845][T20497] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1296.115859][T20497] RSP: 002b:00007facf287e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1296.115878][T20497] RAX: ffffffffffffffda RBX: 00007facf4875fa0 RCX: 00007facf461d9dc [ 1296.115891][T20497] RDX: 000000000000000f RSI: 00007facf287e0a0 RDI: 0000000000000005 [ 1296.115902][T20497] RBP: 00007facf287e090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.115912][T20497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.115922][T20497] R13: 00007facf4876038 R14: 00007facf4875fa0 R15: 00007fff9f0fc8b8 [ 1296.115949][T20497] [ 1296.142104][ T5883] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1296.666865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.724839][ T5883] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1296.737853][ T5883] usb 3-1: USB disconnect, device number 69 [ 1296.949617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.997339][ T991] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1297.177535][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 1297.904087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.941940][ T991] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1297.941994][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1297.942017][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 255, changing to 11 [ 1297.942040][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 59391, setting to 1024 [ 1297.942064][ T991] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1298.010704][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.047248][ T991] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1298.047282][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1298.047303][ T991] usb 5-1: Product: syz [ 1298.047319][ T991] usb 5-1: Manufacturer: syz [ 1298.047335][ T991] usb 5-1: SerialNumber: syz [ 1298.093313][ T991] usb 5-1: config 0 descriptor?? [ 1298.095724][T20501] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1298.107764][ T5897] usb 2-1: Could not find all expected endpoints [ 1298.138768][ T5897] usb 2-1: USB disconnect, device number 70 [ 1298.344673][ T991] usb 5-1: no audio or video endpoints found [ 1298.606915][T20515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1298.674019][ T991] usb 5-1: USB disconnect, device number 87 [ 1299.583873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.743434][T20522] fuse: Unknown parameter 'group_id00000000000000000000' [ 1299.750828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.757191][T13648] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1299.931858][T13648] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1299.931889][T13648] usb 3-1: config 0 has no interface number 0 [ 1299.935957][T13648] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1299.935989][T13648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.936010][T13648] usb 3-1: Product: syz [ 1299.936027][T13648] usb 3-1: Manufacturer: syz [ 1299.936043][T13648] usb 3-1: SerialNumber: syz [ 1299.942028][T13648] usb 3-1: config 0 descriptor?? [ 1300.069707][ T5883] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1300.219253][T20531] random: crng reseeded on system resumption [ 1300.381281][ T991] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1300.853319][ T991] usb 5-1: not running at top speed; connect to a high speed hub [ 1300.854890][ T991] usb 5-1: config 4 has an invalid interface number: 75 but max is 0 [ 1300.854918][ T991] usb 5-1: config 4 has no interface number 0 [ 1300.854976][ T991] usb 5-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1300.855003][ T991] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1300.855032][ T991] usb 5-1: config 4 interface 75 altsetting 4 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1300.855060][ T991] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x87 has an invalid bInterval 150, changing to 4 [ 1300.855088][ T991] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x87 has invalid maxpacket 40964, setting to 1023 [ 1300.855127][ T991] usb 5-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1300.855150][ T991] usb 5-1: config 4 interface 75 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1300.855189][ T991] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1300.855217][ T991] usb 5-1: config 4 interface 75 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1300.855242][ T991] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0xA has invalid maxpacket 1104, setting to 64 [ 1300.855271][ T991] usb 5-1: config 4 interface 75 altsetting 4 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1300.855299][ T991] usb 5-1: config 4 interface 75 has no altsetting 0 [ 1300.987309][ T991] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffcb, bcdDevice=77.e8 [ 1300.987341][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.987381][ T991] usb 5-1: Product: Ⰺ [ 1300.987398][ T991] usb 5-1: Manufacturer: ⺔뚳Ⱀ銨 [ 1300.987428][ T991] usb 5-1: SerialNumber: 孂殊総᯲껁헎뮿齣㴣Ꜩ꨼浀ڇ쁣ס旌媑楠͸ᮆ犒괭ᡥ⌖䴲퀺⭸ꦺ쎒摒靨ꦥ雟ゟ萣腲讘೺혥㬟趎컬鯋쉌ୱ䊡볉䏳箑㙈ヌ翳㓙牞Ꙡר暥⎉䋦ꦇ켑婠騾퍟ᷞ뢁눜ˡ튇螝⬤툙鮟㹪닻㒄ꏿ츇}鞐⠷멅῔쎬븋螮 [ 1301.015027][T13648] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1301.028989][T13648] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1301.029398][T13648] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1301.029460][T13648] usb 3-1: media controller created [ 1301.058449][T13648] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.099685][ T5883] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 1301.099720][ T5883] usb 7-1: config 5 has no interface number 0 [ 1301.099783][ T5883] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1301.099816][ T5883] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1301.099844][ T5883] usb 7-1: config 5 interface 123 has no altsetting 0 [ 1301.115622][ T5883] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1301.115653][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.115675][ T5883] usb 7-1: Product: syz [ 1301.115689][ T5883] usb 7-1: Manufacturer: syz [ 1301.115704][ T5883] usb 7-1: SerialNumber: syz [ 1301.276655][T20538] fuse: Bad value for 'fd' [ 1301.435114][ T991] option 5-1:4.75: GSM modem (1-port) converter detected [ 1301.479484][ T991] usb 5-1: USB disconnect, device number 88 [ 1301.500680][ T991] option 5-1:4.75: device disconnected [ 1301.661309][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1301.799170][T20541] ip6gretap0: entered promiscuous mode [ 1301.799393][T20541] macvtap2: entered promiscuous mode [ 1301.799566][T20541] macvtap2: entered allmulticast mode [ 1301.799582][T20541] ip6gretap0: entered allmulticast mode [ 1302.038222][ T5883] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1302.065879][ T5883] usb 7-1: USB disconnect, device number 75 [ 1302.168195][T20542] ip6gretap0: left allmulticast mode [ 1302.168596][T20542] ip6gretap0: left promiscuous mode [ 1302.200929][ T37] audit: type=1326 audit(1761627458.991:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.201092][ T37] audit: type=1326 audit(1761627458.991:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.204930][ T37] audit: type=1326 audit(1761627458.991:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.205104][ T37] audit: type=1326 audit(1761627458.991:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.205254][ T37] audit: type=1326 audit(1761627458.991:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.205799][ T37] audit: type=1326 audit(1761627458.991:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.220108][ T37] audit: type=1326 audit(1761627459.001:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.220167][ T37] audit: type=1326 audit(1761627459.001:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.226415][ T37] audit: type=1326 audit(1761627459.001:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.226484][ T37] audit: type=1326 audit(1761627459.001:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20546 comm="syz.4.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f23dce9efc9 code=0x7ffc0000 [ 1302.378624][T13648] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1302.411320][T20513] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 1302.497376][T13648] usb 3-1: USB disconnect, device number 70 [ 1303.010190][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1303.073575][T20564] team1: entered promiscuous mode [ 1303.073595][T20564] team1: entered allmulticast mode [ 1304.386852][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1305.442567][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.467132][T15005] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1305.478353][T13648] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1305.627260][T13648] usb 2-1: Using ep0 maxpacket: 16 [ 1305.630070][T13648] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 1305.630098][T13648] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1305.630119][T13648] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.630138][T13648] usb 2-1: config 0 has no interface number 0 [ 1305.630527][T15005] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1305.630855][T15005] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1305.630872][T15005] usb 7-1: config 150 has no interface number 0 [ 1305.630902][T15005] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1305.633959][T13648] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1305.633987][T13648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.634007][T13648] usb 2-1: Product: syz [ 1305.634022][T13648] usb 2-1: Manufacturer: syz [ 1305.634091][T13648] usb 2-1: SerialNumber: syz [ 1305.636931][T15005] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1305.636961][T15005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.636978][T15005] usb 7-1: Product: syz [ 1305.636988][T15005] usb 7-1: Manufacturer: syz [ 1305.776670][T15005] usb 7-1: SerialNumber: syz [ 1305.800155][T13648] usb 2-1: config 0 descriptor?? [ 1305.822069][T13648] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1305.822310][T13648] uvcvideo 2-1:0.105: No valid video chain found. [ 1306.014068][T15005] xr_serial 7-1:150.204: skipping garbage [ 1306.014122][T15005] xr_serial 7-1:150.204: xr_serial converter detected [ 1306.044271][ T991] usb 2-1: USB disconnect, device number 71 [ 1306.308383][ T6045] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1306.426225][T15005] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 1306.426288][T15005] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1306.458937][T15005] usb 7-1: USB disconnect, device number 76 [ 1306.459599][ T6045] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1306.459622][ T6045] usb 6-1: config 0 has no interface number 0 [ 1306.492645][T15005] xr_serial 7-1:150.204: device disconnected [ 1306.492758][ T6045] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1306.492783][ T6045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.492803][ T6045] usb 6-1: Product: syz [ 1306.492817][ T6045] usb 6-1: Manufacturer: syz [ 1306.492830][ T6045] usb 6-1: SerialNumber: syz [ 1306.574251][ T6045] usb 6-1: config 0 descriptor?? [ 1306.786451][ T6045] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1306.799189][ T6045] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1306.799569][ T6045] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1306.799621][ T6045] usb 6-1: media controller created [ 1307.008383][T20587] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 1307.075048][T20587] fuse: Bad value for 'fd' [ 1307.112050][ T6045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1307.167788][ T6045] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1307.233776][ T6045] usb 6-1: USB disconnect, device number 63 [ 1307.288256][T15005] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1307.450138][T15005] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 1307.450168][T15005] usb 5-1: config 5 has no interface number 0 [ 1307.450205][T15005] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1307.450225][T15005] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1307.450242][T15005] usb 5-1: config 5 interface 123 has no altsetting 0 [ 1307.453479][T15005] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1307.453503][T15005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.453518][T15005] usb 5-1: Product: syz [ 1307.453529][T15005] usb 5-1: Manufacturer: syz [ 1307.453540][T15005] usb 5-1: SerialNumber: syz [ 1307.901993][ T6045] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1308.049725][ T6045] usb 7-1: config 166 has an invalid interface number: 59 but max is 0 [ 1308.049764][ T6045] usb 7-1: config 166 has no interface number 0 [ 1308.049800][ T6045] usb 7-1: config 166 interface 59 has no altsetting 0 [ 1308.052887][ T6045] usb 7-1: New USB device found, idVendor=08ca, idProduct=2028, bcdDevice=34.d2 [ 1308.052916][ T6045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.052938][ T6045] usb 7-1: Product: syz [ 1308.052953][ T6045] usb 7-1: Manufacturer: syz [ 1308.052969][ T6045] usb 7-1: SerialNumber: syz [ 1308.485433][T15005] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1308.512258][T15005] usb 5-1: USB disconnect, device number 89 [ 1308.777181][T13406] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1308.824119][ T6045] gspca_main: sunplus-2.14.0 probing 08ca:2028 [ 1308.824658][ T6045] gspca_sunplus: reg_r err -71 [ 1308.824749][ T6045] sunplus 7-1:166.59: probe with driver sunplus failed with error -71 [ 1308.829446][ T6045] usb 7-1: USB disconnect, device number 77 [ 1308.847145][ T5883] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1308.860063][ T5897] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1308.933073][T13406] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1308.933105][T13406] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1308.933128][T13406] usb 2-1: config 150 has no interface number 0 [ 1308.933174][T13406] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1308.937717][T13406] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1308.937752][T13406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.937778][T13406] usb 2-1: Product: syz [ 1308.937795][T13406] usb 2-1: Manufacturer: syz [ 1308.937813][T13406] usb 2-1: SerialNumber: syz [ 1309.027172][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 1309.029538][ T5883] usb 6-1: config index 0 descriptor too short (expected 4495, got 71) [ 1309.029578][ T5883] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1309.029599][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.029618][ T5883] usb 6-1: config 0 has no interface number 0 [ 1309.032589][ T5883] usb 6-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1309.032616][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.032635][ T5883] usb 6-1: Product: syz [ 1309.032659][ T5883] usb 6-1: Manufacturer: syz [ 1309.032674][ T5883] usb 6-1: SerialNumber: syz [ 1309.118841][ T5883] usb 6-1: config 0 descriptor?? [ 1309.126573][ T5883] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1309.126606][ T5883] uvcvideo 6-1:0.105: No valid video chain found. [ 1309.132613][ T5897] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1309.132647][ T5897] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1309.132670][ T5897] usb 3-1: config 150 has no interface number 0 [ 1309.132723][ T5897] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1309.142345][ T5897] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1309.142375][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.142397][ T5897] usb 3-1: Product: syz [ 1309.142412][ T5897] usb 3-1: Manufacturer: syz [ 1309.142429][ T5897] usb 3-1: SerialNumber: syz [ 1309.194525][T13406] xr_serial 2-1:150.204: skipping garbage [ 1309.194596][T13406] xr_serial 2-1:150.204: xr_serial converter detected [ 1309.346378][ T991] usb 6-1: USB disconnect, device number 64 [ 1309.439635][ T6045] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1309.458556][ T5897] xr_serial 3-1:150.204: skipping garbage [ 1309.458616][ T5897] xr_serial 3-1:150.204: xr_serial converter detected [ 1309.596390][ T6045] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1309.596419][ T6045] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1309.596443][ T6045] usb 7-1: config 150 has no interface number 0 [ 1309.597413][ T6045] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1309.622237][ T6045] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1309.622341][ T6045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.622367][ T6045] usb 7-1: Product: syz [ 1309.622383][ T6045] usb 7-1: Manufacturer: syz [ 1309.622399][ T6045] usb 7-1: SerialNumber: syz [ 1309.797480][ T5883] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1309.829507][T13406] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1309.829632][T13406] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1309.852443][ T5897] xr_serial ttyUSB1: Failed to set reg 0x0c: -71 [ 1309.852503][ T5897] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 1309.864666][ T6045] xr_serial 7-1:150.204: skipping garbage [ 1309.864730][ T6045] xr_serial 7-1:150.204: xr_serial converter detected [ 1309.871100][T13406] usb 2-1: USB disconnect, device number 72 [ 1309.874089][T13406] xr_serial 2-1:150.204: device disconnected [ 1309.901683][ T6045] xr_serial ttyUSB2: Failed to set reg 0x60: -71 [ 1309.901739][ T6045] xr_serial ttyUSB2: probe with driver xr_serial failed with error -71 [ 1309.906883][ T5897] usb 3-1: USB disconnect, device number 71 [ 1309.940819][ T5897] xr_serial 3-1:150.204: device disconnected [ 1309.945149][ T6045] usb 7-1: USB disconnect, device number 78 [ 1309.952690][ T6045] xr_serial 7-1:150.204: device disconnected [ 1309.979157][ T5883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1309.979184][ T5883] usb 5-1: config 0 has no interface number 0 [ 1309.995469][ T5883] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1309.995493][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.995508][ T5883] usb 5-1: Product: syz [ 1309.995519][ T5883] usb 5-1: Manufacturer: syz [ 1309.995530][ T5883] usb 5-1: SerialNumber: syz [ 1310.221218][ T5883] usb 5-1: config 0 descriptor?? [ 1310.425694][ T5883] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1310.433286][ T5883] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1310.433762][ T5883] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1310.433823][ T5883] usb 5-1: media controller created [ 1310.461443][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1310.708545][T20645] fuse: Bad value for 'fd' [ 1310.771151][T20649] FAULT_INJECTION: forcing a failure. [ 1310.771151][T20649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.771197][T20649] CPU: 1 UID: 0 PID: 20649 Comm: syz.1.4654 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1310.771221][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1310.771235][T20649] Call Trace: [ 1310.771249][T20649] [ 1310.771260][T20649] dump_stack_lvl+0x189/0x250 [ 1310.771289][T20649] ? __pfx____ratelimit+0x10/0x10 [ 1310.771314][T20649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1310.771347][T20649] ? __pfx__printk+0x10/0x10 [ 1310.771374][T20649] ? __might_fault+0xb0/0x130 [ 1310.771416][T20649] should_fail_ex+0x46c/0x600 [ 1310.771449][T20649] _copy_from_user+0x2d/0xb0 [ 1310.771476][T20649] ___sys_sendmsg+0x158/0x2a0 [ 1310.771505][T20649] ? __pfx____sys_sendmsg+0x10/0x10 [ 1310.771570][T20649] ? __fget_files+0x2a/0x420 [ 1310.771601][T20649] ? __fget_files+0x3a6/0x420 [ 1310.771642][T20649] __x64_sys_sendmsg+0x1a1/0x260 [ 1310.771663][T20649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1310.771698][T20649] ? __pfx_ksys_write+0x10/0x10 [ 1310.771731][T20649] ? do_syscall_64+0xbe/0xfa0 [ 1310.771764][T20649] do_syscall_64+0xfa/0xfa0 [ 1310.771789][T20649] ? lockdep_hardirqs_on+0x9c/0x150 [ 1310.771813][T20649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.771829][T20649] ? clear_bhb_loop+0x60/0xb0 [ 1310.771851][T20649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.771873][T20649] RIP: 0033:0x7f99bb39efc9 [ 1310.771893][T20649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.771914][T20649] RSP: 002b:00007f99b9606038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1310.771937][T20649] RAX: ffffffffffffffda RBX: 00007f99bb5f5fa0 RCX: 00007f99bb39efc9 [ 1310.771953][T20649] RDX: 6fa1ed13146e5748 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1310.771968][T20649] RBP: 00007f99b9606090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.771982][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.771991][T20649] R13: 00007f99bb5f6038 R14: 00007f99bb5f5fa0 R15: 00007ffcb4e1ee78 [ 1310.772015][T20649] [ 1311.190547][ T37] kauditd_printk_skb: 51 callbacks suppressed [ 1311.190566][ T37] audit: type=1326 audit(1761627467.981:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20650 comm="syz.6.4655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd19640efc9 code=0x0 [ 1311.232696][ T37] audit: type=1326 audit(1761627468.021:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20650 comm="syz.6.4655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd19640efc9 code=0x0 [ 1311.524803][ T5883] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1311.524903][T20634] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 1311.559414][ T5897] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1311.643916][ T5883] usb 5-1: USB disconnect, device number 90 [ 1311.725581][ T5897] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1311.725603][ T5897] usb 2-1: config 5 has no interface number 0 [ 1311.725655][ T5897] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1311.725675][ T5897] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1311.725692][ T5897] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1311.741220][ T5897] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1311.741258][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.741903][ T5897] usb 2-1: Product: syz [ 1311.741924][ T5897] usb 2-1: Manufacturer: syz [ 1311.741942][ T5897] usb 2-1: SerialNumber: syz [ 1311.861252][T16423] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1312.030412][T16423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1312.030805][T16423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.059691][T16423] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1312.059730][T16423] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1312.059756][T16423] usb 7-1: Manufacturer: syz [ 1312.101775][T16423] usb 7-1: config 0 descriptor?? [ 1312.423424][T16423] usbhid 7-1:0.0: can't add hid device: -71 [ 1312.423569][T16423] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1312.437741][T16423] usb 7-1: USB disconnect, device number 79 [ 1312.478217][ T5883] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1312.647297][T13648] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1312.672133][ T5883] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1312.672402][ T5883] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 54560, setting to 64 [ 1312.672433][ T5883] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1312.672480][ T5883] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1312.672564][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.804051][ T5897] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1312.815047][ T5897] usb 2-1: USB disconnect, device number 73 [ 1312.842159][T13648] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1312.842188][T13648] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1312.842216][T13648] usb 5-1: config 150 has no interface number 0 [ 1312.842338][T13648] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1312.845052][T13648] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1312.845145][T13648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.845167][T13648] usb 5-1: Product: syz [ 1312.845182][T13648] usb 5-1: Manufacturer: syz [ 1312.845205][T13648] usb 5-1: SerialNumber: syz [ 1312.941966][ T5883] usb 6-1: usb_control_msg returned -32 [ 1312.942001][ T5883] usbtmc 6-1:16.0: can't read capabilities [ 1312.967188][T15934] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1313.118285][T13648] xr_serial 5-1:150.204: skipping garbage [ 1313.118339][T13648] xr_serial 5-1:150.204: xr_serial converter detected [ 1313.124371][T15934] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1313.124398][T15934] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1313.124420][T15934] usb 3-1: config 150 has no interface number 0 [ 1313.124465][T15934] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1313.125592][T13648] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1313.125644][T13648] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1313.129730][T15934] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1313.129764][T15934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.129788][T15934] usb 3-1: Product: syz [ 1313.129805][T15934] usb 3-1: Manufacturer: syz [ 1313.129823][T15934] usb 3-1: SerialNumber: syz [ 1313.223521][T13648] usb 5-1: USB disconnect, device number 91 [ 1313.226331][T13648] xr_serial 5-1:150.204: device disconnected [ 1313.343816][T15934] xr_serial 3-1:150.204: skipping garbage [ 1313.343871][T15934] xr_serial 3-1:150.204: xr_serial converter detected [ 1313.385400][T20686] FAULT_INJECTION: forcing a failure. [ 1313.385400][T20686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.385435][T20686] CPU: 0 UID: 0 PID: 20686 Comm: syz.1.4664 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1313.385458][T20686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1313.385470][T20686] Call Trace: [ 1313.385478][T20686] [ 1313.385487][T20686] dump_stack_lvl+0x189/0x250 [ 1313.385516][T20686] ? __pfx____ratelimit+0x10/0x10 [ 1313.385534][T20686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1313.385565][T20686] ? __pfx__printk+0x10/0x10 [ 1313.385591][T20686] ? __might_fault+0xb0/0x130 [ 1313.385630][T20686] should_fail_ex+0x46c/0x600 [ 1313.385662][T20686] _copy_from_user+0x2d/0xb0 [ 1313.385679][T20686] ___sys_sendmsg+0x158/0x2a0 [ 1313.385711][T20686] ? __pfx____sys_sendmsg+0x10/0x10 [ 1313.385785][T20686] ? __fget_files+0x2a/0x420 [ 1313.385813][T20686] ? __fget_files+0x3a6/0x420 [ 1313.385851][T20686] __x64_sys_sendmsg+0x1a1/0x260 [ 1313.385876][T20686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1313.385922][T20686] ? __pfx_ksys_write+0x10/0x10 [ 1313.385951][T20686] ? do_syscall_64+0xbe/0xfa0 [ 1313.385979][T20686] do_syscall_64+0xfa/0xfa0 [ 1313.386006][T20686] ? lockdep_hardirqs_on+0x9c/0x150 [ 1313.386031][T20686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.386053][T20686] ? clear_bhb_loop+0x60/0xb0 [ 1313.386077][T20686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.386098][T20686] RIP: 0033:0x7f99bb39efc9 [ 1313.386116][T20686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.386132][T20686] RSP: 002b:00007f99b9606038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1313.386154][T20686] RAX: ffffffffffffffda RBX: 00007f99bb5f5fa0 RCX: 00007f99bb39efc9 [ 1313.386168][T20686] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1313.386181][T20686] RBP: 00007f99b9606090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.386208][T20686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.386229][T20686] R13: 00007f99bb5f6038 R14: 00007f99bb5f5fa0 R15: 00007ffcb4e1ee78 [ 1313.386284][T20686] [ 1314.034142][T15934] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1314.034195][T15934] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1314.952868][T15934] usb 3-1: USB disconnect, device number 72 [ 1314.954728][T15934] xr_serial 3-1:150.204: device disconnected [ 1315.072410][ T991] usb 6-1: USB disconnect, device number 65 [ 1315.149862][T20697] FAULT_INJECTION: forcing a failure. [ 1315.149862][T20697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.149897][T20697] CPU: 1 UID: 0 PID: 20697 Comm: syz.4.4668 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1315.149922][T20697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1315.149937][T20697] Call Trace: [ 1315.149946][T20697] [ 1315.149956][T20697] dump_stack_lvl+0x189/0x250 [ 1315.149995][T20697] ? __pfx____ratelimit+0x10/0x10 [ 1315.150021][T20697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1315.150054][T20697] ? __pfx__printk+0x10/0x10 [ 1315.150081][T20697] ? __might_fault+0xb0/0x130 [ 1315.150123][T20697] should_fail_ex+0x46c/0x600 [ 1315.150159][T20697] _copy_from_user+0x2d/0xb0 [ 1315.150184][T20697] ___sys_sendmsg+0x158/0x2a0 [ 1315.150213][T20697] ? __pfx____sys_sendmsg+0x10/0x10 [ 1315.150276][T20697] ? __fget_files+0x2a/0x420 [ 1315.150306][T20697] ? __fget_files+0x3a6/0x420 [ 1315.150347][T20697] __x64_sys_sendmsg+0x1a1/0x260 [ 1315.150376][T20697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1315.150412][T20697] ? __pfx_ksys_write+0x10/0x10 [ 1315.150443][T20697] ? do_syscall_64+0xbe/0xfa0 [ 1315.150475][T20697] do_syscall_64+0xfa/0xfa0 [ 1315.150501][T20697] ? lockdep_hardirqs_on+0x9c/0x150 [ 1315.150528][T20697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.150549][T20697] ? clear_bhb_loop+0x60/0xb0 [ 1315.150575][T20697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.150597][T20697] RIP: 0033:0x7f23dce9efc9 [ 1315.150616][T20697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1315.150635][T20697] RSP: 002b:00007f23db0fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1315.150658][T20697] RAX: ffffffffffffffda RBX: 00007f23dd0f5fa0 RCX: 00007f23dce9efc9 [ 1315.150675][T20697] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1315.150689][T20697] RBP: 00007f23db0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.150727][T20697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.150740][T20697] R13: 00007f23dd0f6038 R14: 00007f23dd0f5fa0 R15: 00007ffff5f0ba58 [ 1315.150776][T20697] [ 1315.517175][T15934] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1315.674035][T15934] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1315.674055][T15934] usb 2-1: config 0 has no interface number 0 [ 1315.675959][T15934] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1315.675978][T15934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.675992][T15934] usb 2-1: Product: syz [ 1315.676002][T15934] usb 2-1: Manufacturer: syz [ 1315.676011][T15934] usb 2-1: SerialNumber: syz [ 1315.684993][T15934] usb 2-1: config 0 descriptor?? [ 1315.913952][T15934] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1315.929641][T15934] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1315.929988][T15934] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1315.930035][T15934] usb 2-1: media controller created [ 1316.056686][T20717] FAULT_INJECTION: forcing a failure. [ 1316.056686][T20717] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.056755][T20717] CPU: 1 UID: 0 PID: 20717 Comm: syz.5.4673 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1316.056783][T20717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1316.056797][T20717] Call Trace: [ 1316.056807][T20717] [ 1316.056818][T20717] dump_stack_lvl+0x189/0x250 [ 1316.056857][T20717] ? __pfx____ratelimit+0x10/0x10 [ 1316.056891][T20717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1316.056926][T20717] ? __pfx__printk+0x10/0x10 [ 1316.056960][T20717] ? __pfx___might_resched+0x10/0x10 [ 1316.056995][T20717] should_fail_ex+0x46c/0x600 [ 1316.057033][T20717] should_failslab+0xa8/0x100 [ 1316.057068][T20717] __kmalloc_noprof+0xcc/0x7d0 [ 1316.057098][T20717] ? kfree+0x51/0x950 [ 1316.057121][T20717] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1316.057157][T20717] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1316.057186][T20717] ? tomoyo_domain+0xda/0x130 [ 1316.057221][T20717] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1316.057256][T20717] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1316.057296][T20717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1316.057332][T20717] ? finish_task_switch+0x266/0x950 [ 1316.057381][T20717] ? rcu_is_watching+0x15/0xb0 [ 1316.057437][T20717] ? __fget_files+0x2a/0x420 [ 1316.057474][T20717] ? __fget_files+0x3a6/0x420 [ 1316.057503][T20717] ? __fget_files+0x2a/0x420 [ 1316.057539][T20717] security_file_ioctl+0xcb/0x2d0 [ 1316.057564][T20717] __se_sys_ioctl+0x47/0x170 [ 1316.057592][T20717] do_syscall_64+0xfa/0xfa0 [ 1316.057622][T20717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.057644][T20717] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1316.057665][T20717] ? clear_bhb_loop+0x60/0xb0 [ 1316.057692][T20717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.057714][T20717] RIP: 0033:0x7facf461efc9 [ 1316.057733][T20717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.057752][T20717] RSP: 002b:00007facf283c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1316.057776][T20717] RAX: ffffffffffffffda RBX: 00007facf4876180 RCX: 00007facf461efc9 [ 1316.057792][T20717] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000008 [ 1316.057807][T20717] RBP: 00007facf283c090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.057822][T20717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.057835][T20717] R13: 00007facf4876218 R14: 00007facf4876180 R15: 00007fff9f0fc8b8 [ 1316.057881][T20717] [ 1316.057959][T20717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1316.956684][T15934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.008131][T20704] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 1317.083126][T20708] fuse: Bad value for 'fd' [ 1317.254873][T15934] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1317.265680][ T5897] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1317.479853][ T5897] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 1317.479883][ T5897] usb 5-1: config 5 has no interface number 0 [ 1317.479934][ T5897] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1317.479965][ T5897] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1317.479989][ T5897] usb 5-1: config 5 interface 123 has no altsetting 0 [ 1317.483423][ T5897] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1317.483454][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.483478][ T5897] usb 5-1: Product: syz [ 1317.483495][ T5897] usb 5-1: Manufacturer: syz [ 1317.483512][ T5897] usb 5-1: SerialNumber: syz [ 1317.493881][T15934] usb 2-1: USB disconnect, device number 74 [ 1317.937186][T15005] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1318.427435][T15005] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1318.427468][T15005] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1318.427485][T15005] usb 3-1: config 150 has no interface number 0 [ 1318.427519][T15005] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1318.430072][T15005] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1318.430093][T15005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.430152][T15005] usb 3-1: Product: syz [ 1318.430163][T15005] usb 3-1: Manufacturer: syz [ 1318.430174][T15005] usb 3-1: SerialNumber: syz [ 1319.916931][T15005] xr_serial 3-1:150.204: skipping garbage [ 1319.923244][T15005] xr_serial 3-1:150.204: xr_serial converter detected [ 1319.951989][T15005] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1319.952107][T15005] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1320.959256][T15005] usb 3-1: USB disconnect, device number 73 [ 1320.962009][T15005] xr_serial 3-1:150.204: device disconnected [ 1320.977387][T20740] random: crng reseeded on system resumption [ 1321.086123][ T5897] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1321.104278][T20740] Restarting kernel threads ... [ 1321.105577][T20740] Done restarting kernel threads. [ 1321.123575][ T5897] usb 5-1: USB disconnect, device number 92 [ 1321.641780][T15934] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1321.777258][ T5897] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1321.826852][T15934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1321.829259][T15934] usb 3-1: config 14 has an invalid interface number: 15 but max is 0 [ 1321.829293][T15934] usb 3-1: config 14 has no interface number 0 [ 1321.829361][T15934] usb 3-1: config 14 interface 15 altsetting 251 bulk endpoint 0xC has invalid maxpacket 1024 [ 1321.829403][T15934] usb 3-1: config 14 interface 15 has no altsetting 0 [ 1321.832790][T15934] usb 3-1: New USB device found, idVendor=0cf3, idProduct=0005, bcdDevice=e9.80 [ 1321.832825][T15934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.832850][T15934] usb 3-1: Product: syz [ 1321.832868][T15934] usb 3-1: Manufacturer: syz [ 1321.832885][T15934] usb 3-1: SerialNumber: syz [ 1321.881694][T15005] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1321.908306][T20752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1321.982498][ T5897] usb 6-1: not running at top speed; connect to a high speed hub [ 1321.984399][ T5897] usb 6-1: config 4 has an invalid interface number: 75 but max is 0 [ 1321.984429][ T5897] usb 6-1: config 4 has no interface number 0 [ 1321.984484][ T5897] usb 6-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1321.984512][ T5897] usb 6-1: config 4 interface 75 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1321.984541][ T5897] usb 6-1: config 4 interface 75 altsetting 4 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1321.984568][ T5897] usb 6-1: config 4 interface 75 altsetting 4 endpoint 0x87 has an invalid bInterval 150, changing to 4 [ 1321.984595][ T5897] usb 6-1: config 4 interface 75 altsetting 4 endpoint 0x87 has invalid maxpacket 40964, setting to 1023 [ 1321.984620][ T5897] usb 6-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1321.984635][ T5897] usb 6-1: config 4 interface 75 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1321.984652][ T5897] usb 6-1: config 4 interface 75 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1321.984681][ T5897] usb 6-1: config 4 interface 75 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1321.984705][ T5897] usb 6-1: config 4 interface 75 altsetting 4 endpoint 0xA has invalid maxpacket 1104, setting to 64 [ 1321.984733][ T5897] usb 6-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1321.984755][ T5897] usb 6-1: config 4 interface 75 altsetting 4 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 1321.984782][ T5897] usb 6-1: config 4 interface 75 has no altsetting 0 [ 1322.071766][ T5897] usb 6-1: New USB device found, idVendor=19d2, idProduct=ffcb, bcdDevice=77.e8 [ 1322.071799][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.071821][ T5897] usb 6-1: Product: Ⰺ [ 1322.071837][ T5897] usb 6-1: Manufacturer: ⺔뚳Ⱀ銨 [ 1322.071854][ T5897] usb 6-1: SerialNumber: 孂殊総᯲껁헎뮿齣㴣Ꜩ꨼浀ڇ쁣ס旌媑楠͸ᮆ犒괭ᡥ⌖䴲퀺⭸ꦺ쎒摒靨ꦥ雟ゟ萣腲讘೺혥㬟趎컬鯋쉌ୱ䊡볉䏳箑㙈ヌ翳㓙牞Ꙡר暥⎉䋦ꦇ켑婠騾퍟ᷞ뢁눜ˡ튇螝⬤툙鮟㹪닻㒄ꏿ츇}鞐⠷멅῔쎬븋螮 [ 1322.521484][T15005] usb 5-1: not running at top speed; connect to a high speed hub [ 1322.540385][T15005] usb 5-1: config 4 has an invalid interface number: 75 but max is 0 [ 1322.540416][T15005] usb 5-1: config 4 has no interface number 0 [ 1322.540534][T15005] usb 5-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1322.540561][T15005] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1322.540590][T15005] usb 5-1: config 4 interface 75 altsetting 4 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1322.540673][T15005] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x87 has an invalid bInterval 150, changing to 4 [ 1322.540702][T15005] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0x87 has invalid maxpacket 40964, setting to 1023 [ 1322.540731][T15005] usb 5-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1322.540753][T15005] usb 5-1: config 4 interface 75 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1322.540831][T15005] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1322.540859][T15005] usb 5-1: config 4 interface 75 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1322.540884][T15005] usb 5-1: config 4 interface 75 altsetting 4 endpoint 0xA has invalid maxpacket 1104, setting to 64 [ 1322.540913][T15005] usb 5-1: config 4 interface 75 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1322.540992][T15005] usb 5-1: config 4 interface 75 altsetting 4 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 1322.541023][T15005] usb 5-1: config 4 interface 75 has no altsetting 0 [ 1323.595103][T15005] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffcb, bcdDevice=77.e8 [ 1323.595136][T15005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.595157][T15005] usb 5-1: Product: Ⰺ [ 1323.595172][T15005] usb 5-1: Manufacturer: ⺔뚳Ⱀ銨 [ 1323.595187][T15005] usb 5-1: SerialNumber: 孂殊総᯲껁헎뮿齣㴣Ꜩ꨼浀ڇ쁣ס旌媑楠͸ᮆ犒괭ᡥ⌖䴲퀺⭸ꦺ쎒摒靨ꦥ雟ゟ萣腲讘೺혥㬟趎컬鯋쉌ୱ䊡볉䏳箑㙈ヌ翳㓙牞Ꙡר暥⎉䋦ꦇ켑婠騾퍟ᷞ뢁눜ˡ튇螝⬤툙鮟㹪닻㒄ꏿ츇}鞐⠷멅῔쎬븋螮 [ 1323.800544][ T5897] option 6-1:4.75: GSM modem (1-port) converter detected [ 1323.845342][ T5897] usb 6-1: USB disconnect, device number 66 [ 1323.872272][ T5897] option 6-1:4.75: device disconnected [ 1323.935649][T15005] option 5-1:4.75: GSM modem (1-port) converter detected [ 1323.969348][T15005] usb 5-1: USB disconnect, device number 93 [ 1323.992872][T15005] option 5-1:4.75: device disconnected [ 1325.577272][T13406] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1325.602552][T20778] tipc: Sta[ 1325.602552][T20778] tipc: Started in network mode [ 1325.602584][T20778] tipc: Node identity 3e864cc5f87d, cluster identity 4711 [ 1325.606597][T20778] tipc: Enabled bearer , priority 0 [ 1325.654270][ T23] ================================================================== [ 1325.654286][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1325.654322][ T23] Read of size 8 at addr ffffc9000c994090 by task irq_work/0/23 [ 1325.654342][ T23] [ 1325.654356][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1325.654382][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1325.654397][ T23] Call Trace: [ 1325.654407][ T23] [ 1325.654416][ T23] dump_stack_lvl+0x189/0x250 [ 1325.654458][ T23] ? run_irq_workd+0x116/0x190 [ 1325.654494][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1325.654529][ T23] ? __pfx__printk+0x10/0x10 [ 1325.654559][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1325.654595][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1325.654632][ T23] print_report+0xca/0x240 [ 1325.654667][ T23] ? run_irq_workd+0x116/0x190 [ 1325.654698][ T23] kasan_report+0x118/0x150 [ 1325.654732][ T23] ? run_irq_workd+0x116/0x190 [ 1325.654770][ T23] run_irq_workd+0x116/0x190 [ 1325.654803][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1325.654837][ T23] ? schedule+0x91/0x360 [ 1325.654867][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1325.654896][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1325.654925][ T23] smpboot_thread_fn+0x542/0xa60 [ 1325.654969][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1325.655005][ T23] kthread+0x711/0x8a0 [ 1325.655041][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1325.655070][ T23] ? __pfx_kthread+0x10/0x10 [ 1325.655103][ T23] ? rt_spin_unlock+0x150/0x200 [ 1325.655131][ T23] ? rt_spin_unlock+0x161/0x200 [ 1325.655154][ T23] ? __pfx_kthread+0x10/0x10 [ 1325.655190][ T23] ret_from_fork+0x4bc/0x870 [ 1325.655218][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.655250][ T23] ? __switch_to_asm+0x39/0x70 [ 1325.655275][ T23] ? __switch_to_asm+0x33/0x70 [ 1325.655297][ T23] ? __pfx_kthread+0x10/0x10 [ 1325.655333][ T23] ret_from_fork_asm+0x1a/0x30 [ 1325.655368][ T23] [ 1325.655377][ T23] [ 1325.655383][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1325.655408][ T23] Memory state around the buggy address: [ 1325.655422][ T23] ffffc9000c993f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1325.655440][ T23] ffffc9000c994000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1325.655457][ T23] >ffffc9000c994080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1325.655477][ T23] ^ [ 1325.655492][ T23] ffffc9000c994100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1325.655508][ T23] ffffc9000c994180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1325.655520][ T23] ================================================================== [ 1325.655546][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1325.655562][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1325.655591][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1325.655606][ T23] Call Trace: [ 1325.655616][ T23] [ 1325.655625][ T23] dump_stack_lvl+0x99/0x250 [ 1325.655662][ T23] ? __asan_memcpy+0x40/0x70 [ 1325.655690][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1325.655723][ T23] ? __pfx__printk+0x10/0x10 [ 1325.655758][ T23] vpanic+0x237/0x6d0 [ 1325.655783][ T23] ? __pfx_vpanic+0x10/0x10 [ 1325.655811][ T23] panic+0xb9/0xc0 [ 1325.655833][ T23] ? __pfx_panic+0x10/0x10 [ 1325.655853][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1325.655885][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1325.655924][ T23] ? run_irq_workd+0x116/0x190 [ 1325.655965][ T23] check_panic_on_warn+0x89/0xb0 [ 1325.655989][ T23] ? run_irq_workd+0x116/0x190 [ 1325.656021][ T23] end_report+0x78/0x160 [ 1325.656051][ T23] kasan_report+0x129/0x150 [ 1325.656087][ T23] ? run_irq_workd+0x116/0x190 [ 1325.656125][ T23] run_irq_workd+0x116/0x190 [ 1325.656159][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1325.656189][ T23] ? schedule+0x91/0x360 [ 1325.656217][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1325.656248][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1325.656278][ T23] smpboot_thread_fn+0x542/0xa60 [ 1325.656308][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1325.656343][ T23] kthread+0x711/0x8a0 [ 1325.656377][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1325.656408][ T23] ? __pfx_kthread+0x10/0x10 [ 1325.656441][ T23] ? rt_spin_unlock+0x150/0x200 [ 1325.656469][ T23] ? rt_spin_unlock+0x161/0x200 [ 1325.656491][ T23] ? __pfx_kthread+0x10/0x10 [ 1325.656525][ T23] ret_from_fork+0x4bc/0x870 [ 1325.656554][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.656586][ T23] ? __switch_to_asm+0x39/0x70 [ 1325.656611][ T23] ? __switch_to_asm+0x33/0x70 [ 1325.656633][ T23] ? __pfx_kthread+0x10/0x10 [ 1325.656669][ T23] ret_from_fork_asm+0x1a/0x30 [ 1325.656701][ T23] [ 1325.657032][ T23] Kernel Offset: disabled