last executing test programs: 9.082994781s ago: executing program 2 (id=1942): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 6.737215464s ago: executing program 2 (id=1946): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x8011) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa3747e76de3790800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) listen(r1, 0xfffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x101, 0x1}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000100)) 6.174546814s ago: executing program 4 (id=1948): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000b1a000/0x2000)=nil], 0x0, 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5b, 0x100) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) io_setup(0x3, &(0x7f0000000040)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 6.087466769s ago: executing program 3 (id=1949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.906381108s ago: executing program 3 (id=1951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.935387209s ago: executing program 0 (id=1953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685ef"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000980)={0x3}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback=r0, r1, 0x2f, 0x2010, 0x4}, 0x20) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) accept4$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x0) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @private=0xa010100}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) 4.93436636s ago: executing program 3 (id=1954): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000d00000d0bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114680000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$kcm(0x2, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r4, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x3f, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x85, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x6, 0x9, 0xfff, 0x8a0, 0x6, 0x8002, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x4005, 0x5, 0xfffffffd, 0x8, 0xe, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x1000002, 0x8], [0x2, 0x1, 0x80010000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x3, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80000fb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff5, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0xffffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x1, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x7ff, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x4, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x6f7, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xa, 0x9, 0x6, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x9, 0xfffffff7, 0x5]}, 0x45c) 4.9329354s ago: executing program 4 (id=1955): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSBRKP(r0, 0x5425, 0x1) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000002880)) 4.756339729s ago: executing program 0 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10101) socket$inet(0x2, 0x3, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.889041585s ago: executing program 3 (id=1958): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x6, 0x4, 0x12, 0x0, r0}, 0x50) socket$inet(0x2, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 3.677494236s ago: executing program 2 (id=1959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000140000001100"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 3.528040194s ago: executing program 3 (id=1961): r0 = syz_io_uring_setup(0xc2d, &(0x7f0000000600)={0x0, 0x4000000, 0x440, 0x2, 0x15e}, &(0x7f0000000700), &(0x7f0000000000), &(0x7f0000000000)) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xa720, 0x3f, 0x2, 0x1b, 0x0, r0}, 0x0, 0x0, 0x0) 3.455360878s ago: executing program 4 (id=1962): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 2.800055732s ago: executing program 3 (id=1963): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0)) fcntl$dupfd(r3, 0x406, r3) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x87c}, 0x0) io_setup(0x0, &(0x7f0000000000)) r4 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0xfffffff9, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0x0, 0x20000004, 0x6, 0xffd, 0x9, 0x200001, 0x1001, 0x8004, 0x3, 0xfffc, 0x5, 0x8, 0x40000006, 0x3, 0x8, 0x80208, 0x5, 0x800800, 0xeadb, 0xffffffff, 0x1, 0xffff, 0x81, 0x1, 0xd6d, 0x70f]}) vmsplice(0xffffffffffffffff, &(0x7f0000001d00)=[{&(0x7f0000000180)="e9b0af113569f18780007dd1f2", 0xd}, {&(0x7f00000003c0)="59ce7a13682338507645d790868bc2ea57ae7e51906018ec8269eb809ce5658542f21ed6367908075e70c38113258dbd06384dcc9e9826e371a943d4719d6dbffa7321c7b41cb54db585a569679bc399b8f6332e34b91addb2d47f1d0369c2d5eb4a38bed3efdd48564c468950eef2129bbfd7c23f009ac51132509a14acba5d8d69974d902d046ba76f0db41bf27e75669265663c4dfd517a5d2f242ca43049d643a9b76dd63c2eebb42c4fef2955b4e693989e4e19bae3aeca0d389bbf1f8b13be99298408feaa9f85eb695a9626d7b5", 0xd1}, {&(0x7f00000004c0)="e20cb20b2b2d08dd587b4100e1e2f3f2188a22d9afe7b9110ed920d60e58d519c43a31496bcfa0bf6f7c9d9bea60289bc9f003f3f7f8d0c804c8928539723666d7fe6405b5dbe5e4", 0x48}, {&(0x7f0000000780)="c54e8cf32e645124d8cf848fb0778d3e9ed7ee495d9eaa576a3a02b98f100dbdb0ec64441ba0005df2e63a0f5e44f7ee1bd45830b8ffd2cfad979b64049a7dc72dd10f24173b6b001525d10e0f3355f76c8c6ef4502299417a81f2d3e56ea59efa05d8ad9d43193a77c6e353a86488", 0x6f}, {&(0x7f00000008c0)="ffb895366277bab51e52f5638077f1b505b84cb42e46ac75598d27f1e9d64b358dab527854f1158dfea497ae84b31a4b6b74c845ecb02a5fc80d36cd3828187b505748cb4551edbff40a09d849f0c2a2a953c32356b1ccf3be872f17de8d07089428aea612fe4d581509a8993c9b570c760cde0e1a926bc21cf1f92921d4c97d9ba22cce398acaa48a7e85d5d6d4c304ab222cedf9b7861bb5c6745db0649cb2da", 0xa1}, {&(0x7f0000000980)="8356008722c12fdd8014378a702b0bce0d85c2d4283acd7a621aa6619c767a849187ddf2630c019733c847e94f6c98db382245f26f2cea905c671fdc4f60b4775457837f1052abf499da3a5fab442bc92ba09fea4574e60bfb62a53252a54b3669fcab210ab7c546d248ae4ec3c66cb1ecb02d3f5b88ba90271a2fe8e934ed06cf0cf880f5779091b3bfc1966e4c7e42569c4861d488f486a1974fda222eb4c8e0b2c15daf6222e28896b682129de775d0b0f85dcca925fc56bf57540810901121a72b2a23e2b3d34827644ab14b9585e340ea018565f9d1eff181eba5145af8c9fe4135cf548cb849ade88816c42735cce42a50", 0xf4}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="eeb8b4d02b5f18b18edb18c8e9185152f6d9c97933c134bdcdaefdd3518db5b881517d54b7bd125f0945408723f393fec90cde4b53e6d90e12e4a082662186060fc9668e52dccdd0dd8a20b3593ad69495940fb8ba05f57d221c13f290f7e75cf77577b39593c2f44b8c0914e5a74572ca2823098c5bf7f51e7beaea43fbc2b488dac848095aabe7686736b78481fa0d099978a7c2dc1510c046ef960f745554b3fd814c5ac0d07e3742d31588659671f9995aa190d66a82bb4a5cb235be502c227027b39c0652", 0xc7}, {&(0x7f0000001b80)="9b2485e041a9962dd95a783c124c6f88be5f4f6aa53d451e75da7fcd5aa1d3e7cf41fc45a5f6b6f5cf88680ff0107b71c0e9139d90954ffa41a9570ea6003f84007abe9c1b2a9a04bd8643541ead980b86f3fcc79093", 0x56}, {&(0x7f0000001c00)="171bcd45936ee1904146c897d386ed510d92b8f7e4af832b15cad7d220f4fabd721fe27887b4472ec5773605da2c6c5c855ff8e565724d4ad8ffe4dd6f69a4ece45e210d5241a5093fd4cdff547f8e05b1dce8e1a4fecb22e4fbdc05db9e1baac7d0f637e5085bd467b3b2c41e111849bd1c396151c9ab000536024fc0e172eac66264a5cfb0d6b10b2322c9edc9f04031e7786eb061a642967445e53141cccc2eb0c6b9cd7772859429cc29ac42187e748e33832c6b115b244c4962d6a115c70b693506735a521e6e7f7ae868343f6fc53e555fedf6e655349df3a3befd0f1fe103e47422780c142655411e0636378dd1f1f2926e5f5b012b2dde", 0xfb}], 0xa, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.290918849s ago: executing program 1 (id=1964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.27531284s ago: executing program 0 (id=1965): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000540)=""/6, 0x6}], 0x1}, 0x2001) 2.225405973s ago: executing program 4 (id=1966): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0x78e4}) 2.08036366s ago: executing program 0 (id=1967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) 1.986136635s ago: executing program 1 (id=1968): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000d00000d0bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114680000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$kcm(0x2, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r4, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x3f, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x85, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x6, 0x9, 0xfff, 0x8a0, 0x6, 0x8002, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x4005, 0x5, 0xfffffffd, 0x8, 0xe, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x1000002, 0x8], [0x2, 0x1, 0x80010000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x3, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80000fb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff5, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0xffffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x1, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x7ff, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x4, 0x0, 0x6a, 0x9, 0x3, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x6f7, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xa, 0x9, 0x6, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x9, 0xfffffff7, 0x5]}, 0x45c) 1.982266895s ago: executing program 4 (id=1969): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x8011) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa3747e76de3790800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) listen(r1, 0xfffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x101, 0x1}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000100)) 1.859558881s ago: executing program 0 (id=1970): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 1.059869404s ago: executing program 1 (id=1971): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x6, 0x4, 0x12, 0x0, r0}, 0x50) socket$inet(0x2, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 833.599446ms ago: executing program 1 (id=1972): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000f40)=""/4096, 0x1001}], 0x1) 816.672877ms ago: executing program 0 (id=1973): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) timer_settime(r1, 0x1, 0x0, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x80000000005cbc3) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x2}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x10000000}) 573.866709ms ago: executing program 1 (id=1974): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) setns(0xffffffffffffffff, 0x24020000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x80) 396.431919ms ago: executing program 2 (id=1975): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x2}, 0x14) 309.413644ms ago: executing program 1 (id=1976): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10101) socket$inet(0x2, 0x3, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 220.388419ms ago: executing program 2 (id=1977): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 87.409635ms ago: executing program 4 (id=1978): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fc"], 0x2c}, 0x1, 0x0, 0x0, 0x20040041}, 0x200080c0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 2 (id=1979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): s invalid maxpacket 512, setting to 64 [ 431.562874][ T4481] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 431.574780][ T4481] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 431.588214][ T4310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.599349][ T4310] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 431.613458][ T4310] usb 4-1: config 1 interface 1 has no altsetting 0 [ 431.615280][ T4481] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.640729][ T4481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.652467][ T4310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.665061][ T4481] usb 3-1: Product: syz [ 431.672225][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.687000][ T951] Error reading MAC address [ 431.687964][ T4481] usb 3-1: Manufacturer: syz [ 431.741653][ T27] usb 2-1: USB disconnect, device number 27 [ 431.751818][ T4310] usb 4-1: Product: syz [ 431.756836][ T4481] usb 3-1: SerialNumber: syz [ 431.763827][ T4310] usb 4-1: Manufacturer: syz [ 431.778470][ T7919] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 431.788584][ T4310] usb 4-1: SerialNumber: syz [ 431.794813][ T4481] cdc_mbim 3-1:1.0: skipping garbage [ 431.834153][ T4310] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 431.848351][ T4310] cdc_ncm 4-1:1.0: bind() failure [ 431.996568][ T7919] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 432.035484][ T7919] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 432.660033][ T7919] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 432.685417][ T7919] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 432.704384][ T4481] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 432.716475][ T4481] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 432.927805][ T4481] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 433.011714][ T4481] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 433.141990][ T4481] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 66:d8:fe:74:9b:b3 [ 433.219868][ T4481] usb 3-1: USB disconnect, device number 24 [ 433.235196][ T4481] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 433.635427][ T27] usb 1-1: USB disconnect, device number 27 [ 434.501450][ T7937] loop1: detected capacity change from 0 to 32768 [ 434.553295][ T4310] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 434.622705][ T4310] usb 4-1: USB disconnect, device number 23 [ 434.782230][ T7937] XFS (loop1): Mounting V5 Filesystem [ 434.916947][ T7948] fuse: Bad value for 'fd' [ 434.978984][ T7937] XFS (loop1): Ending clean mount [ 434.985552][ T7937] XFS (loop1): Unmounting Filesystem [ 435.158691][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 436.068356][ T7967] input: syz1 as /devices/virtual/input/input26 [ 436.257157][ T4346] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 436.488145][ T4346] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 436.504286][ T4346] usb 3-1: config 0 has no interface number 0 [ 436.513233][ T4346] usb 3-1: config 0 interface 41 has no altsetting 0 [ 436.534080][ T4346] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 436.606356][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.623788][ T4346] usb 3-1: Product: syz [ 436.658417][ T4346] usb 3-1: Manufacturer: syz [ 436.663283][ T4346] usb 3-1: SerialNumber: syz [ 436.741615][ T4346] usb 3-1: config 0 descriptor?? [ 436.888810][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 437.225047][ T4346] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 437.241022][ T4346] CoreChips: probe of 3-1:0.41 failed with error -71 [ 437.275156][ T4346] usb 3-1: USB disconnect, device number 25 [ 437.315170][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1001'. [ 438.686971][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 438.977752][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 439.431689][ T8039] loop1: detected capacity change from 0 to 32768 [ 439.631948][ T8039] XFS (loop1): Mounting V5 Filesystem [ 439.891413][ T8039] XFS (loop1): Ending clean mount [ 439.900358][ T8039] XFS (loop1): Unmounting Filesystem [ 440.083027][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.092314][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.606306][ T4310] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 440.706355][ T4479] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 440.816481][ T4310] usb 4-1: Using ep0 maxpacket: 32 [ 440.832940][ T4310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.856569][ T4310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.906310][ T4310] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 440.918450][ T4479] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 440.941196][ T4479] usb 1-1: config 0 has no interface number 0 [ 440.947947][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.958021][ T4479] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 440.975203][ T4479] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 440.989848][ T4310] usb 4-1: config 0 descriptor?? [ 440.995963][ T4479] usb 1-1: config 0 interface 48 has no altsetting 0 [ 441.006959][ T4310] hub 4-1:0.0: USB hub found [ 441.019622][ T8077] device syzkaller0 entered promiscuous mode [ 441.029402][ T4479] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 441.042800][ T4479] usb 1-1: New USB device strings: Mfr=35, Product=2, SerialNumber=3 [ 441.053340][ T4479] usb 1-1: Product: syz [ 441.067845][ T4479] usb 1-1: Manufacturer: syz [ 441.072603][ T4479] usb 1-1: SerialNumber: syz [ 441.087334][ T4479] usb 1-1: config 0 descriptor?? [ 441.231203][ T4310] hub 4-1:0.0: 1 port detected [ 441.240794][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1027'. [ 441.296342][ T4477] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 441.314695][ T4479] ftdi_sio 1-1:0.48: FTDI USB Serial Device converter detected [ 441.329629][ T4479] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 441.349994][ T4479] usb 1-1: USB disconnect, device number 28 [ 441.359163][ T4479] ftdi_sio 1-1:0.48: device disconnected [ 441.488530][ T4477] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 441.500414][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 441.512051][ T4477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 441.526434][ T4477] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 441.535679][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.603222][ T4477] usb 2-1: config 0 descriptor?? [ 441.638415][ T8076] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 441.699247][ T4346] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 441.992464][ T4346] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 442.089221][ T4346] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.098783][ T4310] hub 4-1:0.0: activate --> -90 [ 442.247683][ T4346] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.310545][ T4477] itetech 0003:048D:8595.0012: unknown main item tag 0x0 [ 442.312825][ T4346] usb 3-1: config 0 interface 0 has no altsetting 0 [ 442.325632][ T4477] itetech 0003:048D:8595.0012: unknown main item tag 0x0 [ 442.333098][ T4477] itetech 0003:048D:8595.0012: unknown main item tag 0x0 [ 442.340984][ T4477] itetech 0003:048D:8595.0012: unknown main item tag 0x0 [ 442.353003][ T4477] itetech 0003:048D:8595.0012: unknown main item tag 0x0 [ 442.360420][ T4346] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 442.360478][ T4477] itetech 0003:048D:8595.0012: unknown main item tag 0x0 [ 442.397917][ T4346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.406124][ T4477] itetech 0003:048D:8595.0012: unexpected long global item [ 442.424792][ T4346] usb 3-1: config 0 descriptor?? [ 442.434884][ T4477] itetech: probe of 0003:048D:8595.0012 failed with error -22 [ 442.508413][ T4477] usb 4-1: USB disconnect, device number 24 [ 442.515559][ T4310] usb 4-1: Failed to suspend device, error -19 [ 442.524952][ T7] usb 2-1: USB disconnect, device number 28 [ 442.585125][ T8093] device syzkaller0 entered promiscuous mode [ 442.852328][ T4312] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 442.862129][ T4346] sony 0003:054C:0374.0013: unknown main item tag 0x6 [ 442.869274][ T4346] sony 0003:054C:0374.0013: unknown main item tag 0x3 [ 442.877624][ T4346] sony 0003:054C:0374.0013: unknown main item tag 0xe [ 442.888463][ T4346] sony 0003:054C:0374.0013: hiddev0,hidraw0: USB HID v0.20 Device [HID 054c:0374] on usb-dummy_hcd.2-1/input0 [ 442.900338][ T4346] sony 0003:054C:0374.0013: failed to claim input [ 443.052753][ T4312] usb 1-1: device descriptor read/64, error -71 [ 443.093724][ T4310] usb 3-1: USB disconnect, device number 26 [ 443.357100][ T4312] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 443.476445][ T4477] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 443.518896][ T4312] usb 1-1: device descriptor read/64, error -71 [ 443.661032][ T4312] usb usb1-port1: attempt power cycle [ 443.671764][ T4477] usb 2-1: Using ep0 maxpacket: 16 [ 443.697078][ T4477] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 443.710716][ T4477] usb 2-1: config 0 has no interface number 0 [ 443.718610][ T4477] usb 2-1: config 0 interface 32 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.724951][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 443.734550][ T4477] usb 2-1: config 0 interface 32 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.752302][ T4477] usb 2-1: config 0 interface 32 has no altsetting 0 [ 443.759433][ T4477] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 443.769128][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.789261][ T4477] usb 2-1: config 0 descriptor?? [ 444.119347][ T4312] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 444.173399][ T4312] usb 1-1: device descriptor read/8, error -71 [ 444.235190][ T4477] uclogic 0003:5543:0047.0014: interface is invalid, ignoring [ 444.453790][ T4312] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 444.462278][ T4477] usb 2-1: USB disconnect, device number 29 [ 444.497742][ T4312] usb 1-1: device descriptor read/8, error -71 [ 444.617418][ T4312] usb usb1-port1: unable to enumerate USB device [ 445.366498][ T4312] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 445.578202][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.602302][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.629992][ T4312] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 445.644743][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.666010][ T4312] usb 2-1: config 0 descriptor?? [ 446.182473][ T4312] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 446.197233][ T4312] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 446.205118][ T4312] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 446.212191][ T4312] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 446.232998][ T4312] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 446.240012][ T4312] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 446.260627][ T4312] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 446.553127][ T4312] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 446.579730][ T4312] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 446.609107][ T4312] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 446.646634][ T4312] pyra: probe of 0003:1E7D:2CF6.0015 failed with error -71 [ 446.700385][ T4312] usb 2-1: USB disconnect, device number 30 [ 446.844830][ T8121] fido_id[8121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 447.123315][ T8123] device syzkaller0 entered promiscuous mode [ 447.665113][ T8137] loop3: detected capacity change from 0 to 32768 [ 447.741516][ T8137] XFS (loop3): Mounting V5 Filesystem [ 447.812302][ T8137] XFS (loop3): Ending clean mount [ 447.819838][ T8137] XFS (loop3): Unmounting Filesystem [ 448.306438][ T4346] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 448.324644][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 448.497081][ T4346] usb 5-1: no configurations [ 448.501787][ T4346] usb 5-1: can't read configurations, error -22 [ 448.686799][ T4346] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 448.877052][ T4346] usb 5-1: no configurations [ 448.881872][ T4346] usb 5-1: can't read configurations, error -22 [ 448.948509][ T4346] usb usb5-port1: attempt power cycle [ 449.071344][ T8181] device syzkaller0 entered promiscuous mode [ 450.226520][ T4477] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 450.336131][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 450.426547][ T4477] usb 2-1: Using ep0 maxpacket: 16 [ 450.443711][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.553318][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.658002][ T4477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.800621][ T4477] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 450.862352][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.910072][ T4346] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 450.925740][ T4477] usb 2-1: config 0 descriptor?? [ 450.976456][ T4346] usb 5-1: device descriptor read/8, error -71 [ 451.016806][ T8207] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 451.106317][ T7] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 451.306302][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 451.317977][ T7] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 451.348856][ T7] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.362480][ T4477] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 451.380964][ T4477] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 451.383435][ T7] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 451.410374][ T7] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 451.418030][ T7] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.431568][ T7] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 451.471994][ T7] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 451.481575][ T7] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.516632][ T7] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 451.544216][ T7] usb 4-1: string descriptor 0 read error: -22 [ 451.552562][ T7] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 451.562210][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.562567][ T8184] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1060'. [ 451.616031][ T7] adutux 4-1:168.0: interrupt endpoints not found [ 451.691062][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.781257][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.818082][ T4477] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 451.835341][ T4477] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 451.835861][ T7] usb 4-1: USB disconnect, device number 25 [ 451.901518][ T4477] microsoft 0003:045E:07DA.0016: no inputs found [ 451.925382][ T4477] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 451.990840][ T4477] usb 2-1: USB disconnect, device number 31 [ 452.194475][ T8225] device syzkaller0 entered promiscuous mode [ 452.344648][ T8223] fido_id[8223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 452.626599][ T4481] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 453.529392][ T4481] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 454.536450][ T4481] usb 5-1: config 0 has no interface number 0 [ 454.594692][ T4481] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 454.620425][ T4481] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 454.817400][ T4481] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 455.842332][ T4481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.891162][ T4481] usb 5-1: Product: syz [ 455.901698][ T4481] usb 5-1: Manufacturer: syz [ 455.932028][ T4481] usb 5-1: SerialNumber: syz [ 455.971642][ T4481] usb 5-1: config 0 descriptor?? [ 456.110051][ T4481] usb 5-1: can't set config #0, error -71 [ 456.121777][ T4481] usb 5-1: USB disconnect, device number 34 [ 456.276510][ T4310] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 456.487744][ T4310] usb 2-1: no configurations [ 456.492436][ T4310] usb 2-1: can't read configurations, error -22 [ 456.568070][ T8257] device syzkaller0 entered promiscuous mode [ 456.671875][ T4310] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 456.788431][ T8267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1091'. [ 456.904516][ T4310] usb 2-1: no configurations [ 456.909412][ T4310] usb 2-1: can't read configurations, error -22 [ 456.963563][ T4310] usb usb2-port1: attempt power cycle [ 457.446371][ T4310] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 457.499623][ T4310] usb 2-1: no configurations [ 457.533235][ T4310] usb 2-1: can't read configurations, error -22 [ 457.766327][ T4310] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 457.892916][ T4310] usb 2-1: device descriptor read/8, error -71 [ 458.028906][ T4310] usb usb2-port1: unable to enumerate USB device [ 458.358276][ T8295] device syzkaller0 entered promiscuous mode [ 458.506985][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 458.567991][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1103'. [ 458.635674][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1103'. [ 459.767035][ T7] usb 1-1: no configurations [ 459.772075][ T7] usb 1-1: can't read configurations, error -22 [ 459.966338][ T7] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 460.184275][ T7] usb 1-1: no configurations [ 460.190899][ T7] usb 1-1: can't read configurations, error -22 [ 460.263443][ T7] usb usb1-port1: attempt power cycle [ 460.786442][ T7] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 460.842570][ T7] usb 1-1: no configurations [ 460.849315][ T7] usb 1-1: can't read configurations, error -22 [ 461.036445][ T7] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 461.077778][ T7] usb 1-1: no configurations [ 461.084365][ T7] usb 1-1: can't read configurations, error -22 [ 461.107182][ T7] usb usb1-port1: unable to enumerate USB device [ 461.327631][ T4346] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 461.446655][ T4310] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 461.526338][ T4346] usb 5-1: Using ep0 maxpacket: 8 [ 461.535708][ T4346] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 461.589258][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.625771][ T4346] usb 5-1: Product: syz [ 461.644577][ T4346] usb 5-1: Manufacturer: syz [ 461.657009][ T4310] usb 3-1: no configurations [ 461.662232][ T4346] usb 5-1: SerialNumber: syz [ 461.662556][ T4310] usb 3-1: can't read configurations, error -22 [ 461.698112][ T4346] usb 5-1: config 0 descriptor?? [ 461.743133][ T4346] gspca_main: se401-2.14.0 probing 047d:5003 [ 461.866423][ T4310] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 462.077070][ T4310] usb 3-1: no configurations [ 462.082972][ T4310] usb 3-1: can't read configurations, error -22 [ 462.110832][ T4346] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 462.124477][ T4346] se401: probe of 5-1:0.0 failed with error -71 [ 462.133654][ T4310] usb usb3-port1: attempt power cycle [ 462.152469][ T4346] usb 5-1: USB disconnect, device number 35 [ 462.616525][ T4310] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 462.667839][ T4310] usb 3-1: no configurations [ 462.672580][ T4310] usb 3-1: can't read configurations, error -22 [ 462.856422][ T4310] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 462.897634][ T4310] usb 3-1: no configurations [ 462.902407][ T4310] usb 3-1: can't read configurations, error -22 [ 462.914975][ T4310] usb usb3-port1: unable to enumerate USB device [ 463.126413][ T4346] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 463.156391][ T14] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 463.206627][ T4310] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 463.320823][ T4346] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 463.333596][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.343097][ T14] usb 5-1: no configurations [ 463.351049][ T14] usb 5-1: can't read configurations, error -22 [ 463.357675][ T4346] usb 4-1: Product: syz [ 463.362042][ T4346] usb 4-1: Manufacturer: syz [ 463.371856][ T4346] usb 4-1: SerialNumber: syz [ 463.394380][ T4346] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 463.406500][ T4310] usb 2-1: Using ep0 maxpacket: 16 [ 463.422387][ T4310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.437460][ T4310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.455717][ T4310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.466274][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.474403][ T4310] usb 2-1: Product: syz [ 463.490903][ T4310] usb 2-1: Manufacturer: syz [ 463.495796][ T4310] usb 2-1: SerialNumber: syz [ 463.516571][ T14] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 463.547072][ T4346] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 463.737504][ T14] usb 5-1: no configurations [ 463.742903][ T14] usb 5-1: can't read configurations, error -22 [ 463.743014][ T4310] usb 2-1: 0:2 : does not exist [ 463.781980][ T14] usb usb5-port1: attempt power cycle [ 463.785911][ T4310] usb 2-1: USB disconnect, device number 36 [ 464.027996][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.079827][ T7] usb 4-1: USB disconnect, device number 26 [ 464.253473][ T14] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 464.313156][ T14] usb 5-1: no configurations [ 464.324181][ T14] usb 5-1: can't read configurations, error -22 [ 464.511100][ T52] block nbd0: Attempted send on invalid socket [ 464.518334][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 464.530836][ T8375] exFAT-fs (nbd0): unable to read boot sector [ 464.537095][ T8375] exFAT-fs (nbd0): failed to read boot sector [ 464.543297][ T8375] exFAT-fs (nbd0): failed to recognize exfat type [ 465.454972][ T4346] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 465.463459][ T4346] ath9k_htc: Failed to initialize the device [ 466.436279][ T14] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 466.475366][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 467.116088][ T14] usb 5-1: no configurations [ 467.122236][ T14] usb 5-1: can't read configurations, error -22 [ 467.135045][ T14] usb usb5-port1: unable to enumerate USB device [ 467.486552][ T7] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 467.638878][ T4312] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 467.676344][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 467.684253][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 467.722087][ T7] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 467.759684][ T7] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 467.788842][ T7] usb 4-1: Product: syz [ 467.800350][ T7] usb 4-1: Manufacturer: syz [ 467.811600][ T7] usb 4-1: SerialNumber: syz [ 467.825952][ T7] usb 4-1: config 0 descriptor?? [ 467.836712][ T8388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.864848][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 467.880820][ T4312] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 467.891358][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 467.898304][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.911039][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 467.980934][ T4312] usb 2-1: config 0 descriptor?? [ 470.069048][ T4312] ath6kl: Failed to submit usb control message: -110 [ 470.104816][ T4312] ath6kl: unable to send the bmi data to the device: -110 [ 470.112976][ T8392] comedi comedi2: s526: I/O port conflict (0x5e,64) [ 473.052516][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.098562][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.479316][ T4312] ath6kl: Unable to send get target info: -110 [ 474.447954][ T4312] ath6kl: Failed to init ath6kl core: -110 [ 476.080392][ T8445] loop1: detected capacity change from 0 to 32768 [ 476.127826][ T4312] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 476.136459][ T7] usb 4-1: USB disconnect, device number 27 [ 476.179702][ T4312] usb 2-1: USB disconnect, device number 37 [ 476.270243][ T8445] XFS (loop1): Mounting V5 Filesystem [ 476.337839][ T8445] XFS (loop1): Ending clean mount [ 476.357205][ T8445] XFS (loop1): Unmounting Filesystem [ 476.518588][ T4314] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 476.708999][ T4314] usb 5-1: no configurations [ 476.714805][ T4314] usb 5-1: can't read configurations, error -22 [ 476.916393][ T4314] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 477.109752][ T4314] usb 5-1: no configurations [ 477.116652][ T4314] usb 5-1: can't read configurations, error -22 [ 477.124187][ T4314] usb usb5-port1: attempt power cycle [ 477.536319][ T4314] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 477.556355][ T4477] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 477.646107][ T4314] usb 5-1: device descriptor read/8, error -71 [ 477.758459][ T4477] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.801476][ T4477] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 477.833704][ T4477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.854621][ T4477] usb 1-1: config 0 descriptor?? [ 478.285849][ T4477] ath6kl: Unsupported hardware version: 0x0 [ 478.325548][ T4477] ath6kl: Failed to init ath6kl core: -22 [ 478.406535][ T4477] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 478.531963][ T4477] usb 1-1: USB disconnect, device number 37 [ 478.921808][ T8479] loop4: detected capacity change from 0 to 32768 [ 479.081307][ T8479] XFS (loop4): Mounting V5 Filesystem [ 480.180420][ T8479] XFS (loop4): Ending clean mount [ 480.187625][ T8479] XFS (loop4): Unmounting Filesystem [ 480.753363][ T4312] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 480.957114][ T4312] usb 1-1: no configurations [ 480.961905][ T4312] usb 1-1: can't read configurations, error -22 [ 481.036696][ T4310] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 481.186476][ T4312] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 481.236412][ T4310] usb 2-1: Using ep0 maxpacket: 8 [ 481.260051][ T4310] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 481.293997][ T4310] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.346324][ T4310] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 481.411620][ T4310] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 481.412055][ T4312] usb 1-1: no configurations [ 481.421739][ T4310] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.468011][ T4310] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 481.498128][ T4312] usb 1-1: can't read configurations, error -22 [ 481.843510][ T4310] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 481.851651][ T4310] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.864938][ T4310] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 481.878418][ T4310] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 481.906260][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.993189][ T4310] usb 2-1: Product: syz [ 482.017497][ T4310] usb 2-1: Manufacturer: syz [ 482.029196][ T4310] usb 2-1: SerialNumber: syz [ 482.029384][ T4312] usb usb1-port1: attempt power cycle [ 482.268221][ T4310] adutux 2-1:168.0: interrupt endpoints not found [ 482.313292][ T4310] usb 2-1: USB disconnect, device number 38 [ 482.596316][ T4312] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 482.662370][ T4312] usb 1-1: no configurations [ 482.667098][ T4312] usb 1-1: can't read configurations, error -22 [ 482.676559][ T4314] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 482.877312][ T4314] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 482.885943][ T4314] usb 5-1: config 0 has no interface number 0 [ 482.956449][ T4314] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 482.965890][ T4312] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 482.999998][ T4312] usb 1-1: no configurations [ 483.004702][ T4312] usb 1-1: can't read configurations, error -22 [ 483.016413][ T4312] usb usb1-port1: unable to enumerate USB device [ 483.026763][ T4314] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 483.073379][ T4314] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 483.133915][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.164376][ T4314] usb 5-1: Product: syz [ 483.180972][ T4314] usb 5-1: Manufacturer: syz [ 483.219632][ T4314] usb 5-1: SerialNumber: syz [ 483.295221][ T4314] usb 5-1: config 0 descriptor?? [ 483.310720][ T8553] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 483.325744][ T8565] loop2: detected capacity change from 0 to 32768 [ 483.347520][ T8553] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 483.355870][ T4314] smsc95xx v2.0.0 [ 483.387468][ T4310] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 483.393292][ T8565] XFS (loop2): Mounting V5 Filesystem [ 483.448606][ T8565] XFS (loop2): Ending clean mount [ 483.455115][ T8565] XFS (loop2): Unmounting Filesystem [ 483.569868][ T8553] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 483.588349][ T4310] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 483.593311][ T8553] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 483.613027][ T4310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 483.654510][ T4310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 483.695566][ T4310] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 483.707122][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.723312][ T4310] usb 4-1: config 0 descriptor?? [ 483.730894][ T8569] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 483.902053][ T4314] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 483.926998][ T4314] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.188076][ T4310] itetech 0003:048D:8595.0017: unknown main item tag 0x0 [ 484.225771][ T4310] itetech 0003:048D:8595.0017: unknown main item tag 0x0 [ 484.233932][ T4310] itetech 0003:048D:8595.0017: unknown main item tag 0x0 [ 484.254421][ T4310] itetech 0003:048D:8595.0017: unknown main item tag 0x0 [ 484.262766][ T4310] itetech 0003:048D:8595.0017: unknown main item tag 0x0 [ 484.270550][ T4310] itetech 0003:048D:8595.0017: unknown main item tag 0x0 [ 484.278554][ T4310] itetech 0003:048D:8595.0017: unexpected long global item [ 484.286875][ T4310] itetech: probe of 0003:048D:8595.0017 failed with error -22 [ 484.418211][ T14] usb 4-1: USB disconnect, device number 28 [ 484.488098][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 484.736318][ T7] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 484.759314][ T4314] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 484.776477][ T4314] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 484.804058][ T4314] usb 5-1: USB disconnect, device number 44 [ 485.026414][ T4310] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 485.217434][ T4310] usb 3-1: no configurations [ 485.222349][ T4310] usb 3-1: can't read configurations, error -22 [ 485.364610][ T8608] loop0: detected capacity change from 0 to 32768 [ 485.374076][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.374106][ T7] usb 2-1: config 0 has no interfaces? [ 485.374135][ T7] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 485.374161][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.375934][ T7] usb 2-1: config 0 descriptor?? [ 485.381209][ T8608] XFS (loop0): Mounting V5 Filesystem [ 485.405474][ T8608] XFS (loop0): Ending clean mount [ 485.407377][ T4310] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 485.413760][ T8608] XFS (loop0): Unmounting Filesystem [ 485.461582][ T4270] Bluetooth: hci0: command 0x2016 tx timeout [ 485.705124][ T4310] usb 3-1: no configurations [ 485.720181][ T4310] usb 3-1: can't read configurations, error -22 [ 485.744961][ T4310] usb usb3-port1: attempt power cycle [ 486.626455][ T4310] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 486.677574][ T4310] usb 3-1: no configurations [ 486.682255][ T4310] usb 3-1: can't read configurations, error -22 [ 486.836356][ T4310] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 486.877763][ T4310] usb 3-1: no configurations [ 486.882889][ T4310] usb 3-1: can't read configurations, error -22 [ 486.896714][ T4310] usb usb3-port1: unable to enumerate USB device [ 487.622411][ T14] usb 2-1: USB disconnect, device number 39 [ 487.917458][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'. [ 487.969025][ T8661] loop0: detected capacity change from 0 to 32768 [ 488.116520][ T8661] XFS (loop0): Mounting V5 Filesystem [ 488.257826][ T8661] XFS (loop0): Ending clean mount [ 488.264794][ T8661] XFS (loop0): Unmounting Filesystem [ 488.281955][ T8658] loop4: detected capacity change from 0 to 40427 [ 488.301133][ T8658] F2FS-fs (loop4): invalid crc value [ 488.464056][ T8658] F2FS-fs (loop4): Found nat_bits in checkpoint [ 489.161501][ T8658] F2FS-fs (loop4): Start checkpoint disabled! [ 489.224455][ T8658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 489.731437][ T4270] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 489.789583][ T26] audit: type=1804 audit(1776470952.269:10): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1223" name="/newroot/251/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 490.196453][ T14] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 490.401107][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.431224][ T14] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.484940][ T14] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 490.516698][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.534119][ T14] usb 4-1: config 0 descriptor?? [ 490.777354][ T4477] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 490.986462][ T4477] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.024540][ T4477] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 491.148089][ T4477] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.494987][ T4477] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 491.653499][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 491.799610][ T4477] usb 1-1: Product: syz [ 491.820912][ T4477] usb 1-1: Manufacturer: syz [ 491.833403][ T4477] usb 1-1: SerialNumber: syz [ 491.939106][ T4270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32' [ 491.950471][ T4270] CPU: 0 PID: 4270 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 491.958089][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 491.968463][ T4270] Workqueue: hci0 hci_rx_work [ 491.973203][ T4270] Call Trace: [ 491.976529][ T4270] [ 491.979502][ T4270] dump_stack_lvl+0x188/0x24e [ 491.984252][ T4270] ? show_regs_print_info+0x12/0x12 [ 491.989506][ T4270] ? load_image+0x400/0x400 [ 491.994074][ T4270] sysfs_create_dir_ns+0x26a/0x290 [ 491.999251][ T4270] ? sysfs_warn_dup+0xa0/0xa0 [ 492.003981][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 492.009228][ T4270] kobject_add_internal+0x61c/0xcc0 [ 492.014578][ T4270] kobject_add+0x160/0x230 [ 492.019048][ T4270] ? kobject_init+0x1d0/0x1d0 [ 492.023781][ T4270] ? klist_children_get+0x50/0x50 [ 492.028850][ T4270] ? get_device_parent+0x121/0x3f0 [ 492.034008][ T4270] device_add+0x483/0xfb0 [ 492.038553][ T4270] ? kmem_cache_free+0xf7/0x290 [ 492.043472][ T4270] hci_conn_add_sysfs+0xd1/0x1e0 [ 492.048468][ T4270] le_conn_complete_evt+0x1062/0x1670 [ 492.053894][ T4270] ? le_conn_complete_evt+0xe9/0x1670 [ 492.059417][ T4270] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 492.065711][ T4270] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 492.071434][ T4270] ? skb_pull_data+0xf7/0x200 [ 492.076162][ T4270] hci_le_conn_complete_evt+0x183/0x440 [ 492.081871][ T4270] ? hci_remote_host_features_evt+0x270/0x270 [ 492.088095][ T4270] hci_event_packet+0x7b9/0x1280 [ 492.093104][ T4270] ? bis_list+0x280/0x280 [ 492.097489][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 492.103614][ T4270] ? kcov_remote_start+0x4c7/0x7e0 [ 492.108777][ T4270] ? patch_conexant_auto+0x1260/0x1650 [ 492.114297][ T4270] ? hci_send_to_monitor+0x9c/0x4a0 [ 492.119636][ T4270] hci_rx_work+0x3eb/0xd40 [ 492.124189][ T4270] ? _raw_spin_unlock+0x40/0x40 [ 492.129197][ T4270] ? process_one_work+0x7b0/0x1160 [ 492.130387][ T4477] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 492.134370][ T4270] process_one_work+0x8a2/0x1160 [ 492.150210][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 492.156291][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 492.161463][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 492.167066][ T4270] ? kthread_data+0x4b/0xc0 [ 492.171631][ T4270] worker_thread+0xaa2/0x1270 [ 492.176404][ T4270] kthread+0x29d/0x330 [ 492.180520][ T4270] ? worker_clr_flags+0x1a0/0x1a0 [ 492.185590][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 492.190264][ T4270] ret_from_fork+0x1f/0x30 [ 492.194758][ T4270] [ 492.202213][ T4270] kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 492.216402][ T4270] Bluetooth: hci0: failed to register connection device [ 492.271386][ T4493] kworker/u4:11: attempt to access beyond end of device [ 492.271386][ T4493] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 492.297580][ T4482] usb 1-1: USB disconnect, device number 42 [ 492.556732][ T8709] usblp0: removed [ 493.043637][ T4477] usb 4-1: USB disconnect, device number 29 [ 493.071627][ T8723] loop2: detected capacity change from 0 to 32768 [ 493.142394][ T8723] XFS (loop2): Mounting V5 Filesystem [ 493.262532][ T8723] XFS (loop2): Ending clean mount [ 493.271820][ T8723] XFS (loop2): Unmounting Filesystem [ 494.318012][ T4270] Bluetooth: hci0: command 0x2016 tx timeout [ 497.506425][ T4481] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 497.519238][ T8756] loop0: detected capacity change from 0 to 40427 [ 497.559119][ T8756] F2FS-fs (loop0): invalid crc value [ 497.576163][ T8756] F2FS-fs (loop0): Found nat_bits in checkpoint [ 497.709934][ T4481] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 497.725358][ T4481] usb 5-1: can't read configurations, error -61 [ 497.766647][ T8756] F2FS-fs (loop0): Start checkpoint disabled! [ 497.804898][ T8756] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 497.993542][ T4481] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 498.019592][ T26] audit: type=1804 audit(1776470960.509:11): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1251" name="/newroot/274/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 498.041434][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.076393][ T14] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 498.218747][ T4481] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 498.237170][ T4481] usb 5-1: can't read configurations, error -61 [ 498.249045][ T4481] usb usb5-port1: attempt power cycle [ 498.284836][ T4750] kworker/u4:16: attempt to access beyond end of device [ 498.284836][ T4750] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 498.309400][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 498.316119][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.349018][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.366331][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.389871][ T14] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 498.406412][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.436780][ T14] usb 4-1: config 0 descriptor?? [ 498.586481][ T4312] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 498.686517][ T4481] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 498.760011][ T4481] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 498.792706][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 498.796462][ T4481] usb 5-1: can't read configurations, error -61 [ 498.800927][ T4312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.845187][ T4312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.857167][ T14] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 498.877708][ T14] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 498.889068][ T4312] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.911779][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.927147][ T4312] usb 3-1: Product: syz [ 498.931551][ T4312] usb 3-1: Manufacturer: syz [ 498.946688][ T4312] usb 3-1: SerialNumber: syz [ 498.982085][ T4481] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 499.024769][ T4481] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 499.042892][ T4481] usb 5-1: can't read configurations, error -61 [ 499.062145][ T4481] usb usb5-port1: unable to enumerate USB device [ 499.070325][ T8790] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1262'. [ 499.093155][ T14] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 499.113291][ T14] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 499.135712][ T14] microsoft 0003:045E:07DA.0018: no inputs found [ 499.142642][ T14] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 499.180027][ T4312] usb 3-1: 0:2 : does not exist [ 499.193258][ T4312] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 499.201528][ T14] usb 4-1: USB disconnect, device number 30 [ 499.230397][ T4312] usb 3-1: USB disconnect, device number 35 [ 500.083715][ T8814] fido_id[8814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 500.094958][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.182251][ T4270] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 500.182289][ T4270] Bluetooth: unknown link type 10 [ 501.528618][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535257][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.746302][ T4314] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 501.934145][ T8820] loop2: detected capacity change from 0 to 40427 [ 501.940319][ T4314] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 501.958844][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 502.006597][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 502.025082][ T4314] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 502.036807][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.048194][ T4314] usb 4-1: config 0 descriptor?? [ 502.054442][ T8842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 502.100736][ T8820] F2FS-fs (loop2): invalid crc value [ 502.188703][ T8820] F2FS-fs (loop2): Found nat_bits in checkpoint [ 502.236606][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 502.590488][ T8820] F2FS-fs (loop2): Start checkpoint disabled! [ 503.035206][ T4314] itetech 0003:048D:8595.0019: unknown main item tag 0x0 [ 503.058841][ T4314] itetech 0003:048D:8595.0019: unknown main item tag 0x0 [ 503.065978][ T4314] itetech 0003:048D:8595.0019: unknown main item tag 0x0 [ 503.073315][ T4314] itetech 0003:048D:8595.0019: unknown main item tag 0x0 [ 503.076344][ T8820] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 503.080505][ T4314] itetech 0003:048D:8595.0019: unknown main item tag 0x0 [ 503.095246][ T4314] itetech 0003:048D:8595.0019: unknown main item tag 0x0 [ 503.102493][ T4314] itetech 0003:048D:8595.0019: unexpected long global item [ 503.110338][ T4314] itetech: probe of 0003:048D:8595.0019 failed with error -22 [ 503.250456][ T4312] usb 4-1: USB disconnect, device number 31 [ 503.876435][ T4477] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 504.742769][ T4477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 504.796536][ T4477] usb 2-1: can't read configurations, error -61 [ 504.956443][ T4477] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 505.368426][ T4477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 505.386529][ T4477] usb 2-1: can't read configurations, error -61 [ 505.413032][ T4477] usb usb2-port1: attempt power cycle [ 505.866303][ T4477] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 505.919360][ T4477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 505.936272][ T4477] usb 2-1: can't read configurations, error -61 [ 506.106312][ T4477] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 506.149362][ T4477] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 506.176412][ T4477] usb 2-1: can't read configurations, error -61 [ 506.189103][ T4477] usb usb2-port1: unable to enumerate USB device [ 506.354014][ T8922] comedi comedi2: no devices specified [ 507.658931][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805546e400: rx timeout, send abort [ 507.667543][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805546e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 507.702409][ T8905] loop3: detected capacity change from 0 to 40427 [ 507.733140][ T8905] F2FS-fs (loop3): invalid crc value [ 507.778682][ T8905] F2FS-fs (loop3): Found nat_bits in checkpoint [ 507.958769][ T8905] F2FS-fs (loop3): Start checkpoint disabled! [ 508.004536][ T8905] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 508.286959][ T26] audit: type=1804 audit(1776470970.769:12): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1296" name="/newroot/247/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 508.308825][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.390591][ T8952] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 508.575078][ T4516] kworker/u4:13: attempt to access beyond end of device [ 508.575078][ T4516] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 508.887148][ T4477] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 508.946993][ T4481] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 509.086395][ T4477] usb 5-1: Using ep0 maxpacket: 16 [ 509.093876][ T4477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.124844][ T4477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.140298][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 509.154897][ T4481] usb 3-1: can't read configurations, error -61 [ 509.179167][ T4477] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 509.220209][ T4477] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.239256][ T4477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.272981][ T4477] usb 5-1: config 0 descriptor?? [ 509.287617][ T8972] trusted_key: encrypted_key: insufficient parameters specified [ 509.326519][ T4481] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 509.539239][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 509.579962][ T4481] usb 3-1: can't read configurations, error -61 [ 509.630070][ T4481] usb usb3-port1: attempt power cycle [ 509.715481][ T4477] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 509.739369][ T4477] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 509.914387][ T8946] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1316'. [ 509.983852][ T4477] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 510.007593][ T4477] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 510.046314][ T4477] microsoft 0003:045E:07DA.001A: no inputs found [ 510.056695][ T4477] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 510.076325][ T4481] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 510.119606][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 510.142565][ T4477] usb 5-1: USB disconnect, device number 49 [ 510.148850][ T4481] usb 3-1: can't read configurations, error -61 [ 510.316485][ T4481] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 510.359222][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 510.383442][ T4481] usb 3-1: can't read configurations, error -61 [ 510.410858][ T4481] usb usb3-port1: unable to enumerate USB device [ 510.427694][ T8993] fido_id[8993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 510.976403][ T4481] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 511.168091][ T4481] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.186337][ T4481] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 511.231606][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.272974][ T4481] usb 5-1: config 0 descriptor?? [ 511.688134][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024889400: rx timeout, send abort [ 511.698815][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024889400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 513.678014][ T9027] fuse: Unknown parameter 'use00000000000000000000' [ 514.201386][ T4312] usb 5-1: USB disconnect, device number 50 [ 515.502245][ T9054] trusted_key: encrypted_key: insufficient parameters specified [ 516.014467][ T9067] fuse: Unknown parameter 'user_i00000000000000000000' [ 516.412024][ T4481] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 516.618410][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 516.626810][ T4481] usb 3-1: can't read configurations, error -61 [ 516.796480][ T4481] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 516.806584][ T7] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 516.988546][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 517.006871][ T4481] usb 3-1: can't read configurations, error -61 [ 517.008217][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.026962][ T4481] usb usb3-port1: attempt power cycle [ 517.055884][ T7] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 517.101754][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.144101][ T7] usb 2-1: config 0 descriptor?? [ 517.230268][ T9094] fuse: Unknown parameter 'user_i00000000000000000000' [ 517.690045][ T14] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 517.926614][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 517.947739][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.128977][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.266148][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 518.378179][ T4481] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 518.403699][ T14] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 518.422697][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.424787][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 518.439755][ T4481] usb 3-1: can't read configurations, error -61 [ 518.462500][ T14] usb 5-1: config 0 descriptor?? [ 518.626341][ T4481] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 518.670041][ T4481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 518.687375][ T4481] usb 3-1: can't read configurations, error -61 [ 518.710630][ T9117] device syzkaller0 entered promiscuous mode [ 518.717733][ T4481] usb usb3-port1: unable to enumerate USB device [ 518.887598][ T14] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 518.897884][ T14] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 519.095555][ T14] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 519.117045][ T14] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 519.129236][ T14] microsoft 0003:045E:07DA.001B: no inputs found [ 519.137436][ T14] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 519.167368][ T14] usb 5-1: USB disconnect, device number 51 [ 519.578121][ T9120] fido_id[9120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 519.593035][ T4477] usb 2-1: USB disconnect, device number 44 [ 519.884389][ T9130] fuse: Unknown parameter 'user_i00000000000000000000' [ 524.346948][ T9164] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1384'. [ 525.749025][ T9138] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1377'. [ 525.972971][ T9172] fuse: Unknown parameter 'user_id00000000000000000000' [ 526.076320][ T4270] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 526.084377][ T4273] Bluetooth: hci5: command 0xfc11 tx timeout [ 526.316388][ T4479] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 526.516370][ T4479] usb 3-1: Using ep0 maxpacket: 16 [ 526.533346][ T4479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.545077][ T4479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.556672][ T4479] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.570420][ T4479] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 526.596914][ T4479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.662141][ T4479] usb 3-1: config 0 descriptor?? [ 527.083041][ T4479] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max [ 527.105409][ T4479] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max [ 527.142372][ T7] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 527.286724][ T4479] microsoft 0003:045E:07DA.001C: No inputs registered, leaving [ 527.304686][ T4479] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 527.317109][ T4479] microsoft 0003:045E:07DA.001C: no inputs found [ 527.323561][ T4479] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 527.346688][ T4479] usb 3-1: USB disconnect, device number 44 [ 527.350765][ T9184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1391'. [ 527.388850][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1395'. [ 527.412111][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 527.428452][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 527.487001][ T7] usb 5-1: can't read configurations, error -71 [ 527.492572][ T9193] fido_id[9193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 527.903782][ T9203] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 527.936238][ T4312] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 527.945470][ T9207] fuse: Unknown parameter 'user_id00000000000000000000' [ 528.156958][ T4312] usb 2-1: Using ep0 maxpacket: 8 [ 528.170040][ T4312] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.184303][ T4312] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.851972][ T4312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 528.896378][ T4312] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 528.915761][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.939827][ T4312] usb 2-1: config 0 descriptor?? [ 529.136738][ T9219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1405'. [ 529.357970][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.400031][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.420341][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.446362][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.467240][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.485017][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.521718][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.541561][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.572168][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.601035][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.626322][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.682804][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.711783][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.742085][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.759206][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.772393][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.780290][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.789599][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.805894][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.815940][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.824177][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.856848][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.872791][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.900895][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.922957][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.937951][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.945679][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.954289][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.962800][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 529.971320][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.005916][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.032366][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.060704][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.136509][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.156349][ T4270] Bluetooth: hci4: command 0x2016 tx timeout [ 530.206384][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.339162][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.477062][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.612280][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.740692][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.886659][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 530.979865][ T4312] hid-generic 0003:1B1C:0A2B.001D: unknown main item tag 0x0 [ 531.007693][ T4312] hid-generic 0003:1B1C:0A2B.001D: hidraw0: USB HID vff.fa Device [HID 1b1c:0a2b] on usb-dummy_hcd.1-1/input0 [ 531.046851][ T4312] usb 2-1: USB disconnect, device number 45 [ 531.328378][ T14] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 531.503561][ T9260] fido_id[9260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 531.526530][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 531.535651][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.581213][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.607005][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 531.692305][ T14] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 531.709948][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.738181][ T14] usb 5-1: config 0 descriptor?? [ 532.148523][ T14] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 532.186354][ T14] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 532.284825][ T9282] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 532.348430][ T14] microsoft 0003:045E:07DA.001E: No inputs registered, leaving [ 532.374578][ T14] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 532.439254][ T14] microsoft 0003:045E:07DA.001E: no inputs found [ 532.455376][ T14] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 532.516437][ T14] usb 5-1: USB disconnect, device number 54 [ 532.914228][ T9288] fido_id[9288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 533.121962][ T9293] loop2: detected capacity change from 0 to 32768 [ 533.232000][ T9293] XFS (loop2): Mounting V5 Filesystem [ 533.426541][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 533.449520][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 533.613301][ T9293] XFS (loop2): Ending clean mount [ 533.620011][ T9293] XFS (loop2): Unmounting Filesystem [ 534.324919][ T9312] overlayfs: unrecognized mount option "nat" or missing value [ 535.434737][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.442085][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.166569][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.205327][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.767662][ T9310] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.776813][ T9310] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.785729][ T9310] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.794935][ T9310] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.690312][ T9365] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 539.267670][ T4270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 539.277846][ T4270] CPU: 1 PID: 4270 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 539.285454][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 539.296015][ T4270] Workqueue: hci3 hci_rx_work [ 539.300749][ T4270] Call Trace: [ 539.304063][ T4270] [ 539.307019][ T4270] dump_stack_lvl+0x188/0x24e [ 539.311714][ T4270] ? show_regs_print_info+0x12/0x12 [ 539.316940][ T4270] ? load_image+0x400/0x400 [ 539.321572][ T4270] sysfs_create_dir_ns+0x26a/0x290 [ 539.326722][ T4270] ? sysfs_warn_dup+0xa0/0xa0 [ 539.331777][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 539.337015][ T4270] kobject_add_internal+0x61c/0xcc0 [ 539.342226][ T4270] kobject_add+0x160/0x230 [ 539.346668][ T4270] ? kobject_init+0x1d0/0x1d0 [ 539.351474][ T4270] ? klist_children_get+0x50/0x50 [ 539.356521][ T4270] ? get_device_parent+0x121/0x3f0 [ 539.361669][ T4270] device_add+0x483/0xfb0 [ 539.366062][ T4270] ? kmem_cache_free+0xf7/0x290 [ 539.371048][ T4270] hci_conn_add_sysfs+0xd1/0x1e0 [ 539.376034][ T4270] le_conn_complete_evt+0x1062/0x1670 [ 539.381427][ T4270] ? le_conn_complete_evt+0xe9/0x1670 [ 539.386837][ T4270] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 539.393118][ T4270] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 539.398775][ T4270] ? skb_pull_data+0xf7/0x200 [ 539.403621][ T4270] hci_le_conn_complete_evt+0x183/0x440 [ 539.409193][ T4270] ? hci_remote_host_features_evt+0x270/0x270 [ 539.415296][ T4270] hci_event_packet+0x7b9/0x1280 [ 539.420293][ T4270] ? bis_list+0x280/0x280 [ 539.424645][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 539.430571][ T4270] ? kcov_remote_start+0x4c7/0x7e0 [ 539.435709][ T4270] ? patch_conexant_auto+0x1260/0x1650 [ 539.441281][ T4270] ? hci_send_to_monitor+0x9c/0x4a0 [ 539.446515][ T4270] hci_rx_work+0x3eb/0xd40 [ 539.450950][ T4270] ? _raw_spin_unlock+0x40/0x40 [ 539.455824][ T4270] ? process_one_work+0x7b0/0x1160 [ 539.460956][ T4270] process_one_work+0x8a2/0x1160 [ 539.465919][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 539.471575][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 539.476618][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 539.482179][ T4270] ? kthread_data+0x4b/0xc0 [ 539.486721][ T4270] worker_thread+0xaa2/0x1270 [ 539.491438][ T4270] kthread+0x29d/0x330 [ 539.495525][ T4270] ? worker_clr_flags+0x1a0/0x1a0 [ 539.500564][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 539.505168][ T4270] ret_from_fork+0x1f/0x30 [ 539.509619][ T4270] [ 539.512666][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.519863][ T4270] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 539.533339][ T4270] Bluetooth: hci3: failed to register connection device [ 539.541063][ T4270] Bluetooth: hci3: command 0x2016 tx timeout [ 539.941638][ T9362] overlayfs: unrecognized mount option "nat" or missing value [ 541.606621][ T4270] Bluetooth: hci3: command 0x2016 tx timeout [ 543.086419][ T4312] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 543.277856][ T4312] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 543.306308][ T4312] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 543.358691][ T4312] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 543.389176][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.424333][ T4312] usb 1-1: Product: syz [ 543.464913][ T4312] usb 1-1: Manufacturer: syz [ 543.475037][ T4312] usb 1-1: SerialNumber: syz [ 543.513762][ T4312] usb 1-1: config 0 descriptor?? [ 543.531536][ T9413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.556741][ T9413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.796579][ T9413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.825109][ T9413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.866375][ T27] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 543.996397][ T9428] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 544.058077][ T27] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 544.076089][ T27] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 544.111453][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 544.131166][ T27] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.141750][ T27] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.154998][ T27] usb 4-1: Product: syz [ 544.161000][ T27] usb 4-1: Manufacturer: syz [ 544.165786][ T27] usb 4-1: SerialNumber: syz [ 544.182717][ T27] usb 4-1: config 0 descriptor?? [ 544.193859][ T27] hub 4-1:0.0: bad descriptor, ignoring hub [ 544.203896][ T27] hub: probe of 4-1:0.0 failed with error -5 [ 544.234812][ T27] usb 4-1: selecting invalid altsetting 0 [ 544.481867][ T4312] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 544.576558][ T14] usb 4-1: USB disconnect, device number 32 [ 544.685357][ T14] usb 1-1: USB disconnect, device number 43 [ 545.655210][ T9431] loop1: detected capacity change from 0 to 40427 [ 545.724315][ T9431] F2FS-fs (loop1): invalid crc value [ 545.753326][ T9431] F2FS-fs (loop1): Found nat_bits in checkpoint [ 545.921281][ T9431] F2FS-fs (loop1): Start checkpoint disabled! [ 546.002756][ T4273] Bluetooth: hci4: command 0x2016 tx timeout [ 546.036394][ T9431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 546.362192][ T26] audit: type=1804 audit(1776471008.849:13): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1477" name="/newroot/281/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 546.633446][ T9] kworker/u4:0: attempt to access beyond end of device [ 546.633446][ T9] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 547.219744][ T9467] overlayfs: unrecognized mount option "nat" or missing value [ 547.426276][ T4312] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 547.623976][ T4312] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 547.654448][ T4312] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 547.684852][ T4312] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 547.739075][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.765907][ T4312] usb 4-1: Product: syz [ 548.357455][ T4312] usb 4-1: Manufacturer: syz [ 548.363015][ T4312] usb 4-1: SerialNumber: syz [ 548.497332][ T4312] usb 4-1: config 0 descriptor?? [ 548.612027][ T9474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 548.621027][ T9474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 548.904023][ T9474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 548.926587][ T9474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 549.049724][ T9495] netlink: 'syz.1.1496': attribute type 5 has an invalid length. [ 549.553912][ T4312] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 549.757399][ T4312] usb 4-1: USB disconnect, device number 33 [ 550.256530][ T4477] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 550.261082][ T9522] ax25_connect(): syz.2.1508 uses autobind, please contact jreuter@yaina.de [ 550.283657][ T9522] ax25_connect(): syz.2.1508 uses autobind, please contact jreuter@yaina.de [ 550.468631][ T4477] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.489387][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 550.517829][ T4477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 550.543778][ T4477] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 550.562422][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.591859][ T4477] usb 2-1: config 0 descriptor?? [ 550.614413][ T9516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 551.151783][ T4477] usbhid 2-1:0.0: can't add hid device: -71 [ 551.163131][ T4477] usbhid: probe of 2-1:0.0 failed with error -71 [ 551.190326][ T4477] usb 2-1: USB disconnect, device number 46 [ 551.383955][ T9545] loop2: detected capacity change from 0 to 32768 [ 551.448187][ T9533] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 551.525788][ T9545] XFS (loop2): Mounting V5 Filesystem [ 551.631268][ T9545] XFS (loop2): Ending clean mount [ 551.638099][ T9545] XFS (loop2): Unmounting Filesystem [ 553.186527][ T4312] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 553.378294][ T4312] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 553.421957][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.454499][ T4312] usb 4-1: config 0 descriptor?? [ 553.505576][ T4312] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 553.959982][ T4312] gp8psk: usb in 128 operation failed. [ 555.760290][ T9609] loop2: detected capacity change from 0 to 32768 [ 555.786468][ T4312] gp8psk: usb in 137 operation failed. [ 555.794569][ T4312] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 555.843951][ T4312] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 555.888500][ T4312] usb 4-1: USB disconnect, device number 34 [ 555.915382][ T9609] XFS (loop2): Mounting V5 Filesystem [ 556.010352][ T9609] XFS (loop2): Ending clean mount [ 556.017932][ T9609] XFS (loop2): Unmounting Filesystem [ 557.831196][ T9643] device syzkaller0 entered promiscuous mode [ 558.456382][ T4477] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 558.935290][ T4477] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 558.946377][ T4477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.978212][ T4477] usb 4-1: config 0 descriptor?? [ 558.993129][ T4477] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 559.947113][ T4477] gp8psk: usb in 128 operation failed. [ 561.222318][ T4477] gp8psk: usb in 137 operation failed. [ 561.227956][ T4477] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 561.250387][ T4477] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 561.263536][ T4477] usb 4-1: USB disconnect, device number 35 [ 561.680761][ T4477] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 561.912915][ T4477] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 561.923050][ T4477] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 561.938801][ T4477] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 561.948253][ T4477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.956807][ T4477] usb 4-1: Product: syz [ 561.965446][ T4477] usb 4-1: Manufacturer: syz [ 561.970659][ T4477] usb 4-1: SerialNumber: syz [ 561.993359][ T4477] usb 4-1: config 0 descriptor?? [ 561.999334][ T9684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.007245][ T9684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.224775][ T9684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.243748][ T9684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.962643][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.969251][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.093660][ T4477] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 563.150755][ T4477] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 4e:00:00:00:00:00 [ 563.216301][ T4477] usb 4-1: USB disconnect, device number 36 [ 563.233850][ T4477] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 565.667909][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1558'. [ 565.786526][ T4479] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 565.978122][ T4479] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 566.019675][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 566.074341][ T4479] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 566.129277][ T4479] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 566.157713][ T4479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.197993][ T4479] usb 1-1: config 0 descriptor?? [ 566.211462][ T9713] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 566.254456][ T9732] device syzkaller0 entered promiscuous mode [ 566.640931][ T4479] usbhid 1-1:0.0: can't add hid device: -71 [ 566.655043][ T4479] usbhid: probe of 1-1:0.0 failed with error -71 [ 566.679046][ T4479] usb 1-1: USB disconnect, device number 44 [ 570.422530][ T26] audit: type=1326 audit(1776471032.909:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.464540][ T26] audit: type=1326 audit(1776471032.909:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.495071][ T26] audit: type=1326 audit(1776471032.909:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.538477][ T26] audit: type=1326 audit(1776471032.909:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.572735][ T26] audit: type=1326 audit(1776471032.909:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.616863][ T26] audit: type=1326 audit(1776471032.909:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.639337][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.680069][ T4477] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 570.681741][ T26] audit: type=1326 audit(1776471032.909:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.711990][ T26] audit: type=1326 audit(1776471032.909:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f911755d04e code=0x7ffc0000 [ 570.734690][ T26] audit: type=1326 audit(1776471032.909:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f911759db17 code=0x7ffc0000 [ 570.757653][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.764444][ T26] audit: type=1326 audit(1776471032.909:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.0.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 570.786812][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.686909][ T4477] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 571.716282][ T4477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 571.727618][ T4477] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 571.740860][ T4477] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 571.750220][ T4477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.783883][ T4477] usb 3-1: config 0 descriptor?? [ 571.794379][ T9792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 572.223566][ T4477] usbhid 3-1:0.0: can't add hid device: -71 [ 572.235124][ T4477] usbhid: probe of 3-1:0.0 failed with error -71 [ 572.268528][ T4477] usb 3-1: USB disconnect, device number 45 [ 573.407273][ T9812] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 573.416924][ T9812] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 573.426547][ T9812] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 574.005904][ T4270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32' [ 574.015477][ T4270] CPU: 0 PID: 4270 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 574.023164][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 574.033536][ T4270] Workqueue: hci0 hci_rx_work [ 574.038372][ T4270] Call Trace: [ 574.041668][ T4270] [ 574.044632][ T4270] dump_stack_lvl+0x188/0x24e [ 574.049341][ T4270] ? show_regs_print_info+0x12/0x12 [ 574.054573][ T4270] ? load_image+0x400/0x400 [ 574.059109][ T4270] sysfs_create_dir_ns+0x26a/0x290 [ 574.064243][ T4270] ? sysfs_warn_dup+0xa0/0xa0 [ 574.069041][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 574.074361][ T4270] kobject_add_internal+0x61c/0xcc0 [ 574.079584][ T4270] kobject_add+0x160/0x230 [ 574.084044][ T4270] ? kobject_init+0x1d0/0x1d0 [ 574.088855][ T4270] ? klist_children_get+0x50/0x50 [ 574.093917][ T4270] ? get_device_parent+0x121/0x3f0 [ 574.099056][ T4270] device_add+0x483/0xfb0 [ 574.103406][ T4270] ? kmem_cache_free+0xf7/0x290 [ 574.108373][ T4270] hci_conn_add_sysfs+0xd1/0x1e0 [ 574.113339][ T4270] le_conn_complete_evt+0x1062/0x1670 [ 574.118741][ T4270] ? le_conn_complete_evt+0xe9/0x1670 [ 574.124237][ T4270] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 574.130508][ T4270] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 574.136175][ T4270] ? skb_pull_data+0xf7/0x200 [ 574.140879][ T4270] hci_le_conn_complete_evt+0x183/0x440 [ 574.146503][ T4270] ? hci_remote_host_features_evt+0x270/0x270 [ 574.152605][ T4270] hci_event_packet+0x7b9/0x1280 [ 574.157621][ T4270] ? bis_list+0x280/0x280 [ 574.162057][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 574.167976][ T4270] ? kcov_remote_start+0x4c7/0x7e0 [ 574.173110][ T4270] ? patch_conexant_auto+0x1260/0x1650 [ 574.178692][ T4270] ? hci_send_to_monitor+0x9c/0x4a0 [ 574.183921][ T4270] hci_rx_work+0x3eb/0xd40 [ 574.188372][ T4270] ? _raw_spin_unlock+0x40/0x40 [ 574.193250][ T4270] ? process_one_work+0x7b0/0x1160 [ 574.198383][ T4270] process_one_work+0x8a2/0x1160 [ 574.203359][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 574.209104][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 574.214191][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 574.219776][ T4270] ? kthread_data+0x4b/0xc0 [ 574.224314][ T4270] worker_thread+0xaa2/0x1270 [ 574.229141][ T4270] kthread+0x29d/0x330 [ 574.233242][ T4270] ? worker_clr_flags+0x1a0/0x1a0 [ 574.238400][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 574.243012][ T4270] ret_from_fork+0x1f/0x30 [ 574.247465][ T4270] [ 574.250557][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.576463][ T4270] kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 574.597433][ T4270] Bluetooth: hci0: failed to register connection device [ 575.163937][ T9845] loop2: detected capacity change from 0 to 1 [ 575.172626][ T4345] Dev loop2: unable to read RDB block 1 [ 575.185017][ T4345] loop2: AHDI p1 p2 p3 p4 [ 575.190035][ T4345] loop2: partition table partially beyond EOD, truncated [ 575.205759][ T4345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 575.214947][ T4345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 575.228699][ T4345] loop2: p3 start 10750 is beyond EOD, truncated [ 575.243665][ T9845] Dev loop2: unable to read RDB block 1 [ 575.286421][ T9845] loop2: AHDI p1 p2 p3 p4 [ 575.293210][ T9845] loop2: partition table partially beyond EOD, truncated [ 575.322232][ T9845] loop2: p1 start 1601398130 is beyond EOD, truncated [ 575.339733][ T9845] loop2: p2 start 1702059890 is beyond EOD, truncated [ 575.368618][ T9845] loop2: p3 start 10750 is beyond EOD, truncated [ 575.438496][ T3638] Dev loop2: unable to read RDB block 1 [ 575.444322][ T3638] loop2: AHDI p1 p2 p3 p4 [ 575.511216][ T3638] loop2: partition table partially beyond EOD, truncated [ 575.543360][ T3638] loop2: p1 start 1601398130 is beyond EOD, truncated [ 575.567413][ T3638] loop2: p2 start 1702059890 is beyond EOD, truncated [ 575.592567][ T3638] loop2: p3 start 10750 is beyond EOD, truncated [ 575.671020][ T9852] device syzkaller0 entered promiscuous mode [ 576.226336][ T4312] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 576.448850][ T4312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.462719][ T4312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.479230][ T4312] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.499363][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.507879][ T4312] usb 5-1: Product: syz [ 576.521806][ T4312] usb 5-1: Manufacturer: syz [ 576.532570][ T4312] usb 5-1: SerialNumber: syz [ 576.645112][ T4270] Bluetooth: hci0: command 0x2016 tx timeout [ 578.886625][ T9886] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1621'. [ 578.902272][ T4312] usb 5-1: 0:2 : does not exist [ 578.965403][ T4312] usb 5-1: USB disconnect, device number 55 [ 579.406383][ T7] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 579.625842][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 579.660356][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 579.682874][ T7] usb 2-1: config 6 has an invalid interface number: 71 but max is 2 [ 579.694415][ T7] usb 2-1: config 6 has an invalid interface number: 162 but max is 2 [ 579.702862][ T7] usb 2-1: config 6 has an invalid interface number: 190 but max is 2 [ 579.711218][ T7] usb 2-1: config 6 has no interface number 0 [ 579.717387][ T7] usb 2-1: config 6 has no interface number 1 [ 579.723829][ T7] usb 2-1: config 6 has no interface number 2 [ 579.730270][ T7] usb 2-1: config 6 interface 71 altsetting 86 has a duplicate endpoint with address 0x4, skipping [ 579.741223][ T7] usb 2-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 579.771557][ T7] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xE has an invalid bInterval 178, changing to 4 [ 579.787837][ T7] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 579.803598][ T7] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 579.820612][ T7] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 579.906310][ T7] usb 2-1: config 6 interface 71 has no altsetting 0 [ 579.930728][ T7] usb 2-1: config 6 interface 162 has no altsetting 0 [ 579.944592][ T7] usb 2-1: config 6 interface 190 has no altsetting 0 [ 579.985193][ T7] usb 2-1: New USB device found, idVendor=0a5c, idProduct=bd1e, bcdDevice=df.15 [ 580.181938][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.329766][ T7] usb 2-1: Product: syz [ 580.407199][ T7] usb 2-1: Manufacturer: syz [ 580.496310][ T7] usb 2-1: SerialNumber: syz [ 580.642354][ T9891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 580.848317][ T9918] device syzkaller0 entered promiscuous mode [ 580.894129][ T9891] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 580.906514][ T9891] netlink: 'syz.1.1623': attribute type 2 has an invalid length. [ 582.258363][ T4273] Bluetooth: hci3: command 0x2016 tx timeout [ 582.468123][ T7] usbhid 2-1:6.190: couldn't find an input interrupt endpoint [ 582.491715][ T7] usb 2-1: USB disconnect, device number 47 [ 582.697129][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32' [ 582.697152][ T4273] CPU: 1 PID: 4273 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 582.697173][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 582.697185][ T4273] Workqueue: hci0 hci_rx_work [ 582.697216][ T4273] Call Trace: [ 582.697223][ T4273] [ 582.697232][ T4273] dump_stack_lvl+0x188/0x24e [ 582.697269][ T4273] ? show_regs_print_info+0x12/0x12 [ 582.697300][ T4273] ? load_image+0x400/0x400 [ 582.697340][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 582.697372][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 582.697402][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 582.697428][ T4273] kobject_add_internal+0x61c/0xcc0 [ 582.697460][ T4273] kobject_add+0x160/0x230 [ 582.697485][ T4273] ? kobject_init+0x1d0/0x1d0 [ 582.697510][ T4273] ? klist_children_get+0x50/0x50 [ 582.697531][ T4273] ? get_device_parent+0x121/0x3f0 [ 582.697554][ T4273] device_add+0x483/0xfb0 [ 582.697571][ T4273] ? kmem_cache_free+0xf7/0x290 [ 582.697600][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 582.697629][ T4273] le_conn_complete_evt+0x1062/0x1670 [ 582.697654][ T4273] ? le_conn_complete_evt+0xe9/0x1670 [ 582.697695][ T4273] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 582.697723][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 582.697754][ T4273] ? skb_pull_data+0xf7/0x200 [ 582.697781][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 582.697810][ T4273] ? hci_remote_host_features_evt+0x270/0x270 [ 582.697838][ T4273] hci_event_packet+0x7b9/0x1280 [ 582.697875][ T4273] ? bis_list+0x280/0x280 [ 582.697903][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 582.697928][ T4273] ? kcov_remote_start+0x4c7/0x7e0 [ 582.697950][ T4273] ? patch_conexant_auto+0x1260/0x1650 [ 582.697978][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 582.698006][ T4273] hci_rx_work+0x3eb/0xd40 [ 582.698028][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 582.698058][ T4273] ? process_one_work+0x7b0/0x1160 [ 582.698079][ T4273] process_one_work+0x8a2/0x1160 [ 582.698119][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 582.698145][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 582.698165][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 582.698186][ T4273] ? kthread_data+0x4b/0xc0 [ 582.698218][ T4273] worker_thread+0xaa2/0x1270 [ 582.698269][ T4273] kthread+0x29d/0x330 [ 582.698285][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 582.698305][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 582.698325][ T4273] ret_from_fork+0x1f/0x30 [ 582.698366][ T4273] [ 582.698430][ T4273] kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 582.705461][ T4273] Bluetooth: hci0: failed to register connection device [ 584.537825][ T4270] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 584.716280][ T4270] Bluetooth: hci0: command 0x2016 tx timeout [ 588.296959][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 588.296976][ T26] audit: type=1326 audit(1776471050.779:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 588.766439][ T26] audit: type=1326 audit(1776471050.779:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 588.891207][ T26] audit: type=1326 audit(1776471050.779:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 588.977282][ T26] audit: type=1326 audit(1776471050.779:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 589.011050][ T26] audit: type=1326 audit(1776471050.779:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 589.014092][T10002] device syzkaller0 entered promiscuous mode [ 589.034056][ T26] audit: type=1326 audit(1776471050.779:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 589.034100][ T26] audit: type=1326 audit(1776471050.779:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 589.034134][ T26] audit: type=1326 audit(1776471050.779:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 589.034169][ T26] audit: type=1326 audit(1776471050.779:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 589.034202][ T26] audit: type=1326 audit(1776471050.789:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911759c819 code=0x7ffc0000 [ 589.311985][ T7] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 589.504765][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 589.538863][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 589.582322][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 589.629661][ T7] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 589.667813][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.690057][ T7] usb 5-1: config 0 descriptor?? [ 589.696023][T10007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 590.348701][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 590.354740][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 590.385540][ T7] usb 5-1: USB disconnect, device number 56 [ 590.994286][T10030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1676'. [ 592.665310][T10048] input: syz0 as /devices/virtual/input/input33 [ 593.164795][T10072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1692'. [ 594.805234][T10110] loop3: detected capacity change from 0 to 32768 [ 594.969359][T10110] XFS (loop3): Mounting V5 Filesystem [ 595.071181][T10110] XFS (loop3): Ending clean mount [ 595.084003][T10110] XFS (loop3): Unmounting Filesystem [ 595.620625][T10083] loop4: detected capacity change from 0 to 40427 [ 595.745384][T10083] F2FS-fs (loop4): invalid crc value [ 595.806263][T10083] F2FS-fs (loop4): Found nat_bits in checkpoint [ 596.192521][T10083] F2FS-fs (loop4): Start checkpoint disabled! [ 596.242963][T10083] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 598.869991][ T4312] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 599.206265][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 599.213568][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.224963][ T4312] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 599.241224][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.260621][ T4312] usb 3-1: config 0 descriptor?? [ 599.483168][ T4312] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 600.098343][T10180] loop4: detected capacity change from 0 to 40427 [ 600.131376][T10180] F2FS-fs (loop4): invalid crc value [ 600.153055][T10180] F2FS-fs (loop4): Found nat_bits in checkpoint [ 600.258033][T10180] F2FS-fs (loop4): Start checkpoint disabled! [ 600.275928][T10180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 600.716558][ T26] kauditd_printk_skb: 1271 callbacks suppressed [ 600.716577][ T26] audit: type=1804 audit(1776471063.119:1310): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1729" name="/newroot/340/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 601.007148][ T7] usb 3-1: USB disconnect, device number 46 [ 601.256538][ T4515] kworker/u4:12: attempt to access beyond end of device [ 601.256538][ T4515] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 601.536303][ T4312] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 602.592988][ T4312] usb 4-1: Using ep0 maxpacket: 8 [ 602.602766][ T4312] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 602.612253][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 602.620822][ T4312] usb 4-1: Product: syz [ 602.625034][ T4312] usb 4-1: Manufacturer: syz [ 602.630339][ T4312] usb 4-1: SerialNumber: syz [ 602.637224][ T4312] usb 4-1: config 0 descriptor?? [ 602.664247][ T4312] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 602.782385][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:32' [ 602.792419][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 602.800010][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 602.810143][ T4273] Workqueue: hci4 hci_rx_work [ 602.814883][ T4273] Call Trace: [ 602.818198][ T4273] [ 602.821170][ T4273] dump_stack_lvl+0x188/0x24e [ 602.825994][ T4273] ? show_regs_print_info+0x12/0x12 [ 602.831335][ T4273] ? load_image+0x400/0x400 [ 602.835901][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 602.841070][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 602.845808][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 602.851052][ T4273] kobject_add_internal+0x61c/0xcc0 [ 602.856339][ T4273] kobject_add+0x160/0x230 [ 602.860879][ T4273] ? kobject_init+0x1d0/0x1d0 [ 602.865662][ T4273] ? klist_children_get+0x50/0x50 [ 602.870704][ T4273] ? get_device_parent+0x121/0x3f0 [ 602.875952][ T4273] device_add+0x483/0xfb0 [ 602.878896][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880274e7400: rx timeout, send abort [ 602.880292][ T4273] ? kmem_cache_free+0xf7/0x290 [ 602.893336][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 602.898303][ T4273] le_conn_complete_evt+0x1062/0x1670 [ 602.903694][ T4273] ? le_conn_complete_evt+0xe9/0x1670 [ 602.909089][ T4273] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 602.915350][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 602.921003][ T4273] ? skb_pull_data+0xf7/0x200 [ 602.925722][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 602.931380][ T4273] ? hci_remote_host_features_evt+0x270/0x270 [ 602.937484][ T4273] hci_event_packet+0x7b9/0x1280 [ 602.942483][ T4273] ? bis_list+0x280/0x280 [ 602.946834][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 602.952766][ T4273] ? kcov_remote_start+0x4c7/0x7e0 [ 602.957893][ T4273] ? patch_conexant_auto+0x1260/0x1650 [ 602.963373][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 602.968601][ T4273] hci_rx_work+0x3eb/0xd40 [ 602.973033][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 602.977906][ T4273] ? process_one_work+0x7b0/0x1160 [ 602.983046][ T4273] process_one_work+0x8a2/0x1160 [ 602.988015][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 602.993670][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 602.998706][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 603.004359][ T4273] ? kthread_data+0x4b/0xc0 [ 603.008891][ T4273] worker_thread+0xaa2/0x1270 [ 603.013786][ T4273] kthread+0x29d/0x330 [ 603.018042][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 603.023089][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 603.027722][ T4273] ret_from_fork+0x1f/0x30 [ 603.032168][ T4273] [ 603.035213][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.035574][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880274e7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 603.047385][ T4273] kobject_add_internal failed for hci4:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.068909][ T4273] Bluetooth: hci4: failed to register connection device [ 603.204002][ T4312] gspca_sn9c2028: read1 error -110 [ 603.210743][ T4312] gspca_sn9c2028: read1 error -32 [ 603.219002][ T4312] gspca_sn9c2028: read1 error -32 [ 603.224201][ T4312] sn9c2028: probe of 4-1:0.0 failed with error -32 [ 604.085127][T10256] loop2: detected capacity change from 0 to 1 [ 604.111975][ T4345] Dev loop2: unable to read RDB block 1 [ 604.124606][ T4345] loop2: AHDI p1 p2 p3 [ 604.139825][ T4345] loop2: partition table partially beyond EOD, truncated [ 604.147981][ T4345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 604.165301][ T4345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 604.282818][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:32' [ 604.292612][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 604.300314][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 604.310499][ T4273] Workqueue: hci4 hci_rx_work [ 604.315344][ T4273] Call Trace: [ 604.318660][ T4273] [ 604.321631][ T4273] dump_stack_lvl+0x188/0x24e [ 604.322499][ T4479] usb 4-1: USB disconnect, device number 37 [ 604.326347][ T4273] ? show_regs_print_info+0x12/0x12 [ 604.326384][ T4273] ? load_image+0x400/0x400 [ 604.326423][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 604.326454][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 604.326483][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 604.326509][ T4273] kobject_add_internal+0x61c/0xcc0 [ 604.326544][ T4273] kobject_add+0x160/0x230 [ 604.326582][ T4273] ? kobject_init+0x1d0/0x1d0 [ 604.326612][ T4273] ? klist_children_get+0x50/0x50 [ 604.326637][ T4273] ? get_device_parent+0x121/0x3f0 [ 604.326663][ T4273] device_add+0x483/0xfb0 [ 604.326684][ T4273] ? kmem_cache_free+0xf7/0x290 [ 604.326720][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 604.326754][ T4273] le_conn_complete_evt+0x1062/0x1670 [ 604.326785][ T4273] ? le_conn_complete_evt+0xe9/0x1670 [ 604.326818][ T4273] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 604.326851][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 604.326885][ T4273] ? skb_pull_data+0xf7/0x200 [ 604.326914][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 604.326946][ T4273] ? hci_remote_host_features_evt+0x270/0x270 [ 604.326977][ T4273] hci_event_packet+0x7b9/0x1280 [ 604.383445][T10256] Dev loop2: unable to read RDB block 1 [ 604.386711][ T4273] ? bis_list+0x280/0x280 [ 604.386750][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 604.386780][ T4273] ? kcov_remote_start+0x4c7/0x7e0 [ 604.386804][ T4273] ? patch_conexant_auto+0x1260/0x1650 [ 604.386835][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 604.386866][ T4273] hci_rx_work+0x3eb/0xd40 [ 604.386890][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 604.386921][ T4273] ? process_one_work+0x7b0/0x1160 [ 604.396450][T10256] loop2: AHDI p1 p2 p3 [ 604.396702][ T4273] process_one_work+0x8a2/0x1160 [ 604.416932][T10256] loop2: partition table partially beyond EOD, [ 604.419362][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 604.419402][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 604.448873][T10256] truncated [ 604.450604][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 604.450641][ T4273] ? kthread_data+0x4b/0xc0 [ 604.526727][ T4273] worker_thread+0xaa2/0x1270 [ 604.531509][ T4273] kthread+0x29d/0x330 [ 604.535607][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 604.540666][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 604.545299][ T4273] ret_from_fork+0x1f/0x30 [ 604.549798][ T4273] [ 604.552962][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.564137][ T4273] kobject_add_internal failed for hci4:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 604.573908][T10256] loop2: p1 start 1601398130 is beyond EOD, truncated [ 604.585613][ T4273] Bluetooth: hci4: failed to register connection device [ 604.606562][T10256] loop2: p2 start 1702059890 is beyond EOD, truncated [ 604.897019][T10246] loop2: detected capacity change from 0 to 40427 [ 605.004228][T10246] F2FS-fs (loop2): invalid crc value [ 605.062532][T10246] F2FS-fs (loop2): Found nat_bits in checkpoint [ 605.115046][T10246] F2FS-fs (loop2): Start checkpoint disabled! [ 605.124965][ T4273] Bluetooth: hci4: command 0x2016 tx timeout [ 605.171214][T10246] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 605.555768][ T26] audit: type=1804 audit(1776471068.039:1311): pid=10279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1752" name="/newroot/341/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 605.616253][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.214200][ T11] kworker/u4:1: attempt to access beyond end of device [ 606.214200][ T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 607.504047][T10309] loop1: detected capacity change from 0 to 32768 [ 607.513458][ T4273] Bluetooth: hci4: command 0x2016 tx timeout [ 608.282178][T10309] XFS (loop1): Mounting V5 Filesystem [ 608.362609][T10309] XFS (loop1): Ending clean mount [ 608.369940][T10309] XFS (loop1): Unmounting Filesystem [ 609.326997][T10329] kvm [10328]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4115 [ 609.596382][ T4273] Bluetooth: hci4: command 0x0405 tx timeout [ 612.106814][ T4481] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 612.406500][ T4481] usb 3-1: Using ep0 maxpacket: 16 [ 612.422631][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.471958][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.495927][ T4481] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 612.516612][ T4481] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 612.526648][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.551370][ T4481] usb 3-1: config 0 descriptor?? [ 612.989508][ T4481] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 613.012811][ T4481] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 613.199061][ T4481] microsoft 0003:045E:07DA.001F: No inputs registered, leaving [ 613.208606][ T4481] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 613.220643][ T4481] microsoft 0003:045E:07DA.001F: no inputs found [ 613.241023][ T4481] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 613.315788][ T4481] usb 3-1: USB disconnect, device number 47 [ 613.623448][T10416] fido_id[10416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 614.413441][T10427] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1815'. [ 616.943755][T10445] Failed to get privilege flags for destination (handle=0x2:0x0) [ 619.228707][T10477] loop2: detected capacity change from 0 to 1 [ 619.245097][T10477] Dev loop2: unable to read RDB block 1 [ 619.260660][T10477] loop2: AHDI p1 p2 p3 [ 619.270673][T10477] loop2: partition table partially beyond EOD, truncated [ 619.319970][T10477] loop2: p1 start 1601398130 is beyond EOD, truncated [ 619.345868][T10477] loop2: p2 start 1702059890 is beyond EOD, truncated [ 619.629482][T10484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1833'. [ 620.302218][T10497] loop3: detected capacity change from 0 to 32768 [ 620.777234][T10497] XFS (loop3): Mounting V5 Filesystem [ 620.896497][T10497] XFS (loop3): Ending clean mount [ 620.903703][T10497] XFS (loop3): Unmounting Filesystem [ 622.376917][T10535] loop2: detected capacity change from 0 to 1 [ 622.420784][ T4428] Dev loop2: unable to read RDB block 1 [ 622.434208][ T4428] loop2: AHDI p1 p2 p3 [ 622.438969][ T4428] loop2: partition table partially beyond EOD, truncated [ 622.465794][ T4428] loop2: p1 start 1601398130 is beyond EOD, truncated [ 622.505576][ T4428] loop2: p2 start 1702059890 is beyond EOD, truncated [ 622.592938][T10535] Dev loop2: unable to read RDB block 1 [ 622.604445][T10535] loop2: AHDI p1 p2 p3 [ 622.611105][T10535] loop2: partition table partially beyond EOD, truncated [ 622.639304][T10535] loop2: p1 start 1601398130 is beyond EOD, truncated [ 622.680115][T10535] loop2: p2 start 1702059890 is beyond EOD, truncated [ 623.339226][T10556] loop3: detected capacity change from 0 to 32768 [ 623.470351][T10556] XFS (loop3): Mounting V5 Filesystem [ 623.554503][T10556] XFS (loop3): Ending clean mount [ 623.561333][T10556] XFS (loop3): Unmounting Filesystem [ 623.696324][ T4312] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 623.964913][ T4312] usb 2-1: device descriptor read/64, error -71 [ 624.133848][T10582] loop2: detected capacity change from 0 to 1 [ 624.157742][ T4428] Dev loop2: unable to read RDB block 1 [ 624.163389][ T4428] loop2: AHDI p1 p2 p3 [ 624.172659][ T4428] loop2: partition table partially beyond EOD, truncated [ 624.202170][ T4428] loop2: p1 start 1601398130 is beyond EOD, truncated [ 624.218877][ T4428] loop2: p2 start 1702059890 is beyond EOD, truncated [ 624.227248][T10582] Dev loop2: unable to read RDB block 1 [ 624.233402][T10582] loop2: AHDI p1 p2 p3 [ 624.246210][ T4312] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 624.254005][T10582] loop2: partition table partially beyond EOD, truncated [ 624.284980][T10582] loop2: p1 start 1601398130 is beyond EOD, truncated [ 624.306035][T10582] loop2: p2 start 1702059890 is beyond EOD, truncated [ 624.398797][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.405464][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.406315][ T4312] usb 2-1: device descriptor read/64, error -71 [ 624.609513][ T4312] usb usb2-port1: attempt power cycle [ 624.794614][T10604] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 624.801713][T10604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 624.819468][T10604] vhci_hcd vhci_hcd.0: Device attached [ 624.958510][ T4270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 624.968669][ T4270] CPU: 0 PID: 4270 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 624.976268][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 624.986363][ T4270] Workqueue: hci4 hci_rx_work [ 624.991104][ T4270] Call Trace: [ 624.994424][ T4270] [ 624.997387][ T4270] dump_stack_lvl+0x188/0x24e [ 625.002118][ T4270] ? show_regs_print_info+0x12/0x12 [ 625.007372][ T4270] ? load_image+0x400/0x400 [ 625.011936][ T4270] sysfs_create_dir_ns+0x26a/0x290 [ 625.017096][ T4270] ? sysfs_warn_dup+0xa0/0xa0 [ 625.021818][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 625.027163][ T4270] kobject_add_internal+0x61c/0xcc0 [ 625.032416][ T4270] kobject_add+0x160/0x230 [ 625.036875][ T4270] ? kobject_init+0x1d0/0x1d0 [ 625.041595][ T4270] ? klist_children_get+0x50/0x50 [ 625.046663][ T4270] ? get_device_parent+0x121/0x3f0 [ 625.051818][ T4270] device_add+0x483/0xfb0 [ 625.056198][ T4270] ? kmem_cache_free+0xf7/0x290 [ 625.061093][ T4270] hci_conn_add_sysfs+0xd1/0x1e0 [ 625.066077][ T4270] le_conn_complete_evt+0x1062/0x1670 [ 625.071496][ T4270] ? le_conn_complete_evt+0xe9/0x1670 [ 625.077367][ T4270] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 625.083651][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 625.088892][ T4270] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 625.094584][ T4270] ? skb_pull_data+0xf7/0x200 [ 625.099319][ T4270] hci_le_conn_complete_evt+0x183/0x440 [ 625.104926][ T4270] ? hci_remote_host_features_evt+0x270/0x270 [ 625.111046][ T4270] hci_event_packet+0x7b9/0x1280 [ 625.116043][ T4270] ? bis_list+0x280/0x280 [ 625.120430][ T4270] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 625.126376][ T4270] ? kcov_remote_start+0x4c7/0x7e0 [ 625.131529][ T4270] ? patch_conexant_auto+0x1260/0x1650 [ 625.137033][ T4270] ? hci_send_to_monitor+0x9c/0x4a0 [ 625.142279][ T4270] hci_rx_work+0x3eb/0xd40 [ 625.146779][ T4270] ? process_one_work+0x7b0/0x1160 [ 625.151929][ T4270] process_one_work+0x8a2/0x1160 [ 625.156952][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 625.162634][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 625.167705][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 625.173288][ T4270] ? kthread_data+0x4b/0xc0 [ 625.177851][ T4270] worker_thread+0xaa2/0x1270 [ 625.182604][ T4270] kthread+0x29d/0x330 [ 625.186709][ T4270] ? worker_clr_flags+0x1a0/0x1a0 [ 625.191769][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 625.196485][ T4270] ret_from_fork+0x1f/0x30 [ 625.200958][ T4270] [ 625.227060][ T4270] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 625.241386][ T4270] Bluetooth: hci4: failed to register connection device [ 625.276534][ T4312] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 625.276716][ T125] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 625.497947][ T4312] usb 2-1: device descriptor read/8, error -71 [ 625.663523][T10605] vhci_hcd: connection reset by peer [ 625.692440][ T4367] vhci_hcd: stop threads [ 625.725220][ T4367] vhci_hcd: release socket [ 625.846587][ T4367] vhci_hcd: disconnect device [ 625.876348][ T4312] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 625.948172][ T4312] usb 2-1: device descriptor read/8, error -71 [ 626.166564][ T4312] usb usb2-port1: unable to enumerate USB device [ 626.422052][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 626.910670][T10623] loop2: detected capacity change from 0 to 32768 [ 626.977586][T10623] XFS (loop2): Mounting V5 Filesystem [ 627.072408][T10623] XFS (loop2): Ending clean mount [ 627.079217][T10623] XFS (loop2): Unmounting Filesystem [ 627.292689][ T4270] Bluetooth: hci4: command 0x2016 tx timeout [ 628.006923][T10654] tmpfs: Bad value for 'mpol' [ 628.290978][T10661] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 629.376341][ T4338] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 629.456420][ T7] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 629.567366][ T4338] usb 2-1: Using ep0 maxpacket: 16 [ 629.584873][ T4338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.650272][ T7] usb 3-1: device descriptor read/64, error -71 [ 629.718608][ T4338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.735904][ T4338] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.056281][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 630.535601][ T4338] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.563171][ T4338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.603872][ T4338] usb 2-1: config 0 descriptor?? [ 630.609394][ T125] vhci_hcd: vhci_device speed not set [ 630.686241][ T7] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 630.856470][ T7] usb 3-1: device descriptor read/64, error -71 [ 630.976470][ T7] usb usb3-port1: attempt power cycle [ 631.045944][ T4338] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 631.074431][ T4338] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 631.818643][ T4338] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 631.869794][ T4338] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 631.882081][ T7] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 631.898632][ T4338] microsoft 0003:045E:07DA.0020: no inputs found [ 631.905169][ T4338] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 631.920293][ T7] usb 3-1: device descriptor read/8, error -71 [ 631.928885][ T4338] usb 2-1: USB disconnect, device number 52 [ 632.706370][ T7] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 632.796411][ T4477] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 632.806865][T10700] fido_id[10700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 632.947257][ T7] usb 3-1: device not accepting address 51, error -71 [ 632.962942][ T7] usb usb3-port1: unable to enumerate USB device [ 633.018286][ T4477] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 633.060689][ T4477] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 633.094997][ T4477] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 633.124993][ T4477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.149139][ T4477] usb 5-1: Product: syz [ 633.162462][ T4477] usb 5-1: Manufacturer: syz [ 633.199463][ T4477] usb 5-1: SerialNumber: syz [ 633.235209][ T4477] usb 5-1: config 0 descriptor?? [ 633.273493][ T4477] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 633.894078][ T7] usb 5-1: USB disconnect, device number 57 [ 634.336288][ T4481] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 634.546531][ T4481] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 634.564806][ T4481] usb 3-1: config 0 has no interface number 0 [ 634.576355][ T4481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 634.589712][ T4481] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 634.603410][ T4481] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 634.615744][ T4481] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 634.630996][ T4481] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 634.644686][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.670980][ T4481] usb 3-1: config 0 descriptor?? [ 634.681783][T10735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 634.708804][T10735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 634.746343][ T4481] ldusb 3-1:0.55: Interrupt in endpoint not found [ 635.158568][ T4481] usb 3-1: USB disconnect, device number 52 [ 635.164023][T10743] device syzkaller0 entered promiscuous mode [ 635.310520][T10750] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 635.640773][T10757] netlink: 'syz.1.1917': attribute type 4 has an invalid length. [ 637.106006][ T4273] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 637.106042][ T4273] Bluetooth: unknown link type 10 [ 639.355476][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 639.364125][ T125] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 639.648007][ T125] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 639.688292][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.767195][ T125] usb 4-1: config 0 descriptor?? [ 639.769127][ T125] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 639.896307][ T4477] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 640.121880][T10829] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 640.136290][ T4477] usb 2-1: Using ep0 maxpacket: 16 [ 640.138206][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.138238][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.138259][ T4477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 640.138283][ T4477] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 640.138298][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.139849][ T4477] usb 2-1: config 0 descriptor?? [ 640.891182][ T125] gp8psk: usb in 128 operation failed. [ 641.054972][T10833] 9pnet_fd: Insufficient options for proto=fd [ 641.103044][ T4477] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 641.118915][ T4477] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 641.300845][ T4477] microsoft 0003:045E:07DA.0021: No inputs registered, leaving [ 641.316643][ T4477] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 641.343266][ T4477] microsoft 0003:045E:07DA.0021: no inputs found [ 641.375764][ T4477] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 641.421529][ T4477] usb 2-1: USB disconnect, device number 53 [ 641.621383][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1946'. [ 641.622051][T10839] fido_id[10839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 641.994119][ T125] gp8psk: usb in 137 operation failed. [ 642.001495][ T125] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 642.073557][ T125] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 642.139684][ T125] usb 4-1: USB disconnect, device number 38 [ 646.857024][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 647.078017][T10907] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 648.179774][T10920] [ 648.182195][T10920] ====================================================== [ 648.189236][T10920] WARNING: possible circular locking dependency detected [ 648.196284][T10920] syzkaller #0 Not tainted [ 648.200698][T10920] ------------------------------------------------------ [ 648.207709][T10920] syz.1.1976/10920 is trying to acquire lock: [ 648.213963][T10920] ffff8880590c8d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1c0 [ 648.223379][T10920] [ 648.223379][T10920] but task is already holding lock: [ 648.230746][T10920] ffff888077c207a8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 648.240584][T10920] [ 648.240584][T10920] which lock already depends on the new lock. [ 648.240584][T10920] [ 648.250991][T10920] [ 648.250991][T10920] the existing dependency chain (in reverse order) is: [ 648.260009][T10920] [ 648.260009][T10920] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 648.267749][T10920] __mutex_lock+0x12d/0xaf0 [ 648.272781][T10920] ieee80211_open+0x140/0x200 [ 648.278073][T10920] __dev_open+0x2c7/0x430 [ 648.282922][T10920] dev_open+0xa7/0x190 [ 648.287542][T10920] team_add_slave+0x6e5/0x2870 [ 648.292848][T10920] do_setlink+0xd3a/0x3e60 [ 648.297807][T10920] rtnl_newlink+0x17d9/0x20a0 [ 648.303007][T10920] rtnetlink_rcv_msg+0x87c/0xfc0 [ 648.308917][T10920] netlink_rcv_skb+0x1fb/0x450 [ 648.314222][T10920] netlink_unicast+0x74d/0x8d0 [ 648.319520][T10920] netlink_sendmsg+0x8ad/0xbd0 [ 648.324836][T10920] ____sys_sendmsg+0x5be/0x970 [ 648.330127][T10920] ___sys_sendmsg+0x2a2/0x360 [ 648.335339][T10920] __se_sys_sendmsg+0x1bb/0x2a0 [ 648.340805][T10920] do_syscall_64+0x4c/0xa0 [ 648.345785][T10920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.352297][T10920] [ 648.352297][T10920] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 648.360403][T10920] __lock_acquire+0x2d07/0x7d10 [ 648.365837][T10920] lock_acquire+0x1bb/0x4a0 [ 648.370883][T10920] __mutex_lock+0x12d/0xaf0 [ 648.375937][T10920] team_del_slave+0x2e/0x1c0 [ 648.381172][T10920] team_device_event+0x391/0x9c0 [ 648.386645][T10920] raw_notifier_call_chain+0xcb/0x160 [ 648.392548][T10920] unregister_netdevice_many_notify+0x10ac/0x19c0 [ 648.399597][T10920] unregister_netdevice_queue+0x328/0x370 [ 648.405841][T10920] _cfg80211_unregister_wdev+0x177/0x590 [ 648.412092][T10920] ieee80211_if_remove+0x1bd/0x2c0 [ 648.418166][T10920] ieee80211_del_iface+0x15/0x20 [ 648.423639][T10920] cfg80211_remove_virtual_intf+0x243/0x450 [ 648.430054][T10920] genl_family_rcv_msg_doit+0x22a/0x330 [ 648.436138][T10920] genl_rcv_msg+0x604/0x790 [ 648.441179][T10920] netlink_rcv_skb+0x1fb/0x450 [ 648.446487][T10920] genl_rcv+0x24/0x40 [ 648.451095][T10920] netlink_unicast+0x74d/0x8d0 [ 648.456478][T10920] netlink_sendmsg+0x8ad/0xbd0 [ 648.461805][T10920] ____sys_sendmsg+0x5be/0x970 [ 648.467117][T10920] ___sys_sendmsg+0x2a2/0x360 [ 648.472335][T10920] __se_sys_sendmsg+0x1bb/0x2a0 [ 648.477709][T10920] do_syscall_64+0x4c/0xa0 [ 648.482650][T10920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.489081][T10920] [ 648.489081][T10920] other info that might help us debug this: [ 648.489081][T10920] [ 648.499304][T10920] Possible unsafe locking scenario: [ 648.499304][T10920] [ 648.506922][T10920] CPU0 CPU1 [ 648.512390][T10920] ---- ---- [ 648.517755][T10920] lock(&rdev->wiphy.mtx); [ 648.522260][T10920] lock(team->team_lock_key); [ 648.529551][T10920] lock(&rdev->wiphy.mtx); [ 648.536569][T10920] lock(team->team_lock_key); [ 648.541351][T10920] [ 648.541351][T10920] *** DEADLOCK *** [ 648.541351][T10920] [ 648.549592][T10920] 3 locks held by syz.1.1976/10920: [ 648.554782][T10920] #0: ffffffff8dda81d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 648.562967][T10920] #1: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x930 [ 648.572195][T10920] #2: ffff888077c207a8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 648.582453][T10920] [ 648.582453][T10920] stack backtrace: [ 648.588333][T10920] CPU: 1 PID: 10920 Comm: syz.1.1976 Not tainted syzkaller #0 [ 648.595803][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 648.605939][T10920] Call Trace: [ 648.609223][T10920] [ 648.612165][T10920] dump_stack_lvl+0x188/0x24e [ 648.616851][T10920] ? load_image+0x400/0x400 [ 648.621363][T10920] ? show_regs_print_info+0x12/0x12 [ 648.626567][T10920] ? print_circular_bug+0x12b/0x1a0 [ 648.631772][T10920] check_noncircular+0x296/0x330 [ 648.636713][T10920] ? add_chain_block+0x940/0x940 [ 648.641654][T10920] ? lockdep_lock+0xf1/0x1f0 [ 648.646347][T10920] ? _find_first_zero_bit+0xcf/0x100 [ 648.651665][T10920] __lock_acquire+0x2d07/0x7d10 [ 648.656550][T10920] ? __lock_acquire+0x13cf/0x7d10 [ 648.661584][T10920] ? verify_lock_unused+0x140/0x140 [ 648.666802][T10920] ? verify_lock_unused+0x140/0x140 [ 648.672020][T10920] ? __up_read+0x2b2/0x6b0 [ 648.676455][T10920] lock_acquire+0x1bb/0x4a0 [ 648.680989][T10920] ? team_del_slave+0x2e/0x1c0 [ 648.685770][T10920] ? __might_sleep+0xd0/0xd0 [ 648.690446][T10920] ? read_lock_is_recursive+0x10/0x10 [ 648.695837][T10920] __mutex_lock+0x12d/0xaf0 [ 648.700352][T10920] ? team_del_slave+0x2e/0x1c0 [ 648.705142][T10920] ? __lock_acquire+0x7d10/0x7d10 [ 648.710171][T10920] ? trace_contention_end+0x5f/0x170 [ 648.715478][T10920] ? __mutex_lock+0x1ab/0xaf0 [ 648.720174][T10920] ? team_del_slave+0x2e/0x1c0 [ 648.725043][T10920] ? mutex_lock_nested+0x10/0x10 [ 648.730078][T10920] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 648.735736][T10920] ? memset+0x1e/0x40 [ 648.739750][T10920] team_del_slave+0x2e/0x1c0 [ 648.744351][T10920] team_device_event+0x391/0x9c0 [ 648.749386][T10920] ? xsk_notifier+0x20d/0x220 [ 648.754072][T10920] raw_notifier_call_chain+0xcb/0x160 [ 648.759449][T10920] unregister_netdevice_many_notify+0x10ac/0x19c0 [ 648.765884][T10920] ? unregister_netdevice_many+0x20/0x20 [ 648.771538][T10920] ? kernfs_remove_by_name_ns+0x113/0x150 [ 648.777269][T10920] ? __lock_acquire+0x7d10/0x7d10 [ 648.782303][T10920] unregister_netdevice_queue+0x328/0x370 [ 648.788074][T10920] ? list_netdevice+0x6c0/0x6c0 [ 648.792964][T10920] ? kernfs_remove_by_name_ns+0x113/0x150 [ 648.798688][T10920] _cfg80211_unregister_wdev+0x177/0x590 [ 648.804333][T10920] ieee80211_if_remove+0x1bd/0x2c0 [ 648.809458][T10920] ieee80211_del_iface+0x15/0x20 [ 648.814398][T10920] cfg80211_remove_virtual_intf+0x243/0x450 [ 648.820335][T10920] genl_family_rcv_msg_doit+0x22a/0x330 [ 648.825880][T10920] ? end_current_label_crit_section+0x170/0x170 [ 648.832137][T10920] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 648.838040][T10920] ? bpf_lsm_capable+0x5/0x10 [ 648.842725][T10920] ? security_capable+0x85/0xb0 [ 648.847600][T10920] genl_rcv_msg+0x604/0x790 [ 648.852107][T10920] ? genl_bind+0x360/0x360 [ 648.856521][T10920] ? nl80211_new_interface+0xfa0/0xfa0 [ 648.862079][T10920] netlink_rcv_skb+0x1fb/0x450 [ 648.866866][T10920] ? genl_bind+0x360/0x360 [ 648.871298][T10920] ? netlink_ack+0x1170/0x1170 [ 648.876158][T10920] ? down_read+0x1a8/0x2d0 [ 648.880625][T10920] genl_rcv+0x24/0x40 [ 648.884617][T10920] netlink_unicast+0x74d/0x8d0 [ 648.889410][T10920] netlink_sendmsg+0x8ad/0xbd0 [ 648.894184][T10920] ? netlink_getsockopt+0x550/0x550 [ 648.899394][T10920] ? aa_sock_msg_perm+0x94/0x150 [ 648.904333][T10920] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 648.909620][T10920] ? security_socket_sendmsg+0x7c/0xa0 [ 648.915096][T10920] ? netlink_getsockopt+0x550/0x550 [ 648.920395][T10920] ____sys_sendmsg+0x5be/0x970 [ 648.925167][T10920] ? __sys_sendmsg_sock+0x30/0x30 [ 648.930191][T10920] ? __import_iovec+0x315/0x500 [ 648.935053][T10920] ? import_iovec+0x6f/0xa0 [ 648.939566][T10920] ___sys_sendmsg+0x2a2/0x360 [ 648.944264][T10920] ? try_to_wake_up+0x67c/0x1080 [ 648.949203][T10920] ? __sys_sendmsg+0x290/0x290 [ 648.954002][T10920] __se_sys_sendmsg+0x1bb/0x2a0 [ 648.958901][T10920] ? __x64_sys_sendmsg+0x80/0x80 [ 648.963947][T10920] ? lockdep_hardirqs_on+0x94/0x140 [ 648.969245][T10920] do_syscall_64+0x4c/0xa0 [ 648.973676][T10920] ? clear_bhb_loop+0x60/0xb0 [ 648.978358][T10920] ? clear_bhb_loop+0x60/0xb0 [ 648.983102][T10920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.989009][T10920] RIP: 0033:0x7f21b699c819 [ 648.993442][T10920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.013126][T10920] RSP: 002b:00007f21b78ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.021672][T10920] RAX: ffffffffffffffda RBX: 00007f21b6c15fa0 RCX: 00007f21b699c819 [ 649.029766][T10920] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 649.037744][T10920] RBP: 00007f21b6a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 649.045715][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.053686][T10920] R13: 00007f21b6c16038 R14: 00007f21b6c15fa0 R15: 00007ffc96dbb4a8 [ 649.061675][T10920] [ 649.064712][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.234044][T10920] team0: Port device wlan1 removed