last executing test programs: 5m51.048142109s ago: executing program 1 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0xffffffffffffffdf) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3}, 0x38) unshare(0x8000600) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00442f00fc000000000000000000000000000000ff02000000000000000000000000000124208100"], 0x0) 5m49.748560535s ago: executing program 1 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50000, 0x28011}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}}, 0x20) 5m49.548175453s ago: executing program 1 (id=68): syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x8840) r0 = syz_io_uring_setup(0x2402, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m48.980574747s ago: executing program 1 (id=70): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 5m47.713294011s ago: executing program 1 (id=79): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, &(0x7f0000000540)) 5m47.251749964s ago: executing program 1 (id=83): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x4f, 0x50]}, 0x2d) 5m46.431977648s ago: executing program 32 (id=83): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x4f, 0x50]}, 0x2d) 13.880908937s ago: executing program 4 (id=1691): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000440000000c00000008000900020000000c001600fbffffffffffffff060001000500000008000b000200000005001404fe00000008000c"], 0x48}}, 0x0) 13.388590459s ago: executing program 4 (id=1693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="0007060011d2ff030902835c1a7424542481a0a90d51753f22db38b74cf838d9b1e4194954e4fed0109f249059fe643937eaafbbcdbb469eb8c8029e8c481f2232baf77fbb3333df5186d0853165df45a080022c942155db5725904d16a1e03985"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, &(0x7f0000001480)=""/253}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRES16=0x0], 0x0}, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0xfffffffb) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000140)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80015b11, &(0x7f0000000040)) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r3, r6, 0x0, 0xffffffff000) clock_gettime(0x0, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x5eac1000) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) timer_delete(r7) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000100)=0x3) timer_settime(r7, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) 8.860588701s ago: executing program 4 (id=1708): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000004058041a50000000000001090224000100002000090c008003030000000921"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d3000000000000008000500fcfcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.126636767s ago: executing program 3 (id=1719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314258}}) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f0000000100)=ANY=[], 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xf, @local, 0x48}}}, 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, &(0x7f0000000500)="c6e4820eff469857b13e39262c7c5f68d5fdb75301b2ee553315904df27570", 0x0, 0x7}, 0x4c) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x8, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="9572"], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x1017, &(0x7f0000002e80)=""/4119, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x6, 0x7, 0x9, 0x7, 0x8, 0x4, 0xfb, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x9, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x10, 0xfffffffffffffffa}, {0x1, 0x8, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x5, 0xe}], 0x3}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a00)={0x0, 0xb5, "2bbbb9ca01df682231bc63c56bc304224b6c2064dbb06e5c8cfa0392f18e34fc5fa92ca6d79feb6d5174bcbe200e1d651ed9ff3e0434f5c06ec9f30a74eec58af49667e5471ff4cc59b42eb3df392671d114057adfef0d45b905e7dae96be266442f7206dd3df1f6a2e2f61dc7be26860a2cebcb5f6034a913255319c358dcb31f85c6a026ebdcc7b844e6d71f8b599cb97c5696338df1d05e792e742baa304a5c3a5dcea36d23535a10ba9226cb486f6b9c335243"}, &(0x7f0000000ac0)=0xbd) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x400, 0x0, 0xe, 0x515f315b, 0x17, "78e114100985a39874342a70e113343972d03e"}) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000040)={0x44, 0x0, 0x1dfb}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x20, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup=r1, r5, 0x26, 0x14, 0x0, @void, @value=r1, @void, @void, r6}, 0x20) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) socket$inet(0xa, 0x801, 0x84) accept4$unix(r1, &(0x7f00000001c0), &(0x7f0000000280)=0x6e, 0x80800) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000b00)=0xad62656b) 6.996514726s ago: executing program 2 (id=1720): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044146, 0x0) sendto$unix(r3, 0x0, 0x0, 0x8800, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) listen(r2, 0x3) listen(0xffffffffffffffff, 0x3) 5.589173991s ago: executing program 3 (id=1725): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000009a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="d463712ab6d4e8408564f8b4d29fd5a2ae06dc6cac3910c8edf43e53e48a5a0fd8d7146f", 0x24}], 0x1}}], 0x1, 0x4004044) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb35fbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa", 0x6f, 0x40080c0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2c, r4, 0x29, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800000c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002a40)={'tunl0\x00', &(0x7f0000002980)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0xc0000000, 0xfffffffb, {{0x26, 0x4, 0x3, 0x5, 0x98, 0x65, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ssrr={0x89, 0x1f, 0xd8, [@broadcast, @local, @private=0xa010100, @broadcast, @multicast2, @remote, @multicast1]}, @rr={0x7, 0x13, 0x6c, [@multicast1, @multicast2, @private=0xa010100, @remote]}, @timestamp_prespec={0x44, 0x44, 0x69, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@empty, 0xfffffff8}, {@private=0xa010102, 0x401}, {@multicast2, 0x7}, {@broadcast, 0x6}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x401}, {@empty, 0xc2df}]}, @ssrr={0x89, 0xb, 0xc5, [@rand_addr=0x64010102, @rand_addr=0x64010100]}]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x7ffd, {0x0, 0x0, 0x0, r9, {0x5, 0x7}, {0xb}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0x21}, {0x18, 0x2, [@TCA_FLOWER_KEY_UDP_SRC, @TCA_FLOWER_KEY_ENC_OPTS={0x4, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xfffffffffffffe17, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE]}]}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0xf}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040f8}, 0x20000004) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r12, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000140)="13119322794d097d6696658cc89aa1cdb87124fb3d7f30144ef368c79afab211a3f088c55cc09a8deb23e1ceac4947efeea73bd5067183c4a6fb84625fe9952840d4b5a3f5038f24827c8925b14b470000d63f7ba5c5c6b35c181d8a93ad0578c3d2d752488fb3da89894ca600612d2598649c52eaeb6fb022a9940a84de26cbc055e82b30ccedfc5f017d4a910387253f603e1ad1594ed9c97058ef37f8e2a12b7d118c793595455117e8d385400114b734dcbbab03ba3b22d03c69eb82f476e074fc1e901567c92d86557507dc", 0xce}], 0x2, &(0x7f0000000240)=[@ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x8, [@remote, @remote, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010101]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0x9, [0x4, 0x1c00, 0x3, 0xd84, 0x32]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @broadcast, @multicast1}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @remote, @broadcast}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x80}}, @ip_retopts={{0x90, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "803cfb854fc80d"}]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x73, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0x51, 0x1, 0x8, [{@local, 0xf}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010101, 0x30e9}, {@local, 0xb}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0x401}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x8000}, {@remote, 0x5202}, {@loopback, 0xd0}]}, @noop, @end, @timestamp={0x44, 0x14, 0x3, 0x0, 0xd, [0x4, 0x1, 0x4, 0x2c30]}]}}}], 0x150}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="096a66276bb2cf4a4b4bb4fb004b21c067e8e6ed5746397e4177a67b0748c4fd81f61ee000bce9539e6b87f359951ee60e4bc913dfc89cf43f2c329a9c6a5e3ce8bf9fee614f426823882c65be33732aa099d5837b833e5af0c6f7c8cf374add42a4aab7ca3118cd9d33601603f67442fbd074e38716d456c8d2f90d376b6195ffd2c08416e0f78714488cb9582065cfd5a08e0af961d69062694a1d602d18eb3ef9", 0xa2}, {&(0x7f00000004c0)="462cd0e1330778807355d2b0a4cbe8bf1869babd38964eca08147a587219464799f2461cae4bdcca4cbec8b48bd02ed3d1fb6ff82add8902b3560899bb94040b161f2feeaa5e5bd2ba1033973579de486826de6716e0baef9b448256bb85ad80e131c853814448f7226cda136185699ab29042894653907d78b704a0b5f4de7118183bdba1087af94e036ba616d707fcca1f418cf3abca89105b909c346022608e4c806ec451a63c526816935c744706eb69f7fbb3a2288caeb64fa2", 0xbc}, {&(0x7f0000001680)="52e44d4b31d004ef07e70afdaaa1ddd5113fbcbbfe8cf77dc4d4b93f063a18257ce5af437b375ff63c5b93d3c35de5e2f289a2e48052f8a7713ea0a2ca5aef5617bb8ec4a3de2307ddb9bd6b55c2b5d9964cfa9b51f5b5e230c0843dd8d206007c835067a3af4b7ed4cf29a04f635f2e9ab204648f7e544114741c117d31bb141a2e15793f87a0095382a838c2125a8972642be1ffbec7673cdbf71fd315f2dafe6246385bb069825efd24f29662f3fc132caf2bf1edebdcffc0ab92b83a159a0c7ebe38791c1e8d0a0de55cbd62f5427cbd6f69f96bde6de40711247420457c33d22a37b02d5561bbdde323b0", 0xed}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="ce396b371d0f003ab26e29d7e5c8044a19e4d4437afed2cfe6e07b2dfb404cac3f1f3a77ce06c1a064f71fbe8dab3eda60626c3291bcd2d073676e93d6ecf78400f8014990f8b60fec17303b3431f56655ea4b20889a130add81b99541b8a36acb2479072246a27d5792fb8edc0895ea7a2eb122df4be1b701f1177abd8076feb795f7f69a61ce22758eeb98e705a7b8578685405023f55a324120a7a96c763c6bcfb0290f6c34", 0xa7}, {&(0x7f0000000580)="7f5402bdd8dd699ffe72f95ab466339177604f2c98cbc4131b9dfb7c070f310302e2958e8e8fbf4bbbbb", 0x2a}], 0x6, &(0x7f0000002840)}}, {{&(0x7f0000002880)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002940)=[{&(0x7f00000028c0)="7f311d75f394df10afe8a70b8b059299ff3ee17ab11fbca74044b592dfbf7775819f7476eb5cbec3ba67f13b9f2e6d0f5945076117d58c7819288ba64c60c01136648f5ccc2a1ab124aabca9a7ec77145b60e5c96444bbbbb72a", 0x5a}], 0x1, &(0x7f0000002a80)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @loopback, @local}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @local, @broadcast}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}], 0x58}}], 0x3, 0x4) 5.264575194s ago: executing program 4 (id=1726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000007c00000000030000005800018044000400202201000a00000000000000fe800000000000000000000000000013f8000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 5.001281947s ago: executing program 4 (id=1728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b000000", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 4.937750542s ago: executing program 5 (id=1729): open_tree(0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) shutdown(r1, 0x0) fsopen(&(0x7f0000000100)='ext2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2a020480) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 4.760722532s ago: executing program 3 (id=1731): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x45c, 0xffffffff, 0xd4, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x394, 0x394, 0x394, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5, 0x4}, {0x4, 0x4, 0x3}, 0x1, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0x0, 0xffffffff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffffff], 'rose0\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x60, 0x1, 0x8}, 0x0, 0xf4, 0x124, 0x0, {}, [@common=@srh={{0x2c}, {0x3c, 0x6e, 0x9, 0xc7, 0x2, 0x100a, 0x600}}, @common=@eui64={{0x24}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5, 0x5}, {0x2, 0x5, 0x6}, 0x6}}}, {{@uncond, 0x0, 0x154, 0x19c, 0x0, {}, [@common=@icmp6={{0x24}, {0x0, "6413"}}, @common=@srh1={{0x8c}, {0x3c, 0xb1, 0x6, 0x7, 0x5, @private1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff, 0xff, 0x7a56e3c6951efe73, 0xffffff00], [0x0, 0xff000000, 0xffffffff, 0xffffffff], 0x800, 0xa02}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, 'veth0_virt_wifi\x00', {0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b8) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x40000000) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CAP_X2APIC_API(r9, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_io_uring_setup(0x30a, &(0x7f0000000140)={0x0, 0x8e10, 0x8, 0x0, 0xfffffdff}, &(0x7f00000001c0), &(0x7f0000000200)) 4.70982378s ago: executing program 4 (id=1733): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xc}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}]}]}]}}]}, 0x4c}}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) syz_usb_connect$cdc_ecm(0x6, 0x157, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x145, 0x1, 0x1, 0x2, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x9, 0x24, 0x6, 0x0, 0x0, "9eb8bf91"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3ff, 0x6, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x0, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x53}, @mdlm={0x15, 0x24, 0x12, 0x81}, @obex={0x5, 0x24, 0x15, 0x4}, @mdlm_detail={0xda, 0x24, 0x13, 0x80, "964f1eff3e3e8890c176ade1aecfa960a77e9973a0c49c82f18675c351e788a4e4ae662ae61e3e7ed88b4126694f359ef70e31dbc5100a8700ab87589d6fa158b2e2f3b7faa5474d4ac1471401facc41adfb8e58611e26f3fd34813663e5dd6e78acf8081e6992961834e0e248788db3f4b4184452e5159ca5ccfeee1bf8023410e3ed4f562b451cae255c6351cdd08df92aa8b8c6eb2e7d3b997dffc0c8d95a7577101c1fbfddc49675a5697d6b227bc94bf5750074228eff0a03ba7cfdf31f3254fb252ee16fdd2dc8e567e7daed016febc5a2be28"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xfc}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x6, 0x28}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x7, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x2, 0x7, 0x3, 0x10, 0xc}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0xe0, &(0x7f0000000400)=@string={0xe0, 0x3, "ec876d2d399cf7666b298a1276f32310f2bb076c49ede242e4888008d1de00363e29380fc229684460980f1fb66ee459da4c896836741a65af3f13d14ea9df31819c9123f33f02fee1f9c2ec5e751e58199d67e1ffc66433e5b2e057e495e347d159da3185bbc2150e44bafedcbc5d82aa384b507028fa36ed8b9243ce4df2a895d3265d5bf73543e1b3f7cb7510f00e07f25e942f51c79b715da1f665ff716b14e680da253b0bc47ae2fd1a522d71267769724478f0e9122f3284cfad9609dd58ff0a80c62cc1e5441e489bc695755d8ae53380271b29a3906e3a879623"}}, {0xce, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}]}) r4 = syz_io_uring_setup(0x20b3, &(0x7f0000000240)={0x0, 0xe489, 0x80, 0x3, 0x1}, &(0x7f00000007c0), &(0x7f0000000180)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x98a, 0x4, "c2d7c02e"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) io_uring_enter(r4, 0x0, 0x0, 0xf, 0x0, 0x18) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000200000000ee08000c000400"], 0x44}}, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) unshare(0x22020600) r10 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) fcntl$getflags(r10, 0xb) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 4.512341782s ago: executing program 5 (id=1734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x2bb6, &(0x7f0000000140)={0x0, 0x10aee2, 0x1, 0x1, 0xbfdffff9}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) (async) fsopen(&(0x7f0000000040)='afs\x00', 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000002100)=0x7, 0x4) (async) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) sendmmsg$inet6(r4, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x7ff, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = socket(0x1d, 0x3, 0x3) setsockopt$ALG_SET_KEY(r7, 0x6a, 0x1, 0x0, 0x20) (async) lseek(r6, 0x0, 0x1) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xe}]}}]}, 0x38}}, 0x4054) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) 3.947360558s ago: executing program 5 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000110626f6e6400000000060002800000188000000180000006000f00000000000180000005001bb4f237a1c96808356733afb689073b000005008d1b995194bac3a1fd9d1bf19a122e47000002000000000000000100fe29000000000500d99f42f94768c2976f573bb725ff9fa400000500e9d54913c2139a018ef2150d10c106ee"], 0x3c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x400000200}) r2 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f0000000080)="d2810f9dd4fb9516ce12d830703d4a92db01346e6729e1d1051cbd5c0ebaa4326abdcba961720502e5c7c3df682f7225f2b14144ed9c1455b71117504d4a0ce43eab0b1b0da7f4ca025b841ca4ede92c70774f28fab79a445464e9bfa7d6faf29c3e56d29decdbe09e38df225a2d86706d269e6287e6cf37e8aaf346526aba4eae3ccf538860", 0x86) 3.790889957s ago: executing program 2 (id=1739): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x800) 3.365965967s ago: executing program 5 (id=1740): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect$hid(0x0, 0x99, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x152, @time={0x95}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x10, "ef138d60cdffe8e6b644b95ed37fc565"}, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.184605489s ago: executing program 0 (id=1741): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001400b59500100000000000000a780000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000100000000aa140006000000000101f0ffff000000000000000014000100fe80"], 0x54}}, 0x48010) 3.040516263s ago: executing program 2 (id=1742): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000014548bb95ad1cc4596b85800670000002f90780012cb5c5f1d4c31668065580000000010000800000086dd080088be000000001000000800000000000000178f1be605384225c6850a3b03080022eb00000000200600fd0200000000000000000e"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r3, &(0x7f0000001040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}], 0x20}}], 0x1, 0x84) 2.975549643s ago: executing program 0 (id=1743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b000000", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2.814856468s ago: executing program 3 (id=1744): open_tree(0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) shutdown(r1, 0x0) fsopen(&(0x7f0000000100)='ext2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2a020480) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 2.758997304s ago: executing program 2 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x9, 0x0, 0x28) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x2000, 0x1000, 0x0, 0xfffffffd}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r4, 0x1ff, 0x0, 0x0, 0xe, 0x0, {0x3}}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x264, 0x1d0, 0x0, 0x148, 0x0, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'erspan0\x00', 'nr0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0x6, 0x80000000, 0x9, 0x3, 0x9}}, @inet=@rpfilter={{0x24}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x35, 0x1}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gre0\x00', 'pim6reg\x00', {}, {0xff}, 0x11}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2c0) r11 = getuid() fsetxattr$security_capability(r8, &(0x7f0000000040), &(0x7f00000001c0)=@v3={0x3000000, [{0x1, 0x6}, {0x6, 0x4}], r11}, 0x18, 0x2) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r8}, 0x8) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd70dffbdb69df25190000009cec03", @ANYRES64=r12, @ANYBLOB="06006d0001f8000006006d0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0) 2.638856364s ago: executing program 0 (id=1746): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @private=0xa010102}, {0x306, @remote}, 0xc, {0x2, 0x4e20, @rand_addr=0x64010102}, 'dvmrp0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x1bf11a53304cbfbe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "00000300000000009bf7df1f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x3, 'pimreg0\x00', {0x2}, 0x1}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) r6 = openat$userio(0xffffff9c, &(0x7f0000000100), 0x82000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x6}, 0x2) recvfrom$packet(r0, &(0x7f0000000280)=""/64, 0x40, 0x40010140, &(0x7f00000002c0)={0x11, 0x7, r1, 0x1, 0x7c, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x60, 0x15, 0x100, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x8, 0xff, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffff7, 0x2, 0x29, 0x9}}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x226}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0xf, 0xb4c, 0x10000}}]}, 0x60}}, 0x4090) 2.245852884s ago: executing program 0 (id=1747): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x9, 0x1000008, 0x48, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2={0xff, 0x5}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x560, 0xec, 0x364, 0xec, 0xec, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0xec, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x24}}]}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8, 0x1e}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@local, @loopback, [0xff, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xff], 'macvlan0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x4, 0x1, 0x20}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote, 0x27, 0x6}}}, {{@uncond, 0x0, 0x110, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0xfffffffb, 0x8, 0x0, [0x7a5e, 0x0, 0x2, 0x4, 0x6, 0xfffa, 0x8, 0x419, 0xd19, 0x3, 0xfff, 0x9, 0x0, 0x101, 0x6, 0x101], 0x6}}, @common=@eui64={{0x24}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5bc) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 2.045712016s ago: executing program 3 (id=1748): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.825243432s ago: executing program 3 (id=1749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044146, 0x0) sendto$unix(r3, 0x0, 0x0, 0x8800, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) listen(r2, 0x3) listen(0xffffffffffffffff, 0x3) 1.472530111s ago: executing program 0 (id=1750): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1a4}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r3, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=""/120, 0x78}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x9, 0x6, 0x100, 0x0, 'syz0\x00'}, 0x6, 0x10, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) unshare(0x22020600) recvmsg(r2, &(0x7f0000000480)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, &(0x7f00000002c0)=""/86, 0x56}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ppoll(&(0x7f0000000180)=[{r4}, {r0, 0x100}, {r4}, {r2, 0x4}, {r2, 0x1}, {r2, 0x2240}], 0x6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f0000000cc0)=""/4096, 0x1000) io_setup(0x8, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) eventfd2(0x75, 0x80800) io_submit(r6, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000300)={0x1000a4, 0x100075, 0x100000}, 0x20) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x18, 0x110, 0xe, "94"}], 0x28}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 665.806625ms ago: executing program 5 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900018473797a30000000000800054000000021100011800c000100636f756e74657200180100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000ec000380e8000080d00001"], 0x1ac}}, 0x0) 492.710684ms ago: executing program 2 (id=1752): r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x20, 'syz1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x1, 0x1, 0x56c, 0x3, {{0x30, 0x4, 0x1, 0x3b, 0xc0, 0x67, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x7, 0xaa, [@multicast1]}, @cipso={0x86, 0x19, 0x3, [{0x5, 0xa, "fd743fe6a1069f0c"}, {0x0, 0x9, "f5d791db3a6bdf"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x4, 0x3, 0xb, 0x2]}, @rr={0x7, 0x17, 0x71, [@rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, @local, @remote]}, @lsrr={0x83, 0xb, 0x6e, [@remote, @empty]}, @timestamp_prespec={0x44, 0x3c, 0x27, 0x3, 0x0, [{@multicast2, 0x6}, {@loopback, 0xf6a}, {@loopback}, {@broadcast}, {@local, 0x9}, {@loopback, 0xfffffffb}, {@rand_addr=0x64010100, 0x3}]}, @ssrr={0x89, 0x13, 0x85, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xf}, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x80, 0x40, 0x5, 0x0, {{0x25, 0x4, 0x1, 0x26, 0x94, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0xb, [{@remote, 0x10001}, {@remote}, {@rand_addr=0x64010102, 0x70}, {@private=0xa010100, 0x8}]}, @noop, @ssrr={0x89, 0xb, 0xb1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x28}]}, @cipso={0x86, 0x22, 0x3, [{0x2, 0xb, "f8fbe015557ae42ae0"}, {0x6, 0x11, "aab88e4840ef8d47f4bb9c2e430040"}]}, @timestamp_addr={0x44, 0x1c, 0xfe, 0x1, 0x8, [{@loopback, 0x3eb}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x50}, {@local, 0xef2}]}, @rr={0x7, 0xb, 0xd3, [@private=0xa010100, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000800)={@loopback, 0x0}, &(0x7f0000000840)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r12, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001c00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000880)={0x1328, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xba, 0x5, "da274c9f3d0be11903b0ab6f0700f8deda5c70ebfa34dea04e14d6c74d068c214d4a2736201f39ab8ce598343199b3500d7722001bd509f79d0c4953842fbed5f103d8e6237ed627f550cf8d81a00b918bcfaa377909457c168f1d43ee2ac7d971485283351d08c152bb970ee31c67b15bf6b454483bfb2990facef0c984c0f60fdc5a685baf3e6c7b5bdcbe7a8f45c32af0c645f67852482484d19eae3162c7007a6f08f366a5213a501dac25a59f0b4d8c3b8b333a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "60ea8373665f7dd36ef333f60fd6cc002936ccb61a168f43e98d5ecdf4283934043d3680b274c77e90d024c25c46b41e633f2be948313f5447ba8498e1e630f359e303e6933938adbe496514eddb8e14c57cf4edc0b805775ba48720a7f4d366b559f67c995b222257f99af636f790ef9f1b0b65f1c39e8c4ef09a126844bbfa269964a039cfd5de613361e216c7d652bd4ec77baa7a43cd04ec5e446886d1581565605f66504940b846b47145ffe42cf29d1892442aac5601b603a9457e6e5c0b8caec9d8e0"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1010, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "30a31ff2ffb681320110ef26cbed7e1ecbb825b770a8b5a46960d0c92b5afd30498999d168f311fab313320d128eae335d545577cadbef9f438488961fe3c0e38805ca1389e065a7d7e7c9de20c1021ea1a3f0f94f48881068983460aebf2bf029d6df32ffefc203ca7009efe0149349d6aecffcfbc8d33854be39e3e37474660212504120976a655a7a11b84ad1c7f33b714f6be128bd9befa49c236a235ce2d1bee4b39a8a85c610223bd9547e0c4644de8811042f93801d74c88fabfa14b0e7df69ecfdd892401378ba260879c015b019aa07f2c7d1268e5deb158b35d1a5c89955aaa37e5eab87431aaa50e3f537e6d89739e7ef1f36b2693392e4bb5b36cc4558c1adb662734335b615cca4c9689833152d3afe6b05c90068ca20562c3cb18806ba8d0593f567dbaaf8e7dfe091611742e5dc7130a51867d0ae4c8135ca8a41114b2c8b287da6fceea5a7feed8f6681bc00b33f1b15ac7a3f50fec1ba4c50251e8ad927b1bfaa650d74474fc6cbfd9c70de1bc06ed2f9a102e5294cf358ce28b64ea5e7ecf481c0f5d37287a8327590034ec0987af84b35b4408130c5ad9ad0acaa19637c90545b659b9655d5d61d7d9d2c82caee40770985b6117c32631ca6e31aeeab94b29ff5f34c40736fd80f8eed9812a839e6b86721521e25d6d030bb17bcfeb763b974ea4b64f72a3a8b9e1def77a898376b81003832664ee61b7a446b81cd84e0a1602982e97ce84c39eab599ebd57f6ccfa1bb7456f5851fd40482466495ea59cfc7cc7a1b81d85bfb3f076e4615a990f788737178f1a442978759e6769ff06ed3df5856dd4737158185ed72597d6d80ae8daa00e0e834a31e328674bcb634711c269ba00a3d7cdf860475dc8e338fcc1b1f7a2e38cf45800f54976dd9d12cba22e52caf1473d77f51ac24a0802a958730790a5615b6326b303740a48c2f253f51e01414d402834e67518acafcf2a173e42989bc135bc145ffacfdb09d1c45ceb8b181f866caa5c60912eba3dee2c2e3e871d8d8d6c1b4da72eb5fd00e2f7c0d9460ca206b24e61812418027f9e5bb53525d100db588530c0c4a83d189022d5f478dbdda8db173952bf902566fb16105fe1529b82ee49198341853a297c467bf80475be27ccfb59ad0edaf89382b6711e72cb3e10651527e249594b212c57355173aa31dc25ce7dc29701f92ce65be26203d13eb3a98a26ee1c6deae2010dfe0c3e443c0cd85b19d3b5248b4afba21393b1c8e65c1606ab9910e0b306a93c78433f6c9721617b0d7e227977c4a4a01d2d38ab6dbfc95a8a10a92be70cc0c52132d2c68b0fe13a4c1d2b2f44057cc4a3beccc1f641295bdcf9e8c6f15a324a4611e4936fe0463218d429b1ddbcb5e8b17c75ab36622b2bdfd9432c83949c5cfb765a966ac4b5e69e75003efae91a6aa7458c9140aa19bea93b2e2ee2a405c614ca7aec3aba30a5e2a2a89e8af5354f06ed6511373eb0ae3d7b1d1dc1d441b4513a4f30875f8a2536aa8c306ecb43ffd4d78e769ae00a1a686cb8b056b88f08f2085d17817d9308bde1c42840c5aaafcded61773d583104302566ddca05f52465f874ac0fd6822e5dc589760ca849f7dae817f589ab552a486a2be99ac499913f0010797aae79abc65f8997d52451323be0da7684264ba5a475e3b0e0d1b3ab9d5b22ce0932234aa2a27f70518ed3a8c01a0d72d499932b7c3f45927b0f68b3e6661876c29a28f7544d41469fd4932f0bf8098786ecd4ae431e1da09f6adf819adfdf30ac8d9f9320faab9d24863df4dff306f007b637dca9a1f90a77bddb6e6fc546ddde90d24ea51e53dadea1de1d04675316ad70765505dd6273a86cc9922a81f574a793d91d0ece99c75bbff07ff2e857dccdf36ad7cc6560793141b304d91ae4207d5d3e7bab8c84bb2fe504443e17d95df2da02c3d98299f130e0e880a436b93f10086f7a56efb59c34b51c1584475b003efe1f9bb19f4ac3af88eec5efdf6dd61d46a6bed75735148d2d8b0abfb1cb4e89dfb3a18e0fa8d4b8f17b9683af9b0c42a9e4b9783b87dcddc73da61da12c5171b2cc5a38cf106a62528cd1a50e5e498face4ad0f3153d0dd66b18c57982f0ed2e890c480652df44d39110b724b64a0b8f867d21c65978565341aecaec37b3ce065e829b3ca2682a9e55b5f27a2b9920fe8f083f9c4c13d0fe4828f1d2c874d1f07ecaf488de5453500fc242ee90ac2f6f3b28f293f9f40306e457b0e903d2be6c2bfb8e651fb1d6be81cebe64d7eb29183ea094cdc945b624bbc6a5a55bc24da871bd7a6c9bb676f35ab290eb8f41418238fe576821124f6662fef6e1957f06dd0a6ace573fd876086797d5fc387e26fc91356463dcfa99ee378b3ad7e4608b627610f2b90078bdd0c267d130cd95ccc2ce871935227f99a63913983f526c85483be24dedf0941e2d2fba3ae925d2c27f3e11a1fc2451d02bc4a57b9ccf3d7f4e4d73d173b1aeea57707f08c780199ad5c8457241a0cf3289e6b4cfc4cb1e8d6f4ae0c580016786728efa847d181847f13a09acc334a78017d8e2b6935258e3b93046cb34f573c4c78a868e535a359d747ff40ec89c47529c83ff82c387081bfdb91f5ad46d03eab0fefd05aedd0d9b97665e0a391ef1fa399dcecdefd4d7668d95083ab35d70c194dba2c2fa1239ab5bcd5b0f5faa48a194d52bf8061cfa1949e8895b2d905c981b0085a71539dff8446edb57b7f3b593750f66c55a79055e5da90efbba6b700fb51f851de819ec365e4930c9ba04b3760e1405494ec6acc36cee0c1f43d5358ea72e435704d2446d0c3fe1504946b4e070ee87ffaf9a28c1a478f92a96a85e495e1723a2727a3112e9ba3ae944c4f980c2081b7a257b69b7960fe0266dceeb5f49434fefc87490492bbbe1647efecf44f94cf0d59642303473b7dd959dc9dbcca9e4f3329c78ea53b204013ae071034930e05000114348632781c8fb61a8e11ae3ac3a24380e9297a17adae6b34dc3572b5fc9ea3d61ac13f919019aada2488f4fef9048f988f4d5f695d5a586c72e6e09bccd748a6ee4292a25c1e4edb4fd99b056181988b24c695471da1c552193627c73b06eaae8f74b243ffd407669c9731544cdca9d45a31d9dfd3edbc4002195cb7bc52a78ab6795a71cc49d65707ba6d1c1a5f1d890082efb6a45744155259cf1a62525ec83d92278770e389021bdbd4708c383372ec02453d9dd5c0791424d81ea51fa87d2059389faacf3e9bc82ca4229d94c47bb482b851e291648ed6791985cdb8e4235fad8850e09ce55121cfc73b386dafa6905af728459d9b9ef9906914e609002daf739a026d574eb8f5b5abaafe917812bdd1d2b6df3099b31da6a01987cfff0579b02e182405ae71ad335e526e3460356a99e4e02c6c5cf5422606831a5239b516cad063c610a9bfa8cf5f9904b20cebf0c59a81f34898034069a1cb0d8dba091cd492274cbae8a580c44607a785e4cb8848fb1824a375e67630311e312bd9e74ac30b3a538f23935c2b6716d3dc03db157c263032b2448ad120f7bfdbaac0dd3aa511685c673049dee419c764e3b5ecb7b1e9153cec52c45b533cdaece1dfd3d8c1ece61d498c878a1f76d06073a14730864ddbac466f89d3391de48722812f47eb41a913d6ceb7e7b0fc0dcb4df6187a20718665e53150af38debfab23674222ba9286cafef821838f81eb5f1d20a33ede1f3da0f1939e50f1e62d52a0e93eae2742d0c9361d7879023ae5087447380a0c7bdc3e7be58b75ecd82d6fc7a89338a1c552c97638eaa21cb445c64429b86a41eb10777427b9e44bcd549905c63162334da711a9632614fe94657d511e933296fc3fd5a7ffc4daf37a42964b6c0f9cc7da8b31df7d9a7f7b3f2a22c0b46924aa2c5884bbfba67a4cc723ee2c82f22da81e824e718d84647c3659317435f5a3dffc3f1a21b9598006bb44de5f92355179f5d8e93452ff6b9ca779b786b63a05a291c0d3c9999e90d6c72323180e57b09b080a15729d77343055284394bb81a227a1e60057fc2111b6db5e501a0623ba91a7e269fef74d2c73b96af7eea6535477e8205c9b780c565bae26fb078a510c776db9fcef9d6bcaf52473b2172cadb1667925623dc4e3f19298089dfca796e5826d5c7913cd175b3d18109b0f6e38ee2fda1af06515228b0b21aa5ed661c93bf4544867c63d1d7f8fe6cbf61128741344fa1cd7ab6c70ccc5081c356c56885350bf204584299cf83955e8870670c6a971a7f6f78ec4cfc0760e598c5c75db24051df2793e7b9465d9d5cbd5fb1873b7b83a11cae684ddee064743e6fb7d42da360748fa02c73a1dd60e52dac32b1a7e4c922a8c6f2ac92f9cbae8a5817e00fd10ecf54ff75ce5b9f7edab0f36f313c3e6cb4acc5a0d7e982bf030c30471f636c39ffe4d40a1db152b8e30320606cdd593a6e4deccb342a0594e964cd7c28f25315df579e912f22bcd2c1eaaac4ecae74a4309f05c6960a4d8e9aba633466489031f8d0c30f5bc94fda06346841511c75718c331aa746c4039fcc344024190e380a69519e88698b20cf680b78f8990974b22053a0b548e0f55bd496cef5fc6ab5615c352e523e58307aa10907ca46084cf3ced9c2b1f9f79c066b5a02f99a9686ed4617d307966dc84cbd49da614d02d0f15956690e85fe0333e7ed1ac3c8ab6f55f4bcb3e0ca9cc827bb494f59ebfe9d675dce0e9c7a22d9818a4ae36d2b7d258d7d3f9f9f9aa446eb6dda969eaa2bb296971b13badd722712bdbc7822910cbe26919cc49ee61eade8521a4f90a15c62302ba10069a31d1c0606c9fc44b5847db7c902921bc1eef57d3062d0301c831c6f221cf0377b3d8f2f05f36a8f40f65ff54588c9dc3ada10a013d4061c4f89c2ae92fe4f8620773604bf08d4ca7cfa37f4972c228f790e00994e4b1fa55a608cbb1032081f4dcf46033e18841e08607f4f51ee4c7671f8333d97f50998d013d147b77f127d915881b00481d481389f2e21bb60169326adc91e0f1c51e6877d93289c4d68262f4720e2f1aab0f6f40d481578d5b93ae67efd6ff248ffa205fcfa11236f727bed97ed4aea120fb7de20098f6bb611a86cfdb8380afab1efd7c398a4fcf62beb9ba1042c8333a2f350ea7c91bd2a02cd013a0f84d01d6d005e0d905f433f04117cc7822126c1d124bd44bcd6bfcbcd730b807e0234b2fbaeec9a4e9f5f8ff53eaebbb9a3078879b140ed91ecc32292bf921abc69dff8629ccc7f6213a10b29a0c6bd9913ad441c257fbbc3c19366096d37722f1a08e06841a8d635a54183f857b97fa3e9fe1bc74798ad766c12aec438410aa208ede9dd71cc7d05b0ef57b5e381bf87cef8fa296fe06045ca177b8e6d47e03288e46cc2259dae10bb55d5075c582a4c965250416af5bf88fd793bd6d2b14f1688ee6aa349ff69bf6868188a021bdbdad105c03dfc0cba5d564652c1b1d31d128e54f2dc55c02a14d8692d670ba0090423920df44c865eb0dfbccffdc25863eec1755e94f0f621dcd5e8273988cc046df772ebe035accd62851cf620cfae45ee3e6b751bbd235aac1aa5ce684796e502084d171f262c1127cbdeff2e8fe3f4a6267e9d2623dcf3842807d7dc6f31ba2d7a26581bf4a98ba5f3af66a90fbf73a5ec2dfdd4bd81e2ebee6393d0ac8b547935e305241dc6268efea7d39eb945affcd34bcf4ce4cab41c988903e63f76d039a7fb58781e672c724a39b933efbd915f9aa2fe1778f9a20fd7c96701afe47ee5f290b9373f20d4a2a7e87864816b58"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x1e00000, 0x101, 0x0, 0xd721, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xad3]}) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 420.510081ms ago: executing program 0 (id=1753): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af1510000000000000000000000000000fe", 0x1c}], 0x2) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca", 0x24}], 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000880)="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", &(0x7f0000001880)="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"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1001, 0x86, 0x1, 0x0, 0x0, 0xfffffff4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, 0x0, &(0x7f0000000840)=0x1e) 337.513655ms ago: executing program 5 (id=1754): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x10) 0s ago: executing program 2 (id=1755): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000014548bb95ad1cc4596b85800670000002f90780012cb5c5f1d4c31668065580000000010000800000086dd080088be000000001000000800000000000000178f1be605384225c6850a3b03080022eb00000000200600fd0200000000000000000e"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r3, &(0x7f0000001040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}], 0x20}}], 0x1, 0x84) kernel console output (not intermixed with test programs): erface number 0 [ 351.556953][ T978] usb 6-1: config 128 has no interface number 1 [ 351.571765][ T978] usb 6-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 351.594481][ T978] usb 6-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 351.637332][ T5916] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 351.658988][ T978] usb 6-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 351.665442][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 351.676276][ T5916] usb 5-1: no configurations [ 351.680963][ T5916] usb 5-1: can't read configurations, error -22 [ 351.688625][ T5916] usb usb5-port1: unable to enumerate USB device [ 351.699893][ T978] usb 6-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 351.713262][ T978] usb 6-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 351.739859][ T978] usb 6-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 351.771525][ T978] usb 6-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 351.799701][ T5909] usb 1-1: USB disconnect, device number 37 [ 351.827519][ T978] usb 6-1: config 128 interface 15 altsetting 1 has an endpoint descriptor with address 0x27, changing to 0x7 [ 351.858788][ T978] usb 6-1: config 128 interface 15 altsetting 1 endpoint 0x7 has invalid maxpacket 26518, setting to 64 [ 351.902587][ T978] usb 6-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 351.919515][ T978] usb 6-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 351.966016][ T978] usb 6-1: config 128 interface 15 has no altsetting 0 [ 351.973082][ T978] usb 6-1: config 128 interface 6 has no altsetting 0 [ 352.049325][ T978] usb 6-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83 [ 352.069819][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.084979][ T978] usb 6-1: Product: à°ª [ 352.094705][ T978] usb 6-1: Manufacturer: Ъ [ 352.114467][T10054] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 352.131049][T10054] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 353.528599][ T978] usb 6-1: USB disconnect, device number 30 [ 353.604968][ T5916] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 353.802510][ T5916] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 353.836109][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.914921][ T5916] usb 5-1: Product: syz [ 353.925963][ T5916] usb 5-1: Manufacturer: syz [ 353.930696][ T5916] usb 5-1: SerialNumber: syz [ 353.952670][ T5916] usb 5-1: config 0 descriptor?? [ 354.162801][ T5916] usb-storage 5-1:0.0: USB Mass Storage device detected [ 354.402251][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 354.492025][ T10] usb 5-1: USB disconnect, device number 30 [ 354.492137][T10096] FAULT_INJECTION: forcing a failure. [ 354.492137][T10096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.518727][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.0.1315 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 354.518760][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.518772][T10096] Call Trace: [ 354.518780][T10096] [ 354.518789][T10096] dump_stack_lvl+0x189/0x250 [ 354.518833][T10096] ? __pfx____ratelimit+0x10/0x10 [ 354.518860][T10096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.518888][T10096] ? __pfx__printk+0x10/0x10 [ 354.518908][T10096] ? __might_fault+0xb0/0x130 [ 354.518936][T10096] should_fail_ex+0x414/0x560 [ 354.518965][T10096] _copy_from_user+0x2d/0xb0 [ 354.518985][T10096] sk_setsockopt+0x276/0x2d30 [ 354.519007][T10096] ? __pfx___might_resched+0x10/0x10 [ 354.519051][T10096] ? rcu_read_lock_any_held+0xb3/0x120 [ 354.519070][T10096] ? __pfx_sk_setsockopt+0x10/0x10 [ 354.519100][T10096] ? aa_sk_perm+0x81e/0x950 [ 354.519128][T10096] ? __pfx_aa_sk_perm+0x10/0x10 [ 354.519150][T10096] ? __lock_acquire+0xab9/0xd20 [ 354.519180][T10096] ? aa_sock_opt_perm+0x74/0x110 [ 354.519207][T10096] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 354.519235][T10096] do_sock_setsockopt+0x201/0x3e0 [ 354.519262][T10096] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 354.519282][T10096] ? __fget_files+0x2a/0x420 [ 354.519307][T10096] ? __fget_files+0x3a0/0x420 [ 354.519327][T10096] ? __fget_files+0x2a/0x420 [ 354.519356][T10096] __ia32_sys_setsockopt+0x18b/0x220 [ 354.519386][T10096] __do_fast_syscall_32+0xb6/0x2b0 [ 354.519405][T10096] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.519437][T10096] do_fast_syscall_32+0x34/0x80 [ 354.519456][T10096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.519478][T10096] RIP: 0023:0xf7fd2539 [ 354.519496][T10096] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 354.519513][T10096] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 354.519535][T10096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 354.519548][T10096] RDX: 0000000000000041 RSI: 0000000080001280 RDI: 0000000000000004 [ 354.519559][T10096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.519570][T10096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 354.519582][T10096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.519611][T10096] [ 354.869619][T10099] netlink: 868 bytes leftover after parsing attributes in process `syz.5.1314'. [ 354.891482][T10095] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 355.454760][ T5931] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 355.614684][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 355.687216][ T5931] usb 6-1: no configurations [ 355.701387][ T5931] usb 6-1: can't read configurations, error -22 [ 356.086735][T10118] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 356.344901][ T5931] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 356.504894][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 356.514743][ T5931] usb 6-1: no configurations [ 356.519862][ T5931] usb 6-1: can't read configurations, error -22 [ 356.564113][ T5931] usb usb6-port1: attempt power cycle [ 356.623277][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 356.935249][ T5931] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 357.007050][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 357.015075][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 357.027159][ T5931] usb 6-1: no configurations [ 357.038389][ T5931] usb 6-1: can't read configurations, error -22 [ 357.168070][ T10] usb 5-1: device descriptor read/64, error -71 [ 357.187142][ T5931] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 357.243441][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 357.252223][ T5931] usb 6-1: no configurations [ 357.262215][ T5931] usb 6-1: can't read configurations, error -22 [ 357.316389][ T5931] usb usb6-port1: unable to enumerate USB device [ 357.324179][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 357.384815][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 357.423182][T10136] netlink: 'syz.3.1326': attribute type 6 has an invalid length. [ 357.444980][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 357.476768][T10136] netlink: 'syz.3.1326': attribute type 5 has an invalid length. [ 357.594908][ T10] usb 5-1: device descriptor read/64, error -71 [ 357.723492][ T10] usb usb5-port1: attempt power cycle [ 357.785002][ T978] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 357.956947][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 357.976882][ T978] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 358.010054][ T978] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 358.043269][ T978] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 358.086634][ T978] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 358.100226][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 358.148068][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 358.165818][ T10] usb 5-1: device descriptor read/8, error -71 [ 358.182516][ T978] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 358.210422][ T978] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 358.234699][ T978] usb 3-1: Product: syz [ 358.243061][ T978] usb 3-1: Manufacturer: syz [ 358.249856][ T978] usb 3-1: SerialNumber: syz [ 358.269013][ T978] usb 3-1: config 0 descriptor?? [ 358.292031][ T978] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 358.311785][ T978] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 358.403985][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1330'. [ 358.415015][ T5917] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 358.424805][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 358.456021][ T10] usb 5-1: device descriptor read/8, error -71 [ 358.567887][ T10] usb usb5-port1: unable to enumerate USB device [ 358.594745][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 358.609060][T10138] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 358.611102][ T5916] usb 3-1: USB disconnect, device number 36 [ 358.616337][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 358.634942][T10148] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -19 [ 358.647033][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.662169][ T5916] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 358.669303][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.720370][ T5917] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 358.760194][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.793443][ T5917] usb 1-1: config 0 descriptor?? [ 358.873997][T10151] netdevsim netdevsim3: Direct firmware load for . [ 358.873997][T10151] failed with error -2 [ 358.903188][T10151] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 358.903188][T10151] [ 359.272760][ T5917] aquacomputer_d5next 0003:0C70:F0B6.0004: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 359.472369][ T5917] usb 1-1: USB disconnect, device number 38 [ 359.609456][T10155] fido_id[10155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 359.764707][ T980] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 359.912866][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 359.935475][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 359.955122][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 359.965122][T10162] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 360.123399][ T980] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 360.151969][ T980] usb 6-1: config 0 has no interface number 0 [ 360.191778][ T980] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 360.224878][ T980] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 360.267316][ T980] usb 6-1: config 0 interface 41 has no altsetting 0 [ 360.493697][ T980] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 360.532398][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.586869][ T980] usb 6-1: Product: syz [ 360.591194][ T980] usb 6-1: Manufacturer: syz [ 360.657264][ T980] usb 6-1: SerialNumber: syz [ 360.760315][ T980] usb 6-1: config 0 descriptor?? [ 360.812628][T10157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 360.821569][T10157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.044789][ T5924] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 361.093700][T10157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.102752][T10157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.378436][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.488199][ T5924] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.531890][ T5924] usb 5-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 361.555958][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 361.555987][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.593111][ T5924] usb 5-1: Product: syz [ 361.630988][ T5924] usb 5-1: Manufacturer: syz [ 361.657032][ T5924] usb 5-1: SerialNumber: syz [ 361.714852][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 361.721946][ T10] usb 1-1: no configurations [ 361.729735][ T10] usb 1-1: can't read configurations, error -22 [ 361.827909][ T5924] cdc_ncm 5-1:1.0: skipping garbage [ 361.902974][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 362.055303][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 362.061531][ T10] usb 1-1: no configurations [ 362.088180][ T10] usb 1-1: can't read configurations, error -22 [ 362.326964][ T10] usb usb1-port1: attempt power cycle [ 362.384020][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.394428][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.625324][ T980] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 362.657229][ T980] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 362.674719][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 362.696716][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 362.710519][ T10] usb 1-1: no configurations [ 362.720291][ T10] usb 1-1: can't read configurations, error -22 [ 362.764207][ T980] usb 6-1: USB disconnect, device number 35 [ 362.894734][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 362.919501][T10203] netlink: 'syz.5.1344': attribute type 9 has an invalid length. [ 362.975103][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 362.992586][ T10] usb 1-1: no configurations [ 363.010351][ T10] usb 1-1: can't read configurations, error -22 [ 363.034912][ T10] usb usb1-port1: unable to enumerate USB device [ 363.059383][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'. [ 363.078818][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.115240][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.435348][ T5924] cdc_ncm 5-1:1.0: bind() failure [ 363.454841][ T5924] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 363.498622][ T5924] usb 5-1: USB disconnect, device number 35 [ 363.505097][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1346'. [ 363.934670][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 363.981082][ T5924] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 364.092337][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.109159][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 364.117092][ T5924] usb 6-1: device descriptor read/64, error -71 [ 364.127238][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.145700][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 364.177850][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 364.197284][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 364.212007][ T10] usb 4-1: Manufacturer: syz [ 364.244225][ T10] usb 4-1: config 0 descriptor?? [ 364.275461][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 364.318700][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'. [ 364.413912][ T5924] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 364.584683][ T5924] usb 6-1: device descriptor read/64, error -71 [ 364.715122][ T5924] usb usb6-port1: attempt power cycle [ 364.841335][ T10] rc_core: IR keymap rc-hauppauge not found [ 364.874528][ T10] Registered IR keymap rc-empty [ 364.895054][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.935248][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.956175][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 364.988559][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 365.023453][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.088349][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.126196][ T5924] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 365.198756][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.199093][ T5924] usb 6-1: device descriptor read/8, error -71 [ 365.237227][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.265642][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.285151][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.315764][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.335279][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.354879][ T978] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 365.365119][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.384815][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.446136][ T5924] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 365.451193][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 365.463465][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 365.516316][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 365.522157][ T10] usb 4-1: USB disconnect, device number 23 [ 365.522180][ T5924] usb 6-1: device descriptor read/8, error -71 [ 365.548148][ T978] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 365.658262][ T5924] usb usb6-port1: unable to enumerate USB device [ 365.680582][ T978] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 365.717142][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 365.775916][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.807938][ T978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 365.841277][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.913807][ T978] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 365.951334][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.000051][ T978] usb 3-1: config 0 descriptor?? [ 366.248424][ T978] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 366.297439][T10246] macsec0: entered promiscuous mode [ 366.934730][ T978] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 367.027675][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1360'. [ 367.149956][ T978] usb 4-1: config 0 has no interfaces? [ 367.162372][ T980] usb 3-1: USB disconnect, device number 37 [ 367.169820][ T978] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 367.184997][ T980] usblp0: removed [ 367.222008][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.255230][ T978] usb 4-1: Product: syz [ 367.270059][ T978] usb 4-1: Manufacturer: syz [ 367.284705][ T978] usb 4-1: SerialNumber: syz [ 367.311129][ T978] usb 4-1: config 0 descriptor?? [ 367.595899][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.616930][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.724755][ T978] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 367.906812][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 367.942195][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.956989][ T978] usb 1-1: config 0 has no interfaces? [ 367.965368][ T978] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 367.983731][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.049506][ T978] usb 1-1: config 0 descriptor?? [ 368.129276][T10277] FAULT_INJECTION: forcing a failure. [ 368.129276][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.148225][T10277] CPU: 0 UID: 0 PID: 10277 Comm: syz.5.1367 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 368.148255][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.148267][T10277] Call Trace: [ 368.148276][T10277] [ 368.148284][T10277] dump_stack_lvl+0x189/0x250 [ 368.148317][T10277] ? __pfx____ratelimit+0x10/0x10 [ 368.148346][T10277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.148374][T10277] ? __pfx__printk+0x10/0x10 [ 368.148395][T10277] ? __might_fault+0xb0/0x130 [ 368.148426][T10277] should_fail_ex+0x414/0x560 [ 368.148455][T10277] _copy_from_user+0x2d/0xb0 [ 368.148476][T10277] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 368.148516][T10277] snd_rawmidi_write+0x5ad/0xbd0 [ 368.148554][T10277] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 368.148575][T10277] ? __pfx_default_wake_function+0x10/0x10 [ 368.148605][T10277] ? common_file_perm+0x199/0x200 [ 368.148633][T10277] ? bpf_lsm_file_permission+0x9/0x20 [ 368.148658][T10277] ? security_file_permission+0x75/0x290 [ 368.148680][T10277] ? rw_verify_area+0x258/0x650 [ 368.148707][T10277] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 368.148730][T10277] vfs_write+0x27b/0xa90 [ 368.148767][T10277] ? __pfx_vfs_write+0x10/0x10 [ 368.148798][T10277] ? __fget_files+0x2a/0x420 [ 368.148822][T10277] ? __fget_files+0x2a/0x420 [ 368.148841][T10277] ? __fget_files+0x3a0/0x420 [ 368.148860][T10277] ? __fget_files+0x2a/0x420 [ 368.148889][T10277] ksys_write+0x145/0x250 [ 368.148910][T10277] ? __pfx_ksys_write+0x10/0x10 [ 368.148930][T10277] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 368.148959][T10277] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.148989][T10277] __do_fast_syscall_32+0xb6/0x2b0 [ 368.149008][T10277] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.149039][T10277] do_fast_syscall_32+0x34/0x80 [ 368.149057][T10277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.149079][T10277] RIP: 0023:0xf70fe539 [ 368.149096][T10277] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 368.149120][T10277] RSP: 002b:00000000f50cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 368.149142][T10277] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 368.149155][T10277] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 368.149165][T10277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.149177][T10277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.149187][T10277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.149217][T10277] [ 368.410719][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.474679][ T10] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 368.627146][ T10] usb 5-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 368.639524][ T10] usb 5-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.653037][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 368.678402][ T10] usb 5-1: New USB device found, idVendor=0524, idProduct=a4a8, bcdDevice= 0.40 [ 368.687704][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.695823][ T10] usb 5-1: Product: syz [ 368.700589][ T10] usb 5-1: Manufacturer: syz [ 368.708834][ T10] usb 5-1: SerialNumber: syz [ 368.955074][T10274] trusted_key: encrypted_key: master key parameter '' is invalid [ 368.968067][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.011373][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.903188][ T10] usb 5-1: USB disconnect, device number 36 [ 369.960349][ T5931] usb 4-1: USB disconnect, device number 24 [ 370.087490][T10295] vcan0: tx drop: invalid sa for name 0x0000000040000000 [ 370.434340][ T5917] usb 1-1: USB disconnect, device number 43 [ 370.644386][T10300] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1371'. [ 371.073949][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 371.295248][ T980] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 371.578992][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 371.590605][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.610691][ T980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 371.634675][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 371.642142][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 371.687309][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.713647][ T980] usb 1-1: config 0 descriptor?? [ 371.764778][ T10] usb 4-1: device descriptor read/64, error -71 [ 371.864842][ T5924] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 372.014964][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 372.025027][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 372.047353][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.059210][ T5924] usb 6-1: config 0 has no interfaces? [ 372.067967][ T5924] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 372.078779][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.202126][ T980] logitech 0003:046D:C623.0005: unknown main item tag 0x6 [ 372.214887][ T980] logitech 0003:046D:C623.0005: collection stack underflow [ 372.223041][ T980] logitech 0003:046D:C623.0005: item 0 4 0 12 parsing failed [ 372.256844][ T10] usb 4-1: device descriptor read/64, error -71 [ 372.317835][ T5924] usb 6-1: config 0 descriptor?? [ 372.399794][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.407034][ T10] usb usb4-port1: attempt power cycle [ 372.422846][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.632561][ T980] logitech 0003:046D:C623.0005: parse failed [ 372.708027][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 372.774779][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 372.786200][ T980] logitech 0003:046D:C623.0005: probe with driver logitech failed with error -22 [ 372.795461][T10333] loop6: detected capacity change from 0 to 4 [ 372.806441][T10333] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 372.822838][ T10] usb 4-1: device descriptor read/8, error -71 [ 372.844761][ T5916] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 372.915184][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 372.917917][T10333] loop6: p1 start 1073741824 is beyond EOD, [ 372.924985][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 372.934543][T10333] truncated [ 373.054344][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 373.059605][T10333] loop6: p2 start 4 is beyond EOD, truncated [ 373.073716][ T5916] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 373.079184][T10333] loop6: p4 start 4 is beyond EOD, truncated [ 373.099319][ T5916] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 373.099580][T10333] loop6: p6 start 1879048192 is beyond EOD, [ 373.125863][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 373.135876][ T5916] usb 3-1: config 2 has no interface number 0 [ 373.143072][T10333] truncated [ 373.149302][T10333] loop6: p7 start 4294967295 is beyond EOD, truncated [ 373.182200][ T5916] usb 3-1: config 2 interface 31 altsetting 2 has an invalid endpoint descriptor of length 3, skipping [ 373.204914][ T5916] usb 3-1: config 2 interface 31 has no altsetting 0 [ 373.211727][ T10] usb 4-1: device descriptor read/8, error -71 [ 373.214873][T10333] loop6: p8 size 7 extends beyond EOD, truncated [ 373.230726][T10333] loop6: p9 size 6 extends beyond EOD, truncated [ 373.247476][T10333] loop6: p10 start 149541451 is beyond EOD, truncated [ 373.260125][T10333] loop6: p11 start 4207571694 is beyond EOD, truncated [ 373.325372][ T10] usb usb4-port1: unable to enumerate USB device [ 373.333434][ T5916] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 373.343113][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.367062][ T5916] usb 3-1: Product: syz [ 373.397966][ T5916] usb 3-1: Manufacturer: syz [ 373.424772][ T5916] usb 3-1: SerialNumber: syz [ 373.449676][ T5916] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 373.763840][T10342] netlink: 892 bytes leftover after parsing attributes in process `syz.4.1384'. [ 373.859356][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 373.868561][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 373.878723][T10344] netlink: 'syz.4.1385': attribute type 6 has an invalid length. [ 373.891019][T10344] netlink: 'syz.4.1385': attribute type 5 has an invalid length. [ 374.465490][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 374.529163][ T978] usb 6-1: USB disconnect, device number 40 [ 374.644735][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 374.709661][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 374.711527][ T5924] usb 1-1: USB disconnect, device number 44 [ 374.863249][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.911204][ T10] usb 5-1: config 0 has no interface number 0 [ 374.929662][ T10] usb 5-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.020076][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 375.035937][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 375.057556][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.067755][ T10] usb 5-1: Product: syz [ 375.082164][ T10] usb 5-1: Manufacturer: syz [ 375.093045][ T10] usb 5-1: SerialNumber: syz [ 375.110978][ T10] usb 5-1: config 0 descriptor?? [ 375.115977][ T980] usb 3-1: USB disconnect, device number 38 [ 375.387672][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 375.410055][T10367] vlan2: entered promiscuous mode [ 375.431101][ T5924] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 375.594736][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 375.618184][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.646779][ T5924] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 375.693485][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.716021][ T5924] usb 1-1: config 0 descriptor?? [ 375.761215][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1393'. [ 375.777700][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 375.798466][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1393'. [ 375.870618][T10374] vlan2: entered promiscuous mode [ 375.962692][ T5192] bcm5974 1-1:0.0: could not read from device [ 375.983973][ T5192] bcm5974 1-1:0.0: could not read from device [ 375.997242][ T5924] usb 1-1: USB disconnect, device number 45 [ 376.030167][ T5859] bcm5974 1-1:0.0: could not read from device [ 376.059760][ T5192] bcm5974 1-1:0.0: could not read from device [ 376.107045][ T5916] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 376.153339][ T5859] udevd[5859]: Error opening device "/dev/input/event4": No such device [ 376.168835][ T5859] udevd[5859]: Unable to EVIOCGABS device "/dev/input/event4" [ 376.203587][ T5859] udevd[5859]: Unable to EVIOCGABS device "/dev/input/event4" [ 376.213485][ T5859] udevd[5859]: Unable to EVIOCGABS device "/dev/input/event4" [ 376.229832][ T5859] udevd[5859]: Unable to EVIOCGABS device "/dev/input/event4" [ 376.274753][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 376.300431][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.320043][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.349244][ T5916] usb 3-1: config 0 has no interface number 0 [ 376.368549][ T5916] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.390439][ T5916] usb 3-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 376.403292][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.430437][ T5916] usb 3-1: config 0 descriptor?? [ 376.441272][ T5916] usb 3-1: bad CDC descriptors [ 376.451375][ T5916] cdc_acm 3-1:0.1: Zero length descriptor references [ 376.458792][ T5916] cdc_acm 3-1:0.1: probe with driver cdc_acm failed with error -22 [ 376.496047][T10386] Invalid logical block size (-1) [ 376.577372][ T5917] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 376.696886][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 376.768934][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.802979][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.843445][ T5917] usb 4-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 376.877909][ T5931] usb 3-1: USB disconnect, device number 39 [ 376.909479][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.933557][ T5917] usb 4-1: config 0 descriptor?? [ 377.027187][ T10] smsc75xx v1.0.0 [ 377.030907][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 377.120453][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 377.172178][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 377.179668][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 377.231562][T10396] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1402'. [ 377.265328][ T10] usb 5-1: USB disconnect, device number 37 [ 377.270134][ T5917] usb 4-1: USB disconnect, device number 29 [ 377.391144][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 377.454546][T10401] netlink: 'syz.4.1405': attribute type 3 has an invalid length. [ 377.864836][ T5917] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 378.003590][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 378.099377][T10415] FAULT_INJECTION: forcing a failure. [ 378.099377][T10415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.192867][T10415] CPU: 0 UID: 0 PID: 10415 Comm: syz.5.1410 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 378.192899][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.192910][T10415] Call Trace: [ 378.192919][T10415] [ 378.192927][T10415] dump_stack_lvl+0x189/0x250 [ 378.192963][T10415] ? __pfx____ratelimit+0x10/0x10 [ 378.192991][T10415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.193019][T10415] ? __pfx__printk+0x10/0x10 [ 378.193041][T10415] ? __might_fault+0xb0/0x130 [ 378.193071][T10415] should_fail_ex+0x414/0x560 [ 378.193103][T10415] _copy_from_user+0x2d/0xb0 [ 378.193124][T10415] get_compat_msghdr+0xad/0x4a0 [ 378.193156][T10415] ? __pfx_get_compat_msghdr+0x10/0x10 [ 378.193183][T10415] ? rcu_is_watching+0x15/0xb0 [ 378.193211][T10415] ? ___sys_recvmsg+0x1c4/0x510 [ 378.193243][T10415] ___sys_recvmsg+0x17f/0x510 [ 378.193274][T10415] ? __pfx____sys_recvmsg+0x10/0x10 [ 378.193326][T10415] ? __fget_files+0x3a0/0x420 [ 378.193360][T10415] do_recvmmsg+0x36a/0x770 [ 378.193395][T10415] ? __pfx_do_recvmmsg+0x10/0x10 [ 378.193434][T10415] ? __pfx_vfs_write+0x10/0x10 [ 378.193481][T10415] __sys_recvmmsg+0x19d/0x280 [ 378.193510][T10415] ? __pfx___sys_recvmmsg+0x10/0x10 [ 378.193532][T10415] ? ksys_write+0x22a/0x250 [ 378.193561][T10415] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 378.193592][T10415] __do_fast_syscall_32+0xb6/0x2b0 [ 378.193612][T10415] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.193644][T10415] do_fast_syscall_32+0x34/0x80 [ 378.193663][T10415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.193685][T10415] RIP: 0023:0xf70fe539 [ 378.193703][T10415] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 378.193728][T10415] RSP: 002b:00000000f50cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 378.193751][T10415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 378.193765][T10415] RDX: 000000000291962b RSI: 000000002e4b39ff RDI: 0000000000000000 [ 378.193776][T10415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.193787][T10415] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 378.193799][T10415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.193829][T10415] [ 378.423067][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.514748][ T5917] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 378.524662][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.577362][ T5917] usb 3-1: config 0 descriptor?? [ 378.642922][ T5917] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 378.705126][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711535][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.005776][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.077280][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1418'. [ 379.164702][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 379.294405][T10442] FAULT_INJECTION: forcing a failure. [ 379.294405][T10442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.343438][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.0.1419 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 379.343456][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.343463][T10442] Call Trace: [ 379.343469][T10442] [ 379.343474][T10442] dump_stack_lvl+0x189/0x250 [ 379.343504][T10442] ? __pfx____ratelimit+0x10/0x10 [ 379.343522][T10442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.343540][T10442] ? __pfx__printk+0x10/0x10 [ 379.343563][T10442] should_fail_ex+0x414/0x560 [ 379.343581][T10442] _copy_to_user+0x31/0xb0 [ 379.343595][T10442] simple_read_from_buffer+0xe1/0x170 [ 379.343610][T10442] proc_fail_nth_read+0x1df/0x250 [ 379.343627][T10442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.343642][T10442] ? rw_verify_area+0x258/0x650 [ 379.343659][T10442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.343673][T10442] vfs_read+0x1fd/0x980 [ 379.343693][T10442] ? __pfx___mutex_lock+0x10/0x10 [ 379.343705][T10442] ? __pfx_vfs_read+0x10/0x10 [ 379.343722][T10442] ? __fget_files+0x2a/0x420 [ 379.343742][T10442] ? __fget_files+0x3a0/0x420 [ 379.343753][T10442] ? __fget_files+0x2a/0x420 [ 379.343771][T10442] ksys_read+0x145/0x250 [ 379.343782][T10442] ? __pfx_ksys_read+0x10/0x10 [ 379.343800][T10442] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 379.343818][T10442] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.343835][T10442] __do_fast_syscall_32+0xb6/0x2b0 [ 379.343846][T10442] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.343865][T10442] do_fast_syscall_32+0x34/0x80 [ 379.343876][T10442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.343889][T10442] RIP: 0023:0xf7fd2539 [ 379.343900][T10442] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 379.343910][T10442] RSP: 002b:00000000f50f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 379.343924][T10442] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 379.343932][T10442] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 379.343939][T10442] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 379.343945][T10442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.343952][T10442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.343969][T10442] [ 379.656252][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 379.709624][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 379.731414][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.758889][ T10] usb 4-1: config 0 has no interface number 0 [ 379.769937][ T10] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.784531][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 379.834126][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 379.854151][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.857918][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1421'. [ 379.891699][ T10] usb 4-1: Product: syz [ 379.910795][ T10] usb 4-1: Manufacturer: syz [ 379.916490][ T10] usb 4-1: SerialNumber: syz [ 379.930429][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 379.942680][ T10] usb 4-1: config 0 descriptor?? [ 379.953321][T10461] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1424'. [ 381.037905][ T5924] usb 3-1: USB disconnect, device number 40 [ 381.136757][T10471] FAULT_INJECTION: forcing a failure. [ 381.136757][T10471] name failslab, interval 1, probability 0, space 0, times 0 [ 381.184942][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.4.1428 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 381.184972][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.184984][T10471] Call Trace: [ 381.184992][T10471] [ 381.185006][T10471] dump_stack_lvl+0x189/0x250 [ 381.185049][T10471] ? __pfx____ratelimit+0x10/0x10 [ 381.185079][T10471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.185107][T10471] ? __pfx__printk+0x10/0x10 [ 381.185135][T10471] ? __pfx___might_resched+0x10/0x10 [ 381.185162][T10471] ? fs_reclaim_acquire+0x7d/0x100 [ 381.185191][T10471] should_fail_ex+0x414/0x560 [ 381.185220][T10471] should_failslab+0xa8/0x100 [ 381.185242][T10471] __kmalloc_cache_noprof+0x70/0x3d0 [ 381.185261][T10471] ? nf_tables_newtable+0x435/0x1890 [ 381.185281][T10471] ? nla_strcmp+0x106/0x140 [ 381.185310][T10471] nf_tables_newtable+0x435/0x1890 [ 381.185359][T10471] nfnetlink_rcv+0x112f/0x2520 [ 381.185437][T10471] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 381.185484][T10471] ? ref_tracker_free+0x63a/0x7d0 [ 381.185539][T10471] ? __netlink_deliver_tap+0x807/0x850 [ 381.185570][T10471] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.185590][T10471] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.185618][T10471] netlink_unicast+0x758/0x8d0 [ 381.185659][T10471] netlink_sendmsg+0x805/0xb30 [ 381.185692][T10471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.185717][T10471] ? __import_iovec+0x5d4/0x7f0 [ 381.185734][T10471] ? aa_sock_msg_perm+0x94/0x160 [ 381.185760][T10471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.185784][T10471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.185807][T10471] __sock_sendmsg+0x21c/0x270 [ 381.185839][T10471] ____sys_sendmsg+0x505/0x830 [ 381.185870][T10471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.185909][T10471] ___sys_sendmsg+0x21f/0x2a0 [ 381.185936][T10471] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.185999][T10471] ? __fget_files+0x2a/0x420 [ 381.186018][T10471] ? __fget_files+0x3a0/0x420 [ 381.186058][T10471] __sys_sendmsg+0x164/0x220 [ 381.186084][T10471] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.186122][T10471] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 381.186151][T10471] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.186181][T10471] __do_fast_syscall_32+0xb6/0x2b0 [ 381.186200][T10471] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.186230][T10471] do_fast_syscall_32+0x34/0x80 [ 381.186248][T10471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.186271][T10471] RIP: 0023:0xf709e539 [ 381.186288][T10471] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 381.186305][T10471] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 381.186327][T10471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 381.186341][T10471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.186352][T10471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.186363][T10471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.186375][T10471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.186404][T10471] [ 381.756350][T10475] FAULT_INJECTION: forcing a failure. [ 381.756350][T10475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.822354][T10475] CPU: 1 UID: 0 PID: 10475 Comm: syz.2.1429 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 381.822384][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.822396][T10475] Call Trace: [ 381.822404][T10475] [ 381.822412][T10475] dump_stack_lvl+0x189/0x250 [ 381.822447][T10475] ? __pfx____ratelimit+0x10/0x10 [ 381.822476][T10475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.822503][T10475] ? __pfx__printk+0x10/0x10 [ 381.822537][T10475] should_fail_ex+0x414/0x560 [ 381.822566][T10475] _copy_to_user+0x31/0xb0 [ 381.822589][T10475] simple_read_from_buffer+0xe1/0x170 [ 381.822615][T10475] proc_fail_nth_read+0x1df/0x250 [ 381.822641][T10475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.822667][T10475] ? rw_verify_area+0x258/0x650 [ 381.822694][T10475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.822717][T10475] vfs_read+0x1fd/0x980 [ 381.822754][T10475] ? __pfx_vfs_read+0x10/0x10 [ 381.822800][T10475] ? __sys_sendmsg+0x189/0x220 [ 381.822837][T10475] ksys_read+0x145/0x250 [ 381.822857][T10475] ? __pfx_ksys_read+0x10/0x10 [ 381.822888][T10475] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 381.822917][T10475] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.822945][T10475] __do_fast_syscall_32+0xb6/0x2b0 [ 381.822965][T10475] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.822995][T10475] do_fast_syscall_32+0x34/0x80 [ 381.823013][T10475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.823035][T10475] RIP: 0023:0xf711e539 [ 381.823051][T10475] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 381.823066][T10475] RSP: 002b:00000000f510e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 381.823087][T10475] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f510e620 [ 381.823099][T10475] RDX: 000000000000000f RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 381.823110][T10475] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 381.823121][T10475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.823132][T10475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.823161][T10475] [ 382.184016][ T10] smsc75xx v1.0.0 [ 382.187923][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 382.194783][ T5924] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 382.213821][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 382.351464][ T5931] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 382.365563][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 382.373606][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.375745][ T10] usb 4-1: USB disconnect, device number 30 [ 382.386587][ T5924] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.407874][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.539391][ T5924] usb 5-1: config 0 descriptor?? [ 382.596914][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.607438][ T5931] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.640918][ T5931] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.693473][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.734467][ T5931] usb 6-1: config 0 descriptor?? [ 382.772702][ T5924] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 383.171478][ T30] audit: type=1800 audit(1750359340.594:18): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1432" name="file1" dev="tmpfs" ino=1622 res=0 errno=0 [ 383.642547][T10501] lo: entered allmulticast mode [ 383.677798][T10498] lo: left allmulticast mode [ 383.999451][ T5931] usb 6-1: string descriptor 0 read error: -71 [ 384.052360][ T5931] usb 6-1: USB disconnect, device number 41 [ 384.057448][T10506] input: syz0 as /devices/virtual/input/input36 [ 384.228119][T10508] input: syz0 as /devices/virtual/input/input37 [ 384.420853][ T5924] usb 5-1: USB disconnect, device number 38 [ 386.019506][T10526] CUSE: zero length info key specified [ 386.154743][ T5931] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 386.344932][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 386.400927][ T5931] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 386.427741][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.454669][ T5931] usb 5-1: config 0 has no interface number 0 [ 386.465024][ T5931] usb 5-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.498405][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.509019][ T5931] usb 5-1: config 0 interface 184 has no altsetting 0 [ 386.547836][ T5931] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 386.559609][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.579249][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.594815][ T5931] usb 5-1: Product: syz [ 386.614635][ T5931] usb 5-1: Manufacturer: syz [ 386.626650][ T5931] usb 5-1: SerialNumber: syz [ 386.657747][ T5931] usb 5-1: config 0 descriptor?? [ 386.747353][T10530] can: request_module (can-proto-0) failed. [ 387.242138][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 387.504838][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 387.544112][T10543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 387.727917][T10545] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 387.932881][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.018668][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1456'. [ 388.405117][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 388.443743][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 388.464452][T10552] vlan2: entered promiscuous mode [ 388.488856][T10554] loop7: detected capacity change from 0 to 16384 [ 389.031545][ T5931] smsc75xx v1.0.0 [ 389.037561][ T5931] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 389.065870][ T5931] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 389.114437][ T5931] usb 5-1: USB disconnect, device number 39 [ 389.214804][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 389.273416][T10566] FAULT_INJECTION: forcing a failure. [ 389.273416][T10566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.306337][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.4.1460 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 389.306369][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.306381][T10566] Call Trace: [ 389.306389][T10566] [ 389.306398][T10566] dump_stack_lvl+0x189/0x250 [ 389.306434][T10566] ? __pfx____ratelimit+0x10/0x10 [ 389.306463][T10566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.306492][T10566] ? __pfx__printk+0x10/0x10 [ 389.306527][T10566] should_fail_ex+0x414/0x560 [ 389.306559][T10566] _copy_to_user+0x31/0xb0 [ 389.306581][T10566] simple_read_from_buffer+0xe1/0x170 [ 389.306608][T10566] proc_fail_nth_read+0x1df/0x250 [ 389.306637][T10566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.306662][T10566] ? rw_verify_area+0x258/0x650 [ 389.306689][T10566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.306714][T10566] vfs_read+0x1fd/0x980 [ 389.306749][T10566] ? __pfx___mutex_lock+0x10/0x10 [ 389.306768][T10566] ? __pfx_vfs_read+0x10/0x10 [ 389.306798][T10566] ? __fget_files+0x2a/0x420 [ 389.306824][T10566] ? __fget_files+0x3a0/0x420 [ 389.306842][T10566] ? __fget_files+0x2a/0x420 [ 389.306870][T10566] ksys_read+0x145/0x250 [ 389.306890][T10566] ? __pfx_ksys_read+0x10/0x10 [ 389.306927][T10566] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 389.306953][T10566] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.306980][T10566] __do_fast_syscall_32+0xb6/0x2b0 [ 389.306998][T10566] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.307027][T10566] do_fast_syscall_32+0x34/0x80 [ 389.307044][T10566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.307066][T10566] RIP: 0023:0xf709e539 [ 389.307082][T10566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 389.307097][T10566] RSP: 002b:00000000f508e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 389.307119][T10566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f508e620 [ 389.307132][T10566] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000 [ 389.307143][T10566] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 389.307154][T10566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 389.307165][T10566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.307196][T10566] [ 389.607994][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 389.633591][ T10] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 389.695258][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 389.743146][ T10] usb 3-1: can't read configurations, error -61 [ 389.865052][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 389.895212][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 390.086098][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 390.097060][ T10] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 390.124850][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 390.132981][ T10] usb 3-1: can't read configurations, error -61 [ 390.133433][T10581] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 390.153388][ T10] usb usb3-port1: attempt power cycle [ 390.161800][T10581] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 390.185371][ T5916] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 390.341083][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 390.356892][ T5916] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 390.365852][ T5916] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 390.381497][ T5916] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 390.398605][ T5916] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 390.439141][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 390.458687][ T5916] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 390.474835][ T5916] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 390.485259][ T5916] usb 4-1: Product: syz [ 390.489472][ T5916] usb 4-1: Manufacturer: syz [ 390.495129][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 390.504506][ T5916] usb 4-1: SerialNumber: syz [ 390.518182][ T5916] usb 4-1: config 0 descriptor?? [ 390.541259][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 390.541360][ T5916] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 390.558105][ T10] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 390.581142][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 390.588442][ T5916] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 390.594639][ T10] usb 3-1: can't read configurations, error -61 [ 390.744809][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 390.795073][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 390.800969][ T10] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 390.837089][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 390.864018][ T10] usb 3-1: can't read configurations, error -61 [ 390.874787][ T10] usb usb3-port1: unable to enumerate USB device [ 391.039328][ T5916] usb 4-1: USB disconnect, device number 31 [ 391.039524][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1469'. [ 391.045410][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 391.045898][T10578] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 391.075821][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1469'. [ 391.087372][ T5916] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 392.074732][ T978] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 392.153326][ T5916] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 392.246007][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 392.259792][T10617] FAULT_INJECTION: forcing a failure. [ 392.259792][T10617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.276578][ T978] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 392.285807][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.338436][T10617] CPU: 1 UID: 0 PID: 10617 Comm: syz.4.1472 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 392.338483][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.338494][T10617] Call Trace: [ 392.338503][T10617] [ 392.338511][T10617] dump_stack_lvl+0x189/0x250 [ 392.338543][T10617] ? __pfx____ratelimit+0x10/0x10 [ 392.338571][T10617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.338599][T10617] ? __pfx__printk+0x10/0x10 [ 392.338620][T10617] ? __might_fault+0xb0/0x130 [ 392.338660][T10617] should_fail_ex+0x414/0x560 [ 392.338690][T10617] _copy_from_user+0x2d/0xb0 [ 392.338712][T10617] get_compat_msghdr+0xad/0x4a0 [ 392.338744][T10617] ? __pfx_get_compat_msghdr+0x10/0x10 [ 392.338772][T10617] ? rcu_is_watching+0x15/0xb0 [ 392.338800][T10617] ? ___sys_recvmsg+0x1c4/0x510 [ 392.338831][T10617] ___sys_recvmsg+0x17f/0x510 [ 392.338862][T10617] ? __pfx____sys_recvmsg+0x10/0x10 [ 392.338913][T10617] ? __fget_files+0x3a0/0x420 [ 392.338947][T10617] do_recvmmsg+0x36a/0x770 [ 392.338982][T10617] ? __pfx_do_recvmmsg+0x10/0x10 [ 392.339021][T10617] ? __pfx_vfs_write+0x10/0x10 [ 392.339068][T10617] __sys_recvmmsg+0x19d/0x280 [ 392.339096][T10617] ? __pfx___sys_recvmmsg+0x10/0x10 [ 392.339117][T10617] ? ksys_write+0x22a/0x250 [ 392.339143][T10617] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 392.339169][T10617] __do_fast_syscall_32+0xb6/0x2b0 [ 392.339187][T10617] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.339216][T10617] do_fast_syscall_32+0x34/0x80 [ 392.339235][T10617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.339256][T10617] RIP: 0023:0xf709e539 [ 392.339272][T10617] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 392.339288][T10617] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 392.339308][T10617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 392.339321][T10617] RDX: 000000000291962b RSI: 000000002e4b39ff RDI: 0000000000000000 [ 392.339333][T10617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.339344][T10617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 392.339355][T10617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.339383][T10617] [ 392.580135][ T978] usb 1-1: config 0 has no interface number 0 [ 392.586434][ T978] usb 1-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.599594][ T978] usb 1-1: config 0 interface 184 has no altsetting 0 [ 392.640566][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.650880][ T5916] usb 6-1: config 0 has no interfaces? [ 392.658679][ T5916] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.668033][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 392.676216][ T5916] usb 6-1: SerialNumber: syz [ 392.689161][ T5916] usb 6-1: config 0 descriptor?? [ 392.706349][ T978] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 392.715620][T10619] netlink: 'syz.2.1474': attribute type 9 has an invalid length. [ 392.764674][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.772746][ T978] usb 1-1: Product: syz [ 392.837078][ T978] usb 1-1: Manufacturer: syz [ 392.849649][ T978] usb 1-1: SerialNumber: syz [ 392.884503][ T978] usb 1-1: config 0 descriptor?? [ 392.901062][T10623] __nla_validate_parse: 1 callbacks suppressed [ 392.901082][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 392.978176][T10626] input: syz0 as /devices/virtual/input/input38 [ 393.391647][T10632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1479'. [ 393.416501][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 393.526272][T10634] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 393.686083][T10634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.781399][T10639] macsec2: entered promiscuous mode [ 394.387970][ T978] smsc75xx v1.0.0 [ 394.404284][ T978] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 394.442660][ T978] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 394.464329][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 394.497236][ T978] usb 1-1: USB disconnect, device number 46 [ 394.640332][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 394.658184][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.681990][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.702406][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 394.718779][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.740526][ T10] usb 3-1: config 0 descriptor?? [ 394.760177][ T10] hub 3-1:0.0: USB hub found [ 394.959432][ T10] hub 3-1:0.0: 1 port detected [ 394.964799][ T5924] usb 6-1: USB disconnect, device number 43 [ 395.166249][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.201904][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.220195][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 395.244474][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 395.267749][T10658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.289538][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 395.292213][T10658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.300645][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 395.341502][ T10] usb 3-1: USB disconnect, device number 45 [ 396.300969][T10684] syz.5.1495 (10684): attempted to duplicate a private mapping with mremap. This is not supported. [ 396.526117][T10691] random: crng reseeded on system resumption [ 396.552913][T10692] binder: 10690:10692 ioctl c0306201 800003c0 returned -22 [ 396.644669][ T5909] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 396.815460][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 396.848791][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 396.890639][ T5909] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 396.899140][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.992820][ T5909] usb 3-1: config 0 has no interface number 0 [ 397.032820][ T5909] usb 3-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.134697][ T5909] usb 3-1: config 0 interface 184 has no altsetting 0 [ 397.173663][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 397.197513][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.221196][ T5909] usb 3-1: Product: syz [ 397.269873][ T5909] usb 3-1: Manufacturer: syz [ 397.282364][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'. [ 397.331953][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 397.359136][ T5909] usb 3-1: SerialNumber: syz [ 397.383572][ T5909] usb 3-1: config 0 descriptor?? [ 397.493067][T10703] wireguard1: entered promiscuous mode [ 397.499101][T10703] wireguard1: entered allmulticast mode [ 398.030671][ T980] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 398.323063][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 398.331758][ T980] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 398.378720][ T980] usb 5-1: config 0 has no interface number 0 [ 398.391619][ T980] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.474860][ T980] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.524655][ T980] usb 5-1: config 0 interface 85 has no altsetting 0 [ 398.552506][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 398.562481][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.592925][ T980] usb 5-1: Product: syz [ 398.602974][ T980] usb 5-1: Manufacturer: syz [ 398.628791][ T980] usb 5-1: SerialNumber: syz [ 398.696031][ T980] usb 5-1: config 0 descriptor?? [ 399.603096][ T5909] smsc75xx v1.0.0 [ 399.607210][ T5909] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 399.647651][ T5909] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 399.779755][ T5909] usb 3-1: USB disconnect, device number 46 [ 400.087558][T10715] input: syz1 as /devices/virtual/input/input40 [ 400.893739][ T980] appletouch 5-1:0.85: Failed to request geyser raw mode [ 400.901293][ T980] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 400.951232][ T980] usb 5-1: USB disconnect, device number 40 [ 401.354662][ T978] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 401.520553][T10737] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 401.554777][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 401.567784][ T978] usb 3-1: config 0 has no interfaces? [ 401.582288][ T978] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 401.595146][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.612422][ T978] usb 3-1: Product: syz [ 401.621205][ T978] usb 3-1: Manufacturer: syz [ 401.636234][ T978] usb 3-1: SerialNumber: syz [ 401.683633][ T978] usb 3-1: config 0 descriptor?? [ 401.727778][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 401.760585][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 401.779465][ T10] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 401.814121][ T10] usb 1-1: Product: syz [ 401.834088][ T10] usb 1-1: Manufacturer: syz [ 401.975329][ T10] usb 1-1: SerialNumber: syz [ 402.067883][ T10] usb 1-1: config 0 descriptor?? [ 402.102627][ T978] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 402.211727][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 402.444671][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 402.584688][ T5909] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 402.806990][ T5909] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 402.815487][ T5909] usb 5-1: config 0 has no interface number 0 [ 402.821699][ T5909] usb 5-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid maxpacket 58435, setting to 64 [ 402.853499][ T5909] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 402.869060][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.909747][ T978] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 402.921842][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.944283][ T5909] usb 5-1: config 0 descriptor?? [ 402.959343][ T978] usb 4-1: config 0 has no interface number 0 [ 403.075750][ T10] gspca_zc3xx: reg_w_i err -110 [ 403.080861][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 403.095610][ T978] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 403.110010][T10750] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 403.473273][ T5909] usbhid 5-1:0.27: can't add hid device: -71 [ 403.557017][ T978] usb 4-1: config 0 interface 184 has no altsetting 0 [ 403.644798][ T5909] usbhid 5-1:0.27: probe with driver usbhid failed with error -71 [ 403.735476][ T978] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 403.752349][ T5909] usb 5-1: USB disconnect, device number 41 [ 403.764807][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.848200][ T978] usb 4-1: Product: syz [ 403.914376][ T5931] usb 3-1: USB disconnect, device number 47 [ 403.949657][ T978] usb 4-1: Manufacturer: syz [ 403.967693][ T978] usb 4-1: SerialNumber: syz [ 404.031796][ T978] usb 4-1: config 0 descriptor?? [ 404.707779][ T5909] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 404.864951][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 404.865278][ T980] usb 1-1: USB disconnect, device number 48 [ 404.872658][ T5909] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 404.933308][ T5909] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 404.986438][ T5909] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 405.050279][ T5909] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 405.173795][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.210445][T10783] FAULT_INJECTION: forcing a failure. [ 405.210445][T10783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.229541][ T5909] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 405.244694][ T5909] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 405.291010][ T5909] usb 5-1: Product: syz [ 405.318701][ T5909] usb 5-1: Manufacturer: syz [ 405.340481][ T5909] usb 5-1: SerialNumber: syz [ 405.370886][T10783] CPU: 1 UID: 0 PID: 10783 Comm: syz.0.1524 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 405.370917][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.370928][T10783] Call Trace: [ 405.370936][T10783] [ 405.370945][T10783] dump_stack_lvl+0x189/0x250 [ 405.370979][T10783] ? __pfx____ratelimit+0x10/0x10 [ 405.371006][T10783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.371034][T10783] ? __pfx__printk+0x10/0x10 [ 405.371055][T10783] ? __might_fault+0xb0/0x130 [ 405.371092][T10783] should_fail_ex+0x414/0x560 [ 405.371122][T10783] _copy_from_user+0x2d/0xb0 [ 405.371142][T10783] get_compat_msghdr+0xad/0x4a0 [ 405.371173][T10783] ? __pfx_get_compat_msghdr+0x10/0x10 [ 405.371201][T10783] ? rcu_is_watching+0x15/0xb0 [ 405.371227][T10783] ? ___sys_recvmsg+0x1c4/0x510 [ 405.371259][T10783] ___sys_recvmsg+0x17f/0x510 [ 405.371287][T10783] ? __pfx____sys_recvmsg+0x10/0x10 [ 405.371340][T10783] ? __fget_files+0x3a0/0x420 [ 405.371373][T10783] do_recvmmsg+0x36a/0x770 [ 405.371408][T10783] ? __pfx_do_recvmmsg+0x10/0x10 [ 405.371444][T10783] ? __pfx_vfs_write+0x10/0x10 [ 405.371491][T10783] __sys_recvmmsg+0x19d/0x280 [ 405.371518][T10783] ? __pfx___sys_recvmmsg+0x10/0x10 [ 405.371540][T10783] ? ksys_write+0x22a/0x250 [ 405.371566][T10783] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 405.371595][T10783] __do_fast_syscall_32+0xb6/0x2b0 [ 405.371615][T10783] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.371646][T10783] do_fast_syscall_32+0x34/0x80 [ 405.371665][T10783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.371687][T10783] RIP: 0023:0xf7fd2539 [ 405.371702][T10783] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 405.371718][T10783] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 405.371739][T10783] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 405.371752][T10783] RDX: 000000000291962b RSI: 000000002e4b39ff RDI: 0000000000000000 [ 405.371764][T10783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.371775][T10783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 405.371787][T10783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.371825][T10783] [ 405.375820][ T5909] usb 5-1: config 0 descriptor?? [ 405.800077][T10786] binder: 10784:10786 unknown command 4030988323 [ 405.896574][T10786] binder: 10784:10786 ioctl c0306201 80000440 returned -22 [ 405.900952][ T5909] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 405.916463][ T5909] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 405.963800][T10789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'. [ 406.032271][ T978] smsc75xx v1.0.0 [ 406.038839][ T978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 406.122177][ T978] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 406.146562][ T978] usb 4-1: USB disconnect, device number 32 [ 406.257328][T10751] usb 5-1: USB disconnect, device number 42 [ 406.263404][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 406.292638][T10773] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 406.387199][T10751] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 407.844394][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 407.874820][ T978] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 408.074669][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 408.092563][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.133345][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.137320][ T5924] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 408.191709][ T978] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 408.231077][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.259589][ T978] usb 4-1: config 0 descriptor?? [ 408.274802][ T5924] usb 5-1: device descriptor read/64, error -71 [ 408.515006][ T5924] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 408.605274][ T5917] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 408.679440][ T5924] usb 5-1: device descriptor read/64, error -71 [ 408.721574][ T978] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 408.807831][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 408.834760][ T5924] usb usb5-port1: attempt power cycle [ 408.862599][ T5917] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 408.893875][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.907922][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.920134][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.933728][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.954073][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.972951][ T978] usb 4-1: USB disconnect, device number 33 [ 409.028201][ T5917] usb 1-1: config 0 has no interface number 0 [ 409.034403][ T5917] usb 1-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 409.188033][ T5917] usb 1-1: config 0 interface 184 has no altsetting 0 [ 409.225920][ T5924] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 409.267693][ T5924] usb 5-1: device descriptor read/8, error -71 [ 409.281604][ T5917] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 409.324697][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.352240][ T5917] usb 1-1: Product: syz [ 409.353002][T10847] Invalid logical block size (-1) [ 409.363038][ T5917] usb 1-1: Manufacturer: syz [ 409.371296][ T5917] usb 1-1: SerialNumber: syz [ 409.379936][T10846] ÿ: renamed from dummy0 (while UP) [ 409.389982][ T5917] usb 1-1: config 0 descriptor?? [ 409.433021][T10848] loop6: detected capacity change from 0 to 7 [ 409.463842][T10848] Dev loop6: unable to read RDB block 7 [ 409.475604][T10848] loop6: unable to read partition table [ 409.510053][T10848] loop6: partition table beyond EOD, truncated [ 409.532462][T10848] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 409.541973][ T5924] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 409.605612][ T5924] usb 5-1: device descriptor read/8, error -71 [ 409.643608][T10850] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 409.657154][T10846] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1542'. [ 409.769707][ T5924] usb usb5-port1: unable to enumerate USB device [ 409.884788][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 409.926326][T10852] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1545'. [ 409.975190][T10852] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1545'. [ 410.707391][T10873] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1553'. [ 411.001518][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 411.232475][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1556'. [ 411.241916][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1556'. [ 411.481642][ T5917] smsc75xx v1.0.0 [ 411.485660][ T5917] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 411.563351][ T5917] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 411.593358][ T5917] usb 1-1: USB disconnect, device number 49 [ 411.868775][T10888] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 411.926656][ T5909] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 411.985344][ T5916] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 412.104088][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 412.128123][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 412.139098][ T5909] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 412.152744][ T5909] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.160709][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.163358][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.181717][ T5916] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 412.205429][T10903] trusted_key: encrypted_key: keylen parameter is missing [ 412.207119][ T5916] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.212704][ T5909] usb 4-1: Product: syz [ 412.242289][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.251673][ T5909] usb 4-1: Manufacturer: syz [ 412.262082][ T5909] usb 4-1: SerialNumber: syz [ 412.286907][ T5909] usb 4-1: config 0 descriptor?? [ 412.308004][ T5916] usb 6-1: Product: syz [ 412.312302][ T5916] usb 6-1: Manufacturer: syz [ 412.316820][ T5909] hub 4-1:0.0: bad descriptor, ignoring hub [ 412.322895][ T5916] usb 6-1: SerialNumber: syz [ 412.325063][ T5909] hub 4-1:0.0: probe with driver hub failed with error -5 [ 412.624460][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.665685][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.677069][ T5916] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 412.682944][ T5909] usb 4-1: USB disconnect, device number 34 [ 412.741254][ T5916] usb 6-1: USB disconnect, device number 44 [ 413.154695][ T5909] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 413.204805][ T5916] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 413.346705][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.357962][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.370783][ T5909] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.380142][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.394435][ T5909] usb 5-1: SerialNumber: syz [ 413.474709][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 413.838181][ T5916] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 413.847914][ T5916] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 413.861165][ T5916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.877061][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.893107][ T5916] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.914451][ T5916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.931628][ T5916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.953837][ T5916] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 413.973982][T10922] ptrace attach of "./syz-executor exec"[5861] was attempted by "./syz-executor exec"[10922] [ 414.008585][T10922] loop2: detected capacity change from 0 to 7 [ 414.032914][T10922] Dev loop2: unable to read RDB block 7 [ 414.039102][T10922] loop2: AHDI p2 p3 [ 414.043172][T10922] loop2: partition table partially beyond EOD, truncated [ 414.051764][T10922] loop2: p2 size 150995456 extends beyond EOD, truncated [ 414.149350][T10751] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 414.377669][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.535961][T10751] usb 4-1: Using ep0 maxpacket: 32 [ 414.628872][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 414.657941][ T5916] usbtmc 6-1:16.0: bulk endpoints not found [ 414.806123][ T978] usb 6-1: USB disconnect, device number 45 [ 415.023727][T10751] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 415.032584][T10751] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.092254][T10751] usb 4-1: config 0 has no interface number 0 [ 415.108445][T10751] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.140905][T10751] usb 4-1: config 0 interface 184 has no altsetting 0 [ 415.174283][T10751] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 415.195471][T10924] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1571'. [ 415.204086][T10751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.229363][T10751] usb 4-1: Product: syz [ 415.237176][T10751] usb 4-1: Manufacturer: syz [ 415.254764][T10751] usb 4-1: SerialNumber: syz [ 415.281677][T10751] usb 4-1: config 0 descriptor?? [ 415.847143][ T5909] usb 5-1: 0:2 : does not exist [ 415.968228][ T5909] usb 5-1: USB disconnect, device number 47 [ 416.110987][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.190542][T10938] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 416.480743][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 416.494392][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1578'. [ 416.714765][ T5909] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 416.735192][T10751] smsc75xx v1.0.0 [ 416.747411][T10751] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 416.782813][T10751] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 416.831872][T10751] usb 4-1: USB disconnect, device number 35 [ 416.914773][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 416.937755][ T5909] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 416.993204][ T5909] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 416.997900][T10959] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1581'. [ 417.028358][ T5909] usb 1-1: Product: syz [ 417.053298][ T5909] usb 1-1: Manufacturer: syz [ 417.059910][ T5909] usb 1-1: SerialNumber: syz [ 417.098123][ T5909] usb 1-1: config 0 descriptor?? [ 417.121967][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 417.177969][ T5909] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 417.457997][T10965] fuse: Unknown parameter 'rootmoìe' [ 417.763568][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 417.946090][ T10] usb 5-1: config 0 has no interfaces? [ 417.959234][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 417.968654][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.994762][ T10] usb 5-1: Product: syz [ 418.015962][ T10] usb 5-1: Manufacturer: syz [ 418.030235][ T10] usb 5-1: SerialNumber: syz [ 418.075924][ T10] usb 5-1: config 0 descriptor?? [ 418.095272][ T5909] gspca_zc3xx: reg_w_i err -110 [ 418.100403][ T5909] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 419.106686][T10980] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 419.734815][ T10] usb 1-1: USB disconnect, device number 50 [ 420.114438][T11002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'. [ 420.374769][ T5917] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 420.402212][ T10] usb 5-1: USB disconnect, device number 48 [ 420.544678][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 420.553953][ T5917] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 420.582723][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.635238][ T5917] usb 6-1: config 0 has no interface number 0 [ 420.655228][ T5917] usb 6-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 420.700112][ T5917] usb 6-1: config 0 interface 184 has no altsetting 0 [ 420.725621][T11018] netlink: 828 bytes leftover after parsing attributes in process `syz.4.1599'. [ 420.748784][ T5917] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 420.762512][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.770986][ T5917] usb 6-1: Product: syz [ 420.777653][ T5917] usb 6-1: Manufacturer: syz [ 420.783061][ T5917] usb 6-1: SerialNumber: syz [ 420.840143][ T5917] usb 6-1: config 0 descriptor?? [ 420.953628][T11022] input: syz0 as /devices/virtual/input/input41 [ 422.582165][ T30] audit: type=1326 audit(1750359380.004:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 422.631601][ T30] audit: type=1326 audit(1750359380.004:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 422.730371][ T30] audit: type=1326 audit(1750359380.004:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 422.817998][ T30] audit: type=1326 audit(1750359380.004:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 422.846405][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 422.905983][ T30] audit: type=1326 audit(1750359380.014:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 422.906511][T11043] vlan2: entered promiscuous mode [ 422.976160][ T30] audit: type=1326 audit(1750359380.014:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 423.120105][ T30] audit: type=1326 audit(1750359380.014:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 423.237936][ T30] audit: type=1326 audit(1750359380.014:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 423.354785][ T30] audit: type=1326 audit(1750359380.024:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 423.442663][ T30] audit: type=1326 audit(1750359380.024:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.4.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 423.485639][ T5917] smsc75xx v1.0.0 [ 423.489387][ T5917] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 423.525122][ T5924] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 423.555269][ T5917] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 423.585165][ T5917] usb 6-1: USB disconnect, device number 46 [ 423.682746][T11058] lo: entered allmulticast mode [ 423.704939][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 423.728130][ T5924] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 423.743900][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.754521][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 423.762644][ T5924] usb 5-1: Product: syz [ 423.766920][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 423.772757][ T5924] usb 5-1: Manufacturer: syz [ 423.785906][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 423.794591][ T5924] usb 5-1: SerialNumber: syz [ 423.797444][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 423.865920][ T5924] usb 5-1: config 0 descriptor?? [ 423.937166][ T5924] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 423.977503][ T5924] usb 5-1: setting power ON [ 423.982426][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 424.025935][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.047412][ T5924] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 424.064977][ T5924] usb 5-1: media controller created [ 424.132159][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.154964][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 424.165530][T11051] dvb-usb: bulk message failed: -22 (3/0) [ 424.192258][T11051] dvb-usb: bulk message failed: -22 (3/0) [ 424.255563][ T5924] usb 5-1: selecting invalid altsetting 6 [ 424.271992][ T5924] usb 5-1: digital interface selection failed (-22) [ 424.280036][ T5924] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 424.290900][ T5924] usb 5-1: setting power OFF [ 424.298189][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 424.308038][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 424.319293][ T5924] (NULL device *): no alternate interface [ 424.319465][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 424.345499][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 424.362846][ T10] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 424.376267][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 424.382716][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 424.403422][ T5924] usb 5-1: USB disconnect, device number 49 [ 424.427158][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 424.467076][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.510620][ T10] usb 3-1: Product: syz [ 424.532117][ T10] usb 3-1: Manufacturer: syz [ 424.553089][ T10] usb 3-1: SerialNumber: syz [ 425.010030][ T10] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 425.022999][ T10] usb 3-1: No valid video chain found. [ 425.054427][T11055] lo: left allmulticast mode [ 425.073446][ T10] usb 3-1: USB disconnect, device number 48 [ 425.474875][ T5924] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 425.474916][T10751] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 425.680584][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 425.706035][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.719014][ T5924] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 425.724770][T10751] usb 1-1: Using ep0 maxpacket: 32 [ 425.781514][ T5924] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.890010][ T5924] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.906880][T10751] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 425.916301][T10751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.938056][T11103] ptrace attach of ""[11102] was attempted by "./syz-executor exec"[11103] [ 425.957667][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.991626][ T5924] usb 4-1: Product: syz [ 426.008336][ T10] usb 5-1: config 0 has no interfaces? [ 426.036767][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 426.037990][ T5924] usb 4-1: Manufacturer: syz [ 426.088037][ T5924] usb 4-1: SerialNumber: syz [ 426.143205][T10751] usb 1-1: config 0 has no interface number 0 [ 426.177702][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.214497][T10751] usb 1-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.214930][ T5917] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 426.244335][ T10] usb 5-1: Product: syz [ 426.257227][ T10] usb 5-1: Manufacturer: syz [ 426.262037][T10751] usb 1-1: config 0 interface 184 has no altsetting 0 [ 426.277711][ T10] usb 5-1: SerialNumber: syz [ 426.301148][ T10] usb 5-1: config 0 descriptor?? [ 426.496688][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.532634][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.533435][T10751] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 426.592647][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.626125][T10751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.656637][T10751] usb 1-1: Product: syz [ 426.674118][T10751] usb 1-1: Manufacturer: syz [ 426.680254][ T5917] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.694003][T10751] usb 1-1: SerialNumber: syz [ 426.718370][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.794253][T10751] usb 1-1: config 0 descriptor?? [ 426.807720][ T5917] usb 3-1: config 0 descriptor?? [ 427.296503][ T5917] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x2 [ 427.323641][ T5917] plantronics 0003:047F:FFFF.0007: global environment stack underflow [ 427.460525][ T5917] plantronics 0003:047F:FFFF.0007: item 0 4 1 11 parsing failed [ 427.564113][ T5917] plantronics 0003:047F:FFFF.0007: parse failed [ 427.607839][ T5917] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 428.055899][ T5924] usb 4-1: cannot find UAC_HEADER [ 428.094228][ T5924] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 428.269004][ T5924] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 428.334751][ T5924] usb 4-1: MIDIStreaming interface descriptor not found [ 428.574989][ T5924] usb 4-1: USB disconnect, device number 36 [ 428.602813][T10751] smsc75xx v1.0.0 [ 428.617240][T10751] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 428.655728][T10751] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 428.729615][T10751] usb 1-1: USB disconnect, device number 51 [ 428.792940][ T980] usb 5-1: USB disconnect, device number 50 [ 428.925721][ T6140] udevd[6140]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.968535][T11116] macsec1: entered promiscuous mode [ 429.378603][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1634'. [ 431.264063][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 431.299906][T11142] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1640'. [ 431.333575][T11142] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1640'. [ 431.462020][ T978] usb 3-1: USB disconnect, device number 49 [ 431.564843][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 431.804714][ T5924] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 431.815381][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 431.853990][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 431.892268][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.964726][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 431.978236][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.044794][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.059910][ T10] usb 1-1: Product: syz [ 432.082039][ T10] usb 1-1: Manufacturer: syz [ 432.086872][ T10] usb 1-1: SerialNumber: syz [ 432.098756][ T5924] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 432.099725][ T10] usb 1-1: config 0 descriptor?? [ 432.150727][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 432.171192][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 432.224622][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.272934][ T5924] usb 6-1: config 0 has no interface number 0 [ 432.309393][ T5924] usb 6-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 432.464158][ T5924] usb 6-1: config 0 interface 184 has no altsetting 0 [ 432.499361][ T5924] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 432.517140][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.667118][ T5924] usb 6-1: Product: syz [ 432.674266][ T5924] usb 6-1: Manufacturer: syz [ 432.699696][ T5924] usb 6-1: SerialNumber: syz [ 432.716611][ T5924] usb 6-1: config 0 descriptor?? [ 432.770184][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 432.816224][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 432.831128][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 432.993201][T11165] vlan0: entered promiscuous mode [ 433.251850][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 433.361053][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 433.445916][ T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 433.454367][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 434.078807][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.204870][ T5917] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 434.275296][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 434.284798][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 434.298684][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 434.344374][ T10] usb 1-1: USB disconnect, device number 52 [ 434.370425][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 434.523460][ T5924] smsc75xx v1.0.0 [ 434.527230][ T5924] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 434.576646][ T5917] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.608096][ T5924] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 434.616480][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.624506][ T5917] usb 5-1: Product: syz [ 434.647543][ T5924] usb 6-1: USB disconnect, device number 47 [ 434.655902][ T5917] usb 5-1: Manufacturer: syz [ 434.660665][ T5917] usb 5-1: SerialNumber: syz [ 434.690937][ T5917] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 434.793421][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.409543][T11197] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1661'. [ 435.423744][T11197] bond0: entered promiscuous mode [ 435.430432][T11197] bond_slave_0: entered promiscuous mode [ 435.437520][T11197] bond_slave_1: entered promiscuous mode [ 438.344823][ T5924] usb 5-1: USB disconnect, device number 51 [ 438.364826][ T24] usb 5-1: Service connection timeout for: 256 [ 438.371007][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 438.426477][ T24] ath9k_htc: Failed to initialize the device [ 438.432876][ T5924] usb 5-1: ath9k_htc: USB layer deinitialized [ 438.753011][T11208] vlan2: entered promiscuous mode [ 438.769006][T11210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1666'. [ 439.119853][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 439.190092][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 439.473343][T11219] can: request_module (can-proto-0) failed. [ 439.505339][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 439.692024][T11231] Invalid logical block size (-1) [ 439.764658][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 440.042582][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 440.116522][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.141295][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.147746][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.174498][ T10] usb 5-1: config 0 has no interface number 0 [ 440.186450][ T10] usb 5-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 440.222980][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 440.376543][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 440.386731][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.394816][T11199] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 440.405911][ T10] usb 5-1: Product: syz [ 440.410265][ T10] usb 5-1: Manufacturer: syz [ 440.415395][ T10] usb 5-1: SerialNumber: syz [ 440.424246][ T10] usb 5-1: config 0 descriptor?? [ 440.542443][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1672'. [ 440.544801][T11199] usb 1-1: Using ep0 maxpacket: 32 [ 440.597611][T11199] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.630013][T11199] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.670784][T11199] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 440.683633][T11199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.703757][T11199] usb 1-1: Product: syz [ 440.713547][T11199] usb 1-1: Manufacturer: syz [ 440.728949][T11199] usb 1-1: SerialNumber: syz [ 440.749602][T11199] usb 1-1: config 0 descriptor?? [ 440.875204][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 440.951384][T11244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1678'. [ 441.005487][T11244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1678'. [ 441.210605][T11241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.225445][T11241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.295604][ T24] usb 1-1: USB disconnect, device number 53 [ 441.841842][ T5909] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 442.033441][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 442.066323][ T5909] usb 6-1: config 29 has an invalid descriptor of length 0, skipping remainder of the config [ 442.103394][ T5909] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 442.122836][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.159813][ T5909] usb 6-1: Product: syz [ 442.184460][ T5909] usb 6-1: Manufacturer: syz [ 442.206521][ T5909] usb 6-1: SerialNumber: syz [ 442.252682][ T5909] gspca_main: t613-2.14.0 probing 17a1:0128 [ 442.367055][T11261] CIFS: VFS: Malformed UNC in devname [ 442.461688][ T5909] gspca_t613: unknown sensor 0000 [ 442.481819][ T5909] t613 6-1:29.0: probe with driver t613 failed with error -22 [ 442.507515][ T5909] usb 6-1: USB disconnect, device number 48 [ 442.524835][ T5917] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 442.690054][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.722493][ T5917] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 442.748927][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.752347][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1688'. [ 442.778649][ T5917] usb 1-1: config 0 descriptor?? [ 442.950351][ T10] smsc75xx v1.0.0 [ 442.975855][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 443.015259][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 443.071154][ T10] usb 5-1: USB disconnect, device number 52 [ 443.199693][ T5917] itetech 0003:258A:6A88.0008: item fetching failed at offset 3/7 [ 443.217968][ T5917] itetech 0003:258A:6A88.0008: probe with driver itetech failed with error -22 [ 443.248910][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 443.475258][T11259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.619888][T11259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.954722][ T5917] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 443.955706][T11259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.196381][T11259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.219212][ T24] usb 1-1: USB disconnect, device number 54 [ 444.681988][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 444.732231][ T5917] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.763733][ T5917] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.817531][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 444.854723][ T5917] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 444.885733][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.903126][ T5917] usb 5-1: config 0 descriptor?? [ 444.913046][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 444.929118][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 444.939240][T11298] netlink: 'syz.3.1698': attribute type 6 has an invalid length. [ 444.948047][T11298] netlink: 'syz.3.1698': attribute type 5 has an invalid length. [ 445.127780][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 445.442530][ T5909] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 445.676549][ T5909] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 445.735388][ T5909] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.829095][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 445.896746][ T5909] usb 3-1: config 1 has no interface number 0 [ 445.929958][ T5909] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 446.014649][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 446.031111][ T5909] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 446.062349][T11317] bridge_slave_0: entered promiscuous mode [ 446.074894][ T5909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.089968][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.117222][ T5909] usb 3-1: Product: syz [ 446.132019][ T5909] usb 3-1: Manufacturer: syz [ 446.196888][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 446.209352][ T5909] usb 3-1: SerialNumber: syz [ 446.217041][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 446.225902][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.263478][ T10] usb 1-1: config 0 has no interface number 0 [ 446.332549][ T10] usb 1-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.370690][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 446.466826][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 446.477742][ T5909] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 446.512440][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.530521][ T5909] usb 3-1: USB disconnect, device number 50 [ 446.588478][ T10] usb 1-1: Product: syz [ 446.612995][ T10] usb 1-1: Manufacturer: syz [ 446.639915][ T10] usb 1-1: SerialNumber: syz [ 446.668864][ T10] usb 1-1: config 0 descriptor?? [ 447.209490][T11321] bridge0: entered promiscuous mode [ 447.215527][T11321] vlan0: entered promiscuous mode [ 447.241102][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 447.249081][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 447.295059][ T5917] usb 5-1: USB disconnect, device number 53 [ 448.562177][ T10] smsc75xx v1.0.0 [ 448.569537][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 448.639411][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 448.703022][ T10] usb 1-1: USB disconnect, device number 55 [ 448.784318][ T5917] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 448.978958][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.007344][ T5917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.008253][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1712'. [ 449.049476][ T5917] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 449.076360][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.106450][ T5917] usb 5-1: config 0 descriptor?? [ 449.122035][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 449.154793][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 449.238631][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.269650][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.299106][T11351] netlink: 204152 bytes leftover after parsing attributes in process `syz.2.1715'. [ 449.325287][ T10] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 449.348100][ T10] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 449.373869][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 449.414393][ T10] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 449.436497][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 449.450608][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.499448][ T5917] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 449.527504][T11353] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 449.542228][T11355] netlink: 828 bytes leftover after parsing attributes in process `syz.2.1717'. [ 449.669424][ T10] ath6kl: Failed to submit usb control message: -71 [ 449.680928][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 449.692781][ T10] ath6kl: Unable to send get target info: -71 [ 449.711319][ T5917] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 449.720874][ T5917] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 449.730036][ T10] ath6kl: Failed to init ath6kl core: -71 [ 449.740063][ T5917] usb 6-1: config 0 has no interface number 0 [ 449.756922][ T5917] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 449.772390][ T10] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 449.805375][ T5917] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 449.813127][ T10] usb 1-1: USB disconnect, device number 56 [ 449.846878][ T5917] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 449.864849][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.906099][ T5917] usb 6-1: config 0 descriptor?? [ 450.168743][ T5917] usb 6-1: USB disconnect, device number 49 [ 450.404680][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 450.574663][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 450.585318][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 450.599899][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.661875][ T24] usb 3-1: config 0 has no interface number 0 [ 450.713760][ T24] usb 3-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 450.764667][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 450.809458][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 450.819668][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.829811][ T24] usb 3-1: Product: syz [ 450.834031][ T24] usb 3-1: Manufacturer: syz [ 450.839479][ T24] usb 3-1: SerialNumber: syz [ 450.855981][ T24] usb 3-1: config 0 descriptor?? [ 450.873698][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 451.389944][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 451.401134][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 451.517658][ T5917] usb 5-1: USB disconnect, device number 54 [ 451.696902][T11385] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1726'. [ 451.755479][T11385] tipc: Invalid UDP bearer configuration [ 451.755582][T11385] tipc: Enabling of bearer rejected, failed to enable media [ 451.773197][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 452.018504][T11391] netlink: 828 bytes leftover after parsing attributes in process `syz.4.1728'. [ 452.158177][T11395] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 452.517341][T11412] x_tables: duplicate underflow at hook 2 [ 452.564956][ T5917] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 452.651133][T11408] can: request_module (can-proto-3) failed. [ 452.759333][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 452.771829][ T5917] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 452.782952][ T5917] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 452.830069][ T5917] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 452.941069][ T5917] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 453.042098][ T24] smsc75xx v1.0.0 [ 453.054662][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 453.088767][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 453.112282][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 453.424788][ T5917] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 453.433901][ T5917] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 453.445261][ T24] usb 3-1: USB disconnect, device number 51 [ 453.484257][ T5917] usb 5-1: Product: syz [ 453.494195][ T5917] usb 5-1: Manufacturer: syz [ 453.500964][ T5917] usb 5-1: SerialNumber: syz [ 453.509295][ T5917] usb 5-1: config 0 descriptor?? [ 453.523169][ T5917] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 453.608915][ T5917] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 453.895485][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 454.045183][T11433] __nla_validate_parse: 2 callbacks suppressed [ 454.045203][T11433] netlink: 828 bytes leftover after parsing attributes in process `syz.0.1743'. [ 454.072338][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 454.098019][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 454.115351][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 454.164741][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 454.193640][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.231942][ T10] usb 6-1: config 0 descriptor?? [ 454.274446][T11435] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 454.346299][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 454.504441][T11442] xt_NFQUEUE: number of total queues is 0 [ 454.519618][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1745'. [ 454.789420][ T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 454.796229][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1747'. [ 454.800959][ T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 454.813345][ T10] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 454.871368][ T10] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 455.006076][T11445] netlink: 'syz.0.1747': attribute type 3 has an invalid length. [ 455.403664][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1740'. [ 455.458225][ T10] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device [ 455.522221][ T10] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse [ 455.568313][ T10] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71 [ 455.614277][ T10] usb 6-1: USB disconnect, device number 50 [ 455.636467][ T5909] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 455.955066][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 456.011466][ T5909] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 456.022339][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.039192][ T5909] usb 4-1: config 0 has no interface number 0 [ 456.051373][ T5909] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 456.090546][ T5909] usb 4-1: config 0 interface 184 has no altsetting 0 [ 456.115150][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 456.171094][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.218778][ T5909] usb 4-1: Product: syz [ 456.233372][ T5909] usb 4-1: Manufacturer: syz [ 456.242022][ T5909] usb 4-1: SerialNumber: syz [ 456.264007][ T5909] usb 4-1: config 0 descriptor?? [ 456.295807][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1751'. [ 456.355187][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1751'. [ 456.572378][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1752'. [ 561.854488][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 561.861503][ C1] rcu: 0-...!: (3 ticks this GP) idle=7d3c/1/0x4000000000000000 softirq=70968/70968 fqs=0 [ 561.872822][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5861/1:b..l P5858/1:b..l [ 561.881928][ C1] rcu: (detected by 1, t=10502 jiffies, g=56229, q=95 ncpus=2) [ 561.889592][ C1] Sending NMI from CPU 1 to CPUs 0: [ 561.889622][ C0] NMI backtrace for cpu 0 [ 561.889636][ C0] CPU: 0 UID: 0 PID: 11463 Comm: syz.5.1754 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 561.889656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.889665][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 561.889690][ C0] Code: 18 16 00 00 83 fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 561.889703][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000006 [ 561.889716][ C0] RAX: ffffffff81aea188 RBX: ffff88802dcfc340 RCX: ffff8880321b5a00 [ 561.889727][ C0] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000020 [ 561.889738][ C0] RBP: 0000000000000010 R08: ffffffff8fa10df7 R09: 1ffffffff1f421be [ 561.889749][ C0] R10: dffffc0000000000 R11: fffffbfff1f421bf R12: dffffc0000000000 [ 561.889759][ C0] R13: 1ffff110170c4f78 R14: ffff8880b8627bc0 R15: 0000000000000001 [ 561.889770][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0063) knlGS:00000000f50eeb40 [ 561.889784][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 561.889794][ C0] CR2: 00000000582f799c CR3: 000000005265e000 CR4: 00000000003526f0 [ 561.889810][ C0] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 561.889820][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 561.889830][ C0] Call Trace: [ 561.889839][ C0] [ 561.889845][ C0] enqueue_hrtimer+0x148/0x3a0 [ 561.889864][ C0] __hrtimer_run_queues+0x656/0xc60 [ 561.889893][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 561.889913][ C0] ? read_tsc+0x9/0x20 [ 561.889934][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 561.889966][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 561.889989][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 561.890011][ C0] [ 561.890016][ C0] [ 561.890022][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.890038][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 561.890059][ C0] Code: 74 05 e8 ab 0c 5f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 f8 27 f6 65 8b 05 3c 14 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 561.890071][ C0] RSP: 0018:ffffc90004b6ee80 EFLAGS: 00000206 [ 561.890084][ C0] RAX: e382ef2bcea58500 RBX: 0000000000000a02 RCX: e382ef2bcea58500 [ 561.890094][ C0] RDX: 0000000000000002 RSI: ffffffff8d9823c9 RDI: 0000000000000001 [ 561.890103][ C0] RBP: ffffc90004b6ef10 R08: ffffffff8fa10df7 R09: 1ffffffff1f421be [ 561.890114][ C0] R10: dffffc0000000000 R11: fffffbfff1f421bf R12: dffffc0000000000 [ 561.890124][ C0] R13: ffff88802dcfc0f0 R14: ffff88802dcfc2e8 R15: 1ffff9200096ddd0 [ 561.890143][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 561.890166][ C0] taprio_change+0x3119/0x3f60 [ 561.890193][ C0] ? __pfx_taprio_change+0x10/0x10 [ 561.890216][ C0] ? ref_tracker_alloc+0x2ae/0x460 [ 561.890237][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 561.890272][ C0] taprio_init+0x959/0xbd0 [ 561.890293][ C0] ? __pfx_taprio_init+0x10/0x10 [ 561.890309][ C0] ? qdisc_alloc+0x770/0xaa0 [ 561.890327][ C0] ? __pfx_taprio_init+0x10/0x10 [ 561.890343][ C0] qdisc_create+0x7a9/0xea0 [ 561.890361][ C0] tc_modify_qdisc+0x1426/0x2010 [ 561.890388][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 561.890420][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 561.890440][ C0] rtnetlink_rcv_msg+0x779/0xb70 [ 561.890457][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 561.890472][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.890485][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 561.890502][ C0] ? __copy_skb_header+0xa7/0x550 [ 561.890521][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 561.890544][ C0] netlink_rcv_skb+0x205/0x470 [ 561.890561][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.890576][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.890597][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.890613][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.890631][ C0] netlink_unicast+0x758/0x8d0 [ 561.890651][ C0] netlink_sendmsg+0x805/0xb30 [ 561.890671][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.890689][ C0] ? __import_iovec+0x5d4/0x7f0 [ 561.890702][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 561.890721][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.890739][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.890756][ C0] __sock_sendmsg+0x21c/0x270 [ 561.890778][ C0] ____sys_sendmsg+0x505/0x830 [ 561.890798][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.890821][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 561.890840][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.890872][ C0] ? __fget_files+0x2a/0x420 [ 561.890887][ C0] ? __fget_files+0x3a0/0x420 [ 561.890907][ C0] __sys_sendmsg+0x164/0x220 [ 561.890925][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.890945][ C0] ? rcu_is_watching+0x15/0xb0 [ 561.890968][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 561.890989][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.891009][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 561.891025][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.891046][ C0] do_fast_syscall_32+0x34/0x80 [ 561.891059][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.891076][ C0] RIP: 0023:0xf70fe539 [ 561.891089][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 561.891100][ C0] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 561.891115][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800007c0 [ 561.891125][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.891134][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.891143][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 561.891152][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.891168][ C0] [ 561.891616][ C1] task:syz-executor state:R running task stack:20632 pid:5858 tgid:5858 ppid:5834 task_flags:0x400140 flags:0x20004002 [ 562.490911][ C1] Call Trace: [ 562.494225][ C1] [ 562.497197][ C1] __schedule+0x16f5/0x4d00 [ 562.501762][ C1] ? preempt_schedule_common+0x83/0xd0 [ 562.507266][ C1] ? __pfx___schedule+0x10/0x10 [ 562.512156][ C1] ? do_raw_spin_lock+0x121/0x290 [ 562.517229][ C1] ? preempt_schedule+0xae/0xc0 [ 562.522163][ C1] preempt_schedule_common+0x83/0xd0 [ 562.527576][ C1] preempt_schedule+0xae/0xc0 [ 562.532286][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 562.537710][ C1] preempt_schedule_thunk+0x16/0x30 [ 562.542944][ C1] _raw_spin_unlock+0x3f/0x50 [ 562.547647][ C1] ? copy_pmd_range+0x66f1/0x7000 [ 562.552692][ C1] copy_pmd_range+0x6727/0x7000 [ 562.557569][ C1] ? arch_stack_walk+0xfc/0x150 [ 562.562485][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 562.567818][ C1] copy_page_range+0xc46/0x1270 [ 562.572957][ C1] ? __lock_acquire+0xab9/0xd20 [ 562.577868][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 562.583197][ C1] ? up_write+0x1c4/0x420 [ 562.587548][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 562.594438][ C1] dup_mmap+0xf57/0x1ac0 [ 562.598812][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 562.603527][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 562.609448][ C1] ? mm_init+0xd20/0xf50 [ 562.613728][ C1] copy_mm+0x13c/0x4b0 [ 562.617838][ C1] copy_process+0x1706/0x3c00 [ 562.622557][ C1] ? copy_process+0x97f/0x3c00 [ 562.627357][ C1] ? __pfx_copy_process+0x10/0x10 [ 562.632416][ C1] kernel_clone+0x21e/0x870 [ 562.636949][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 562.642032][ C1] __ia32_compat_sys_ia32_clone+0x189/0x1e0 [ 562.648050][ C1] ? count_memcg_event_mm+0x21/0x260 [ 562.653369][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 562.659845][ C1] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 562.666465][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.671785][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 562.676919][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.682157][ C1] do_fast_syscall_32+0x34/0x80 [ 562.687052][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.693405][ C1] RIP: 0023:0xf7fd2539 [ 562.697514][ C1] RSP: 002b:00000000f75bfcbc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 562.705982][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 562.713988][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056adb4a8 [ 562.722187][ C1] RBP: 00000000f7462ff4 R08: 0000000000000000 R09: 0000000000000000 [ 562.730201][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 562.738210][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.746254][ C1] [ 562.749306][ C1] task:syz-executor state:R running task stack:21672 pid:5861 tgid:5861 ppid:5836 task_flags:0x400140 flags:0x20004000 [ 562.762954][ C1] Call Trace: [ 562.766293][ C1] [ 562.769353][ C1] __schedule+0x16f5/0x4d00 [ 562.774365][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 562.779705][ C1] ? __pfx___schedule+0x10/0x10 [ 562.784594][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 562.789912][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 562.795162][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 562.800480][ C1] preempt_schedule_irq+0xb5/0x150 [ 562.805622][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 562.811386][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 562.817243][ C1] irqentry_exit+0x6f/0x90 [ 562.821688][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.827709][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 562.833115][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb aa fe 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 562.852842][ C1] RSP: 0018:ffffc9000426f470 EFLAGS: 00000206 [ 562.858936][ C1] RAX: 9f63e7ac5b4dbc00 RBX: 0000000000000202 RCX: 9f63e7ac5b4dbc00 [ 562.866933][ C1] RDX: 0000000000000001 RSI: ffffffff8db6f0d7 RDI: ffffffff8be28b80 [ 562.875036][ C1] RBP: ffff8880330c0b18 R08: ffffc9000426f5f8 R09: 0000000000000000 [ 562.883294][ C1] R10: ffffc9000426f658 R11: fffff5200084decd R12: 0000000000000001 [ 562.891289][ C1] R13: 0000000000000001 R14: ffffffff8e13eda0 R15: ffff8880330c0000 [ 562.899304][ C1] ? unwind_next_frame+0xa5/0x2390 [ 562.904458][ C1] ? unwind_next_frame+0xa5/0x2390 [ 562.909597][ C1] unwind_next_frame+0x19a9/0x2390 [ 562.914744][ C1] ? unwind_next_frame+0xa5/0x2390 [ 562.919887][ C1] ? __unwind_start+0xf8/0x760 [ 562.924685][ C1] __unwind_start+0x5b9/0x760 [ 562.929403][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 562.935586][ C1] arch_stack_walk+0xe4/0x150 [ 562.940293][ C1] ? arch_stack_walk+0xe4/0x150 [ 562.945180][ C1] stack_trace_save+0x9c/0xe0 [ 562.949886][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 562.955292][ C1] ? __lock_acquire+0xab9/0xd20 [ 562.960173][ C1] kasan_save_track+0x3e/0x80 [ 562.964940][ C1] kasan_save_free_info+0x46/0x50 [ 562.969991][ C1] __kasan_slab_free+0x62/0x70 [ 562.974774][ C1] ? tomoyo_path_perm+0x3a2/0x4b0 [ 562.979825][ C1] kfree+0x18e/0x440 [ 562.983750][ C1] ? tomoyo_path_permission+0x2a4/0x380 [ 562.989331][ C1] tomoyo_path_perm+0x3a2/0x4b0 [ 562.994210][ C1] ? tomoyo_path_perm+0x1e3/0x4b0 [ 562.999265][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 563.004717][ C1] security_inode_getattr+0x12f/0x330 [ 563.010121][ C1] vfs_statx+0x18e/0x550 [ 563.014404][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 563.019209][ C1] __se_sys_statx+0x1a8/0x240 [ 563.023918][ C1] ? __pfx___se_sys_statx+0x10/0x10 [ 563.029178][ C1] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 563.035804][ C1] ? __ia32_sys_statx+0x20/0xc0 [ 563.040685][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 563.045818][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.051049][ C1] do_fast_syscall_32+0x34/0x80 [ 563.055920][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.062279][ C1] RIP: 0023:0xf711e539 [ 563.066371][ C1] RSP: 002b:00000000f75dea20 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 563.074817][ C1] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f75ded80 [ 563.082816][ C1] RDX: 0000000000000900 RSI: 00000000000007ff RDI: 00000000f75deadc [ 563.090817][ C1] RBP: 00000000f75dec40 R08: 0000000000000000 R09: 0000000000000000 [ 563.098816][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.106811][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.114824][ C1] [ 563.117869][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g56229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 563.130212][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=34579 [ 563.138124][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g56229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 563.149515][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 563.159505][ C1] rcu: RCU grace-period kthread stack dump: [ 563.165416][ C1] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 563.177441][ C1] Call Trace: [ 563.180829][ C1] [ 563.183792][ C1] __schedule+0x16f5/0x4d00 [ 563.188345][ C1] ? schedule+0x165/0x360 [ 563.192707][ C1] ? __pfx___schedule+0x10/0x10 [ 563.197609][ C1] ? schedule+0x91/0x360 [ 563.201883][ C1] schedule+0x165/0x360 [ 563.206069][ C1] schedule_timeout+0x12b/0x270 [ 563.210948][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 563.216351][ C1] ? __pfx_process_timeout+0x10/0x10 [ 563.221680][ C1] ? prepare_to_swait_event+0x341/0x380 [ 563.227259][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 563.232158][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 563.237125][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.242359][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 563.247682][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 563.252914][ C1] ? finish_swait+0xcd/0x1f0 [ 563.257536][ C1] rcu_gp_kthread+0x99/0x390 [ 563.262167][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 563.267394][ C1] ? __kthread_parkme+0x7b/0x200 [ 563.272367][ C1] ? __kthread_parkme+0x1a1/0x200 [ 563.277532][ C1] kthread+0x70e/0x8a0 [ 563.281652][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 563.286969][ C1] ? __pfx_kthread+0x10/0x10 [ 563.291601][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.296833][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.302147][ C1] ? __pfx_kthread+0x10/0x10 [ 563.306776][ C1] ret_from_fork+0x3f9/0x770 [ 563.311404][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 563.316551][ C1] ? __switch_to_asm+0x39/0x70 [ 563.321337][ C1] ? __switch_to_asm+0x33/0x70 [ 563.326119][ C1] ? __pfx_kthread+0x10/0x10 [ 563.330738][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.335551][ C1]