last executing test programs: 12m17.089132381s ago: executing program 2 (id=217): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (fail_nth: 1) 12m16.845910805s ago: executing program 2 (id=218): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1}, 0x20040051) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 12m15.333588979s ago: executing program 2 (id=221): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) ioctl$FBIOBLANK(r0, 0x4611, 0x4) prctl$PR_GET_CHILD_SUBREAPER(0x25) set_mempolicy(0x2, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 12m14.078583823s ago: executing program 2 (id=224): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f00000001c0)=[{0xfffffffffffffffc}], 0x1, 0x400, 0x0, 0x2, 0x0, 0x2}) (fail_nth: 1) 12m9.900727417s ago: executing program 2 (id=234): syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) 12m5.675995306s ago: executing program 2 (id=241): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40020, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x80047437, &(0x7f0000000000)=0xa) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) open(0x0, 0x400, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r2, 0x8) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/pid_for_children\x00') 12m0.221792864s ago: executing program 4 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2000000000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x16c, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xdd5a5c88db58b0cb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9c15261ae855b4dc}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) 11m59.012225597s ago: executing program 4 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x20000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000080)='./cgroup/../file0\x00', 0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 11m55.959253247s ago: executing program 4 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x9) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x2000008, {{0xa, 0x4e23, 0xac0, @mcast2, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 11m54.664068135s ago: executing program 4 (id=262): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (fail_nth: 1) 11m52.925034626s ago: executing program 4 (id=265): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000000040)=[{0xfffffffffffffffc, 0x0, 0x1}], 0x1, 0x400, 0x40, 0x2, 0x0, 0x2}) 11m52.757389348s ago: executing program 4 (id=267): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) 11m49.826118083s ago: executing program 32 (id=241): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40020, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x80047437, &(0x7f0000000000)=0xa) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) open(0x0, 0x400, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r2, 0x8) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/pid_for_children\x00') 11m37.368528054s ago: executing program 33 (id=267): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) 4m42.905552001s ago: executing program 0 (id=1099): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x2, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) getitimer(0x2, &(0x7f0000000140)) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7ffe, 0x1, 0x4, 0x9, 0xa4, 0x40000ffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x66c, 0x101, 0x1000, 0x3, 0x2, 0x0, 0x2, 0xfffffffa, 0x0, 0x2006, 0x9, 0x4, 0x3, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xa, 0x2b12, 0x2, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x6, 0x8000100, 0x86, 0x0, 0x10ffc, 0x6, 0x9, 0x79b, 0x7, 0x1, 0x7f, 0x4, 0x80a, 0x5, 0x8000c, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xb, 0x81, 0x2, 0x180000, 0x4007, 0x80000000, 0x5, 0x2af, 0x3, 0x5, 0x1, 0x100003, 0x9, 0x4, 0x0, 0x4009, 0x401, 0x4, 0xa8, 0x8, 0x752, 0x0, 0xfff, 0x100000, 0x4000fffd, 0x2, 0x4, 0x6, 0x6, 0x1c000, 0x80000000, 0xfdffffff, 0x4ca53ae2, 0x6, 0x85, 0x100, 0x5, 0x252, 0x401, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xf, 0x2a2, 0x9, 0x3, 0x4000401, 0x0, 0xc, 0x0, 0x3, 0x2, 0x40, 0xb, 0xffffffff, 0x4, 0x3fe, 0x66cd, 0x357, 0x8, 0x3, 0x7ffe, 0xc58, 0xffffffff]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001800010010000000200000000a370000", @ANYRES32=0x0, @ANYBLOB="000000001400050000000000000000"], 0x44}}, 0x0) syz_usb_connect$uac1(0x6, 0x109, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3f04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0xc6, 0xd0, 0xee, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x2c}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x405, 0x6, 0x5, 0xff}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x3, 0x8, "45a41f014e84"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x4, 0x4c, "85adb3e736"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xa4, 0x3, 0x8, 0xf3, "3cfc7fc8d4"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xc, 0xff, 0x7}, @as_header={0x7, 0x24, 0x1, 0xdc, 0x6, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0x7, 0x5, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0xd, 0x5, "5513c91bce671b49"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x3, 0x6, "7acd7450de0a9b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x6, 0x4, {0x7, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x10, 0x4, 0x9, 0x3, "8027ef"}, @as_header={0x7, 0x24, 0x1, 0xfa, 0xb9, 0x5}, @as_header={0x7, 0x24, 0x1, 0x81, 0x6, 0x2}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0xea, 0xff, "cf0f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x3, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x8c, 0x7, {0x7, 0x25, 0x1, 0xc, 0x7, 0xe3e}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x700, 0x1, 0x3e, 0x5, 0x20, 0x6e}, 0x5f, &(0x7f0000000100)={0x5, 0xf, 0x5f, 0x4, [@generic={0x23, 0x10, 0x3, "bef40855aa695b6441db09bf5f1f7aadfd3a977c24fda36388d9cf2e5cc22990"}, @ssp_cap={0x18, 0x10, 0xa, 0xfe, 0x3, 0xf, 0xf, 0x5, [0x7f403f, 0xffc00f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x85, 0x7, 0x80, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "dcaae6782eb54ae5b859c4452f4e1670"}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x6c26}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x447}}, {0xb6, &(0x7f0000000480)=@string={0xb6, 0x3, "ca27a67b700fa1578ec5d79c93bb319963942737a384dc3ee6a20df5e5ac2e38fcff5cd1b8d346a0a9b80ce5781d0aa3d15acd52420ca8806af582489ea25fdf8cac6da8ba6b05fce1e61e368830c2c67908f44c1da6811f02562d32a4f6494fa107a9e33bdf2d0643a7ff982cbfc1a66c2d4b5b7adab2d6f3ab41a5fc2487b8f738e213cacfb8ca4181f39361aa0df1f4c4bc7bd50cf0d86958e2dc5f4fd5a9a9353536d3c751ec45451f1a46f7d4f4eea62ddb"}}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m40.618372481s ago: executing program 0 (id=1102): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mlock(&(0x7f00007a9000/0x3000)=nil, 0x3000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = fanotify_init(0xf00, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x20000, 0x65) fanotify_mark(r2, 0x541, 0x4000101b, r3, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) fanotify_mark(r4, 0x455, 0x1010, r5, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) 4m36.983395013s ago: executing program 0 (id=1106): fanotify_init(0xf00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) 4m34.005620927s ago: executing program 0 (id=1110): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x24048000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x14, 0x4, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close(r8) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)=0x1}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x3c0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 4m32.684916385s ago: executing program 0 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000003f0007012bbd7000fedbdf25027c71dd44000004"], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0x400c800) 4m32.654184897s ago: executing program 0 (id=1113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x1d, 0x2, 0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xffff7fffffffc059, 0x3fa7) syz_usb_connect$midi(0x0, 0xc3, &(0x7f0000000840)=ANY=[@ANYBLOB="120110030000001030144b474000010203010902b1000101d64007090400000401030004172403041b08080100f7090003fb02dc025afb5302080807240109000700072401ff0007000724010500070006240202060a062402000904072401008007000624020000020624020200090905010200041296800f25010b22ecd96b80c67f443be0c909050900080009030309250105a3a0fa12cc0905060000020707"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0x1286, 0x80, 0x0, 0x7f}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0)={0xce}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) 4m16.924735915s ago: executing program 34 (id=1113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x1d, 0x2, 0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xffff7fffffffc059, 0x3fa7) syz_usb_connect$midi(0x0, 0xc3, &(0x7f0000000840)=ANY=[@ANYBLOB="120110030000001030144b474000010203010902b1000101d64007090400000401030004172403041b08080100f7090003fb02dc025afb5302080807240109000700072401ff0007000724010500070006240202060a062402000904072401008007000624020000020624020200090905010200041296800f25010b22ecd96b80c67f443be0c909050900080009030309250105a3a0fa12cc0905060000020707"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0x1286, 0x80, 0x0, 0x7f}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0)={0xce}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) 1m53.048997148s ago: executing program 3 (id=1526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x6, 0xb6, &(0x7f0000000140)=""/182, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0xab, 0x240880) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x782}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000280)={0x2b, @dev={0xac, 0x14, 0x14, 0x42}, 0x4e24, 0x3, 'lc\x00', 0x2, 0x3, 0x2b}, 0x2c) getrusage(0x0, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xe, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 1m51.703626291s ago: executing program 3 (id=1529): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x16c, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xdd5a5c88db58b0cb}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9c15261ae855b4dc}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 1m47.195468689s ago: executing program 3 (id=1541): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006003c000e0002000000e0200009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f0000000300000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000880), 0x402, r2}, 0x38) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x0, 0x1, 0x6, {0x6, 0x23, "f0383565"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0x1, 0x30, "41f3ebac7587e9ebcd462a6903b7b330f7010c08a39d6e020d2284360efe6df69cd2a91bfb9648b1a2d44f244cd27d5b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x33}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300)={r5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000940)={r5, @in6={{0xa, 0x4e24, 0x81, @local, 0x8}}, [0x0, 0x4, 0x4, 0x9, 0x3, 0x9, 0x8, 0x93aa, 0x5, 0x4, 0x3, 0x8, 0x1, 0xfffffffffffffffb, 0xff]}, &(0x7f0000000a40)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) syz_usb_control_io$uac3(r0, &(0x7f0000000040)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x25, {0x25, 0x22, "53bae87bb304bde358a4619ba62b61272862e89da8af31ecfb485211856e8c33686d68"}}, &(0x7f0000000100)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "ed6719481d951a60c358b332718dd654aaccc2345d424ae6ec34e8dfb63573ee46d6720c3294e8fc5fe8ab3c40ebd171a56a9142de38df2412384e9968a75c6c7b2513928146dbed58f2d9ca68d244515e53b2ae129e53fc76f1d7822f2b30de5a6d32f4e0f80eafcf96be22f43d0642bced86daf97633eeedf85eb344b3a733a4e2dec09523758be2ef0fd0c6fdc19cbb912a92de4e7dc5f4da5f91692c906660ce4c6bd9e020630bb097dbfa8bd869f5740b84e5fbbcf0c45d986a041e35295059738d297d44b842462abb25e36be020abafe9e39a285e9ef6bf1f9cabacc718cc668890581ba413b9863a5e8312b29b89"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000b80)=ANY=[@ANYBLOB="401690000000048b208e3d0126281c3660ae175c9f0b3a1ed8343eef9d7a78ce458c9f18faab3d36eb8b3cdea0fe4dd063a6d477f11b688fe306a4939a2d6deba8262ca9a947c3303a67eadbfa88c3cf4da5174cc5ecd78da9bc0edce211863ce06fd301ddb912171dc9311caa610eaa0d7d0ff7916e93088faf942b2daa4aeda552339788c32a4f63d7bb224d916625ba8e2c87886a5d8aea4eced4f2d434ea50aff8ecb2"], &(0x7f0000000080)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x3, "66ed6e"}, &(0x7f0000000380)={0x20, 0x82, 0x1, '\f'}, &(0x7f0000000280)=ANY=[@ANYBLOB="20830100003d07cec1d7d8a11b06"], &(0x7f0000000400)={0x20, 0x84, 0x1, '\t'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "2b1420"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000840)={0x20, 0xf, 0x1a, "0dfd8237ef47ba81645826510c389edd9b9a1188b15cd1d5cc95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m43.18683706s ago: executing program 3 (id=1555): process_mrelease(0xffffffffffffffff, 0x700000000000000) 1m42.896609415s ago: executing program 3 (id=1558): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000003ac0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0385720, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xeffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100024f27101004233b025c7bf9cce0610902120001060780ff0904"], 0xfffffffffffffffe) 1m39.336978769s ago: executing program 3 (id=1562): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="54000000120001002abd7000fddbdf25150100024e214e2109000000020000000400000000000000c90000000000000009", @ANYRES32=0x0, @ANYBLOB="00040000ffffff7f010000"], 0x54}, 0x1, 0x0, 0x0, 0x4000401}, 0x20008000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x6, 0x80000000, {0xffffffffffffffff}, {0xee00}, 0x7fff, 0x8}) r7 = getgid() r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r10 = getpid() sendmsg$unix(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)='\n', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x8cd5) write$cgroup_pid(r9, &(0x7f0000000400)=r10, 0x12) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setresuid(r11, r11, r11) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x88800}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[], 0x2a8}, {&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000180000022bbd7000fbdbdf2571544f084a8685e4b1aeecb515ee5d2e280b86c0b7b42bf0f805f048a4601a523fa60a7ca9c6d599f88808e4724653e37b3a0538aebea743fd738a4a6bbb72f443ae27a061a2a504afb01b1d932eeefc2b6c07420da3e01c922467a7dd6c5fe79c211795965e056de49052eb5bb70eaafca9d9f3a126036fb806d9e0a80c7dded62a3e1e96b6351e3477257b4206e832573c2e91548f350c3f19af7ee2de0a34aa366fd40800c100e0000002"], 0xbc}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000101c0000000000000001b0a85103b428d4", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000009361d3b3200000000000000001000000", @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES16=r1, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r10, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x40040}, 0x40081) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x0, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffd, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m23.919195587s ago: executing program 35 (id=1562): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="54000000120001002abd7000fddbdf25150100024e214e2109000000020000000400000000000000c90000000000000009", @ANYRES32=0x0, @ANYBLOB="00040000ffffff7f010000"], 0x54}, 0x1, 0x0, 0x0, 0x4000401}, 0x20008000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setfsgid(0xee00) setresgid(0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x6, 0x80000000, {0xffffffffffffffff}, {0xee00}, 0x7fff, 0x8}) r7 = getgid() r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r10 = getpid() sendmsg$unix(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)='\n', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x8cd5) write$cgroup_pid(r9, &(0x7f0000000400)=r10, 0x12) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setresuid(r11, r11, r11) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x88800}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[], 0x2a8}, {&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000180000022bbd7000fbdbdf2571544f084a8685e4b1aeecb515ee5d2e280b86c0b7b42bf0f805f048a4601a523fa60a7ca9c6d599f88808e4724653e37b3a0538aebea743fd738a4a6bbb72f443ae27a061a2a504afb01b1d932eeefc2b6c07420da3e01c922467a7dd6c5fe79c211795965e056de49052eb5bb70eaafca9d9f3a126036fb806d9e0a80c7dded62a3e1e96b6351e3477257b4206e832573c2e91548f350c3f19af7ee2de0a34aa366fd40800c100e0000002"], 0xbc}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000101c0000000000000001b0a85103b428d4", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000009361d3b3200000000000000001000000", @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES16=r1, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=r10, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x40040}, 0x40081) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x0, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffd, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 37.117224127s ago: executing program 7 (id=1728): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)}) 33.540819427s ago: executing program 7 (id=1737): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x88}, 0x40000010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 14.674087507s ago: executing program 6 (id=1768): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0x100000000009, 0xa, 0x9, 0x3}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000480)=0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 14.530732528s ago: executing program 5 (id=1769): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usbip_server_init(0x1) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x12) tkill(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x141142, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) close_range(r5, 0xffffffffffffffff, 0x0) 11.332970958s ago: executing program 8 (id=1770): syz_open_dev$cec(0x0, 0x0, 0x8900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0x203, 0x54442) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x0, 0x8}, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 11.184835041s ago: executing program 6 (id=1773): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 11.083844264s ago: executing program 5 (id=1774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x400, 0xffffffff, 0x0, 0xfffffffe}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97454800", "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"}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_pts(r3, 0xa0200) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x6, 0x9, 0x9, 0x1, "1a63ab98bcb3c6649117b9cf972121496ea79d", 0x7ff, 0x7f}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002e40)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000002ec0)={0x15, 0x110, 0xfa00, {r8, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xd, 0x7, {"bc54833f99cb54facbdfc64e468bea88"}, 0xe9c2, 0x10000, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}}, 0x118) 10.094857446s ago: executing program 6 (id=1775): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x23, &(0x7f0000000100)={@local, @random="0fb16b4fdbdd", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@snap={0xaa, 0x59d81d89cb2273ec, "c9", "bcfb58", 0x17, "ca92ee7fb1898d4353"}}}}}, 0x0) r3 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)={0x40, 0x5, 0x2, "838d"}, 0x0, 0x0, 0x0, 0x0}) 9.508683355s ago: executing program 5 (id=1776): socket(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000015a, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec61060004400004000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, 0x0, &(0x7f0000000080)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r8, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8012, r8, 0x0) 8.180129479s ago: executing program 8 (id=1778): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000014000500000000000000"], 0x44}}, 0x0) 8.043779172s ago: executing program 1 (id=1779): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x20, 0x73, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0xd2, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0xff}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x4d, 0xe}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xfb, &(0x7f0000000240)=@string={0xfb, 0x3, "ee86b87fb9ad691f92a13063ebf1c8c8411a2a4ea53925b9b121df4f83fd0ad7693074007efccd9aac71730710e2a7b59e52f5f24189cdfc249314ff9ec27fb67af62da3785bf494439b4d225b1f692b77846eaa72fbb6a3b84512ebc7ff1870e94b6b76681c3276491dac0a1b239eeaf4cf01544b004caad7f0ad733e15c7d39f0fd30f25ab8c832e21d2fbb5c942ad20b7efb1e314f10a4883ee4e26d46a6891815f21f8e45453b7490eb6d6e87bd2e641a64e65ace93f666a1d4072de61c953676759f40b938ba297695c84c401c6ace6cfb9f06506ef426cda39eb9ff99c2d6b9759c505cbafae8a2f3fbb0b0713fde9b5fb790909a5ea"}}, {0xd, &(0x7f0000000480)=@string={0xd, 0x3, "e0c3743a09977897226877"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x8d) 8.0424472s ago: executing program 8 (id=1780): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = memfd_secret(0x836264ba44e243a5) renameat2(r4, 0x0, 0xffffffffffffffff, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$binfmt_register(r5, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '!$\'],{$', 0x3a, '\x1c\x9d\xef\x1a\xee\xd1\xef\xeb\xda\xef\xc9\xd8\xa6\x95W\xa3', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x46, 0x50, 0x50, 0x50]}, 0x137) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0xfc}}, 0x0) 7.849357321s ago: executing program 5 (id=1781): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) acct(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) (async) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000640)={0x40, 0x14, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000440)=@framed={{}, [@ldst={0x3, 0x0, 0x4, 0x1, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000280), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001fb80a46c0e84a316dff2d95b55f17020000007297"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001fb80a46c0e84a316dff2d95b55f17020000007297"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.97550926s ago: executing program 6 (id=1782): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.934180926s ago: executing program 8 (id=1783): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {&(0x7f00000001c0)="66ef063be315a24090", 0x9}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x3, {0x0, 0xf0}}, 0x18) sendmmsg$inet(r5, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000180)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000950000e44850d1ae"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r9, 0x2000012, 0xe, 0x0, &(0x7f00000007c0)="63ec6e0d1fb9360e0400b9860000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="6e57bc6722a111e30a5d4101104d2d5ea040a077f3a2719c3de3de4f0401d38871bb4171935b3e361df682da27223f61f3b1162bd6ef52dbc5a03876b60880629061dc3d672dfd9ae54d5173deaefde7b0afe283ac17626de5bf05c565eb7f1085f3d553f86e44c4d9de3b95d46b9771373751d221698ebeddddaa40d90429185d098e28c881ddd603801517e33b0dfd27a13ca593a2", @ANYRESHEX=r0, @ANYBLOB=',version=9p2000,\x00']) 5.608608696s ago: executing program 6 (id=1784): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf15) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x801, 0x100) listen(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1d4889e83eb6466fe4407b024965e09914038799e1b405a60f57aee14012ed8a84e7f4c79d66"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.0111198s ago: executing program 8 (id=1785): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="d6d93dbcdd35fe40ff7cce970a321a57288e2c257f9cbce25825dd7be80edbebd7d7da1b35c105f04ce593110be8938108672f34cd1728d46c0921417838345df78cae4f9ffdb3ba4fd1b4e88a900b7e1433035b75183223ee2672a6abf23fbefd241ffc94d8ff25d49658ee2a3ac1a67659af21b66bf902a049b2430c2165e2ad2ba35e033db028289113c4a07f33b49d135c56499d35fa9236b72fc38d8ba5a1a9af48699f5bf678e852ca399d94ecb729929d5eb5dc34fb5a07e6a037f684eca38cceaac55f707847dbd4b31fda4cd984506549d7ffc687ded5", 0xdb}, {&(0x7f0000000580)="0c7c9f6c93c4525653d7b39fdcdf722d06f22cf9af7e3a625a2af8cd75", 0x1d}], 0x2, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x20008808}}], 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000540)=ANY=[@ANYBLOB="050000"]) 4.918672512s ago: executing program 1 (id=1786): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@upd={0xf8, 0x12, 0x200, 0x70bd28, 0x8, {{'xts-aes-aesni\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0xb7}, {0x8, 0x1, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 4.744175364s ago: executing program 1 (id=1787): socket(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000015a, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec61060004400004000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, 0x0, &(0x7f0000000080)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r8, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8012, r8, 0x0) 4.743839177s ago: executing program 5 (id=1788): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006003c000e0002000000e0200009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f0000000300000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000880), 0x402, r2}, 0x38) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e24, 0x81, @local, 0x8}}, [0x0, 0x4, 0x4, 0x9, 0x3, 0x9, 0x8, 0x93aa, 0x5, 0x4, 0x3, 0x8, 0x1, 0xfffffffffffffffb, 0xff]}, &(0x7f0000000a40)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) syz_usb_control_io$uac3(r0, &(0x7f0000000040)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x25, {0x25, 0x22, "53bae87bb304bde358a4619ba62b61272862e89da8af31ecfb485211856e8c33686d68"}}, &(0x7f0000000100)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "ed6719481d951a60c358b332718dd654aaccc2345d424ae6ec34e8dfb63573ee46d6720c3294e8fc5fe8ab3c40ebd171a56a9142de38df2412384e9968a75c6c7b2513928146dbed58f2d9ca68d244515e53b2ae129e53fc76f1d7822f2b30de5a6d32f4e0f80eafcf96be22f43d0642bced86daf97633eeedf85eb344b3a733a4e2dec09523758be2ef0fd0c6fdc19cbb912a92de4e7dc5f4da5f91692c906660ce4c6bd9e020630bb097dbfa8bd869f5740b84e5fbbcf0c45d986a041e35295059738d297d44b842462abb25e36be020abafe9e39a285e9ef6bf1f9cabacc718cc668890581ba413b9863a5e8312b29b89"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000b80)=ANY=[@ANYBLOB="401690000000048b208e3d0126281c3660ae175c9f0b3a1ed8343eef9d7a78ce458c9f18faab3d36eb8b3cdea0fe4dd063a6d477f11b688fe306a4939a2d6deba8262ca9a947c3303a67eadbfa88c3cf4da5174cc5ecd78da9bc0edce211863ce06fd301ddb912171dc9311caa610eaa0d7d0ff7916e93088faf942b2daa4aeda552339788c32a4f63d7bb224d916625ba8e2c87886a5d8aea4eced4f2d434ea50aff8ecb2"], &(0x7f0000000080)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x3, "66ed6e"}, &(0x7f0000000380)={0x20, 0x82, 0x1, '\f'}, &(0x7f0000000280)=ANY=[@ANYBLOB="20830100003d07cec1d7d8a11b06"], &(0x7f0000000400)={0x20, 0x84, 0x1, '\t'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "2b1420"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000840)={0x20, 0xf, 0x1a, "0dfd8237ef47ba81645826510c389edd9b9a1188b15cd1d5cc95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.595714503s ago: executing program 8 (id=1789): syz_open_dev$cec(0x0, 0x0, 0x8900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0x203, 0x54442) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x0, 0x8}, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 3.694003075s ago: executing program 7 (id=1737): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x88}, 0x40000010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 3.590342781s ago: executing program 7 (id=1790): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000014000500000000000000"], 0x44}}, 0x0) 3.536158841s ago: executing program 7 (id=1791): socket(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000015a, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec61060004400004000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, 0x0, &(0x7f0000000080)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r8, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8012, r8, 0x0) 2.41261871s ago: executing program 1 (id=1792): socket(0x15, 0x5, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1c, 0x0, @val=@netfilter={0xf, 0x0, 0x1}}, 0x20) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x804) openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1014c0, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) 2.387994196s ago: executing program 6 (id=1793): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006003c000e0002000000e0200009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007f0000000300000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000880), 0x402, r2}, 0x38) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x0, 0x1, 0x6, {0x6, 0x23, "f0383565"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0x1, 0x30, "41f3ebac7587e9ebcd462a6903b7b330f7010c08a39d6e020d2284360efe6df69cd2a91bfb9648b1a2d44f244cd27d5b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x33}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e24, 0x81, @local, 0x8}}, [0x0, 0x4, 0x4, 0x9, 0x3, 0x9, 0x8, 0x93aa, 0x5, 0x4, 0x3, 0x8, 0x1, 0xfffffffffffffffb, 0xff]}, &(0x7f0000000a40)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) syz_usb_control_io$uac3(r0, &(0x7f0000000040)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x25, {0x25, 0x22, "53bae87bb304bde358a4619ba62b61272862e89da8af31ecfb485211856e8c33686d68"}}, &(0x7f0000000100)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "ed6719481d951a60c358b332718dd654aaccc2345d424ae6ec34e8dfb63573ee46d6720c3294e8fc5fe8ab3c40ebd171a56a9142de38df2412384e9968a75c6c7b2513928146dbed58f2d9ca68d244515e53b2ae129e53fc76f1d7822f2b30de5a6d32f4e0f80eafcf96be22f43d0642bced86daf97633eeedf85eb344b3a733a4e2dec09523758be2ef0fd0c6fdc19cbb912a92de4e7dc5f4da5f91692c906660ce4c6bd9e020630bb097dbfa8bd869f5740b84e5fbbcf0c45d986a041e35295059738d297d44b842462abb25e36be020abafe9e39a285e9ef6bf1f9cabacc718cc668890581ba413b9863a5e8312b29b89"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000b80)=ANY=[@ANYBLOB="401690000000048b208e3d0126281c3660ae175c9f0b3a1ed8343eef9d7a78ce458c9f18faab3d36eb8b3cdea0fe4dd063a6d477f11b688fe306a4939a2d6deba8262ca9a947c3303a67eadbfa88c3cf4da5174cc5ecd78da9bc0edce211863ce06fd301ddb912171dc9311caa610eaa0d7d0ff7916e93088faf942b2daa4aeda552339788c32a4f63d7bb224d916625ba8e2c87886a5d8aea4eced4f2d434ea50aff8ecb2"], &(0x7f0000000080)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x3, "66ed6e"}, &(0x7f0000000380)={0x20, 0x82, 0x1, '\f'}, &(0x7f0000000280)=ANY=[@ANYBLOB="20830100003d07cec1d7d8a11b06"], &(0x7f0000000400)={0x20, 0x84, 0x1, '\t'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "2b1420"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000840)={0x20, 0xf, 0x1a, "0dfd8237ef47ba81645826510c389edd9b9a1188b15cd1d5cc95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 213.057799ms ago: executing program 7 (id=1794): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 194.640091ms ago: executing program 1 (id=1795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0xca5}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) 40.7719ms ago: executing program 5 (id=1796): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x20, 0x73, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0xd2, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0xff}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x4d, 0xe}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xfb, &(0x7f0000000240)=@string={0xfb, 0x3, "ee86b87fb9ad691f92a13063ebf1c8c8411a2a4ea53925b9b121df4f83fd0ad7693074007efccd9aac71730710e2a7b59e52f5f24189cdfc249314ff9ec27fb67af62da3785bf494439b4d225b1f692b77846eaa72fbb6a3b84512ebc7ff1870e94b6b76681c3276491dac0a1b239eeaf4cf01544b004caad7f0ad733e15c7d39f0fd30f25ab8c832e21d2fbb5c942ad20b7efb1e314f10a4883ee4e26d46a6891815f21f8e45453b7490eb6d6e87bd2e641a64e65ace93f666a1d4072de61c953676759f40b938ba297695c84c401c6ace6cfb9f06506ef426cda39eb9ff99c2d6b9759c505cbafae8a2f3fbb0b0713fde9b5fb790909a5ea"}}, {0xd, &(0x7f0000000480)=@string={0xd, 0x3, "e0c3743a09977897226877"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x8d) 0s ago: executing program 1 (id=1797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@upd={0xf8, 0x12, 0x200, 0x70bd28, 0x8, {{'xts-aes-aesni\x00'}, '\x00', '\x00', 0x0, 0x2000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0xb7}, {0x8, 0x1, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) kernel console output (not intermixed with test programs): mmy_hcd [ 749.461076][ T36] usb 7-1: USB disconnect, device number 46 [ 749.486073][T11468] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 749.508706][T11274] usb 6-1: unable to get BOS descriptor or descriptor too short [ 749.509276][T11274] usb 6-1: not running at top speed; connect to a high speed hub [ 749.510659][T11274] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 28, changing to 4 [ 749.513466][T11274] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 749.513493][T11274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.513513][T11274] usb 6-1: Product: syz [ 749.513528][T11274] usb 6-1: Manufacturer: syz [ 749.513542][T11274] usb 6-1: SerialNumber: syz [ 749.670912][T11468] bond1: entered promiscuous mode [ 749.671546][T11468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 749.711920][T11473] bond1: (slave bridge2): making interface the new active one [ 749.711946][T11473] bridge2: entered promiscuous mode [ 749.714014][T11473] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 749.845360][T11274] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 749.845646][T11274] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 749.866515][ T36] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 749.916524][ T9110] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 749.935857][T11274] usb 6-1: USB disconnect, device number 42 [ 750.007362][T10566] udevd[10566]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 750.026729][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 750.030219][ T36] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.030250][ T36] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.030273][ T36] usb 7-1: config 0 interface 0 has no altsetting 0 [ 750.030306][ T36] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 750.030330][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.044630][ T36] usb 7-1: config 0 descriptor?? [ 750.047071][ T9110] usb 8-1: device descriptor read/64, error -71 [ 750.286450][ T9110] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 750.417109][ T9110] usb 8-1: device descriptor read/64, error -71 [ 750.474570][ T36] hid_parser_main: 20 callbacks suppressed [ 750.474594][ T36] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 750.474626][ T36] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 750.474655][ T36] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 750.474683][ T36] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 750.474711][ T36] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 750.504729][ T36] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 750.530376][ T9110] usb usb8-port1: attempt power cycle [ 750.689067][T11474] FAULT_INJECTION: forcing a failure. [ 750.689067][T11474] name failslab, interval 1, probability 0, space 0, times 0 [ 750.689101][T11474] CPU: 1 UID: 0 PID: 11474 Comm: syz.6.1413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 750.689128][T11474] Tainted: [L]=SOFTLOCKUP [ 750.689135][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 750.689146][T11474] Call Trace: [ 750.689154][T11474] [ 750.689163][T11474] dump_stack_lvl+0xe8/0x150 [ 750.689194][T11474] should_fail_ex+0x46b/0x600 [ 750.689222][T11474] should_failslab+0xa8/0x100 [ 750.689244][T11474] __kmalloc_noprof+0xdf/0x7b0 [ 750.689277][T11474] ? kfree+0x4d/0x6c0 [ 750.689298][T11474] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 750.689325][T11474] tomoyo_realpath_from_path+0xe3/0x5d0 [ 750.689357][T11474] ? tomoyo_path_number_perm+0x219/0x630 [ 750.689385][T11474] tomoyo_path_number_perm+0x246/0x630 [ 750.689414][T11474] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 750.689444][T11474] ? __lock_acquire+0x6b5/0x2cf0 [ 750.689497][T11474] ? __fget_files+0x2a/0x420 [ 750.689523][T11474] ? __fget_files+0x2a/0x420 [ 750.689544][T11474] ? __fget_files+0x3a6/0x420 [ 750.689566][T11474] ? __fget_files+0x2a/0x420 [ 750.689592][T11474] security_file_ioctl+0xc3/0x2a0 [ 750.689623][T11474] __se_sys_ioctl+0x47/0x170 [ 750.689653][T11474] do_syscall_64+0x14d/0xf80 [ 750.689678][T11474] ? trace_irq_disable+0x3b/0x150 [ 750.689700][T11474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.689719][T11474] ? clear_bhb_loop+0x40/0x90 [ 750.689743][T11474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.689762][T11474] RIP: 0033:0x7fd73fd9c799 [ 750.689781][T11474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.689797][T11474] RSP: 002b:00007fd73dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.689817][T11474] RAX: ffffffffffffffda RBX: 00007fd740015fa0 RCX: 00007fd73fd9c799 [ 750.689831][T11474] RDX: 0000000000000000 RSI: 0000000080084803 RDI: 0000000000000004 [ 750.689844][T11474] RBP: 00007fd73dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 750.689855][T11474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.689867][T11474] R13: 00007fd740016038 R14: 00007fd740015fa0 R15: 00007ffda5efa948 [ 750.689898][T11474] [ 750.689904][T11474] ERROR: Out of memory at tomoyo_realpath_from_path. [ 750.694083][ T36] usb 7-1: USB disconnect, device number 47 [ 750.876406][ T9110] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 750.897336][ T9110] usb 8-1: device descriptor read/8, error -71 [ 751.146552][ T9110] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 751.168456][ T9110] usb 8-1: device descriptor read/8, error -71 [ 751.276882][ T9110] usb usb8-port1: unable to enumerate USB device [ 752.127499][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.127571][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.347855][T11517] nbd: must specify a device to reconfigure [ 755.636413][T11274] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 755.787281][T11274] usb 7-1: Using ep0 maxpacket: 8 [ 755.790843][T11274] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 755.790869][T11274] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 755.790889][T11274] usb 7-1: config 6 has no interface number 0 [ 755.790933][T11274] usb 7-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.790954][T11274] usb 7-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.849668][T11274] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 755.849699][T11274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.849719][T11274] usb 7-1: Product: syz [ 755.849734][T11274] usb 7-1: Manufacturer: syz [ 755.849756][T11274] usb 7-1: SerialNumber: syz [ 755.910016][T11274] hso 7-1:6.2: Failed to find INT IN ep [ 756.136735][T11274] usb 7-1: USB disconnect, device number 48 [ 756.186756][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1432'. [ 757.346482][ T37] audit: type=1326 audit(1773683301.204:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346535][ T37] audit: type=1326 audit(1773683301.204:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346575][ T37] audit: type=1326 audit(1773683301.204:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346614][ T37] audit: type=1326 audit(1773683301.204:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346653][ T37] audit: type=1326 audit(1773683301.204:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346692][ T37] audit: type=1326 audit(1773683301.204:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346731][ T37] audit: type=1326 audit(1773683301.204:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346770][ T37] audit: type=1326 audit(1773683301.204:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.346808][ T37] audit: type=1326 audit(1773683301.204:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.361042][ T37] audit: type=1326 audit(1773683301.224:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11550 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 757.746488][ T808] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 757.902382][ T808] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 757.902413][ T808] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 757.902432][ T808] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 757.902480][ T808] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.902505][ T808] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 757.902532][ T808] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 757.904261][ T808] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 757.904289][ T808] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 757.904309][ T808] usb 7-1: Product: syz [ 757.904325][ T808] usb 7-1: Manufacturer: syz [ 758.182314][T11549] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 758.185921][ T808] cdc_wdm 7-1:1.0: skipping garbage [ 758.185940][ T808] cdc_wdm 7-1:1.0: skipping garbage [ 758.985267][ T808] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 758.985289][ T808] cdc_wdm 7-1:1.0: Unknown control protocol [ 759.016727][ T808] usb 7-1: USB disconnect, device number 49 [ 759.320268][ T9810] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 759.606097][ T9810] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 759.606125][ T9810] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 759.606142][ T9810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 759.606183][ T9810] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.953793][ T9810] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 759.954043][ T9810] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 759.954311][ T9810] usb 4-1: Product: syz [ 759.954439][ T9810] usb 4-1: Manufacturer: syz [ 760.028286][ T9810] cdc_wdm 4-1:1.0: skipping garbage [ 760.028310][ T9810] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 760.312466][ T808] usb 4-1: USB disconnect, device number 73 [ 760.397676][ T36] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 760.551683][ T36] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 760.551716][ T36] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 760.555402][ T36] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 760.555431][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.555452][ T36] usb 7-1: Product: syz [ 760.555466][ T36] usb 7-1: Manufacturer: syz [ 760.555479][ T36] usb 7-1: SerialNumber: syz [ 760.564126][T11585] sctp: [Deprecated]: syz.5.1450 (pid 11585) Use of int in max_burst socket option. [ 760.564126][T11585] Use struct sctp_assoc_value instead [ 760.579427][ T36] usb 7-1: config 0 descriptor?? [ 760.580410][T11575] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 760.595954][ T36] dm9601 7-1:0.0: probe with driver dm9601 failed with error -22 [ 761.677389][ T36] usb 7-1: USB disconnect, device number 50 [ 761.806450][ T808] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 761.968510][ T808] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 761.968540][ T808] usb 8-1: config 0 has no interface number 0 [ 761.968593][ T808] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 761.972330][ T808] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 761.972359][ T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.972380][ T808] usb 8-1: Product: syz [ 761.972395][ T808] usb 8-1: Manufacturer: syz [ 761.972410][ T808] usb 8-1: SerialNumber: syz [ 761.985977][T11612] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1458'. [ 761.986021][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 762.073741][ T808] usb 8-1: config 0 descriptor?? [ 762.146441][ T36] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 762.303850][ T808] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 762.306141][ T36] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 762.306167][ T36] usb 7-1: config 0 has no interface number 0 [ 762.306210][ T36] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 762.306238][ T808] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 762.311494][ T36] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 762.311522][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.311542][ T36] usb 7-1: Product: syz [ 762.311556][ T36] usb 7-1: Manufacturer: syz [ 762.311570][ T36] usb 7-1: SerialNumber: syz [ 762.348974][ T36] usb 7-1: config 0 descriptor?? [ 762.385940][ T808] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 762.386031][ T808] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 762.408611][ T808] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 762.441521][ T808] usb 8-1: USB disconnect, device number 13 [ 762.477513][ T808] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 762.478347][ T808] keyspan 8-1:0.133: device disconnected [ 762.666265][ T36] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 762.685964][ T36] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 762.686054][ T36] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 762.686139][ T36] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 762.692167][ T36] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 762.706868][ T36] usb 7-1: USB disconnect, device number 51 [ 762.723137][ T36] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 762.723962][ T36] keyspan 7-1:0.133: device disconnected [ 763.935287][T11615] 9pnet_fd: Insufficient options for proto=fd [ 763.936939][T11615] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1459'. [ 764.066235][ T9332] Bluetooth: hci1: command 0x0406 tx timeout [ 764.526536][ T36] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 764.688633][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 764.688661][ T36] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 764.691845][ T36] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 764.691873][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.691893][ T36] usb 4-1: Product: syz [ 764.691907][ T36] usb 4-1: Manufacturer: syz [ 764.691922][ T36] usb 4-1: SerialNumber: syz [ 764.732638][ T36] usb 4-1: config 0 descriptor?? [ 764.733512][T11639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 764.744901][ T36] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 764.936527][ T5878] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 765.096433][ T5878] usb 8-1: Using ep0 maxpacket: 32 [ 765.098483][ T5878] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 765.098509][ T5878] usb 8-1: config 0 has no interface number 0 [ 765.103909][ T5878] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 765.103990][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.104012][ T5878] usb 8-1: Product: syz [ 765.104026][ T5878] usb 8-1: Manufacturer: syz [ 765.104202][ T5878] usb 8-1: SerialNumber: syz [ 765.165415][ T5878] usb 8-1: config 0 descriptor?? [ 765.180898][ T5878] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 765.180925][ T5878] usb 8-1: selecting invalid altsetting 1 [ 765.180941][ T5878] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 765.210483][ T5878] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 765.210852][ T5878] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 765.210903][ T5878] usb 8-1: media controller created [ 765.249106][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.316570][ T808] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 765.411901][ T5878] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 765.411957][ T5878] zl10353_read_register: readreg error (reg=127, ret==-71) [ 765.412405][ T5878] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 765.478332][ T808] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 765.478369][ T808] usb 6-1: config 0 has no interface number 0 [ 765.478413][ T808] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 765.482506][ T808] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 765.482534][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.482555][ T808] usb 6-1: Product: syz [ 765.482576][ T808] usb 6-1: Manufacturer: syz [ 765.482591][ T808] usb 6-1: SerialNumber: syz [ 765.543778][ T808] usb 6-1: config 0 descriptor?? [ 765.593150][ T5878] usb 8-1: USB disconnect, device number 14 [ 765.807979][T11649] bond1: (slave veth0_to_bond): Releasing backup interface [ 765.842715][ T808] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 765.844915][ T808] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 765.845002][ T808] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 765.845083][ T808] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 765.888270][ T808] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 765.892778][ T808] usb 6-1: USB disconnect, device number 43 [ 765.915484][ T808] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 765.927066][ T808] keyspan 6-1:0.133: device disconnected [ 766.026395][ T36] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 766.163878][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1474'. [ 766.178473][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 766.183729][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 766.185045][ T36] usb 7-1: config 1 interface 0 has no altsetting 0 [ 766.189046][ T36] usb 7-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40 [ 766.189072][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.189092][ T36] usb 7-1: Manufacturer: 洹턧缁ܳ텐悬ꞏ䨃Ꟍğĸ≁ꬤ墳졲輓磉ㄯ꣄ᅠ풓㮥ꊸ㝞Ʂָꂰ㫀睥踫ᛀ㭄垡謚夣絇ᔀ쀝섘ꬃﲮƐ淩䣵㩥⡧㆗ቯ猟窴㨬⹖ባ꿹瘅ᩤ緧ጌၨ旴典봵㒴ૃ嬊㎰钄㠜Ꮶ懹슔蹐䥾퉀졀蜢흲媑緎轄ﭨ翺類뫭儐❄盔諴⌼ܾ엌﫴Ὼ媱遆쫠㏛륅Բ貕嶓黻쳍⭬㏳ま [ 766.189126][ T36] usb 7-1: SerialNumber: syz [ 766.456725][ T9112] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 766.526893][ T36] usbhid 7-1:1.0: can't add hid device: -71 [ 766.527009][ T36] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 766.536073][ T36] usb 7-1: USB disconnect, device number 52 [ 766.647169][ T9112] usb 8-1: Using ep0 maxpacket: 32 [ 766.648820][ T9112] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.648851][ T9112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 766.648866][ T9112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 766.651058][ T9112] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 766.651086][ T9112] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.651105][ T9112] usb 8-1: Product: syz [ 766.651113][ T9112] usb 8-1: Manufacturer: syz [ 766.651120][ T9112] usb 8-1: SerialNumber: syz [ 766.654177][ T9112] usb 8-1: config 0 descriptor?? [ 766.732918][T11660] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 766.736115][ T9112] hub 8-1:0.0: bad descriptor, ignoring hub [ 766.736151][ T9112] hub 8-1:0.0: probe with driver hub failed with error -5 [ 766.743086][ T9112] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input29 [ 766.806501][ T9110] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 766.973235][ T9110] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 766.973874][ T9110] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 766.973904][ T9110] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 766.984066][ T9110] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 766.984095][ T9110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.985052][ T9110] usb 6-1: Product: syz [ 766.985070][ T9110] usb 6-1: Manufacturer: syz [ 766.985084][ T9110] usb 6-1: SerialNumber: syz [ 767.072557][ T5878] usb 8-1: USB disconnect, device number 15 [ 767.072716][ C1] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 767.092210][ T9110] usb 6-1: config 0 descriptor?? [ 767.093261][T11667] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 767.093445][T11667] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 767.107573][ T9110] usb 6-1: ucan: probing device on interface #0 [ 767.197223][ T37] kauditd_printk_skb: 62 callbacks suppressed [ 767.197240][ T37] audit: type=1326 audit(1773683311.064:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.197428][ T37] audit: type=1326 audit(1773683311.064:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.200011][ T37] audit: type=1326 audit(1773683311.064:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.200179][ T37] audit: type=1326 audit(1773683311.064:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.200291][ T37] audit: type=1326 audit(1773683311.064:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.200483][ T37] audit: type=1326 audit(1773683311.064:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.200783][ T37] audit: type=1326 audit(1773683311.064:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.200826][ T37] audit: type=1326 audit(1773683311.064:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.200978][ T37] audit: type=1326 audit(1773683311.064:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.201228][ T37] audit: type=1326 audit(1773683311.064:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11669 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd73fd9c799 code=0x7ffc0000 [ 767.791960][ T9110] ucan 6-1:0.0 can0: registered device [ 767.833521][T11678] netlink: 'syz.7.1481': attribute type 11 has an invalid length. [ 768.030203][ T9110] ucan 6-1:0.0 can0: firmware string: 7GdX&Q 8ݛ\̕ [ 768.348345][ T5878] usb 6-1: USB disconnect, device number 44 [ 768.382766][ T808] usb 4-1: USB disconnect, device number 74 [ 769.916563][ T9112] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 770.066674][ T9112] usb 8-1: Using ep0 maxpacket: 16 [ 770.253855][ T9112] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 770.254644][ T9112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 770.717783][ T9112] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 770.717816][ T9112] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.717837][ T9112] usb 8-1: Product: syz [ 770.717852][ T9112] usb 8-1: Manufacturer: syz [ 770.717868][ T9112] usb 8-1: SerialNumber: syz [ 770.774783][ T9112] usb 8-1: config 0 descriptor?? [ 771.053794][ T9112] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 771.098378][T11690] program syz.7.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.181645][T11690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.182181][T11690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.251107][ T5878] usb 8-1: USB disconnect, device number 16 [ 771.445473][ T6637] usb 8-1: Failed to submit usb control message: -71 [ 771.445507][ T6637] usb 8-1: unable to send the bmi data to the device: -71 [ 771.445523][ T6637] usb 8-1: unable to get target info from device [ 771.445550][ T6637] usb 8-1: could not get target info (-71) [ 771.496538][ T6637] usb 8-1: could not probe fw (-71) [ 772.466435][ T9112] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 772.625828][ T9112] usb 4-1: Using ep0 maxpacket: 8 [ 772.633313][ T9112] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 772.633339][ T9112] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 772.633359][ T9112] usb 4-1: config 6 has no interface number 0 [ 772.633417][ T9112] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 772.633441][ T9112] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.666897][ T9112] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 772.666928][ T9112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.666948][ T9112] usb 4-1: Product: syz [ 772.666962][ T9112] usb 4-1: Manufacturer: syz [ 772.666976][ T9112] usb 4-1: SerialNumber: syz [ 772.680051][ T9112] hso 4-1:6.2: Failed to find INT IN ep [ 773.082158][ T9110] usb 4-1: USB disconnect, device number 75 [ 774.476781][ T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 775.286929][ T10] usb 7-1: device descriptor read/64, error -71 [ 775.536571][ T10] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 775.639819][T11757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 775.676434][ T10] usb 7-1: device descriptor read/64, error -71 [ 775.748333][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 775.748350][ T37] audit: type=1326 audit(1773683319.604:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11759 comm="syz.3.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 775.748392][ T37] audit: type=1326 audit(1773683319.614:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11759 comm="syz.3.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d661c799 code=0x7ffc0000 [ 775.806445][ T10] usb usb7-port1: attempt power cycle [ 775.996415][ T9810] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 776.146410][ T10] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 776.169568][ T10] usb 7-1: device descriptor read/8, error -71 [ 776.216480][ T9810] usb 4-1: Using ep0 maxpacket: 8 [ 776.226657][ T9810] usb 4-1: config 0 has an invalid interface number: 77 but max is 0 [ 776.226684][ T9810] usb 4-1: config 0 has no interface number 0 [ 776.226715][ T9810] usb 4-1: too many endpoints for config 0 interface 77 altsetting 127: 77, using maximum allowed: 30 [ 776.226753][ T9810] usb 4-1: config 0 interface 77 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 77 [ 776.226780][ T9810] usb 4-1: config 0 interface 77 has no altsetting 0 [ 776.240783][ T9810] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 776.240813][ T9810] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 776.240832][ T9810] usb 4-1: Product: syz [ 776.240847][ T9810] usb 4-1: Manufacturer: syz [ 776.240861][ T9810] usb 4-1: SerialNumber: syz [ 776.247376][ T9810] usb 4-1: config 0 descriptor?? [ 776.416430][ T10] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 776.437078][ T10] usb 7-1: device descriptor read/8, error -71 [ 776.546860][ T10] usb usb7-port1: unable to enumerate USB device [ 776.743467][ T9810] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 776.743943][ T9810] gspca_zc3xx: reg_w_i err -71 [ 776.744026][ T9810] gspca_zc3xx 4-1:0.77: probe with driver gspca_zc3xx failed with error -71 [ 776.762451][ T9810] usb 4-1: USB disconnect, device number 76 [ 779.576487][ T9110] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 779.594063][ T10] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 779.727632][ T9110] usb 6-1: Using ep0 maxpacket: 8 [ 779.730675][ T9110] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 779.730699][ T9110] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 779.730718][ T9110] usb 6-1: config 6 has no interface number 0 [ 779.730751][ T9110] usb 6-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 779.730763][ T9110] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.734908][ T9110] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 779.734934][ T9110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.734954][ T9110] usb 6-1: Product: syz [ 779.734961][ T9110] usb 6-1: Manufacturer: syz [ 779.734969][ T9110] usb 6-1: SerialNumber: syz [ 779.765445][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 779.765477][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 779.765503][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 779.773277][ T9110] hso 6-1:6.2: Failed to find INT IN ep [ 779.809524][ T10] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 779.809554][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.809575][ T10] usb 7-1: Product: syz [ 779.809589][ T10] usb 7-1: Manufacturer: syz [ 779.809604][ T10] usb 7-1: SerialNumber: syz [ 779.901368][ T10] usb 7-1: config 0 descriptor?? [ 779.905665][T11794] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 779.905793][T11794] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 779.931495][ T10] usb 7-1: ucan: probing device on interface #0 [ 779.968813][T11274] usb 6-1: USB disconnect, device number 45 [ 780.907748][ T10] ucan 7-1:0.0: probe with driver ucan failed with error -71 [ 780.938561][ T10] usb 7-1: USB disconnect, device number 57 [ 781.057298][ T9110] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 781.228455][ T9110] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 781.228484][ T9110] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 781.228504][ T9110] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 781.228552][ T9110] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.230179][ T9110] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 781.230204][ T9110] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 781.230222][ T9110] usb 4-1: Product: syz [ 781.230230][ T9110] usb 4-1: Manufacturer: syz [ 781.294179][ T9110] cdc_wdm 4-1:1.0: skipping garbage [ 781.294201][ T9110] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 781.356452][ T10] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 781.396464][ T808] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 781.396638][T11274] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 781.443651][ T5878] usb 4-1: USB disconnect, device number 77 [ 781.508176][ T10] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 781.508205][ T10] usb 7-1: config 0 has no interface number 0 [ 781.508244][ T10] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 781.510461][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 781.510490][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.510504][ T10] usb 7-1: Product: syz [ 781.510512][ T10] usb 7-1: Manufacturer: syz [ 781.510519][ T10] usb 7-1: SerialNumber: syz [ 781.517644][ T10] usb 7-1: config 0 descriptor?? [ 781.546416][T11274] usb 6-1: Using ep0 maxpacket: 32 [ 781.552487][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.552517][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.552913][ T808] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 781.552937][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.578604][ T808] usb 8-1: config 0 descriptor?? [ 781.598438][T11274] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 781.598707][T11274] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 781.598728][T11274] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 781.598749][T11274] usb 6-1: config 1 has no interface number 0 [ 781.599189][T11274] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.599217][T11274] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 781.599470][T11274] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 781.599494][T11274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.669765][T11274] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 781.775899][ T10] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 781.785780][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 781.786010][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 781.786056][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 781.797714][ T10] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 781.821896][ T10] usb 7-1: USB disconnect, device number 58 [ 784.211647][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 784.245583][ T10] keyspan 7-1:0.133: device disconnected [ 784.292006][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.292440][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.331211][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.344542][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.507822][T11274] snd_usb_pod 6-1:1.1: set_interface failed [ 784.510551][T11274] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 784.512271][T11274] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 784.554483][T11274] usb 6-1: USB disconnect, device number 46 [ 785.604936][ T808] usbhid 8-1:0.0: can't add hid device: -71 [ 785.605046][ T808] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 785.617483][ T808] usb 8-1: USB disconnect, device number 17 [ 786.236481][T11274] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 786.508480][ T9112] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 786.660435][T11274] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 786.660467][T11274] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 786.660494][T11274] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 786.662675][T11274] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 786.662702][T11274] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.662722][T11274] usb 8-1: Product: syz [ 786.662736][T11274] usb 8-1: Manufacturer: syz [ 786.662747][T11274] usb 8-1: SerialNumber: syz [ 786.668046][T11274] usb 8-1: config 0 descriptor?? [ 786.747004][T11857] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 786.747116][T11857] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 786.758009][ T9112] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 786.758027][ T9112] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 786.758037][ T9112] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 786.758063][ T9112] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.759370][ T9112] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 786.759386][ T9112] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 786.759397][ T9112] usb 7-1: Product: syz [ 786.759405][ T9112] usb 7-1: Manufacturer: syz [ 786.805223][T11274] usb 8-1: ucan: probing device on interface #0 [ 786.885921][ T9112] cdc_wdm 7-1:1.0: skipping garbage [ 786.886055][ T9112] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 787.088752][ T9112] usb 7-1: USB disconnect, device number 59 [ 787.497724][T11274] ucan 8-1:0.0 can0: registered device [ 787.662838][T11274] ucan 8-1:0.0 can0: firmware string: 7GdX&Q 8ݛ\̕ [ 787.915723][ T9810] usb 8-1: USB disconnect, device number 18 [ 788.316441][ T9112] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 788.446488][ T9112] usb 7-1: device descriptor read/64, error -71 [ 788.686404][ T9112] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 788.816524][T11274] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 788.834236][ T9112] usb 7-1: device descriptor read/64, error -71 [ 788.972151][T11274] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 788.972187][T11274] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 788.972214][T11274] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 788.975519][T11274] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 788.975548][T11274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.975567][T11274] usb 4-1: Product: syz [ 788.975582][T11274] usb 4-1: Manufacturer: syz [ 788.975597][T11274] usb 4-1: SerialNumber: syz [ 788.994301][T11274] usb 4-1: config 0 descriptor?? [ 788.995774][T11875] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 788.995952][T11875] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 788.998297][T11274] usb 4-1: ucan: probing device on interface #0 [ 789.123117][ T9112] usb usb7-port1: attempt power cycle [ 790.176946][ T9112] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 790.586885][ T9112] usb 7-1: device descriptor read/8, error -71 [ 790.752526][T11274] ucan 4-1:0.0 can0: registered device [ 790.836406][ T9112] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 790.868981][ T9112] usb 7-1: device descriptor read/8, error -71 [ 790.907406][T11274] ucan 4-1:0.0 can0: firmware string: 7GdX&Q 8ݛ\̕ [ 790.995634][ T9112] usb usb7-port1: unable to enumerate USB device [ 791.133179][T11274] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 791.282027][T11274] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 791.282057][T11274] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 791.282076][T11274] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 791.282123][T11274] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.285039][T11274] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 791.285066][T11274] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 791.285087][T11274] usb 8-1: Product: syz [ 791.285101][T11274] usb 8-1: Manufacturer: syz [ 791.317556][T11274] cdc_wdm 8-1:1.0: skipping garbage [ 791.317596][T11274] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 791.524104][T11274] usb 8-1: USB disconnect, device number 19 [ 792.208160][ T5458] ucan 4-1:0.0 can0: could not start device, code: -71 [ 792.208491][ T5458] ucan 4-1:0.0 can0: could not reset device, code: -71 [ 792.209062][ T9112] usb 4-1: USB disconnect, device number 78 [ 792.436474][ T9110] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 792.798702][ T9110] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 792.798736][ T9110] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 792.798762][ T9110] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 792.801316][ T9110] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 792.801344][ T9110] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.801366][ T9110] usb 8-1: Product: syz [ 792.801380][ T9110] usb 8-1: Manufacturer: syz [ 792.801395][ T9110] usb 8-1: SerialNumber: syz [ 793.716090][ T9110] usb 8-1: config 0 descriptor?? [ 793.727151][T11920] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 793.727881][T11920] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 793.730117][ T9110] usb 8-1: ucan: probing device on interface #0 [ 794.036433][ T9112] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 794.197319][ T9112] usb 4-1: Using ep0 maxpacket: 16 [ 794.504716][ T9112] usb 4-1: too many configurations: 97, using maximum allowed: 8 [ 795.962668][ T9110] ucan 8-1:0.0 can0: registered device [ 795.992433][ T9112] usb 4-1: string descriptor 0 read error: -71 [ 795.992705][ T9112] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 795.992730][ T9112] usb 4-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 796.029681][ T9112] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 796.029800][ T9112] usb 4-1: no configuration chosen from 8 choices [ 796.033517][ T9112] usb 4-1: USB disconnect, device number 79 [ 796.138160][ T9110] ucan 8-1:0.0 can0: firmware string: unknown [ 796.201532][ T9110] usb 8-1: USB disconnect, device number 20 [ 797.206922][ T9110] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 797.369164][ T9110] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 797.369197][ T9110] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 797.369219][ T9110] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 797.371703][ T9110] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 797.371732][ T9110] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.371753][ T9110] usb 8-1: Product: syz [ 797.371767][ T9110] usb 8-1: Manufacturer: syz [ 797.371782][ T9110] usb 8-1: SerialNumber: syz [ 797.439669][ T9110] usb 8-1: config 0 descriptor?? [ 797.442050][T11963] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 797.460068][ T9110] dm9601 8-1:0.0: probe with driver dm9601 failed with error -22 [ 797.731221][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1571'. [ 797.946678][T11986] netlink: 'syz.5.1572': attribute type 25 has an invalid length. [ 797.946700][T11986] netlink: 'syz.5.1572': attribute type 9 has an invalid length. [ 798.046420][ T9110] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 798.242371][ T9110] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 798.242399][ T9110] usb 7-1: config 0 has no interface number 0 [ 798.242443][ T9110] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 798.244933][ T9110] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 798.244960][ T9110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.244980][ T9110] usb 7-1: Product: syz [ 798.244995][ T9110] usb 7-1: Manufacturer: syz [ 798.245009][ T9110] usb 7-1: SerialNumber: syz [ 798.310406][ T9110] usb 7-1: config 0 descriptor?? [ 798.376773][ T808] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 798.637411][ T9110] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 798.639756][ T9110] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 798.639843][ T9110] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 798.639924][ T9110] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 798.680509][ T9110] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 798.700353][ T9110] usb 7-1: USB disconnect, device number 64 [ 798.725019][ T808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 798.725052][ T808] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 798.725078][ T808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 798.758185][ T808] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 798.758214][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.758233][ T808] usb 6-1: Product: syz [ 798.758248][ T808] usb 6-1: Manufacturer: syz [ 798.758263][ T808] usb 6-1: SerialNumber: syz [ 798.759322][ T9110] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 798.760178][ T9110] keyspan 7-1:0.133: device disconnected [ 798.824878][ T808] usb 6-1: config 0 descriptor?? [ 798.825601][T11993] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 798.825716][T11993] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 798.863870][ T808] usb 6-1: ucan: probing device on interface #0 [ 799.379289][ T9810] usb 8-1: USB disconnect, device number 21 [ 799.516129][ T808] ucan 6-1:0.0 can0: registered device [ 799.702796][ T808] ucan 6-1:0.0 can0: firmware string: 7GdX&Q 8ݛ\̕ [ 800.636977][ T9810] usb 6-1: USB disconnect, device number 47 [ 801.896831][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1583'. [ 810.229222][ T5880] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 810.381905][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1609'. [ 810.396667][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 810.398941][ T5880] usb 6-1: config 2 has an invalid interface number: 33 but max is 0 [ 810.398978][ T5880] usb 6-1: config 2 has no interface number 0 [ 810.399010][ T5880] usb 6-1: config 2 interface 33 has no altsetting 0 [ 810.401371][ T5880] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=f3.94 [ 810.401398][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.401418][ T5880] usb 6-1: Product: syz [ 810.401433][ T5880] usb 6-1: Manufacturer: syz [ 810.401447][ T5880] usb 6-1: SerialNumber: syz [ 810.546454][ T9810] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 810.700639][ T5880] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 810.701500][ T5880] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 810.701601][ T5880] pac7311 6-1:2.33: probe with driver pac7311 failed with error -71 [ 810.706884][ T9810] usb 8-1: Using ep0 maxpacket: 32 [ 810.708871][ T9810] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 810.708894][ T9810] usb 8-1: config 0 has no interface number 0 [ 810.711745][ T5880] usb 6-1: USB disconnect, device number 48 [ 810.713783][ T9810] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 810.713809][ T9810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.713829][ T9810] usb 8-1: Product: syz [ 810.713843][ T9810] usb 8-1: Manufacturer: syz [ 810.713857][ T9810] usb 8-1: SerialNumber: syz [ 810.723428][ T9810] usb 8-1: config 0 descriptor?? [ 810.740770][ T9810] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 810.740797][ T9810] usb 8-1: selecting invalid altsetting 1 [ 810.740813][ T9810] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 810.801123][ T9810] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 810.801465][ T9810] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 810.801520][ T9810] usb 8-1: media controller created [ 810.839476][ T9810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 811.083499][ T9810] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 811.083545][ T9810] zl10353_read_register: readreg error (reg=127, ret==-71) [ 811.143571][ T9810] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 811.650419][ T9810] usb 8-1: USB disconnect, device number 22 [ 812.085411][ T9332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.104038][ T9332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.125947][ T9332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.134918][ T9332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.145491][ T9332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.193480][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.193549][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.227457][ T9332] Bluetooth: hci0: command tx timeout [ 814.387548][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.464117][T12144] chnl_net:caif_netlink_parms(): no params data found [ 814.794863][T12172] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1619'. [ 816.102941][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.296444][ T9332] Bluetooth: hci0: command tx timeout [ 816.326473][T11274] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 816.432235][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.456443][T11274] usb 8-1: device descriptor read/64, error -71 [ 816.696776][T11274] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 816.828029][T11274] usb 8-1: device descriptor read/64, error -71 [ 816.926901][ T43] bond0: (slave netdevsim0): Releasing backup interface [ 816.937017][T11274] usb usb8-port1: attempt power cycle [ 816.970351][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.990166][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.990330][T12144] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.990558][T12144] bridge_slave_0: entered allmulticast mode [ 816.992107][T12144] bridge_slave_0: entered promiscuous mode [ 816.994285][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.994402][T12144] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.994535][T12144] bridge_slave_1: entered allmulticast mode [ 816.996010][T12144] bridge_slave_1: entered promiscuous mode [ 817.046439][ T5911] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 817.060601][T12144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.069868][T12144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.076452][ T9810] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 817.115342][T12144] team0: Port device team_slave_0 added [ 817.123558][T12144] team0: Port device team_slave_1 added [ 817.158901][T12144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.158917][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.158942][T12144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.160407][T12144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.160416][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.160430][T12144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.226494][ T9810] usb 7-1: Using ep0 maxpacket: 32 [ 817.228651][ T9810] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 817.228674][ T9810] usb 7-1: config 0 has no interface number 0 [ 817.231142][ T9810] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 817.231175][ T9810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.231392][ T9810] usb 7-1: Product: syz [ 817.231408][ T9810] usb 7-1: Manufacturer: syz [ 817.231422][ T9810] usb 7-1: SerialNumber: syz [ 817.256706][ T9810] usb 7-1: config 0 descriptor?? [ 817.272969][ T9810] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 817.272995][ T9810] usb 7-1: selecting invalid altsetting 1 [ 817.273011][ T9810] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 817.287027][T12144] hsr_slave_0: entered promiscuous mode [ 817.288965][ T9810] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 817.289318][ T9810] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 817.289364][ T9810] usb 7-1: media controller created [ 817.291632][T12144] hsr_slave_1: entered promiscuous mode [ 817.295452][T12144] debugfs: 'hsr0' already exists in 'hsr' [ 817.295474][T12144] Cannot create hsr debugfs directory [ 817.314378][ T9810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.346389][ T5911] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 817.346416][ T5911] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 817.346434][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 817.346482][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.346507][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 817.346533][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 817.406428][ T5911] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 817.406458][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 817.406479][ T5911] usb 6-1: Product: syz [ 817.406491][ T5911] usb 6-1: Manufacturer: syz [ 817.493769][T12185] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 817.503559][T11274] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 817.504828][ T5911] cdc_wdm 6-1:1.0: skipping garbage [ 817.504845][ T5911] cdc_wdm 6-1:1.0: skipping garbage [ 817.517057][T11274] usb 8-1: device descriptor read/8, error -71 [ 817.642757][ T5911] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 817.642817][ T5911] cdc_wdm 6-1:1.0: Unknown control protocol [ 817.695517][ T9810] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 817.703212][ T9810] zl10353_read_register: readreg error (reg=127, ret==-71) [ 817.803095][ T9810] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 817.970148][T11274] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 817.996771][T11274] usb 8-1: device descriptor read/8, error -71 [ 818.030251][ T5911] usb 6-1: USB disconnect, device number 49 [ 818.106746][T11274] usb usb8-port1: unable to enumerate USB device [ 818.170028][ T9810] usb 7-1: USB disconnect, device number 65 [ 818.376466][ T9332] Bluetooth: hci0: command tx timeout [ 818.562731][ T43] bridge_slave_1: left allmulticast mode [ 818.562758][ T43] bridge_slave_1: left promiscuous mode [ 818.563032][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.629295][ T43] bridge_slave_0: left allmulticast mode [ 818.629324][ T43] bridge_slave_0: left promiscuous mode [ 818.629578][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.636504][ T9810] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 818.807129][ T9810] usb 8-1: Using ep0 maxpacket: 32 [ 818.809655][ T9810] usb 8-1: config 2 has an invalid interface number: 33 but max is 0 [ 818.809683][ T9810] usb 8-1: config 2 has no interface number 0 [ 818.809747][ T9810] usb 8-1: config 2 interface 33 has no altsetting 0 [ 818.813300][ T9810] usb 8-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=f3.94 [ 818.813329][ T9810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.813350][ T9810] usb 8-1: Product: syz [ 818.813364][ T9810] usb 8-1: Manufacturer: syz [ 818.813379][ T9810] usb 8-1: SerialNumber: syz [ 819.656550][ T36] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 819.818370][ T36] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 819.818390][ T36] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 819.818439][ T36] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 819.820758][ T36] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 819.820785][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.820854][ T36] usb 7-1: Product: syz [ 819.820869][ T36] usb 7-1: Manufacturer: syz [ 819.820880][ T36] usb 7-1: SerialNumber: syz [ 819.834733][ T36] usb 7-1: config 0 descriptor?? [ 819.885623][T12214] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 819.904798][T12214] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 819.928688][ T36] usb 7-1: ucan: probing device on interface #0 [ 820.456384][ T9332] Bluetooth: hci0: command tx timeout [ 820.577106][ T43] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 820.577137][ T43] bridge2 (unregistering): left promiscuous mode [ 820.717077][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.837396][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.859701][ T43] bond0 (unregistering): Released all slaves [ 820.875251][ T43] bond1 (unregistering): Released all slaves [ 820.981026][ T36] ucan 7-1:0.0 can0: registered device [ 821.018737][ T36] ucan 7-1:0.0 can0: firmware string: 7GdX&Q 8ݛ\̕ [ 821.240858][ T9110] usb 7-1: USB disconnect, device number 66 [ 821.305273][T12227] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1630'. [ 821.461702][ T9810] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 821.463394][ T9810] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 821.463480][ T9810] pac7311 8-1:2.33: probe with driver pac7311 failed with error -71 [ 821.485448][ T9810] usb 8-1: USB disconnect, device number 27 [ 821.892604][ T9810] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 822.210514][ T9810] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 822.210531][ T9810] usb 6-1: config 0 has no interface number 0 [ 822.210556][ T9810] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 822.210570][ T9810] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 822.210593][ T9810] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 822.210605][ T9810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.222899][ T9810] usb 6-1: config 0 descriptor?? [ 822.223660][T12230] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 822.270228][ T9810] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 822.431710][ T9810] usb 6-1: USB disconnect, device number 50 [ 822.865085][T12144] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 823.092307][T12144] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 823.192572][T12144] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 823.889079][ T5911] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 824.141679][ T5911] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 824.141711][ T5911] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 824.141732][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 824.141781][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 824.141808][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 824.141833][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 824.165853][ T5911] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 824.165883][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 824.165903][ T5911] usb 6-1: Product: syz [ 824.165917][ T5911] usb 6-1: Manufacturer: syz [ 824.209214][T12257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 824.221385][ T5911] cdc_wdm 6-1:1.0: skipping garbage [ 824.221404][ T5911] cdc_wdm 6-1:1.0: skipping garbage [ 824.240479][ T5911] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 824.240501][ T5911] cdc_wdm 6-1:1.0: Unknown control protocol [ 824.425577][ C1] wdm_int_callback: 1577 callbacks suppressed [ 824.425603][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.425620][ C1] wdm_int_callback: 1577 callbacks suppressed [ 824.425634][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.425857][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.425874][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.426099][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.426119][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.426519][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.426542][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.426773][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.426794][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.427018][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.427036][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.427259][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.427278][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.427496][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.427524][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.427745][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.427768][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.427996][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 824.428014][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 824.618430][T12144] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 824.622698][ T10] usb 6-1: USB disconnect, device number 51 [ 824.622880][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 824.693148][T12270] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1640'. [ 825.166471][T11274] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 825.316491][T11274] usb 7-1: Using ep0 maxpacket: 32 [ 825.318197][T11274] usb 7-1: config 2 has an invalid interface number: 33 but max is 0 [ 825.318218][T11274] usb 7-1: config 2 has no interface number 0 [ 825.318245][T11274] usb 7-1: config 2 interface 33 has no altsetting 0 [ 825.364354][T11274] usb 7-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=f3.94 [ 825.364373][T11274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.364384][T11274] usb 7-1: Product: syz [ 825.364392][T11274] usb 7-1: Manufacturer: syz [ 825.364399][T11274] usb 7-1: SerialNumber: syz [ 826.207671][T12144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.276758][T12291] FAULT_INJECTION: forcing a failure. [ 826.276758][T12291] name failslab, interval 1, probability 0, space 0, times 0 [ 826.276793][T12291] CPU: 0 UID: 0 PID: 12291 Comm: syz.5.1643 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 826.276818][T12291] Tainted: [L]=SOFTLOCKUP [ 826.276825][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 826.276836][T12291] Call Trace: [ 826.276844][T12291] [ 826.276853][T12291] dump_stack_lvl+0xe8/0x150 [ 826.276885][T12291] should_fail_ex+0x46b/0x600 [ 826.276914][T12291] should_failslab+0xa8/0x100 [ 826.276935][T12291] kmem_cache_alloc_noprof+0x87/0x680 [ 826.276961][T12291] ? ima_inode_get+0xea/0x4d0 [ 826.277053][T12291] ima_inode_get+0xea/0x4d0 [ 826.277078][T12291] process_measurement+0x470/0x1c90 [ 826.277127][T12291] ? __kernel_text_address+0xd/0x30 [ 826.277176][T12291] ? __pfx_process_measurement+0x10/0x10 [ 826.277215][T12291] ? __lock_acquire+0x6b5/0x2cf0 [ 826.277235][T12291] ima_file_mmap+0x1b0/0x200 [ 826.277247][T12291] ? __pfx_ima_file_mmap+0x10/0x10 [ 826.277263][T12291] security_mmap_file+0x773/0xa20 [ 826.277276][T12291] vm_mmap_pgoff+0x134/0x4f0 [ 826.277295][T12291] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 826.277312][T12291] ? __fget_files+0x2a/0x420 [ 826.277326][T12291] ? __fget_files+0x3a6/0x420 [ 826.277338][T12291] ? __fget_files+0x2a/0x420 [ 826.277353][T12291] ksys_mmap_pgoff+0x4e8/0x720 [ 826.277369][T12291] ? __x64_sys_mmap+0x7f/0x140 [ 826.277387][T12291] do_syscall_64+0x14d/0xf80 [ 826.277406][T12291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.277417][T12291] ? clear_bhb_loop+0x40/0x90 [ 826.277430][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.277440][T12291] RIP: 0033:0x7f81ead5c799 [ 826.277452][T12291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.277461][T12291] RSP: 002b:00007f81e8f8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 826.277474][T12291] RAX: ffffffffffffffda RBX: 00007f81eafd6090 RCX: 00007f81ead5c799 [ 826.277482][T12291] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 826.277489][T12291] RBP: 00007f81e8f8d090 R08: 0000000000000006 R09: 0000000000000000 [ 826.277496][T12291] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 826.277502][T12291] R13: 00007f81eafd6128 R14: 00007f81eafd6090 R15: 00007fffe8488678 [ 826.277518][T12291] [ 826.302260][T12144] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.604744][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.605013][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.777268][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.777765][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.299114][T11274] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 828.304291][T11274] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 828.304393][T11274] pac7311 7-1:2.33: probe with driver pac7311 failed with error -71 [ 828.391230][T11274] usb 7-1: USB disconnect, device number 67 [ 830.437112][ T5880] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 830.756059][ T5880] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 830.756089][ T5880] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 830.756110][ T5880] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 830.756159][ T5880] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.756185][ T5880] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 830.756211][ T5880] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 830.808956][ T5880] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 830.808986][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 830.809006][ T5880] usb 7-1: Product: syz [ 830.809019][ T5880] usb 7-1: Manufacturer: syz [ 830.821375][T12331] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 830.829749][ T5880] cdc_wdm 7-1:1.0: skipping garbage [ 830.829769][ T5880] cdc_wdm 7-1:1.0: skipping garbage [ 830.842068][ T5880] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 830.842089][ T5880] cdc_wdm 7-1:1.0: Unknown control protocol [ 831.014725][T12341] nbd: must specify a device to reconfigure [ 831.087882][ C1] wdm_int_callback: 949 callbacks suppressed [ 831.087898][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.087908][ C1] wdm_int_callback: 949 callbacks suppressed [ 831.087916][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.088106][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.088116][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.088300][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.088326][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.088508][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.088518][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.090854][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.090868][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.091059][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.091069][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.091251][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.091261][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.091447][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.091457][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.091646][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.091656][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.091843][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 831.091853][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 831.159262][ T9110] usb 7-1: USB disconnect, device number 68 [ 831.159364][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 831.342811][ T43] hsr_slave_0: left promiscuous mode [ 831.396588][ T43] hsr_slave_1: left promiscuous mode [ 831.397646][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.397672][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.440700][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.440728][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.542788][ T43] batadv_slave_1: left promiscuous mode [ 831.542934][ T43] veth1_macvtap: left promiscuous mode [ 831.543183][ T43] veth1_vlan: left promiscuous mode [ 831.543354][ T43] veth0_vlan: left promiscuous mode [ 832.426472][ T5880] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 832.512678][ T9110] usb 7-1: new low-speed USB device number 69 using dummy_hcd [ 832.586862][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 832.762426][ T5880] usb 6-1: config 2 has an invalid interface number: 33 but max is 0 [ 832.762454][ T5880] usb 6-1: config 2 has no interface number 0 [ 832.762483][ T5880] usb 6-1: config 2 interface 33 has no altsetting 0 [ 832.765020][ T5880] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=f3.94 [ 832.765046][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.765066][ T5880] usb 6-1: Product: syz [ 832.765081][ T5880] usb 6-1: Manufacturer: syz [ 832.765095][ T5880] usb 6-1: SerialNumber: syz [ 832.878848][ T9110] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 832.878957][ T9110] usb 7-1: config 0 has no interface number 0 [ 832.879003][ T9110] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 832.879028][ T9110] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 832.879053][ T9110] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 832.879247][ T9110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.071939][ T9110] usb 7-1: config 0 descriptor?? [ 833.082409][T12367] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 833.354233][ T9110] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 833.373263][ T5880] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 833.373638][ T5880] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 833.373702][ T5880] pac7311 6-1:2.33: probe with driver pac7311 failed with error -71 [ 833.415219][ T5880] usb 6-1: USB disconnect, device number 52 [ 833.418860][ T9110] usb 7-1: USB disconnect, device number 69 [ 833.494391][T12144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.229344][T12389] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1660'. [ 834.268331][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 834.555750][T12144] veth0_vlan: entered promiscuous mode [ 834.619486][T12144] veth1_vlan: entered promiscuous mode [ 834.823965][T12144] veth0_macvtap: entered promiscuous mode [ 834.830840][T12144] veth1_macvtap: entered promiscuous mode [ 835.063960][T12144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.106660][T12144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.570017][ T9847] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.592588][ T9847] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.594052][ T9847] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.594555][ T9847] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.926445][ T9810] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 836.166442][ T9810] usb 6-1: device descriptor read/64, error -71 [ 836.537468][ T9810] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 836.756700][ T9810] usb 6-1: device descriptor read/64, error -71 [ 836.885923][ T9810] usb usb6-port1: attempt power cycle [ 837.511798][T12430] geneve2: entered promiscuous mode [ 837.886387][ T9810] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 837.907489][ T9810] usb 6-1: device descriptor read/8, error -71 [ 837.931106][ T7999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.931120][ T7999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.207473][T12437] FAULT_INJECTION: forcing a failure. [ 838.207473][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 838.207547][T12437] CPU: 1 UID: 0 PID: 12437 Comm: syz.7.1671 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 838.207575][T12437] Tainted: [L]=SOFTLOCKUP [ 838.207582][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.207594][T12437] Call Trace: [ 838.207603][T12437] [ 838.207612][T12437] dump_stack_lvl+0xe8/0x150 [ 838.207645][T12437] should_fail_ex+0x46b/0x600 [ 838.207676][T12437] should_failslab+0xa8/0x100 [ 838.207698][T12437] kmem_cache_alloc_noprof+0x87/0x680 [ 838.207726][T12437] ? do_getname+0x2e/0x250 [ 838.207745][T12437] ? build_open_flags+0x94/0x5b0 [ 838.207771][T12437] do_getname+0x2e/0x250 [ 838.207790][T12437] ? getname_flags+0x11/0x20 [ 838.207814][T12437] do_sys_openat2+0xca/0x200 [ 838.207839][T12437] ? __pfx_do_sys_openat2+0x10/0x10 [ 838.207862][T12437] ? ksys_write+0x248/0x270 [ 838.207890][T12437] ? rcu_is_watching+0x15/0xb0 [ 838.207917][T12437] __x64_sys_creat+0x8f/0xc0 [ 838.207944][T12437] do_syscall_64+0x14d/0xf80 [ 838.207972][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.207993][T12437] ? clear_bhb_loop+0x40/0x90 [ 838.208017][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.208036][T12437] RIP: 0033:0x7fbeb51ac799 [ 838.208054][T12437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.208072][T12437] RSP: 002b:00007fbeb33bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 838.208093][T12437] RAX: ffffffffffffffda RBX: 00007fbeb5426180 RCX: 00007fbeb51ac799 [ 838.208108][T12437] RDX: 0000000000000000 RSI: 0000000000000188 RDI: 0000200000000440 [ 838.208121][T12437] RBP: 00007fbeb33bc090 R08: 0000000000000000 R09: 0000000000000000 [ 838.208134][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.208146][T12437] R13: 00007fbeb5426218 R14: 00007fbeb5426180 R15: 00007ffe79929208 [ 838.208177][T12437] [ 838.916447][ T9810] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 838.992013][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.992032][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.126412][ T9810] usb 6-1: device not accepting address 56, error -71 [ 839.126801][ T9810] usb usb6-port1: unable to enumerate USB device [ 839.185115][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 839.397640][ T36] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 839.484924][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 839.619094][ T36] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 839.619125][ T36] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 839.619158][ T36] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 839.625312][ T36] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 839.625340][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.625361][ T36] usb 8-1: Product: syz [ 839.625375][ T36] usb 8-1: Manufacturer: syz [ 839.625390][ T36] usb 8-1: SerialNumber: syz [ 839.691479][ T36] usb 8-1: config 0 descriptor?? [ 839.692238][T12445] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 839.692353][T12445] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 839.728361][ T36] usb 8-1: ucan: probing device on interface #0 [ 841.430268][ T36] usb 8-1: ucan: failed to retrieve device info [ 841.430358][ T36] usb 8-1: ucan: probe failed; try to update the device firmware [ 841.840026][T12471] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 842.236543][ T9110] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 842.376543][ T9110] usb 6-1: device descriptor read/64, error -71 [ 842.636710][ T9110] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 842.770662][ T9110] usb 6-1: device descriptor read/64, error -71 [ 842.886785][ T9110] usb usb6-port1: attempt power cycle [ 843.037697][ T9] usb 8-1: USB disconnect, device number 28 [ 843.226435][ T9110] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 843.247255][ T9110] usb 6-1: device descriptor read/8, error -71 [ 843.456404][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 843.486466][ T9110] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 843.508928][ T9110] usb 6-1: device descriptor read/8, error -71 [ 843.586427][ T9] usb 8-1: device descriptor read/64, error -71 [ 843.621729][ T9110] usb usb6-port1: unable to enumerate USB device [ 843.833656][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 843.956434][ T9] usb 8-1: device descriptor read/64, error -71 [ 844.067150][ T9] usb usb8-port1: attempt power cycle [ 844.416678][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 844.437136][ T9] usb 8-1: device descriptor read/8, error -71 [ 844.676610][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 844.700115][ T9] usb 8-1: device descriptor read/8, error -71 [ 844.806729][ T9] usb usb8-port1: unable to enumerate USB device [ 845.054044][T12492] fuse: Bad value for 'user_id' [ 845.054057][T12492] fuse: Bad value for 'user_id' [ 845.536456][ T9110] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 845.686483][ T9110] usb 6-1: Using ep0 maxpacket: 32 [ 845.688567][ T9110] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 845.688592][ T9110] usb 6-1: config 0 has no interface number 0 [ 845.690842][ T9110] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 845.690869][ T9110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.690889][ T9110] usb 6-1: Product: syz [ 845.690903][ T9110] usb 6-1: Manufacturer: syz [ 845.690912][ T9110] usb 6-1: SerialNumber: syz [ 845.694790][ T9110] usb 6-1: config 0 descriptor?? [ 845.758080][ T9110] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 845.758107][ T9110] usb 6-1: selecting invalid altsetting 1 [ 845.758124][ T9110] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 845.761694][ T9110] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 845.761888][ T9110] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 845.761915][ T9110] usb 6-1: media controller created [ 845.824171][ T9110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.404678][ T9110] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 846.404713][ T9110] zl10353_read_register: readreg error (reg=127, ret==-71) [ 846.431009][ T9110] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 846.506512][ T9110] usb 6-1: USB disconnect, device number 61 [ 846.605911][T12506] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 847.779118][T12515] openvswitch: netlink: Flow key attr not present in new flow. [ 848.816477][ T9110] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 848.966442][ T9110] usb 8-1: device descriptor read/64, error -71 [ 849.196466][ T5880] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 849.214199][ T9110] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 849.336464][ T9110] usb 8-1: device descriptor read/64, error -71 [ 849.353604][ T5880] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 849.353630][ T5880] usb 6-1: config 0 has no interface number 0 [ 849.353675][ T5880] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 849.353698][ T5880] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 849.353722][ T5880] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 849.353734][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.366548][ T5880] usb 6-1: config 0 descriptor?? [ 849.396992][T12528] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 849.425210][ T5880] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 849.447112][ T9110] usb usb8-port1: attempt power cycle [ 849.602851][ T5880] usb 6-1: USB disconnect, device number 62 [ 849.796757][ T9110] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 849.817686][ T9110] usb 8-1: device descriptor read/8, error -71 [ 850.066531][ T9110] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 850.090029][ T9110] usb 8-1: device descriptor read/8, error -71 [ 850.200189][ T9110] usb usb8-port1: unable to enumerate USB device [ 850.506407][ T9110] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 850.656497][ T9110] usb 6-1: Using ep0 maxpacket: 8 [ 850.659161][ T9110] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 850.659185][ T9110] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 850.659205][ T9110] usb 6-1: config 6 has no interface number 0 [ 850.659244][ T9110] usb 6-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 850.659256][ T9110] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.661692][ T9110] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 850.661718][ T9110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.661738][ T9110] usb 6-1: Product: syz [ 850.661748][ T9110] usb 6-1: Manufacturer: syz [ 850.661756][ T9110] usb 6-1: SerialNumber: syz [ 850.674402][ T9110] hso 6-1:6.2: Failed to find INT IN ep [ 850.879045][ T5880] usb 6-1: USB disconnect, device number 63 [ 850.912301][T12534] FAULT_INJECTION: forcing a failure. [ 850.912301][T12534] name failslab, interval 1, probability 0, space 0, times 0 [ 850.912335][T12534] CPU: 0 UID: 0 PID: 12534 Comm: syz.8.1702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 850.912361][T12534] Tainted: [L]=SOFTLOCKUP [ 850.912368][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 850.912379][T12534] Call Trace: [ 850.912387][T12534] [ 850.912395][T12534] dump_stack_lvl+0xe8/0x150 [ 850.912426][T12534] should_fail_ex+0x46b/0x600 [ 850.912454][T12534] should_failslab+0xa8/0x100 [ 850.912476][T12534] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 850.912503][T12534] ? __alloc_skb+0x1d0/0x7d0 [ 850.912525][T12534] ? lockdep_hardirqs_on+0x7a/0x110 [ 850.912556][T12534] __alloc_skb+0x1d0/0x7d0 [ 850.912584][T12534] alloc_skb_with_frags+0xca/0x890 [ 850.912621][T12534] sock_alloc_send_pskb+0x884/0x9a0 [ 850.912639][T12534] ? __lock_acquire+0x6b5/0x2cf0 [ 850.912671][T12534] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 850.912691][T12534] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 850.912717][T12534] ? __lock_acquire+0x6b5/0x2cf0 [ 850.912741][T12534] hci_sock_sendmsg+0x208/0xf40 [ 850.912771][T12534] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 850.912796][T12534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 850.912824][T12534] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 850.912843][T12534] sock_write_iter+0x4a1/0x4f0 [ 850.912867][T12534] ? __pfx_sock_write_iter+0x10/0x10 [ 850.912915][T12534] vfs_write+0x629/0xba0 [ 850.912949][T12534] ? __pfx_vfs_write+0x10/0x10 [ 850.912983][T12534] ? __fget_files+0x2a/0x420 [ 850.913013][T12534] ksys_write+0x156/0x270 [ 850.913041][T12534] ? __pfx_ksys_write+0x10/0x10 [ 850.913073][T12534] do_syscall_64+0x14d/0xf80 [ 850.913099][T12534] ? trace_irq_disable+0x3b/0x150 [ 850.913119][T12534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.913139][T12534] ? clear_bhb_loop+0x40/0x90 [ 850.913162][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.913180][T12534] RIP: 0033:0x7f8a9757c799 [ 850.913200][T12534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.913216][T12534] RSP: 002b:00007f8a957ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.913236][T12534] RAX: ffffffffffffffda RBX: 00007f8a977f5fa0 RCX: 00007f8a9757c799 [ 850.913250][T12534] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000005 [ 850.913261][T12534] RBP: 00007f8a957ce090 R08: 0000000000000000 R09: 0000000000000000 [ 850.913273][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.913285][T12534] R13: 00007f8a977f6038 R14: 00007f8a977f5fa0 R15: 00007ffe2b235238 [ 850.913315][T12534] [ 852.242352][T12544] netlink: 'syz.5.1705': attribute type 3 has an invalid length. [ 852.686534][ T5880] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 852.836399][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 852.838120][ T5880] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 852.838147][ T5880] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 852.838168][ T5880] usb 8-1: config 6 has no interface number 0 [ 852.838207][ T5880] usb 8-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.838218][ T5880] usb 8-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.843252][ T5880] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 852.843280][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.843300][ T5880] usb 8-1: Product: syz [ 852.843310][ T5880] usb 8-1: Manufacturer: syz [ 852.843318][ T5880] usb 8-1: SerialNumber: syz [ 852.936190][ T5880] hso 8-1:6.2: Failed to find INT IN ep [ 853.141936][ T9] usb 8-1: USB disconnect, device number 37 [ 853.746273][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1709'. [ 853.749686][T12556] openvswitch: netlink: Message has 8 unknown bytes. [ 853.749718][T12556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.872357][T12562] FAULT_INJECTION: forcing a failure. [ 853.872357][T12562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.872392][T12562] CPU: 1 UID: 0 PID: 12562 Comm: syz.7.1710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.872419][T12562] Tainted: [L]=SOFTLOCKUP [ 853.872426][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 853.872438][T12562] Call Trace: [ 853.872445][T12562] [ 853.872454][T12562] dump_stack_lvl+0xe8/0x150 [ 853.872495][T12562] should_fail_ex+0x46b/0x600 [ 853.872524][T12562] _copy_to_iter+0x1e4/0x17d0 [ 853.872641][T12562] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 853.872712][T12562] ? __pfx__copy_to_iter+0x10/0x10 [ 853.872734][T12562] ? __pfx_woken_wake_function+0x10/0x10 [ 853.872759][T12562] ? ldsem_down_read+0x12/0x40 [ 853.872793][T12562] tty_read+0x2f1/0x720 [ 853.872871][T12562] ? __pfx_tty_read+0x10/0x10 [ 853.872897][T12562] ? __lock_acquire+0x6b5/0x2cf0 [ 853.872933][T12562] vfs_read+0x58b/0xa80 [ 853.872968][T12562] ? __pfx_vfs_read+0x10/0x10 [ 853.873003][T12562] ? __fget_files+0x2a/0x420 [ 853.873036][T12562] ksys_read+0x156/0x270 [ 853.873064][T12562] ? __pfx_ksys_read+0x10/0x10 [ 853.873100][T12562] do_syscall_64+0x14d/0xf80 [ 853.873125][T12562] ? trace_irq_disable+0x3b/0x150 [ 853.873148][T12562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.873169][T12562] ? clear_bhb_loop+0x40/0x90 [ 853.873192][T12562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.873210][T12562] RIP: 0033:0x7fbeb51ac799 [ 853.873229][T12562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.873245][T12562] RSP: 002b:00007fbeb33dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.873266][T12562] RAX: ffffffffffffffda RBX: 00007fbeb5426090 RCX: 00007fbeb51ac799 [ 853.873280][T12562] RDX: 0000000000002020 RSI: 0000200000000e00 RDI: 0000000000000003 [ 853.873293][T12562] RBP: 00007fbeb33dd090 R08: 0000000000000000 R09: 0000000000000000 [ 853.873306][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.873318][T12562] R13: 00007fbeb5426128 R14: 00007fbeb5426090 R15: 00007ffe79929208 [ 853.873350][T12562] [ 853.986419][ T9810] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 854.138757][ T9810] usb 6-1: Invalid ep0 maxpacket: 64 [ 854.266431][ T9810] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 854.422076][ T9810] usb 6-1: Invalid ep0 maxpacket: 64 [ 854.422966][ T9810] usb usb6-port1: attempt power cycle [ 854.467185][T12579] FAULT_INJECTION: forcing a failure. [ 854.467185][T12579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.467221][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.6.1713 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 854.467248][T12579] Tainted: [L]=SOFTLOCKUP [ 854.467255][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 854.467267][T12579] Call Trace: [ 854.467274][T12579] [ 854.467282][T12579] dump_stack_lvl+0xe8/0x150 [ 854.467314][T12579] should_fail_ex+0x46b/0x600 [ 854.467343][T12579] _copy_from_user+0x2d/0xb0 [ 854.467370][T12579] ___sys_sendmsg+0x1c6/0x360 [ 854.467397][T12579] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.467449][T12579] ? __fget_files+0x2a/0x420 [ 854.467471][T12579] ? __fget_files+0x3a6/0x420 [ 854.467501][T12579] __x64_sys_sendmsg+0x1c3/0x2a0 [ 854.467522][T12579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.467548][T12579] ? __pfx_ksys_write+0x10/0x10 [ 854.467581][T12579] do_syscall_64+0x14d/0xf80 [ 854.467605][T12579] ? trace_irq_disable+0x3b/0x150 [ 854.467624][T12579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.467642][T12579] ? clear_bhb_loop+0x40/0x90 [ 854.467663][T12579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.467682][T12579] RIP: 0033:0x7fd73fd9c799 [ 854.467700][T12579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.467715][T12579] RSP: 002b:00007fd73dff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.467736][T12579] RAX: ffffffffffffffda RBX: 00007fd740015fa0 RCX: 00007fd73fd9c799 [ 854.467750][T12579] RDX: 0000000000000080 RSI: 00002000000029c0 RDI: 0000000000000004 [ 854.467762][T12579] RBP: 00007fd73dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 854.467774][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.467786][T12579] R13: 00007fd740016038 R14: 00007fd740015fa0 R15: 00007ffda5efa948 [ 854.467817][T12579] [ 854.756454][ T9810] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 854.777579][ T9810] usb 6-1: Invalid ep0 maxpacket: 64 [ 855.057413][ T9810] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 855.077138][ T9810] usb 6-1: Invalid ep0 maxpacket: 64 [ 855.077457][ T9810] usb usb6-port1: unable to enumerate USB device [ 855.236460][ T9] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 855.392473][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 855.392506][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 855.394962][ T9] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 855.394991][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.395010][ T9] usb 8-1: Product: syz [ 855.395025][ T9] usb 8-1: Manufacturer: syz [ 855.395041][ T9] usb 8-1: SerialNumber: syz [ 855.478526][ T9] usb 8-1: config 0 descriptor?? [ 855.483545][T12589] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 855.483666][T12589] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 855.576509][ T9810] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 855.700489][T12589] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 855.700666][T12589] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 855.706963][ T9810] usb 7-1: device descriptor read/64, error -71 [ 855.946533][ T9810] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 856.076442][ T9810] usb 7-1: device descriptor read/64, error -71 [ 856.102967][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 856.186906][ T9810] usb usb7-port1: attempt power cycle [ 856.306608][ T9] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 856.331037][ T9] usb 8-1: USB disconnect, device number 38 [ 856.527296][ T9810] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 856.547856][ T9810] usb 7-1: device descriptor read/8, error -71 [ 856.797544][ T9810] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 856.817106][ T9810] usb 7-1: device descriptor read/8, error -71 [ 856.935669][ T9810] usb usb7-port1: unable to enumerate USB device [ 857.115476][T12649] FAULT_INJECTION: forcing a failure. [ 857.115476][T12649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.115510][T12649] CPU: 1 UID: 0 PID: 12649 Comm: syz.1.1723 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 857.115537][T12649] Tainted: [L]=SOFTLOCKUP [ 857.115544][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 857.115556][T12649] Call Trace: [ 857.115564][T12649] [ 857.115573][T12649] dump_stack_lvl+0xe8/0x150 [ 857.115605][T12649] should_fail_ex+0x46b/0x600 [ 857.115634][T12649] strncpy_from_user+0x36/0x2b0 [ 857.115658][T12649] path_setxattrat+0x191/0x440 [ 857.115694][T12649] ? __pfx_path_setxattrat+0x10/0x10 [ 857.115746][T12649] ? ksys_write+0x248/0x270 [ 857.115774][T12649] ? __pfx_ksys_write+0x10/0x10 [ 857.115805][T12649] __x64_sys_setxattr+0xbc/0xe0 [ 857.115832][T12649] do_syscall_64+0x14d/0xf80 [ 857.115856][T12649] ? trace_irq_disable+0x3b/0x150 [ 857.115878][T12649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.115897][T12649] ? clear_bhb_loop+0x40/0x90 [ 857.115919][T12649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.115937][T12649] RIP: 0033:0x7ff81e3cc799 [ 857.115955][T12649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.115971][T12649] RSP: 002b:00007ff81c626028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 857.115990][T12649] RAX: ffffffffffffffda RBX: 00007ff81e645fa0 RCX: 00007ff81e3cc799 [ 857.116003][T12649] RDX: 0000200000000300 RSI: 0000200000000080 RDI: 0000200000000040 [ 857.116017][T12649] RBP: 00007ff81c626090 R08: 0000000000000003 R09: 0000000000000000 [ 857.116028][T12649] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 857.116040][T12649] R13: 00007ff81e646038 R14: 00007ff81e645fa0 R15: 00007fff163f9ff8 [ 857.116069][T12649] [ 858.804808][T12663] FAULT_INJECTION: forcing a failure. [ 858.804808][T12663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.804867][T12663] CPU: 1 UID: 0 PID: 12663 Comm: syz.1.1727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 858.804895][T12663] Tainted: [L]=SOFTLOCKUP [ 858.804902][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.804914][T12663] Call Trace: [ 858.804922][T12663] [ 858.804938][T12663] dump_stack_lvl+0xe8/0x150 [ 858.804971][T12663] should_fail_ex+0x46b/0x600 [ 858.805001][T12663] _copy_from_user+0x2d/0xb0 [ 858.805028][T12663] clear_refs_write+0x107/0x910 [ 858.805158][T12663] ? __pfx_clear_refs_write+0x10/0x10 [ 858.805214][T12663] vfs_writev+0x4c6/0x9a0 [ 858.805239][T12663] ? __pfx_clear_refs_write+0x10/0x10 [ 858.805263][T12663] ? __pfx_vfs_writev+0x10/0x10 [ 858.805301][T12663] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 858.805334][T12663] ? mutex_lock_nested+0x152/0x1d0 [ 858.805356][T12663] ? fdget_pos+0x252/0x320 [ 858.805388][T12663] do_writev+0x15a/0x2e0 [ 858.805412][T12663] ? __pfx_do_writev+0x10/0x10 [ 858.805445][T12663] do_syscall_64+0x14d/0xf80 [ 858.805471][T12663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.805491][T12663] ? clear_bhb_loop+0x40/0x90 [ 858.805515][T12663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.805534][T12663] RIP: 0033:0x7ff81e3cc799 [ 858.805554][T12663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.805570][T12663] RSP: 002b:00007ff81c5c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 858.805592][T12663] RAX: ffffffffffffffda RBX: 00007ff81e646180 RCX: 00007ff81e3cc799 [ 858.805607][T12663] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 858.805619][T12663] RBP: 00007ff81c5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 858.805632][T12663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.805644][T12663] R13: 00007ff81e646218 R14: 00007ff81e646180 R15: 00007fff163f9ff8 [ 858.805676][T12663] [ 859.194496][T11274] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 860.206409][T11274] usb 8-1: Using ep0 maxpacket: 32 [ 860.208471][T11274] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 860.208496][T11274] usb 8-1: config 0 has no interface number 0 [ 860.210938][T11274] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 860.210966][T11274] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.210987][T11274] usb 8-1: Product: syz [ 860.211002][T11274] usb 8-1: Manufacturer: syz [ 860.211017][T11274] usb 8-1: SerialNumber: syz [ 860.256429][ T9] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 860.337388][T11274] usb 8-1: config 0 descriptor?? [ 860.361451][T11274] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 860.361478][T11274] usb 8-1: selecting invalid altsetting 1 [ 860.361495][T11274] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 860.398520][T11274] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 860.398946][T11274] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 860.398997][T11274] usb 8-1: media controller created [ 860.417874][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 860.426040][ T9] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 860.426068][ T9] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 860.426087][ T9] usb 7-1: config 6 has no interface number 0 [ 860.426131][ T9] usb 7-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 860.426154][ T9] usb 7-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.502861][ T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 860.502892][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.502912][ T9] usb 7-1: Product: syz [ 860.502927][ T9] usb 7-1: Manufacturer: syz [ 860.502942][ T9] usb 7-1: SerialNumber: syz [ 860.596376][ T9810] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 860.603503][ T9] hso 7-1:6.2: Failed to find INT IN ep [ 860.622545][T11274] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.057257][ T9] usb 7-1: USB disconnect, device number 74 [ 861.103112][ T9810] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 861.103145][ T9810] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 861.149470][ T9810] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 861.149500][ T9810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.149514][ T9810] usb 6-1: Product: syz [ 861.149521][ T9810] usb 6-1: Manufacturer: syz [ 861.149529][ T9810] usb 6-1: SerialNumber: syz [ 861.175566][ T9810] usb 6-1: config 0 descriptor?? [ 861.197831][T12672] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 861.198039][T12672] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 861.216460][T11274] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 861.216492][T11274] zl10353_read_register: readreg error (reg=127, ret==-71) [ 861.216804][T11274] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 861.382628][T11274] usb 8-1: USB disconnect, device number 39 [ 861.464018][T12672] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 861.464136][T12672] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 861.869296][ T9810] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 862.071438][ T9810] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 862.113363][ T9810] usb 6-1: USB disconnect, device number 68 [ 862.532227][ T6515] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.896964][T12695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 862.914783][T12695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 862.925847][T12695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 862.936557][T12695] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 862.937799][T12695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.092149][ T6515] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.484740][ T6515] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.277214][ T9332] Bluetooth: hci1: command tx timeout [ 865.397819][T12716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1744'. [ 865.506630][T12718] input: syz0 as /devices/virtual/input/input30 [ 865.534448][ T6515] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.537625][ T9810] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 865.622328][T12693] chnl_net:caif_netlink_parms(): no params data found [ 865.686432][ T9810] usb 6-1: Using ep0 maxpacket: 32 [ 865.688618][ T9810] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 865.688647][ T9810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.885022][ T9810] usb 6-1: selecting invalid altsetting 3 [ 865.885037][ T9810] comedi comedi5: could not set alternate setting 3 in high speed [ 865.885047][ T9810] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 865.891403][ T9810] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 866.128187][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.128310][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.128520][T12693] bridge_slave_0: entered allmulticast mode [ 866.130955][T12693] bridge_slave_0: entered promiscuous mode [ 866.328081][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.328223][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.328465][T12693] bridge_slave_1: entered allmulticast mode [ 866.332224][T12693] bridge_slave_1: entered promiscuous mode [ 866.563607][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.615403][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.657978][ T9810] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 866.793712][T12713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.794273][T12713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.797287][T12693] team0: Port device team_slave_0 added [ 866.800821][T12693] team0: Port device team_slave_1 added [ 866.811007][ T9810] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 866.811037][ T9810] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 866.813201][ T9810] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 866.813227][ T9810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.813246][ T9810] usb 7-1: Product: syz [ 866.813260][ T9810] usb 7-1: Manufacturer: syz [ 866.813274][ T9810] usb 7-1: SerialNumber: syz [ 866.821480][ T9810] usb 7-1: config 0 descriptor?? [ 866.829892][T12731] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 866.830121][T12731] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 866.908094][ T6515] bridge_slave_1: left allmulticast mode [ 866.908119][ T6515] bridge_slave_1: left promiscuous mode [ 866.908339][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.979061][ T6515] bridge_slave_0: left allmulticast mode [ 866.979080][ T6515] bridge_slave_0: left promiscuous mode [ 866.979280][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.037917][T12731] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 867.038478][T12731] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 867.346522][ T9332] Bluetooth: hci1: command tx timeout [ 867.442885][ T9810] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 867.643622][ T9810] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 867.654552][ T9810] usb 7-1: USB disconnect, device number 75 [ 867.960314][ T6515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.056933][ T6515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.101305][ T6515] bond0 (unregistering): Released all slaves [ 868.122140][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.122152][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.122167][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.192428][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.192635][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.192665][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.520150][T12693] hsr_slave_0: entered promiscuous mode [ 868.521573][T12693] hsr_slave_1: entered promiscuous mode [ 868.567746][T12693] debugfs: 'hsr0' already exists in 'hsr' [ 868.569411][T12693] Cannot create hsr debugfs directory [ 868.690599][ T9810] usb 6-1: USB disconnect, device number 69 [ 870.899797][ T9332] Bluetooth: hci1: command tx timeout [ 871.557726][ T37] audit: type=1326 audit(1773683415.424:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 871.557980][ T37] audit: type=1326 audit(1773683415.424:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 871.558234][ T37] audit: type=1326 audit(1773683415.424:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 871.558837][ T37] audit: type=1326 audit(1773683415.424:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 871.559160][ T37] audit: type=1326 audit(1773683415.424:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 872.600222][ T37] audit: type=1326 audit(1773683416.054:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 872.600266][ T37] audit: type=1326 audit(1773683416.054:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 872.600297][ T37] audit: type=1326 audit(1773683416.054:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 872.600334][ T37] audit: type=1326 audit(1773683416.054:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 872.600363][ T37] audit: type=1326 audit(1773683416.054:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12750 comm="syz.8.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f8a9757c799 code=0x7ffc0000 [ 872.766757][T12765] netlink: 'syz.8.1754': attribute type 1 has an invalid length. [ 872.766909][T12765] netlink: 'syz.8.1754': attribute type 2 has an invalid length. [ 872.766923][T12765] netlink: 'syz.8.1754': attribute type 1 has an invalid length. [ 872.766936][T12765] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1754'. [ 872.790781][T12765] overlayfs: workdir and upperdir must reside under the same mount [ 872.937738][ T9332] Bluetooth: hci1: command tx timeout [ 872.944692][T12767] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1755'. [ 873.622053][T12782] loop8: detected capacity change from 0 to 8 [ 873.637483][T12782] Dev loop8: unable to read RDB block 8 [ 873.637541][T12782] loop8: unable to read partition table [ 873.637744][T12782] loop8: partition table beyond EOD, truncated [ 873.637778][T12782] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 874.246448][ T808] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 874.418582][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.418615][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.418652][ T808] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 874.418673][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.431100][ T808] usb 6-1: config 0 descriptor?? [ 874.627580][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.628707][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.774206][T12792] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 876.474357][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.479705][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.637857][T12791] input: syz1 as /devices/virtual/input/input31 [ 879.687035][ T808] usbhid 6-1:0.0: can't add hid device: -71 [ 879.687815][ T808] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 880.155086][ T808] usb 6-1: USB disconnect, device number 70 [ 880.677291][T12798] netlink: 'syz.1.1765': attribute type 1 has an invalid length. [ 880.868474][T12798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 880.951166][T12806] Bluetooth: MGMT ver 1.23 [ 881.465335][T12814] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 881.465442][T12814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 881.474709][T12814] vhci_hcd vhci_hcd.0: Device attached [ 881.866723][ T9810] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 881.969929][T12815] vhci_hcd: connection reset by peer [ 882.059075][ T172] vhci_hcd vhci_hcd.5: stop threads [ 882.064317][ T172] vhci_hcd vhci_hcd.5: release socket [ 882.091015][ T172] vhci_hcd vhci_hcd.5: disconnect device [ 885.866430][T11841] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 885.998344][ T6515] hsr_slave_0: left promiscuous mode [ 886.020751][T11841] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 886.020808][T11841] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 886.020832][T11841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.067539][T11841] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 886.264251][ T6515] hsr_slave_1: left promiscuous mode [ 886.265244][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.265269][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.292437][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.292465][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.187492][T11841] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 887.246443][ T9810] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 887.325184][ T6515] veth1_macvtap: left promiscuous mode [ 887.341025][ T6515] veth0_macvtap: left promiscuous mode [ 887.342603][ T6515] veth1_vlan: left promiscuous mode [ 887.343535][ T6515] veth0_vlan: left promiscuous mode [ 887.380899][T11841] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 887.380919][T11841] stv0680 7-1:4.0: last error: 131, command = 0x8d [ 887.419009][T11841] usb 7-1: USB disconnect, device number 76 [ 888.264630][ T9110] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 888.396404][ T9110] usb 6-1: device descriptor read/64, error -71 [ 888.632972][T12869] 9p: Bad value for 'rfdno' [ 888.636564][ T9110] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 888.766454][T11841] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 888.776512][ T9110] usb 6-1: device descriptor read/64, error -71 [ 888.791894][ T6515] team0 (unregistering): Port device team_slave_1 removed [ 888.847752][ T6515] team0 (unregistering): Port device team_slave_0 removed [ 888.887038][ T9110] usb usb6-port1: attempt power cycle [ 888.919624][T11841] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 888.919642][T11841] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 888.919653][T11841] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 888.919680][T11841] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.921678][T11841] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 888.921707][T11841] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 888.921718][T11841] usb 7-1: Product: syz [ 888.921725][T11841] usb 7-1: Manufacturer: syz [ 889.023811][T11841] cdc_wdm 7-1:1.0: skipping garbage [ 889.023853][T11841] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 889.127009][T12693] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 889.195163][T12693] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 889.220469][T11841] usb 7-1: USB disconnect, device number 77 [ 889.229303][ T9110] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 889.255287][T12693] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 889.264983][ T9110] usb 6-1: device descriptor read/8, error -71 [ 889.280128][T12693] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 889.474526][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.512838][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.516950][ T9110] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 889.521256][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.521574][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.536093][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.538615][ T9110] usb 6-1: device descriptor read/8, error -71 [ 889.538736][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.657044][ T9110] usb usb6-port1: unable to enumerate USB device [ 889.917077][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.086434][T11841] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 890.179212][T12693] veth0_vlan: entered promiscuous mode [ 890.184978][T12693] veth1_vlan: entered promiscuous mode [ 890.234985][T12693] veth0_macvtap: entered promiscuous mode [ 890.244038][T12693] veth1_macvtap: entered promiscuous mode [ 890.253046][T11841] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 890.253073][T11841] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.253103][T11841] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 890.253151][T11841] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 890.254885][T11841] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 890.254911][T11841] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 890.254931][T11841] usb 7-1: Product: syz [ 890.254944][T11841] usb 7-1: Manufacturer: syz [ 890.272879][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.285837][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.304921][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.305098][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.305127][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.305152][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.394773][T11841] cdc_wdm 7-1:1.0: skipping garbage [ 890.394794][T11841] cdc_wdm 7-1:1.0: skipping garbage [ 890.394828][T11841] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 890.641086][T12864] Process accounting resumed [ 890.797321][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.797342][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.842629][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.842649][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.705824][T11274] usb 7-1: USB disconnect, device number 78 [ 892.946369][T11841] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 893.101038][T11841] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 893.101071][T11841] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 893.101098][T11841] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 893.347689][T11841] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 893.347718][T11841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.347738][T11841] usb 6-1: Product: syz [ 893.347751][T11841] usb 6-1: Manufacturer: syz [ 893.347765][T11841] usb 6-1: SerialNumber: syz [ 894.360940][T11841] usb 6-1: config 0 descriptor?? [ 895.316519][T11841] usb 6-1: can't set config #0, error -71 [ 895.330335][T11841] usb 6-1: USB disconnect, device number 75 [ 895.416458][T11274] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 895.488968][ T5911] ================================================================== [ 895.488985][ T5911] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 895.489120][ T5911] Read of size 8 at addr ffffc90013ef4008 by task kworker/0:6/5911 [ 895.489137][ T5911] [ 895.489151][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 895.489178][ T5911] Tainted: [L]=SOFTLOCKUP [ 895.489185][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.489198][ T5911] Workqueue: usb_hub_wq hub_event [ 895.489306][ T5911] Call Trace: [ 895.489314][ T5911] [ 895.489323][ T5911] dump_stack_lvl+0xe8/0x150 [ 895.489350][ T5911] print_report+0xba/0x230 [ 895.489383][ T5911] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.489403][ T5911] kasan_report+0x117/0x150 [ 895.489448][ T5911] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.489473][ T5911] __list_del_entry_valid_or_report+0xb5/0x190 [ 895.489494][ T5911] kcov_remote_start+0x2af/0x710 [ 895.489517][ T5911] hub_event+0x150/0x4f60 [ 895.489534][ T5911] ? __lock_acquire+0x6b5/0x2cf0 [ 895.489559][ T5911] ? look_up_lock_class+0x57/0x110 [ 895.489584][ T5911] ? register_lock_class+0x31/0x2e0 [ 895.489612][ T5911] ? __lock_acquire+0x6b5/0x2cf0 [ 895.489636][ T5911] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 895.489660][ T5911] ? __pfx_hub_event+0x10/0x10 [ 895.489682][ T5911] ? process_scheduled_works+0xa8d/0x18c0 [ 895.489705][ T5911] ? process_scheduled_works+0xa8d/0x18c0 [ 895.489729][ T5911] process_scheduled_works+0xb6e/0x18c0 [ 895.489765][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 895.489792][ T5911] ? assign_work+0x3d5/0x5e0 [ 895.489816][ T5911] worker_thread+0xa53/0xfc0 [ 895.489852][ T5911] kthread+0x388/0x470 [ 895.489870][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 895.489893][ T5911] ? __pfx_kthread+0x10/0x10 [ 895.489911][ T5911] ret_from_fork+0x51e/0xb90 [ 895.489936][ T5911] ? __pfx_ret_from_fork+0x10/0x10 [ 895.489958][ T5911] ? __switch_to+0xc7d/0x1450 [ 895.489992][ T5911] ? __pfx_kthread+0x10/0x10 [ 895.490011][ T5911] ret_from_fork_asm+0x1a/0x30 [ 895.490036][ T5911] [ 895.490043][ T5911] [ 895.490050][ T5911] The buggy address belongs to a vmalloc virtual mapping [ 895.490066][ T5911] Memory state around the buggy address: [ 895.490078][ T5911] ffffc90013ef3f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.490090][ T5911] ffffc90013ef3f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.490103][ T5911] >ffffc90013ef4000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.490112][ T5911] ^ [ 895.490122][ T5911] ffffc90013ef4080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.490135][ T5911] ffffc90013ef4100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 895.490144][ T5911] ================================================================== [ 895.490167][ T5911] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 895.490182][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 895.490208][ T5911] Tainted: [L]=SOFTLOCKUP [ 895.490215][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.490227][ T5911] Workqueue: usb_hub_wq hub_event [ 895.490250][ T5911] Call Trace: [ 895.490257][ T5911] [ 895.490265][ T5911] vpanic+0x56c/0xa60 [ 895.490291][ T5911] ? __pfx_vpanic+0x10/0x10 [ 895.490319][ T5911] panic+0xc5/0xd0 [ 895.490341][ T5911] ? __pfx_panic+0x10/0x10 [ 895.490366][ T5911] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.490385][ T5911] ? rcu_is_watching+0x15/0xb0 [ 895.490406][ T5911] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.490424][ T5911] check_panic_on_warn+0x89/0xb0 [ 895.490450][ T5911] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.490468][ T5911] end_report+0x73/0x180 [ 895.490485][ T5911] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.490504][ T5911] kasan_report+0x128/0x150 [ 895.490522][ T5911] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 895.490545][ T5911] __list_del_entry_valid_or_report+0xb5/0x190 [ 895.490567][ T5911] kcov_remote_start+0x2af/0x710 [ 895.490589][ T5911] hub_event+0x150/0x4f60 [ 895.490606][ T5911] ? __lock_acquire+0x6b5/0x2cf0 [ 895.490630][ T5911] ? look_up_lock_class+0x57/0x110 [ 895.490654][ T5911] ? register_lock_class+0x31/0x2e0 [ 895.490682][ T5911] ? __lock_acquire+0x6b5/0x2cf0 [ 895.490705][ T5911] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 895.490730][ T5911] ? __pfx_hub_event+0x10/0x10 [ 895.490752][ T5911] ? process_scheduled_works+0xa8d/0x18c0 [ 895.490775][ T5911] ? process_scheduled_works+0xa8d/0x18c0 [ 895.490799][ T5911] process_scheduled_works+0xb6e/0x18c0 [ 895.490834][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 895.490860][ T5911] ? assign_work+0x3d5/0x5e0 [ 895.490885][ T5911] worker_thread+0xa53/0xfc0 [ 895.490920][ T5911] kthread+0x388/0x470 [ 895.490938][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 895.490960][ T5911] ? __pfx_kthread+0x10/0x10 [ 895.490979][ T5911] ret_from_fork+0x51e/0xb90 [ 895.491003][ T5911] ? __pfx_ret_from_fork+0x10/0x10 [ 895.491026][ T5911] ? __switch_to+0xc7d/0x1450 [ 895.491048][ T5911] ? __pfx_kthread+0x10/0x10 [ 895.491068][ T5911] ret_from_fork_asm+0x1a/0x30 [ 895.491092][ T5911] [ 895.491375][ T5911] Kernel Offset: disabled