last executing test programs: 14m1.990313968s ago: executing program 1 (id=953): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r0 = msgget(0x2, 0x600) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) flock(r2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) flock(r1, 0xa) io_uring_setup(0x72c0, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x2, 0x1000) msgctl$IPC_RMID(r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) r7 = epoll_create1(0x80000) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0x40002014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)={0x3}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) 14m1.975666228s ago: executing program 1 (id=954): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0xac4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x240, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4c15}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfda2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xce}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff9fa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc4ee}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x55}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7e9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xde}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20004880}, 0x4080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000000c0)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x6004881}, 0x4000080) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x12, 0xb, 0xc, "fee8a2ab78fc979fd1a00d96072000001ea89d0000fb0000e6fd4de4ced70ccc67008d1b514300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00009c050d2c335e5f4f00", [0x6, 0x2000000000001]}}) 14m1.875023199s ago: executing program 1 (id=956): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000023c0), 0x181, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000002400)=0x3) 14m1.874646337s ago: executing program 1 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 14m1.849743088s ago: executing program 1 (id=958): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f00000000c0)="f2aa9a0700290066b92903000066b80090000066ba000000000f30ba4200ed0f0666b9ea0900000f320f2197f30f1ef03e0f71d4f166b8280000000f23c00f21f86635000007000f23f8", 0x4a}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 14m1.786153609s ago: executing program 1 (id=959): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe97, 0x300}, 0x18000) close(r3) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x9, [0xe, 0xfb]}}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r5], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x308, 0x8, 0x0, {{@in=@rand_addr=0x64010101, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 13m46.447724909s ago: executing program 32 (id=959): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe97, 0x300}, 0x18000) close(r3) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x9, [0xe, 0xfb]}}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r5], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x308, 0x8, 0x0, {{@in=@rand_addr=0x64010101, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m57.062261779s ago: executing program 5 (id=3091): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x11e, 0x48c, &(0x7f00000002c0)={0x2, 'bridge0\x00'}, 0x18) 23.606025832s ago: executing program 2 (id=3491): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x40) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 22.525570631s ago: executing program 2 (id=3493): r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000280)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1f, 0x4, @tid=r0}, &(0x7f0000000200)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e804896868"], 0x0) syz_usb_disconnect(r5) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)=']\'\'*[\x00', &(0x7f0000000140)="0eed68d3aceb758814b4140dd4905d85bcb864b58287ed0e321860022300c038140fdf02c3ed1d893f46a6fc27c9e9b4ce3681e7e8aade2c1b66abd809b2158d8104a7ea62bc983f8e84e3d7740c94684c0c40b9774e8e63c330adb6be23edf2340b72aed817e6f8b99ef039b5834ea8973254839c7e2d1364b0dda6e96dfb", 0x7f) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) creat(&(0x7f00000001c0)='./file0\x00', 0x129178c99a328503) readv(r6, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) 19.262518053s ago: executing program 2 (id=3502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x32c}}]}}}]}, 0x8c}}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x1a7, 0x40005, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 17.783326415s ago: executing program 2 (id=3504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x8, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x48804) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 16.352516322s ago: executing program 2 (id=3510): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 15.806443457s ago: executing program 2 (id=3512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1c, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x10, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="4432e0004a9fe7ea161d1004975611f7f1733fcd61a8dbeda2dbd7078ffa9ec4bf1240aad89ace3ec6387cf15e2c23414f3c7fb6b662935f51f9c99444a6a154951337c2628fb80c7473916a39f0207cfab141d8c53341b8345bf45b55c803dee2125328381974a0", @ANYRES16=r1, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="27003300d0000000080211000000080211000001505050505050e03f0f01004101059b00ec8cb600"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20040804) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$join(0x7ffffffe, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x205, 0x200c3) r9 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$uac3(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$sierra_net(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @empty}, 0x1c) sendmmsg(r10, &(0x7f0000009480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x1, 0xbaee}], 0x10}}], 0x1, 0x4004041) syz_usb_control_io(r9, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="003045000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000000)=ANY=[]) 13.619760785s ago: executing program 5 (id=3093): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_emit_vhci(0x0, 0x2a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0xa, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) getresuid(&(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)) r6 = getgid() ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000001fc0)={0xb3, "3703ddda16dfb8fa454d302b8bb48c1bb58c8daa410d37d9b58fa9b988c04f78", 0xffffffffffffffff}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000002000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002040)=0x0) sendmmsg$unix(r3, &(0x7f0000004780)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000c80)="4b583a646ec86638007ac68fbcb7adc07184a96810db0a4f1cee131e892a66443dc50af7e65038dfaa6a98faa1dca861d4a024d0b2f606a77cf21f589c2dfab2eefc8cce774befbf333418878e03640c3c951bacaf8f2055b8b999d5a0fe8523fba867375958fcdd6a65077ff8907a5f76db32007c41d50e35874f22498cc124", 0x80}, {&(0x7f0000000480)="ee0def7f4351d37b39ed9ca85f18bd8fbacc6693abec66f7386332e8a7749c7480725a1d42ccbcd833792c161f4f45c7b908e4ccb46d45dd98e6d32fe282e6b2612b39ada81378a07ee738da611793f49599d37bed27c54c8fc03aeebbc93dc1fbf0660493c6e63f8fd49239983b9969503a12762a20e22fbe628cbff8a4d5572adb9192d23005cd3d2ddf", 0x8b}, {&(0x7f0000000580)="a9bb472e6944614fdf17b2f3154efaae21a1d91083c6a16e18a6c0e74f1d5ce6ea74c2597329a9ef054ea2e529c12ba44b1b", 0x32}, {&(0x7f00000005c0)="8116805f09a5ca417a6980be2ad333f9fd8c623b86b66c513a48ef928ea3efbca5e4abb213e94db2f5038f67d05032c750c0326479b17d19f4a1107003375500d3288a292efbfe8b8493f963619bb32d56257b5fc028844326d2d08a9e8cb63a2dda735c8eafbbe4a7eabd40420b51916fd11fc5880b640fc73932cbc7ae5062b183e624d3afc977d3a0085c1459476b4947cc39b24dedcba1b81a", 0x9b}], 0x4, &(0x7f00000006c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r0, r9, r3]}}], 0x30, 0x880}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000a80)="d4c98f781bf1804fde9c2886bc25d08218d90eba42a1c53bd3b9a5fb0124bbba9d207b79d875cd4d55acb05cd212a8f0cfffffffffc463ff37020d98a80a60c7e4faabf13fdbe92188061a4e1504516be305c1c5c2ba22989c9a32fe0729c8426d1911accd", 0x65}, {&(0x7f0000000800)="7ff90cc1d3bfd19c13b3f732c89a5eb7a16aa7fb2aca5e1b8d267bc8423540b62e5ca8501baa82ca28f83e72908632d9e6a3ed8a5a94e74e2ce8506368ec374e1bd78fe5930c322fad4108a29325789c634e6eda362745809cdf6e3d1465cb44ef2671e60b36461d3b8a9cffb8934a2149c6af9a1a4872a0ea962aba75aa3fc33bb505efd4ac56b3668477f6bd34edfa0d78ea92581156ab4f013dc161a6", 0x9e}], 0x2, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r4, r6}}}], 0x20, 0x40000}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a80), 0x0, 0x0, 0x0, 0x4010}}, {{&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)="d2582a0e13a8f9a58390c818d247c30022f5265f803de59d41bd737ce77eaf1d64852537c09f472da17514794a6d2c9da111b950eb0c685470eeaee9e519d5c9d1619a85c43e9e969c96a2c9c01b9034722541737456a0b96b390fa019aec5a8eed98a7976f5f2246b17cfcf5e1db6dad6c981ec977fc952d2137a3844a5da0c4f31794820a31120f778611a3814a23b6827bb257a8576f63a96dc19f84f255c8fa40be48033c73a101fd90740ef7b0fee102f15bc5412f598a63c71720abca1429f8de922d76f12a11f2d54e0ceac0185f45fc111a61f0a37a3bebd53", 0xdd}, {&(0x7f0000001c80)="258ef420617685d6eb965b553dc99cbecd15279e9d0f8b4aaab0a0a8162e527e5043f0e6b9247c2f989b9c40633af0893a298f7c91d5a007eee71c82bb9bb85cb0696c53", 0x44}], 0x3, 0x0, 0x0, 0x20000001}}, {{&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001dc0)="fb3663f203f9cb3ec6cb958ec7b374478bdb8075e96720077ec088f5443359f38c84b98c841a12e447df4ab9918b951117cc8b2d87d918307052b18cf254743ccf6b4fbb920002853d824a37f19e913ae517d08d079dfcdc3943f32839beb48341c46e4c31b48c34a2e1f15106bd288708d8514f6e439824b2878a6e", 0x7c}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="398a0702657fb5a07324db593b44fb117a6db3c8ac1ca1a0ec6e50600529fd55a9a8e5cdb16e8b94a9ab79692645d9f0b88bd10891ee373375227ef1e264fb6381f7813b101bfc6cfce6695504be96659bf2133c694f0ef23f6bb7f8b54fec9696c81462278e2bbb73db9cf44db3a95ca5eb1d4899548c1596fe33cab3a33ac599c2166487fe88ddfcdc55ca376b0b04ecfbb55d62ef4a69253b68aed8a0f77ac901234418be5c06a0b78da7aeb2e49a4fc9e420072c0e73", 0xb8}, {&(0x7f0000001f40)="311153bf99b8789df427a06b9fe2686c0c6175e2eb0eed91f338e6da84ab10aee932288d613b7bcfdf8aca027fd0147536948da529", 0x35}], 0x4, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [r2, r7, r0]}}, @rights={{0x38, 0x1, 0x1, [r8, r2, r9, r2, r0, r3, r3, r2, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r10}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r2, r2, r3, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r9, r0, r2, r3]}}], 0x120, 0x41}}, {{&(0x7f0000002300)=@abs={0x1, 0x0, 0x4a24}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002380)="d3b1d1fd37905d114d7166ea69baa6228284bb927af52ac50845075c338b96a33353f816281feb5d249e65db3fc4cf56601ddc1194a38475a35e64a48cedb73ca6949c07f06f195b0e7af2c3fdb35165cc30a057f1b3f33e4c61f1b977ab015aeb9ffae0525c3b770200590dff3b50caee01ce14158cc4f0e303ca1b5f2e1c6738e50f0555805e773568c4ca14119603401c8381c4c5ac9afc7cb49f49ef5355e22841ed29097b22d5e9320e9eaa91c7d4f00350969654f29ab887d7298e24b7ad86fca6391c038d4650e6c08aece424d90a80e67f91cf91b092839066305976083c51cef78d5c3d834c2f600a5766e39eac747135924e480fa3abe43d01b7209aad305192324cc47e9e777d0c59afb39a14bf09d7ed2007cbd532b56344db4542e61244165ec331cf167732b6580b5c865bbdee8d4b111dca27b0df94f859bc70426969800b5c0b2198f00c5dc9f8bcf1022b40f6b15b8698fb8e03c13a6825b1d316ecd73d531300cfa4c5c349d6c364cb94a4aa328ff879e2dc9be6d35f5d8c032976b221da1e96f12a1ce0889747b431e33eb4f995231a0ccfe052647ba0156c52c399661ec0d80c97bab5859259fa3765072a6c41c7d7a822d39c53340c986029933930b02051aa13c8f8db68a7d7687256c848a393b119e92e556ae8e7e9fec8a5dc8ce69d936b40221ad6f27a8ae7f24887e530341cd251227935372f4683a4275dbb20a55a04e12b1b63bb05366562a14471906b82b1c728e661532f697e1481c4f2661efdb712803a7d00ed366808c854a31be48747674182c304159248dc2d3580f9774afc7b7a93d7b8f00d0ada5668145e6fcd1289932f83b9cc6ec30062d154c3a9f8ffe6f8bd675deba96d6690e101035c59072bd7515aed0a175ce1bdc39590b497debe1c60b62abf7a6915bd1936967e7cfb96b70997c43edc5138d4aecd55a39d0cd0cd93a4c948d0b6c443778ca56b22c9c50f65b7e07ef8f417b86466e444c831b6210eec1e220d66743f1ffd2093231bc673f61442a08de66dc8d627c0d9fc75e3fe40eb6d28046d7f8d6a8826e219470b8a126e2bd4a2ccd41c510208061d4fe1f0cd0bfd0c2049d43abdb2adbb5ee2db0bb93f1b698b320c9bbe47ffd7bb68715114cb862d3aea649413938317b0804778b093f3082988370056b0e19e31b7a77299e8a7a2c206ba11bf84c9091bf5e0b87b4bf8529d3e5c6c89b5d8dc0d448f95edde3754e02eccd750f15b8e7e2ab5493c99ad9fd2bcb17deea532d272d03ae22f5cb67366d44a6f08d5b25adb48be5214ba729b01e3d295c97641b7166c07f4800254b64007922f860a53ed9f2c0f9208fcc97b1ce6a29b80cba0a53bc68f89583c7b444a8c98c2eaf35f5d27a5cc9cf56e49aa2636dd2761f91bb7854e38a6fb8e5cf7d1702521c16c4adbe6cc553662bb8b8394563019f48949feefb102c010a5c8260b08d3fe8993cae0af40237d430117956d49dd0d6a6ed2fe6672abd3e621e7f3d1fd89d5e362dbb0f0a597c6bbfcb26f2b02904021f9301682f1a3624ea20e7ef01cd1bfe587e5fe7183da21a7d118ed26662e18cddf2a240dfd21fb1b37502eb8ffe0a0de19205a8ed46c76f7400ea1d3f5af90c9b60f584590abefc63c86e407db840521098aba19da12bca6337149bc420180f0014dfd5656c2522accaa7fa6dc3a3baa27e50fc99f0037773acec279416a638349b34bec8524cdf965e873e88277849c8427f9ad679de0e3464692a12c495c577aa8f73ce6c12d52202ec3143bf4f65df77898b21b05413dc0cd38480a45d4ef1710e8e8b69ae9db2c045c395899a8a699f46bc8b5c06878f023c01b23c037656dd8931165623169612425fbe289fc0b8b01f61a2ce5a2e729c174da3fc55ffca43bd726d4a3d7b22924b6dcab8ffbc947dc4a5e8e7bb5d17a76b04ac43822c2ee8d034d5274a72ca4dd3837fba0ecca7a9a8807e808da3b37a0db60c49a9ee8ddf1dcc3ff2681417d6e488c388ac2244dcec0d88d085b83ba45af6c3fdbdbb602a8bb72c14caca44dd6344f7654c105b90b68f3360f3d9d221f47be0248c3f08204f2545935ed15af8faff04618ba55dfd73276a2cf6167a605bb2f9a006629cf569acae749cd3c9ab9ad67ec9b52320ad4843ffa38d5e8c5bb30a7e7d1bd6d9faf8e04ba0f854491760e40db39cbde4204af14f748a2e5a5a72043dcf41a74463f3031573e19a4f3356e4db4e5aa2bc4caff38de0157a0b30c4a5bd909eaf62742874452d2e131442193e5ff6087cc477f21a47b0a06933dadb90d0dc484841346ccfc614e8b5a99a082b81ec3c1b68cce3c4370d0b8a944394b8214090b5a9d7800fbb2bbeffb222a72d8ea9a7e01c38de1815ac5e27df4ec994a1c79abbc556450b27bf057fd913835cc3dfec1629b001a3f4ce2f47dbd3bfd9a7d8f21a02fdd186614322b75ed51d7469ea326dc11dc92c7c1d02c2e235162a59fd7e27165371dc22191969eed8b0d96b49f2170b48a7075dda4ef01aee376f0696c8c547f072bdb014d63a29244620ce1227be552af792e05f187c01254f04fab3fbd15928ef13539c54208ce1890a3ba60909e9b3fed97cf38225feb86d69a97103d25d4bc06e5fa0c5478ce77208550d066e26ebff5a3499410a1fe7d6a9d2ad4509edc2f67d83e65e632979ae711a6b66a1d797f0f81bdc9c77c7e5abba67956282e8e20dfa1a5a23a19cd69352d0b1114975c93932de155a319bd9704b19e4997223c9bb3b62532780ba2abc945da1843f3999fc3de2d31c2d1744183fa0460c0afef9f4d6cb3f40f985af572f83a695a9b3bb8e4016eee6d6216c8b29ce13d8b03cded9f91ed4211a99c6cdd9b2f62fb2f3f2510aacb7d1450e49df84c718f5623196ffd32c189483dd8e233ec442a71455fe8fa61ea3fea86c1d9036455a513fde94503d364f207374fc245366766949cecc40593059a2ce90d89482aa3218a60f53609d5e09d74bd1998edc236ea4347fa58fb011ecff41934ff1e07570e3d0692fdc4afb3cfd8a2170cbe45d6f6b293a38b435f20e04b8bdab8ddc306c12ab05da9b066c0d66dbbb1eca8708c2482edf98d58bea3fd42ed2617c50e36f6083bd9e3d8e500c286e83a517c04122615dea15e3f2fc12bc6b6b95bb8d7095e9c563a659c242db98b5c72f7faa2bdc6174d7d2ce2be3d6b9d54d2a578870246c4f7143cb397bd5dea8f8d88a19c365f3e4e91af6ffa57cfc0069636b6fa14db1e519490d78c9b237aa5891a69364a32f1f22433af4a15b6060678d57db17c66cba123784e0f9315b5d8d79820a1077b8124da7b0cc4a391212b88b267e40d49d8f9d30a8726259b391a741a1ffccac4913eeb66abe679d09e23a18f88562fc23ec24e2533fd4e8172865e960b002ad2f38fb50b2cc9a13a8febf7075b6984930b442195c17d2563e919a36a5b98249760c6f04a40809ee236594187873f81c94956a9007352caf8751164479d15de9dd877fbcf86227a10638465a4eea7d862c4f20d08367d95a75d5e50a06d5f8e747c16d549e659edf5350ab62e9d73f8e6f5a56d5dce886077856abd07d3839916dd208ba76994ec6177a827913940e6cd817be94566942ccfdb62b1607b911357cfb7f1576f05bd5df4efe70d146e960ae2e19172a0623e244e61fbeaceb81bd60107590879bdfd0178cba18a3501de927f4f12790dfa07b53abe97664d97460979171fe4b552a339ec1db76c66918c20e8abaee8986d6fc20d7706d47ccd81a1089eab49871e3c3908336061fa60a53dd0ddd5b9de90bba872dfad3c3ec3d0192ff8092628c618524cf6a3eb95febaaff755fdfa1f211d13a04ff12f4abd29c41144afa5019122be12a910834ff5231ca36b74bf7e3af153b37b9123eac59d8bf5677d5168575ee03237162e647321b825dac086b0a6305bb0e6f65f9e2a987ad3ee33c51b7185a364ab828316097aa152b703638d69577349b1f9a3964b66fbac23d9287427bff38594bd6a3885f0b0ae091c8d7c9dbf49b967e6e2afd134ae57600d7430ddcedb7920077372d0fedfce16430d9f361be891055442266c601ce111ff817465c9c7bbd1f44e616173655a0da8f77050751ede763721a2b1c47e120dde5d32ad2376c8854d8385f8334c422b16fa581b33f211dfcc800302dc2762aa58e27d8221ddd3fa9115214b0ca8130302904d4e62516cc111c2e860c34bede2bca9e199f2bc3741de7a867a7f68876069e2a250139444703f1c8379c717ab5976a1881f75813eaa83ec8d6e59a9d017fd3fce8dba47fad6a271c6890a817f152401064f8966b4f26e7e9e1ff3e1d17deea618e56afbb5c8f32099f4a653184d868a85077abbf7ae56e84a6fae2beeb92b10a609ce1c51d6352bcac6f96dc6845302e66992f45370958456a7b72953c5bddbfc915453463728daf70be7dcff59bdaca28c979291b8978d830c3ae298ca566515a035a4296d3170df74b9431c4b6517fd2ead6a0ec6834b8f39bca65fa47f7ec070d272d7c4701b3ba1cf35549c338fb7561cacbdb2690282e2955c76742366dc84375c9b6b61deac685586c032e7b7e3f1874e6e232d78547580acf79ccb5417515bff333d155b48071b870632a9f000df891bc8a4d23a7d29b697f48112553244c8e761ece6c1af5d8789a2d93e2605e6df073e9dc23870803802d77c0f4422246329b6a622b93bc8e405268123f0383ba37ca4c64c4215bd104abe8d0d05c5775a2d3688d240ade8faa3926b0a946704ea01546704999eeb7f1e47870b03a917c543db4acf34aeee228b18878bd84d8234b9ffc9ba3ee372ad3a9303bd4a16f9ffe0438a5b2dd9e908e60571f3ca8cd493bb39e7d76af5d024684c38d9e1b5bc7767d2f4a8321dc4e713066d18b05c8f4c4b93de37e3ec3a809d4b97aad3c6d23eadb111f5906ee3ff776d76f598cca54cf22e8fb9c24020cdaf94682a5708591066c4a645d02919f393b9d5fafd023bc7238581c19b537b545eb31c2d020b34d19bfb9525d63d595119424d6390d753219ce2f201080dbc059a8ca56a8c7467374bc85060aa9834cc26e59326f1de14e09a6b9421a833bb306b658f64c6414bd0e8ede4e2cfbcdcd4bca4352e95253af999d8ba755faf0692cabb8fabd821224be4d8f7d8cb22a96cfe336c881152337d79354ac86e54a2d0f409072da3beb87dea82f2e953338ac5c5881a8e425290b5f78f9a73a69c8814f69f318199d45bf1e5916e12a130ee3debeca03bc04b47b1cbd76879fedad5ee3bd9c4491442b1e29382bbb82fefd31680f608444d5f5d64cf65489f789da8c59742c3db0a38014a755f60009936fa63e9fbf9802785b5c41e2c48f2d409e5bf52373954ba6ed5ad9fe7f69dfc3c23b0a8fbe7ace45828e08f4d6497a8b8d3b5c88d66b43f150eb0bd0743d1ae706242c5cd745d4d7efbb6a66ff6c8b42019e0c4c2b0e83d42391414d880f069b04f43379e0e8065a6cb66988dc01e5ff97274c83eb78b60daed215a85bf7c25bd369034a4f9b5b1bf002a8a819a2f494c5bab437b43b1aa36b55d331f5803043738a7f6752cf865de623421b0ce35fe1043d58453951f53baadbeeb8062da208e962ca762aac5e99dbe5d454c9607b08cb00c8472f7a3e5d7108a8c15a79c28edfd6106c2649d9796776ae25c3df99ca29c0ea983b4535b475f3ea85ac1767962a58fcb08358e67dfccbc845c37caf5695b62b021d4da35e4fd1d9613d57a0f99f1f9c6c050eab149ba21407d1fd98936", 0x1000}, {&(0x7f0000003380)="40a5ba72b797d592a142f5068bb74a233e82fe80e56101de4dc00512ce3d12d62ef8cb65a68e617b4cb4c6f2cd13ad9a99bcadea78095c9995991c43e404adf654cb118b997766612eb3965bb94a8bb716a14763b4fc89034d87c78ae1c3d11cd90e862a19f74cf2dae145c87d198190d7a1348fbf1650c8c8400037c068a40c85d9f339b1ae4a2105929ef1dbe40079b9812a458db34696a6f5c28a272061e7370e82e60be9a2353d25612a59f9af40f0fa09f6185489c0d7de15f1cbbdf16b0ef0075b4f1361ecd545902c27676296c411f6a6ebfc56cd43cd671201769c2efc89cf62c3d0b14ef26ed8fbe3a6464f505d94267d95c8f4fe8cd355", 0xfc}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="d25b4be0862fde5fda8ce578c77715f70e1ea78cca8ef4355afa141e09639a3fa3cc871095734e372ec6d88f1d6a7e4e8f6ee924202adafe367ec7724a0659659bc9f6520e94ba463ae53bdf172a486f2cbe6244aeac0da8475147afed17f561ebc3b50f174a9cd8dc910e204b4750e40c654db85fd3b448d1bd083005512ee26791577bacca152083abdb3972097a7ae1e17999ea25cd", 0x97}, {&(0x7f0000004540)="53c1688435dbf06b88d94e00f7c4641c89ed510fd6d945f1351beb1503f52fa0739cc026864335ff8374164fceb877829092d12bcee9010fb624f91742edcbc188edb33c750e36373872f33fbb01a7b2a7eb6fae5325c4927be88cfe639124be944fc72f07cd4f921ba01c762f458831f7f0907cfa82a2339ee299386e7bccd3297c1667776d0422784c43a346e383ac440d5079f71f195fde1b28c0db6b8ceac30ed73cdd493310b40228ba1716134e0d4a8c62149b2d9061d45f74f74155001faafb179461923fdd53a9b39aa101b6667817fedb6f9043b78b37b6346bd9be15cbb77a7835da81e922cd", 0xeb}, {&(0x7f0000004640)="7e9639f1471ba818c167f915b62d37e8598e360f5ecd8ed5ed1e3d7300ee95250a", 0x21}], 0x6, &(0x7f0000004700)=[@cred={{0x1c, 0x1, 0x2, {r1, r10}}}, @rights={{0x1c, 0x1, 0x1, [r7, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x58, 0xc1}}], 0x6, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbfb, {0x8, 0x1, 0x1, r1, 0x1, 0x3, 0xb4, 0x4, 0x0, 0x5, 0x10}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x14010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x1b) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r12 = syz_clone(0x200, 0x0, 0xfffffffffffffcdd, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace(0x8, r12) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000340)={&(0x7f00000002c0)="25d92ea6e53f0f9a24253aac6fe469deb96d64e08cc12ff1c6f68be60c0f473304a24af160b66098a65c4be35a4adfe34710468dba0af7e939dd4235166703b9224cabf8b3c097f4eaf5cbb5daab2e33ea6e1b7f8c8b3cb69fd5dba3ea2c652adec6abac7c9c2d9631a38f490f7fc14f", 0x70}) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000200), 0x2) 9.957470482s ago: executing program 5 (id=3527): socket$kcm(0x2, 0x3, 0x2) socket(0xa, 0x3, 0x87) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x5c, 0x7fffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 9.604963034s ago: executing program 5 (id=3528): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000000)=""/78, 0x4e) getdents(r2, &(0x7f0000000200)=""/251, 0xfb) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) timer_create(0x5, &(0x7f0000000300)={0x0, 0x21, 0x1, @thr={&(0x7f0000000140)="4684da7373e161f85a1132783a9471500273152b652c36ea4c68ed9ba7a60b7343295dfe33", &(0x7f0000000180)="e7a4e791c818e0a3cc2879e2ecd7d8b15cacd49732a217c60eb5974e5d3b0f14f8b257ac75fbddfd3cc0785646b3e813c2f0e839d0cd5abc2e31641b1adadc58e55bc440fb4d962c90df2c497e"}}, &(0x7f0000000380)) flock(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r5, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000000000)="04", 0x1}], 0x1, 0x6) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x3c) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) 8.88137165s ago: executing program 4 (id=3530): clock_adjtime(0xa1860100, &(0x7f0000000080)={0xc0, 0x8, 0x1, 0x7, 0x5, 0x6, 0x0, 0xf, 0x5, 0xffffffffffffff6c, 0x100000000, 0x9, 0x1da, 0x4, 0x7, 0xd82, 0x0, 0x2, 0x400, 0x5, 0x2, 0xfffffffffffffffc, 0x0, 0x100000000, 0x1, 0xce9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0100000000000002000000000000000200000d0300000009000000ffffffff0d0010000000000000000677"], 0x0, 0x36, 0x0, 0x8}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 8.222356533s ago: executing program 0 (id=3534): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) (fail_nth: 1) 7.934134893s ago: executing program 0 (id=3535): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1374, &(0x7f00000023c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "eca18d", 0x133e, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @mcast2, {[@dstopts={0x3c, 0x1c, '\x00', [@ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x1}, @generic={0x7, 0xdd, "e97bd0f04f6493abec268d1033bbbe50117549f7fab33107ba52bac35da1d88e40629a205bd5c06a1b906dc58f1cecbf2f87ee5d723f29a55af35005fc456ab8936013ab2d880e85fc2e59c8c05cd2a13bc2c00d796b0d1e1e94de41cdcfc8e0ab81a0a0281f34dc71c8c67e6f2ffa4fa917ed19cdf35297a7943709715a313036547cd01a1f73fbb6a60f65225a46bec3ca459f38128e69a27de3361604b4206f6d14625be52259420021bed7b7b666e449d3f0b7b78cfd69c274c70faadd7381202bf9752cd994bf80a0e4595db79ca911a574d851458fbe530cd055"}]}, @fragment={0x84, 0x0, 0xf8, 0x0, 0x0, 0x7, 0x68}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x23, 0x0, [0x0, 0x10], "4bfe999c9392c24ae6c601d1a233f32c02b236f712ac0bad80382dc4b1c3ccfd1e55ff"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x101, 0x2, 0x5a], "e97a2bbf325892b80615073c45d811a813a16bad1a1a3b7711165f36c9f182f742aed91a97ccbd543a25ab944dd4c0762c7266064bbcd16049e626db654f55e5c90ed214249b62e6b7bc142d7b0352e0201aa09c2151cd33ea36c933cfb948856a049b469d760d93385e8a2adf8aece65bb896f57bb6e8bdf192fbe46caf479431906734529e00e295de5baa4754f9f5f64dba94b878e8b53244a92ad1fb35a1bdead69a68e4ef50e49c7829adda24efbbea8e4fc3499e2054964b63ddba6527ab8cc3ef7674098e66863e20a4532c11f3de0874f55fcb5b66"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x4, 0x3, 0x0, 0x3, 0x6, 0x5}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x7, 0x3, 0x1, 0x2, 0x0, 0x8}, 0x2, {0x7c, 0x400, 0x0, 0x5, 0x1, 0x0, 0x2}}}, {0x8, 0x6558, 0x0, "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"}}}}}}}, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x3e0000000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) 7.545830889s ago: executing program 0 (id=3536): socket$can_bcm(0x1d, 0x2, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x1, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) fsmount(r0, 0x0, 0xe07ac5c00862d4d7) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) 6.1545833s ago: executing program 5 (id=3538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000040)=0x100, 0x4c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}]}) 4.37435746s ago: executing program 0 (id=3540): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0xd69, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0xd, 0x6, 0x4, 0x25cd, 0x5, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0xff, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc65, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x3, 0x809, 0x4, 0x20000a7, 0x1000, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100009, 0x4008000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x1, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x40, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x4, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x6, 0x3, 0x200006, 0x80008000, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x9d83, 0x0, 0x8008, 0x7fff, 0xffffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0xffff, 0x1, 0x9]}, 0x45c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffbfe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x7, 'wg0\x00', {0x2ea3}, 0xb17}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 4.27818556s ago: executing program 5 (id=3541): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 3.694662231s ago: executing program 4 (id=3542): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.660343944s ago: executing program 3 (id=3543): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.379159485s ago: executing program 3 (id=3544): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x2a4d, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) r4 = userfaultfd(0x1) dup(r4) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.364915983s ago: executing program 0 (id=3545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x5a}, 0x1, 0x0, 0x0, 0x850}, 0x20040040) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, 0x0) (async) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000018c0)='net/rfcomm\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r6 = inotify_init() timer_create(0xb33ac006f9a86d04, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000071a000/0x1000)=nil, 0x1000}, 0x2}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) (async) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) 3.363967523s ago: executing program 4 (id=3546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) msgctl$MSG_INFO(0x0, 0xc, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x12000, 0x24) inotify_add_watch(r3, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xc3) syz_usb_connect(0x0, 0x885, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0x28, 0xb3, 0x66, 0x20, 0xd46, 0x2011, 0xdcf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x873, 0x3, 0x6, 0x3, 0x10, 0x2, "", [{{0x9, 0x4, 0x60, 0xd6, 0x10, 0x9d, 0x6f, 0x4e, 0xa7, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "31258ba497"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x65, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x111, 0x101, 0x2, 0x2, 0x9, 0x3}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "306a8b9d91"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xfff0, 0x5, 0x8f}, {0x6, 0x24, 0x1a, 0x8, 0x20}}], [{{0x9, 0x5, 0xc, 0x8, 0x10, 0x9, 0x5, 0xdd}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x1, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xc, 0xe, 0x6, [@generic={0xe5, 0x6, "cf491f475d5967da8a0d22dcfc8cafbf24bf10d818337fb07d817bd01be64ed8b6239da80ecc7d049ac50a5d3d9717c7773762da36caa9e3f2ea58bc1dd3c15a0759e1fb65fdd354d6d45ea8a5f3dad9900896bf1b7b64ab0cf15de2de14f53b698e8a191a24262a29dedf10e54fe6224c7a86de5d3abcb5f99a9e2df79cb1c1bdb6578e567e2c57d3b8339ae002a279b7e853d2687a44c615a0867ec08962db6f96735f23374d29a7b726356cbd9e9707f4e9c5ec3071d485d8c87e43bc4014b88c1aff434924c39147541b6fd8f62dce7e635e500464402e5f96fcef63856e1241f1"}, @generic={0xc, 0x23, "762a0eaccc68c78f4af7"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x3, 0xbe, 0x5}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x0, 0xc6, 0x5}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x0, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xfff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0x9, 0xcf}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x1, 0x8, 0x3, [@generic={0xc0, 0xf, "3f11755a7b72ca4eef9d54aae67aded883c5af092f343a9501f974965cd8b52b871d7513e2554fc84482cc0d9f2051ddca2d97572d3a7780ae4238d5fab7ad4ccc5aa54b84d9438892ee9a8618cb8a8a403daf165c4c08addfba976b6062750a5169be114c23fea434144b2b262fa9c78d1af98f13cadd91671daf9e0cb2834518e166a762f65d6f52aba68109b8c0d582cc2ae6176f161daa4d2d58c34e57f12a67675219ffeae86bc5a8f6430e56492a2a0a5a0335d7eba4983f360652"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x6, 0x5, 0xdb, [@generic={0xf3, 0x12, "f149efc836db8df6c4ddb826ad0c3e017ad221f4689941ba6f62512e028aca5e15cd394f3ddd3f6cf62c338805472baa2812d2b191b7608f0bd1aef27e54cbdd11a09fcbcb0e9b369d4530bf5fb7e1ef44ed49f995f1620315cbd27f75980825066c8c322595d9e807c5eefb14aceeded03d8e1cd195581eef5279d62b4219e870c5a2a46ae766ad75d29110e5251fb2e89dde9eb50c91239ec0964658f668a67860ed6da924d371a33bd5145ed5d976633660ed487f78a2479308a4c8b8ab7a128df9abe2dc9288f29267bc435949d700a5806b272013af2f6288e476d86c832bc1adbe64c1c7bc507ddb22b4d12472c6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0x35, 0x4, [@generic={0x88, 0xf, "de842ecaae353360e8da721f46808adbe447dcbb276485382938ce639ad251cff451ea9ca7c9b020cde51d76e3be83b35964b3e4460d8de70f77032a6a11df33f652d76b767219a95b0ecb449bef555ad213de996956d459ae1512e1819e875329e87ad09fd875c125f02ac2dffb4902c49ad592b233bfd23a7ba8cb4c63be5e1541458990cb"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x7, 0x0, 0xfd}}, {{0x9, 0x5, 0xf, 0x10, 0x99f60a0de06e3934, 0x5, 0x5, 0x2, [@generic={0x7e, 0x7, "ce5a522e2a865dc8638b2e0b2ae3e2194308c7b8645c72748ec8a200aac4bbe294f25d260740051dc70dcffaaacde6024bfc0c4d66078cf3d6831c2a372fc5de6d4191ab4646aed304ac6df798a4dabb68eaaf7fb11a003328bf49e11de96ddabd06ebbbf90f961bf803da82616b7f12c02247885f0804e09c6c2481"}, @generic={0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x3, 0xa, 0x8, [@generic={0x90, 0xa, "9e3388abd2ef82da465e075451205094931180ff3cddca5ecb87ac2c3ddbbcff5d32b25cdbb880370f13c6f1b59e3f6ca7125279af91b357328ddc0f1bf8663abc069bb52a5dffb400fb406183106a23b494b8b6419fffd577ecad9990f078d07dc01e3ce80736ca3fdfff9104321d365fc6b3f002976a3670c155ca92290ee4cac96b16408a4a4ba81ff9c4419b"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xff, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ef, 0x5, 0x9, 0x6}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x3, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xdf, 0x1}, @generic={0x1b, 0x4, "1df53ffffc84caad518ec14dd1083895334ded02350c5221b3"}]}}]}}, {{0x9, 0x4, 0x25, 0x9, 0x4, 0xff, 0xff, 0xff, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "4a0391"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7f6, 0xf0, 0x57, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x16a7}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x9, 0x9, 0xf, 0xd822}, @dmm={0x7, 0x24, 0x14, 0xf5bc}, @dmm={0x7, 0x24, 0x14, 0xc, 0xb7}]}], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0xf8, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe5, 0x9}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x1, 0x4, 0x4, [@generic={0x4a, 0x10, "cc55ff2d46c104200b5782834adf27a400e7131ed82ec2b9476c14873b09fcf3804f3b13d45041653edbfb0d8319f3b17ccc08c96d80c71e1bd752456e7c4e6810c498c93a2a1d10"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x2, 0x0, 0xc7}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0xff, 0x4c, 0x6d, [@generic={0x4a, 0x22, "05e95bc7bee8e3035f252e1469312b4b3d3cb0badbb7c84353b567e7f219bdaad5e394c85ebc7bd188073b1f7783b8c272ce2d8f00407c9e25d4f1175d7e985171f72b4d139e105f"}, @generic={0xc1, 0x2, "9f4afa6f4533105baa368aa62b294092f9e7c46514949a5929aaa4fd6ec6edbb8c89da5d1876e33453c8f20c6acabad0b21c7844ed2028d04c15b47c6fa88624840999f4ceac123b898fc0eee674fbf2903ff55c6d5a44312f9a09fefc1087dda46a72cf25efaa74967fbd1b47ce02a4a1b0c45441fccea5d3fc5723d44189703edecc3a7d229230614919424ed872d26dc0877ceda3170f942e1b3a33b493bbf93200c8bfd0586da327cd462865afb5e727000f70f9e060a053a7f38220ef"}]}}]}}, {{0x9, 0x4, 0x67, 0x40, 0x3, 0x89, 0x8d, 0xeb, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x1c}, [@feature_unit={0x9, 0x24, 0x6, 0x3, 0x4, 0x1, [0x2], 0x77}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x402, 0x1, 0x5, 0x7}]}], [{{0x9, 0x5, 0x1, 0x8, 0x40, 0x7, 0x7f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xcd, 0xbf50}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xf9, 0x2b, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}, @generic={0xe1, 0x7, "fe607dbe26a760939c6451064f090619d621d45be8247bf1ed72ff9374205eb858c32fb493fe66c51466cca33d09c21fc5bf89f1bf8bccbb452cc63d70e1376b8929ff0ce4c047215e2d7f1604d13d6bada94328157727e377fac00927e19d5d017bdfca6a0e83c3936974b5479c2bdd8993b4415370f64344981285322ac812ad703c77ad86f3f9e5edaad5112bdd3c35003c3e3dcd68b5f2c72ec8eaeacd0ca291d1ae3271059721dfb5e8e3ebfd34753ac83132b2657127e8c8aa4848b6cb71989c46e3e77903600f30e6239785e7c3376a74dbc21b958c26e4b34a377f"}]}}, {{0x9, 0x5, 0x7211971cb7be8d62, 0x2, 0x200, 0x6, 0x8, 0x3}}]}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x250, 0x5, 0x7, 0x8, 0x40, 0x4}, 0x1d, &(0x7f0000001380)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x9, 0x0, 0xae, [0xff00ff, 0xff3fc7, 0xff000f]}]}, 0x8, [{0x10, &(0x7f00000013c0)=@string={0x10, 0x3, '\x00'/14}}, {0xff, &(0x7f0000001400)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x443}}, {0x7e, &(0x7f00000015c0)=@string={0x7e, 0x3, "f291b112544b17be9c950253435be061b6d3a6ce7c53b774ab08d52656d3ce748d54d2853bf0da5209f647449852e0a41482bace8f3656991ab60eabc4e95cfc245b00c335f93c10f85d373abdbd0f6a6a1cb165008722a114a3e3a34aa20a4d994c7d75afc97c2b6019940c7a3fc0b5b7d14f1c13195acafa1447e3"}}, {0x3b, &(0x7f0000001640)=@string={0x3b, 0x3, "613c836902cfd02b4c80299b81ab508ff83ed1afb717d5a197659c7ad4031b5fd0bb7104ea78611cc723474af1a6382bcfe9f8e4563e08fcd4"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x140c}}]}) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x6b1, 0x4, 0xfffffff7, 0x4be1}]}) 2.750334061s ago: executing program 0 (id=3547): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000000)=""/78, 0x4e) getdents(r2, &(0x7f0000000200)=""/251, 0xfb) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) timer_create(0x5, &(0x7f0000000300)={0x0, 0x21, 0x1, @thr={&(0x7f0000000140)="4684da7373e161f85a1132783a9471500273152b652c36ea4c68ed9ba7a60b7343295dfe33", &(0x7f0000000180)="e7a4e791c818e0a3cc2879e2ecd7d8b15cacd49732a217c60eb5974e5d3b0f14f8b257ac75fbddfd3cc0785646b3e813c2f0e839d0cd5abc2e31641b1adadc58e55bc440fb4d962c90df2c497e"}}, &(0x7f0000000380)) flock(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r5, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000000000)="04", 0x1}], 0x1, 0x6) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x3c) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) 2.384770864s ago: executing program 3 (id=3548): socket$kcm(0x2, 0x3, 0x2) socket(0xa, 0x3, 0x87) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x5c, 0x7fffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2.283198911s ago: executing program 3 (id=3549): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x100000000, 0x7, 0x0, 0x180, 0x4, 0xf, 0xf1, 0x50, 0x12, 0x1, 0x0, 0x29, 0x0, 0x6, 0x200000000000000, 0xbdb], 0xffff1001, 0xc7451}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xd, 0x1000000000, 0xb, 0x43, 0x9, 0x0, 0x2004cb, 0x0, 0x1000000, 0x7fffffff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x4, 0xd3, 0x80}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x1, 0x45, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x0, 0x7, 0x0, 0x9, 0x1, 0xa6, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0xf6, 0x7, 0xab, 0x8, 0x8, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x10000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x48, 0x81, 0x48, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xd, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0xa000, 0x4}, 0x80000031, 0x0, 0x0, 0x12024, 0x1000002, 0x2101, 0x3000, [0x6808000000000000, 0x4, 0x3, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.150118474s ago: executing program 3 (id=3550): syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x30, 0x2, 0x3, 0xb01, 0x1000000, 0x0, {0x7, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x32}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x404a810) 909.144693ms ago: executing program 4 (id=3551): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpgrp(0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110003, 0x0}) 897.080907ms ago: executing program 3 (id=3552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x1}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x48804) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x16}, @TCA_PIE_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x40}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 446.320519ms ago: executing program 4 (id=3553): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 4 (id=3554): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) kernel console output (not intermixed with test programs): usb 1-1: config 0 descriptor?? [ 1098.145192][T16977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1098.147874][T16977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1098.155864][ T5872] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1098.226217][T12419] usb 3-1: USB disconnect, device number 111 [ 1098.353587][ T5872] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1098.353621][ T5872] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1098.379891][ T5872] usb 5-1: language id specifier not provided by device, defaulting to English [ 1098.407911][T16977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1098.408190][T16977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1098.438072][ T5872] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 1098.438101][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.438119][ T5872] usb 5-1: Product: syz [ 1098.438132][ T5872] usb 5-1: Manufacturer: syz [ 1098.438199][ T5872] usb 5-1: SerialNumber: syz [ 1098.455911][ T36] kauditd_printk_skb: 11038 callbacks suppressed [ 1098.455926][ T36] audit: type=1400 audit(1775985426.403:412510): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5459 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 [ 1098.456681][ T36] audit: type=1400 audit(1775985426.403:412511): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5459 comm="dhcpcd" name="data" dev="tmpfs" ino=13 [ 1098.456719][ T36] audit: type=1400 audit(1775985426.403:412512): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5459 comm="dhcpcd" name="n132" dev="tmpfs" ino=13032 [ 1098.456755][ T36] audit: type=1400 audit(1775985426.403:412513): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5459 comm="dhcpcd" path="/run/udev/data/n132" dev="tmpfs" ino=13032 [ 1098.457919][ T36] audit: type=1400 audit(1775985426.403:412514): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5459 comm="dhcpcd" path="/run/udev/data/n132" dev="tmpfs" ino=13032 [ 1098.459678][ T36] audit: type=1400 audit(1775985426.403:412515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5459 comm="dhcpcd" name="/" dev="sda1" ino=2 [ 1098.459989][ T36] audit: type=1400 audit(1775985426.403:412516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5459 comm="dhcpcd" name="/" dev="sysfs" ino=1 [ 1098.460137][ T36] audit: type=1400 audit(1775985426.403:412517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5459 comm="dhcpcd" name="class" dev="sysfs" ino=13 [ 1098.460442][ T36] audit: type=1400 audit(1775985426.403:412518): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5459 comm="dhcpcd" name="net" dev="sysfs" ino=3586 [ 1098.460747][ T36] audit: type=1400 audit(1775985426.403:412519): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5459 comm="dhcpcd" name="net" dev="sysfs" ino=3586 [ 1098.628524][T16982] binder: 16981:16982 ioctl c0306201 2000000004c0 returned -22 [ 1099.089623][T16977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3395'. [ 1099.169796][ T5911] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1099.295869][ T5911] usb 1-1: USB disconnect, device number 21 [ 1099.314494][ T5872] usbhid 5-1:1.0: can't add hid device: -71 [ 1099.314606][ T5872] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1099.358605][ T5872] usb 5-1: USB disconnect, device number 20 [ 1099.505889][T12419] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1099.744753][T12419] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1099.744780][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1099.751244][T12419] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1099.751272][T12419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.751289][T12419] usb 4-1: Product: syz [ 1099.751302][T12419] usb 4-1: Manufacturer: syz [ 1099.751313][T12419] usb 4-1: SerialNumber: syz [ 1099.784123][T12419] usb 4-1: config 0 descriptor?? [ 1099.803083][T12419] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1100.320013][T12419] gspca_sunplus: reg_r err -110 [ 1100.320767][T12419] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1100.384616][ T5872] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1101.285699][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 1101.287605][ T5872] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 1101.290736][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.290762][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.290780][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.290799][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.294692][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.294718][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.294737][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.294756][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.383414][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.383441][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.383458][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.383478][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.393123][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.393149][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.393159][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.393169][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.519447][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.519464][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.519475][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.519485][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.532967][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.532983][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.532993][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.533003][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.652597][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.652624][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.652642][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.652660][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.659195][ T5872] usb 1-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1101.659222][ T5872] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1101.659240][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1101.659260][ T5872] usb 1-1: config 0 has no interface number 0 [ 1101.666543][ T5872] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1101.666572][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1101.666591][ T5872] usb 1-1: SerialNumber: syz [ 1101.834828][ T5872] usb 1-1: config 0 descriptor?? [ 1101.890490][ T5872] gspca_main: 0000:0000 too many config [ 1101.891253][ T5872] usbhid 1-1:0.16: couldn't find an input interrupt endpoint [ 1101.922407][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 1102.108549][ T5802] usb 1-1: USB disconnect, device number 22 [ 1102.313739][ T809] usb 4-1: USB disconnect, device number 20 [ 1102.569644][ T5977] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1102.764606][ T5977] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1102.764631][ T5977] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1102.798033][T17026] netlink: 'syz.2.3404': attribute type 2 has an invalid length. [ 1102.824043][ T5977] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1102.824072][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.824090][ T5977] usb 5-1: Product: syz [ 1102.824101][ T5977] usb 5-1: Manufacturer: syz [ 1102.824113][ T5977] usb 5-1: SerialNumber: syz [ 1102.888981][ T5977] usb 5-1: config 0 descriptor?? [ 1102.911400][ T5977] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1103.773380][ T36] kauditd_printk_skb: 14321 callbacks suppressed [ 1103.773423][ T36] audit: type=1400 audit(1775985431.413:421198): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17017 comm="syz.4.3403" name="newroot" dev="tmpfs" ino=2 [ 1103.773862][ T36] audit: type=1400 audit(1775985431.413:421199): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17017 comm="syz.4.3403" name="/" dev="devtmpfs" ino=1 [ 1103.774112][ T36] audit: type=1400 audit(1775985431.413:421200): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17017 comm="syz.4.3403" name="snd" dev="devtmpfs" ino=1283 [ 1103.774331][ T36] audit: type=1400 audit(1775985431.413:421201): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=17017 comm="syz.4.3403" name="timer" dev="devtmpfs" ino=1284 [ 1103.774595][ T36] audit: type=1400 audit(1775985431.413:421202): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17017 comm="syz.4.3403" path="/dev/snd/timer" dev="devtmpfs" ino=1284 [ 1103.774964][ T36] audit: type=1400 audit(1775985431.633:421203): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1183 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.10 dest=36984 netif=eth0 [ 1103.775245][ T36] audit: type=1400 audit(1775985431.643:421204): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17017 comm="syz.4.3403" path="/dev/snd/timer" dev="devtmpfs" ino=1284 [ 1103.775520][ T36] audit: type=1400 audit(1775985431.643:421205): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17017 comm="syz.4.3403" path="/dev/snd/timer" dev="devtmpfs" ino=1284 [ 1104.279685][ T5977] gspca_sunplus: reg_r err -110 [ 1104.279793][ T5977] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1104.280340][ T36] audit: type=1400 audit(1775985432.223:421207): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sda1" ino=2 [ 1104.285491][ T36] audit: type=1400 audit(1775985432.223:421208): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sysfs" ino=1 [ 1104.914753][ T5872] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1105.076260][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 1105.082203][ T5872] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1105.107649][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.107708][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.107761][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.107818][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.194043][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.194080][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.194136][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.194204][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.352065][ T2051] usb 5-1: USB disconnect, device number 21 [ 1105.483391][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.483420][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.483438][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.483491][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.509712][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.509736][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.509753][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.509772][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.554813][T16682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1105.620361][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.620389][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.620405][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.620424][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.628371][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.628396][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.628413][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.628438][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.637379][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.637403][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.637420][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.637439][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.657650][ T5872] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1105.657681][ T5872] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1105.657696][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1105.657712][ T5872] usb 4-1: config 0 has no interface number 0 [ 1105.668557][ T5872] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1105.668582][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1105.668601][ T5872] usb 4-1: SerialNumber: syz [ 1105.679444][ T5872] usb 4-1: config 0 descriptor?? [ 1105.724931][T16682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1105.828982][ T5872] gspca_main: 0000:0000 too many config [ 1105.829783][ T5872] usbhid 4-1:0.16: couldn't find an input interrupt endpoint [ 1105.834665][T17051] FAULT_INJECTION: forcing a failure. [ 1105.834665][T17051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.834697][T17051] CPU: 0 UID: 0 PID: 17051 Comm: syz.2.3411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1105.834722][T17051] Tainted: [L]=SOFTLOCKUP [ 1105.834728][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1105.834739][T17051] Call Trace: [ 1105.834746][T17051] [ 1105.834754][T17051] dump_stack_lvl+0xe8/0x150 [ 1105.834785][T17051] should_fail_ex+0x46b/0x600 [ 1105.834814][T17051] _copy_from_user+0x2d/0xb0 [ 1105.834833][T17051] __se_sys_mount+0x18b/0x420 [ 1105.834861][T17051] ? __pfx___se_sys_mount+0x10/0x10 [ 1105.834890][T17051] ? __x64_sys_mount+0x20/0xc0 [ 1105.834913][T17051] do_syscall_64+0x14d/0xf80 [ 1105.834933][T17051] ? trace_irq_disable+0x3b/0x150 [ 1105.834953][T17051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.834971][T17051] ? clear_bhb_loop+0x40/0x90 [ 1105.834993][T17051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.835011][T17051] RIP: 0033:0x7f1e1e82c819 [ 1105.835029][T17051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.835052][T17051] RSP: 002b:00007f1e1ca86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1105.835073][T17051] RAX: ffffffffffffffda RBX: 00007f1e1eaa5fa0 RCX: 00007f1e1e82c819 [ 1105.835087][T17051] RDX: 0000200000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1105.835100][T17051] RBP: 00007f1e1ca86090 R08: 00002000000002c0 R09: 0000000000000000 [ 1105.835112][T17051] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1105.835124][T17051] R13: 00007f1e1eaa6038 R14: 00007f1e1eaa5fa0 R15: 00007ffde737c298 [ 1105.835155][T17051] [ 1105.901691][ T5977] usb 4-1: USB disconnect, device number 21 [ 1106.046002][ T809] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1106.054845][T16682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1106.120683][T16682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1106.147622][T17054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3410'. [ 1106.219262][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1106.219280][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1106.219293][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1106.219306][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1106.219322][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1106.222709][ T809] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1106.222726][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.222736][ T809] usb 1-1: Product: syz [ 1106.222743][ T809] usb 1-1: Manufacturer: syz [ 1106.222750][ T809] usb 1-1: SerialNumber: syz [ 1106.231183][ T809] usb 1-1: config 0 descriptor?? [ 1106.232144][T17049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1106.242780][ T809] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 1106.263667][T17054] bond3: entered promiscuous mode [ 1106.264725][T17054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1107.172552][T17054] bond3 (unregistering): Released all slaves [ 1108.216138][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1108.382402][T16682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.559240][T16682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.612846][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.613041][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.656895][ T36] kauditd_printk_skb: 14732 callbacks suppressed [ 1108.656913][ T36] audit: type=1400 audit(1775986204.706:429425): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="loop2" dev="sysfs" ino=15006 [ 1108.656951][ T36] audit: type=1400 audit(1775986204.706:429426): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=5799 comm="udevd" path="/dev/loop2" dev="devtmpfs" ino=649 [ 1108.656986][ T36] audit: type=1400 audit(1775986204.706:429427): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5799 comm="udevd" path="/dev/loop2" dev="devtmpfs" ino=649 [ 1108.657020][ T36] audit: type=1400 audit(1775986204.706:429428): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="/" dev="sda1" ino=2 [ 1108.657053][ T36] audit: type=1400 audit(1775986204.706:429429): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="/" dev="sysfs" ino=1 [ 1108.657086][ T36] audit: type=1400 audit(1775986204.706:429430): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="dev" dev="sysfs" ino=8 [ 1108.657121][ T36] audit: type=1400 audit(1775986204.706:429431): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="block" dev="sysfs" ino=9 [ 1108.657155][ T36] audit: type=1400 audit(1775986204.706:429432): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="block" dev="sysfs" ino=9 [ 1108.657189][ T36] audit: type=1400 audit(1775986204.706:429433): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="dev" dev="sysfs" ino=8 [ 1108.657223][ T36] audit: type=1400 audit(1775986204.706:429434): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="/" dev="sysfs" ino=1 [ 1108.914706][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.993631][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.125191][ T5977] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1109.291816][ T5977] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1109.291884][ T5977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1109.488403][ T5977] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1109.488483][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.488553][ T5977] usb 3-1: Product: syz [ 1109.488617][ T5977] usb 3-1: Manufacturer: syz [ 1109.488632][ T5977] usb 3-1: SerialNumber: syz [ 1110.018459][ T5977] usb 3-1: config 0 descriptor?? [ 1110.343290][ T5977] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1111.578540][ T5977] gspca_sunplus: reg_r err -110 [ 1111.578638][ T5977] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1111.710718][ T5872] usb 1-1: USB disconnect, device number 23 [ 1111.710764][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1112.298081][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3422'. [ 1112.298101][T17118] openvswitch: netlink: Flow actions attr not present in new flow. [ 1112.724067][ T5872] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1112.771552][ T5802] usb 3-1: USB disconnect, device number 112 [ 1112.880139][ T5872] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1112.880166][ T5872] usb 1-1: config 0 has no interface number 0 [ 1112.880208][ T5872] usb 1-1: config 0 interface 146 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1112.880233][ T5872] usb 1-1: config 0 interface 146 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1112.880253][ T5872] usb 1-1: config 0 interface 146 has no altsetting 0 [ 1112.883581][ T5872] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1112.883610][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.883629][ T5872] usb 1-1: Product: syz [ 1112.883642][ T5872] usb 1-1: Manufacturer: syz [ 1112.883655][ T5872] usb 1-1: SerialNumber: syz [ 1112.994727][ T5872] usb 1-1: config 0 descriptor?? [ 1113.014121][ T5872] pn533_usb 1-1:0.146: NFC: Could not find bulk-in or bulk-out endpoint [ 1113.161981][T17126] libceph: resolve '0..' (ret=-3): failed [ 1113.275873][T17131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1113.309294][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1113.342828][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1113.346195][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1113.380360][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1113.388410][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1113.446683][ T36] kauditd_printk_skb: 13472 callbacks suppressed [ 1113.446769][ T36] audit: type=1400 audit(1775986209.693:434431): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17130 comm="syz-executor" name="/" dev="sda1" ino=2 [ 1113.446812][ T36] audit: type=1400 audit(1775986209.735:434432): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17130 comm="syz-executor" name="/" dev="proc" ino=1 [ 1113.446848][ T36] audit: type=1400 audit(1775986209.735:434433): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17130 comm="syz-executor" name="/" dev="proc" ino=1 [ 1113.448000][ T36] audit: type=1400 audit(1775986209.746:434434): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17130 comm="syz-executor" name="17130" dev="proc" ino=56132 [ 1113.450001][ T36] audit: type=1400 audit(1775986209.746:434435): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17130 comm="syz-executor" name="ns" dev="proc" ino=56133 [ 1113.450043][ T36] audit: type=1400 audit(1775986209.746:434436): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sda1" ino=2 [ 1113.450572][ T36] audit: type=1400 audit(1775986209.746:434437): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sysfs" ino=1 [ 1113.450609][ T36] audit: type=1400 audit(1775986209.746:434438): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1113.450645][ T36] audit: type=1400 audit(1775986209.746:434439): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="virtual" dev="sysfs" ino=1376 [ 1113.451051][ T36] audit: type=1400 audit(1775986209.746:434440): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="block" dev="sysfs" ino=12970 [ 1114.787952][ T5802] usb 1-1: USB disconnect, device number 24 [ 1115.396136][ T60] Bluetooth: hci5: command tx timeout [ 1115.494709][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.371121][ T5872] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1116.631790][ T5872] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1116.631811][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1116.634285][ T5872] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1116.634301][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.634311][ T5872] usb 3-1: Product: syz [ 1116.634318][ T5872] usb 3-1: Manufacturer: syz [ 1116.634339][ T5872] usb 3-1: SerialNumber: syz [ 1116.721270][ T5872] usb 3-1: config 0 descriptor?? [ 1116.727370][ T5872] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1116.818867][T17176] libceph: resolve '0..' (ret=-3): failed [ 1117.088261][ T5872] gspca_sunplus: reg_r err -71 [ 1117.088348][ T5872] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1117.112181][ T5872] usb 3-1: USB disconnect, device number 113 [ 1117.371752][ T60] Bluetooth: hci5: command tx timeout [ 1117.482937][T17185] libceph: resolve '0..' (ret=-3): failed [ 1117.895477][ T5966] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1118.020309][T17130] chnl_net:caif_netlink_parms(): no params data found [ 1118.029072][ T5802] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1118.050726][ T5966] usb 4-1: Using ep0 maxpacket: 32 [ 1118.084549][ T5966] usb 4-1: config 6 has an invalid interface number: 96 but max is 2 [ 1118.084576][ T5966] usb 4-1: config 6 has an invalid interface number: 29 but max is 2 [ 1118.084593][ T5966] usb 4-1: config 6 has an invalid interface number: 37 but max is 2 [ 1118.084610][ T5966] usb 4-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 1118.084625][ T5966] usb 4-1: config 6 has an invalid interface number: 103 but max is 2 [ 1118.084642][ T5966] usb 4-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 1118.084660][ T5966] usb 4-1: config 6 has no interface number 0 [ 1118.084673][ T5966] usb 4-1: config 6 has no interface number 1 [ 1118.084686][ T5966] usb 4-1: config 6 has no interface number 2 [ 1118.084697][ T5966] usb 4-1: config 6 has no interface number 3 [ 1118.084757][ T5966] usb 4-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1118.084768][ T5966] usb 4-1: config 6 interface 96 altsetting 214 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1118.084781][ T5966] usb 4-1: config 6 interface 96 altsetting 214 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1118.084795][ T5966] usb 4-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xB, skipping [ 1118.084806][ T5966] usb 4-1: config 6 interface 96 altsetting 214 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1118.084819][ T5966] usb 4-1: config 6 interface 96 altsetting 214 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1118.084832][ T5966] usb 4-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0x4, skipping [ 1118.084843][ T5966] usb 4-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xF, skipping [ 1118.084853][ T5966] usb 4-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xC, skipping [ 1118.084865][ T5966] usb 4-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xE, skipping [ 1118.084875][ T5966] usb 4-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1118.084885][ T5966] usb 4-1: too many endpoints for config 6 interface 29 altsetting 245: 63, using maximum allowed: 30 [ 1118.084908][ T5966] usb 4-1: config 6 interface 29 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 63 [ 1118.084926][ T5966] usb 4-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1118.084937][ T5966] usb 4-1: config 6 interface 37 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1118.084948][ T5966] usb 4-1: config 6 interface 37 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1118.084957][ T5966] usb 4-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1118.084974][ T5966] usb 4-1: config 6 interface 103 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1118.084984][ T5966] usb 4-1: config 6 interface 103 altsetting 64 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1118.084995][ T5966] usb 4-1: config 6 interface 103 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 1118.085005][ T5966] usb 4-1: config 6 interface 96 has no altsetting 0 [ 1118.085013][ T5966] usb 4-1: config 6 interface 29 has no altsetting 0 [ 1118.085021][ T5966] usb 4-1: config 6 interface 37 has no altsetting 0 [ 1118.085029][ T5966] usb 4-1: config 6 interface 103 has no altsetting 0 [ 1118.105223][ T5966] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=dc.f3 [ 1118.105251][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.105268][ T5966] usb 4-1: Product: у [ 1118.105282][ T5966] usb 4-1: Manufacturer: ԗ烕岞浒ꔊ㨑镋⩦圝؁秽艨꟯惏┏䷋ᜣ뎁덝ᗽ琾ᒰ夦ܸℭ㥝ꪱ㾭饊텼鹞࿸㪜왮뭱⽇珅穜睞ᗉ念㩖뉺શꑳ톾埘鑾ⳗ鿾锽韓辦ﰇ祤乸㑁ظ꟠萨o贍䉚堭줔倇ᚷ촊꡺濠ꍕࠆ滜ᆏ뛭坴夣ꏜ㪥僟⦜뮓즰撌捾璍춓䒑蘒琢ၒѬꁂẅ苙褠㑭뗢༃ꎢ退锋᰷ᜑﳩए﹊㈦㑚徃⃗౦ [ 1118.105310][ T5966] usb 4-1: SerialNumber: 釲኱䭔븗閜匂孃懠펶캦卼璷ࢫ⛕퍖瓎咍藒勚䑇劘ꓠ舔캺㚏饖똚ꬎﱜ嬤쌀蘆ြ巸㨷붽樏ᱪ斱蜀ꄢꌔꏣꉊ䴊䲙畽즯⭼ᥠಔ㽺뗀톷ᱏᤓ쩚ᓺ [ 1118.222109][ T36] kauditd_printk_skb: 20368 callbacks suppressed [ 1118.222127][ T36] audit: type=1400 audit(1775986214.754:443889): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5794 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1118.522675][ T36] audit: type=1400 audit(1775986215.069:443890): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17187 comm="syz.3.3438" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1118.522875][ T36] audit: type=1400 audit(1775986215.069:443891): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5794 comm="syz-executor" name="654" dev="tmpfs" ino=3391 [ 1118.523282][ T36] audit: type=1400 audit(1775986215.069:443892): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5794 comm="syz-executor" path="/654/cgroup" dev="tmpfs" ino=3392 [ 1118.584162][ T36] audit: type=1400 audit(1775986215.079:443894): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17192 comm="syz.4.3439" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1118.584211][ T36] audit: type=1400 audit(1775986215.069:443893): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5794 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1118.584248][ T36] audit: type=1400 audit(1775986215.079:443895): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17192 comm="syz.4.3439" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1118.584282][ T36] audit: type=1400 audit(1775986215.079:443896): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5794 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1118.584312][ T36] audit: type=1400 audit(1775986215.079:443897): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5794 comm="syz-executor" name="654" dev="tmpfs" ino=3391 [ 1118.584333][ T36] audit: type=1400 audit(1775986215.121:443898): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17187 comm="syz.3.3438" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1118.595567][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1118.595598][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.595686][ T5802] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1118.595706][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.829295][ T5802] usb 5-1: config 0 descriptor?? [ 1118.855249][ T5966] kobil_sct 4-1:6.96: KOBIL USB smart card terminal converter detected [ 1118.916608][ T5966] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1119.027687][T17200] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1119.174757][ T5966] kobil_sct 4-1:6.29: required endpoints missing [ 1119.206699][ T5966] kobil_sct 4-1:6.37: required endpoints missing [ 1119.362130][ T60] Bluetooth: hci5: command tx timeout [ 1119.381137][ T5966] kobil_sct 4-1:6.103: required endpoints missing [ 1119.662465][T17206] netlink: 'syz.2.3441': attribute type 2 has an invalid length. [ 1119.829265][ T5966] usb 4-1: USB disconnect, device number 22 [ 1119.966327][ T5802] usbhid 5-1:0.0: can't add hid device: -71 [ 1119.966449][ T5802] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1119.996411][ T5802] usb 5-1: USB disconnect, device number 22 [ 1120.030389][ T5966] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1120.032086][ T5966] kobil_sct 4-1:6.96: device disconnected [ 1120.165173][T17193] IPv6: Can't replace route, no match found [ 1120.440606][T17193] syzkaller0: entered promiscuous mode [ 1120.440631][T17193] syzkaller0: entered allmulticast mode [ 1120.495998][ T5966] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1120.690605][ T5966] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1120.690631][ T5966] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1120.690649][ T5966] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.690666][ T5966] usb 4-1: config 220 has no interface number 2 [ 1120.690733][ T5966] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1120.690759][ T5966] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1120.690775][ T5966] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1120.690792][ T5966] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1120.731299][ T5966] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1120.731328][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.731347][ T5966] usb 4-1: Product: syz [ 1120.731360][ T5966] usb 4-1: Manufacturer: syz [ 1120.731373][ T5966] usb 4-1: SerialNumber: syz [ 1120.823962][T17193] tipc: Enabled bearer , priority 0 [ 1120.926128][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.926333][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.926506][T17130] bridge_slave_0: entered allmulticast mode [ 1120.929169][T17130] bridge_slave_0: entered promiscuous mode [ 1120.932356][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.932534][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.932693][T17130] bridge_slave_1: entered allmulticast mode [ 1121.009534][ T5802] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1121.021934][T17130] bridge_slave_1: entered promiscuous mode [ 1121.181048][ T5802] usb 5-1: Using ep0 maxpacket: 32 [ 1121.184683][ T5802] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1121.184700][ T5802] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1121.239780][T17210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.240944][T17210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.333659][ T60] Bluetooth: hci5: command tx timeout [ 1121.385067][ T5802] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1121.385096][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.385114][ T5802] usb 5-1: Product: 됊犈㔽ꔳ궅햁块䩲鲲垶袿⟇⟸䤢竸⛣匟Ԉ녡쮳쟲턥삄藍躍ヶ䰚跛产蒎簻ꇡ莂ƻ믊첡ࣲ㪵坢ꇑ馅䥁僚즿釹ࡢ瞤ㅮ蟑좏㩾䑕㼆劬묟昻槙ᬼ骿놄杀轝娏ꛊ✓ᯁ愊莘ốၮ䒨挿⳰᥇紧䟾櫡㖶쾜杇媣ⶏƲꩇּ働醻ꙍ㸁ም汀 [ 1121.385140][ T5802] usb 5-1: Manufacturer: ⦀卑䜞ꛉ얭邏芓춘ꈠꈩ상뒆꭬ꍼ剒̑䘶ꄭ⍣労቙櫩됌滃繃ꫮ炒⥵̣䟭ኆ횞鲒ꇠ렋皶ᑬ倛ธ鵄䒿≶痸Ž첧鈷⢱첋獐듘㛖⾪涸갣賂﨧玡慹⏮㽐槏ꀃ皕꾇ⳋ須බ䉅㎴阵ꘐ૆槛ࣾ˗鮷瀒q灋㣻䒫ཚ뎸뽵ꪾ񆥦ⰽ揶磛㕦 [ 1121.385163][ T5802] usb 5-1: SerialNumber: 퇭㟬⢙ꥲꉶ槍锋￈凗⃰鹒퇦ぞ춪䥑僦튛◥痱閯褾ᒬ뷫蝜燩괠䂻堳攧 [ 1121.402211][ T5966] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1121.402243][ T5966] uvcvideo 4-1:220.0: No valid video chain found. [ 1121.402304][ T5966] usb 4-1: selecting invalid altsetting 0 [ 1121.440885][ T5966] usb 4-1: selecting invalid altsetting 0 [ 1121.440923][ T5966] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1121.446649][ T5966] usb 4-1: USB disconnect, device number 23 [ 1121.921558][ T5802] usb 5-1: can't set config #1, error -71 [ 1121.928702][ T5802] usb 5-1: USB disconnect, device number 23 [ 1121.984521][T17193] tipc: Resetting bearer [ 1122.213039][T17193] tipc: Disabling bearer [ 1122.276754][T15320] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1122.407396][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1122.449096][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.452068][T15320] usb 3-1: Using ep0 maxpacket: 32 [ 1122.477716][T15320] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.477748][T15320] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.485109][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.498292][T15320] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1122.498319][T15320] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1122.498338][T15320] usb 3-1: Product: syz [ 1122.498350][T15320] usb 3-1: Manufacturer: syz [ 1122.513260][T17234] netlink: 'syz.0.3447': attribute type 2 has an invalid length. [ 1122.539659][T15320] hub 3-1:4.0: USB hub found [ 1122.600459][ T5964] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 1122.680435][T17241] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1122.737887][T15320] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1122.764820][ T5964] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1122.764852][ T5964] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 8 [ 1122.764891][ T5964] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1122.764911][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.833432][T17238] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.926650][T17130] team0: Port device team_slave_0 added [ 1122.931382][T17130] team0: Port device team_slave_1 added [ 1122.994423][ T36] kauditd_printk_skb: 14756 callbacks suppressed [ 1122.994434][ T36] audit: type=1400 audit(1775986219.741:452299): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="dummy_hcd.2" dev="sysfs" ino=26088 [ 1122.994457][ T36] audit: type=1400 audit(1775986219.741:452300): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="usb3" dev="sysfs" ino=26117 [ 1122.994477][ T36] audit: type=1400 audit(1775986219.741:452301): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="3-1" dev="sysfs" ino=252201 [ 1122.994499][ T36] audit: type=1400 audit(1775986219.741:452302): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=6240 comm="udevd" name="bcdDevice" dev="sysfs" ino=252211 [ 1122.995584][ T36] audit: type=1400 audit(1775986219.741:452303): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6240 comm="udevd" path="/sys/devices/platform/dummy_hcd.2/usb3/3-1/bcdDevice" dev="sysfs" ino=252211 [ 1122.995610][ T36] audit: type=1400 audit(1775986219.752:452304): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="/" dev="sda1" ino=2 [ 1122.995631][ T36] audit: type=1400 audit(1775986219.752:452305): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="/" dev="sysfs" ino=1 [ 1122.995652][ T36] audit: type=1400 audit(1775986219.752:452306): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1122.995671][ T36] audit: type=1400 audit(1775986219.752:452307): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="platform" dev="sysfs" ino=36 [ 1122.996904][ T36] audit: type=1400 audit(1775986219.752:452308): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="dummy_hcd.2" dev="sysfs" ino=26088 [ 1123.069111][T15320] usb 3-1: USB disconnect, device number 114 [ 1123.289663][T17245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1123.340104][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1123.773366][T17250] binder: 17247:17250 ioctl 4018620d 0 returned -22 [ 1124.582123][T15320] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1124.935987][ T5964] usb 4-1: string descriptor 0 read error: -71 [ 1124.942956][ T5964] hub 4-1:32.0: USB hub found [ 1124.949431][ T5964] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 1124.991157][T15320] usb 5-1: Using ep0 maxpacket: 32 [ 1125.019771][T15320] usb 5-1: config 6 has an invalid interface number: 96 but max is 2 [ 1125.019799][T15320] usb 5-1: config 6 has an invalid interface number: 29 but max is 2 [ 1125.019817][T15320] usb 5-1: config 6 has an invalid interface number: 37 but max is 2 [ 1125.019939][T15320] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 1125.019955][T15320] usb 5-1: config 6 has an invalid interface number: 103 but max is 2 [ 1125.019974][T15320] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 1125.019992][T15320] usb 5-1: config 6 has no interface number 0 [ 1125.020006][T15320] usb 5-1: config 6 has no interface number 1 [ 1125.020020][T15320] usb 5-1: config 6 has no interface number 2 [ 1125.020172][T15320] usb 5-1: config 6 has no interface number 3 [ 1125.020305][T15320] usb 5-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1125.020317][T15320] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1125.020330][T15320] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1125.020343][T15320] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xB, skipping [ 1125.020354][T15320] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1125.020367][T15320] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1125.020380][T15320] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0x4, skipping [ 1125.020390][T15320] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xF, skipping [ 1125.020498][T15320] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xC, skipping [ 1125.020524][T15320] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xE, skipping [ 1125.020542][T15320] usb 5-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1125.020553][T15320] usb 5-1: too many endpoints for config 6 interface 29 altsetting 245: 63, using maximum allowed: 30 [ 1125.020573][T15320] usb 5-1: config 6 interface 29 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 63 [ 1125.020662][T15320] usb 5-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1125.020675][T15320] usb 5-1: config 6 interface 37 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1125.020688][T15320] usb 5-1: config 6 interface 37 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1125.020698][T15320] usb 5-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1125.020717][T15320] usb 5-1: config 6 interface 103 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1125.020727][T15320] usb 5-1: config 6 interface 103 altsetting 64 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1125.020739][T15320] usb 5-1: config 6 interface 103 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 1125.020750][T15320] usb 5-1: config 6 interface 96 has no altsetting 0 [ 1125.020758][T15320] usb 5-1: config 6 interface 29 has no altsetting 0 [ 1125.020827][T15320] usb 5-1: config 6 interface 37 has no altsetting 0 [ 1125.020837][T15320] usb 5-1: config 6 interface 103 has no altsetting 0 [ 1125.044820][T17253] netlink: 'syz.2.3453': attribute type 2 has an invalid length. [ 1125.162017][T15320] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=dc.f3 [ 1125.162046][T15320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.162636][T15320] usb 5-1: Product: у [ 1125.162651][T15320] usb 5-1: Manufacturer: ԗ烕岞浒ꔊ㨑镋⩦圝؁秽艨꟯惏┏䷋ᜣ뎁덝ᗽ琾ᒰ夦ܸℭ㥝ꪱ㾭饊텼鹞࿸㪜왮뭱⽇珅穜睞ᗉ念㩖뉺શꑳ톾埘鑾ⳗ鿾锽韓辦ﰇ祤乸㑁ظ꟠萨o贍䉚堭줔倇ᚷ촊꡺濠ꍕࠆ滜ᆏ뛭坴夣ꏜ㪥僟⦜뮓즰撌捾璍춓䒑蘒琢ၒѬꁂẅ苙褠㑭뗢༃ꎢ退锋᰷ᜑﳩए﹊㈦㑚徃⃗౦ [ 1125.162679][T15320] usb 5-1: SerialNumber: 釲኱䭔븗閜匂孃懠펶캦卼璷ࢫ⛕퍖瓎咍藒勚䑇劘ꓠ舔캺㚏饖똚ꬎﱜ嬤쌀蘆ြ巸㨷붽樏ᱪ斱蜀ꄢꌔꏣꉊ䴊䲙畽즯⭼ᥠಔ㽺뗀톷ᱏᤓ쩚ᓺ [ 1125.827189][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.827721][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.827748][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.047970][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.047986][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.048010][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.288992][ T145] bridge_slave_1: left allmulticast mode [ 1126.289027][ T145] bridge_slave_1: left promiscuous mode [ 1126.289253][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.430775][ T145] bridge_slave_0: left allmulticast mode [ 1126.430802][ T145] bridge_slave_0: left promiscuous mode [ 1126.431048][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.473370][T15320] usb 5-1: can't set config #6, error -71 [ 1126.914243][T15320] usb 5-1: USB disconnect, device number 24 [ 1127.362574][ T5977] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1127.362972][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1127.505417][ T5977] usb 3-1: device descriptor read/64, error -32 [ 1127.881079][ T36] kauditd_printk_skb: 8166 callbacks suppressed [ 1127.881132][ T36] audit: type=1400 audit(1775986224.749:457039): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5164 comm="udevd" path="/sys/devices/virtual/block/loop2/mq" dev="sysfs" ino=15102 [ 1127.881221][ T36] audit: type=1400 audit(1775986224.760:457040): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5164 comm="udevd" path="/sys/devices/virtual/block/loop2/mq" dev="sysfs" ino=15102 [ 1127.881260][ T36] audit: type=1400 audit(1775986224.760:457041): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sda1" ino=2 [ 1127.881297][ T36] audit: type=1400 audit(1775986224.760:457042): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sysfs" ino=1 [ 1127.881333][ T36] audit: type=1400 audit(1775986224.760:457043): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1127.881369][ T36] audit: type=1400 audit(1775986224.760:457044): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="virtual" dev="sysfs" ino=1376 [ 1127.881489][ T36] audit: type=1400 audit(1775986224.886:457045): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="block" dev="sysfs" ino=12970 [ 1127.881570][ T36] audit: type=1400 audit(1775986224.886:457046): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="loop2" dev="sysfs" ino=15006 [ 1127.881609][ T36] audit: type=1400 audit(1775986224.886:457047): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="mq" dev="sysfs" ino=15102 [ 1127.881645][ T36] audit: type=1400 audit(1775986224.886:457048): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sda1" ino=2 [ 1128.089100][ T5964] usb 4-1: USB disconnect, device number 24 [ 1128.172272][ T5977] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1128.346932][ T5977] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1128.346960][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.357811][ T5977] usb 3-1: config 0 descriptor?? [ 1128.395347][ T5977] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1128.452233][T17277] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1128.583524][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1128.688003][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1128.772197][ T5872] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1128.930105][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1128.930139][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.930174][ T5872] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1128.930195][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.977542][ T5872] usb 5-1: config 0 descriptor?? [ 1128.996453][ T5977] gp8psk: usb out operation failed. [ 1128.996470][ T5977] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1128.996508][ T5977] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1129.039141][ T5977] usb 3-1: USB disconnect, device number 116 [ 1129.249461][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.334751][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.389218][ T145] bond0 (unregistering): Released all slaves [ 1129.466531][T17290] netlink: 'syz.0.3461': attribute type 2 has an invalid length. [ 1129.605554][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 1129.605666][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1129.609554][ T5872] usb 5-1: USB disconnect, device number 25 [ 1129.799360][T17281] IPv6: Can't replace route, no match found [ 1129.945265][T17298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 1129.945415][T17298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 1130.326518][T17130] hsr_slave_0: entered promiscuous mode [ 1130.378128][T17130] hsr_slave_1: entered promiscuous mode [ 1130.506063][T17130] debugfs: 'hsr0' already exists in 'hsr' [ 1130.506699][T17130] Cannot create hsr debugfs directory [ 1130.665088][T17300] tipc: Enabled bearer , priority 0 [ 1130.671178][T17306] fuse: Unknown parameter 'Kd)FOI%n# ߫C9L' [ 1130.829582][ T5964] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1130.851461][ T145] hsr_slave_0: left promiscuous mode [ 1130.877316][ T145] hsr_slave_1: left promiscuous mode [ 1130.877945][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.908325][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.982225][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 1130.986090][ T5964] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1130.986118][ T5964] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1131.018748][ T5964] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.018775][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.018792][ T5964] usb 5-1: Product: 됊犈㔽ꔳ궅햁块䩲鲲垶袿⟇⟸䤢竸⛣匟Ԉ녡쮳쟲턥삄藍躍ヶ䰚跛产蒎簻ꇡ莂ƻ믊첡ࣲ㪵坢ꇑ馅䥁僚즿釹ࡢ瞤ㅮ蟑좏㩾䑕㼆劬묟昻槙ᬼ骿놄杀轝娏ꛊ✓ᯁ愊莘ốၮ䒨挿⳰᥇紧䟾櫡㖶쾜杇媣ⶏƲꩇּ働醻ꙍ㸁ም汀 [ 1131.018820][ T5964] usb 5-1: Manufacturer: ⦀卑䜞ꛉ얭邏芓춘ꈠꈩ상뒆꭬ꍼ剒̑䘶ꄭ⍣労቙櫩됌滃繃ꫮ炒⥵̣䟭ኆ횞鲒ꇠ렋皶ᑬ倛ธ鵄䒿≶痸Ž첧鈷⢱첋獐듘㛖⾪涸갣賂﨧玡慹⏮㽐槏ꀃ皕꾇ⳋ須බ䉅㎴阵ꘐ૆槛ࣾ˗鮷瀒q灋㣻䒫ཚ뎸뽵ꪾ񆥦ⰽ揶磛㕦 [ 1131.018845][ T5964] usb 5-1: SerialNumber: 퇭㟬⢙ꥲꉶ槍锋￈凗⃰鹒퇦ぞ춪䥑僦튛◥痱閯褾ᒬ뷫蝜燩괠䂻堳攧 [ 1131.444785][ T5964] cdc_ncm 5-1:1.0: bind() failure [ 1131.503126][ T5964] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1131.503157][ T5964] cdc_ncm 5-1:1.1: bind() failure [ 1131.678571][ T5977] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1131.748973][ T5964] usb 5-1: USB disconnect, device number 26 [ 1131.905809][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 1132.005708][ T5977] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1132.005735][ T5977] usb 4-1: config 1 has no interface number 0 [ 1132.005779][ T5977] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1132.005802][ T5977] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1132.005823][ T5977] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1132.009135][ T5977] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1132.009169][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1132.009188][ T5977] usb 4-1: Product: syz [ 1132.009201][ T5977] usb 4-1: Manufacturer: syz [ 1132.009214][ T5977] usb 4-1: SerialNumber: syz [ 1132.100934][T17322] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1132.101185][T17322] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1132.504356][T17322] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1132.504583][T17322] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1132.513953][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1132.534433][ T5872] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1132.563645][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1132.677166][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 1132.677995][ T36] kauditd_printk_skb: 12278 callbacks suppressed [ 1132.678010][ T36] audit: type=1400 audit(1775986229.936:464899): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.678910][ T36] audit: type=1400 audit(1775986229.936:464900): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.679631][ T36] audit: type=1400 audit(1775986229.936:464901): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.680363][ T36] audit: type=1400 audit(1775986229.936:464902): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.681099][ T36] audit: type=1400 audit(1775986229.936:464903): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.681742][ T36] audit: type=1400 audit(1775986229.936:464904): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.682314][ T36] audit: type=1400 audit(1775986229.936:464905): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.682947][ T36] audit: type=1400 audit(1775986229.936:464906): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.683658][ T36] audit: type=1400 audit(1775986229.936:464907): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.684247][ T5872] usb 1-1: config 6 has an invalid interface number: 96 but max is 2 [ 1132.684273][ T5872] usb 1-1: config 6 has an invalid interface number: 29 but max is 2 [ 1132.684290][ T5872] usb 1-1: config 6 has an invalid interface number: 37 but max is 2 [ 1132.684308][ T5872] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 1132.684324][ T5872] usb 1-1: config 6 has an invalid interface number: 103 but max is 2 [ 1132.684342][ T5872] usb 1-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 1132.684360][ T5872] usb 1-1: config 6 has no interface number 0 [ 1132.684374][ T5872] usb 1-1: config 6 has no interface number 1 [ 1132.684390][ T5872] usb 1-1: config 6 has no interface number 2 [ 1132.684403][ T5872] usb 1-1: config 6 has no interface number 3 [ 1132.684483][ T5872] usb 1-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1132.684503][ T5872] usb 1-1: config 6 interface 96 altsetting 214 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1132.684526][ T5872] usb 1-1: config 6 interface 96 altsetting 214 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1132.684550][ T5872] usb 1-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xB, skipping [ 1132.684571][ T5872] usb 1-1: config 6 interface 96 altsetting 214 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1132.684594][ T5872] usb 1-1: config 6 interface 96 altsetting 214 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1132.684617][ T5872] usb 1-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0x4, skipping [ 1132.684636][ T5872] usb 1-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xF, skipping [ 1132.684655][ T5872] usb 1-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xC, skipping [ 1132.684677][ T5872] usb 1-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xE, skipping [ 1132.684696][ T5872] usb 1-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1132.684715][ T5872] usb 1-1: too many endpoints for config 6 interface 29 altsetting 245: 63, using maximum allowed: 30 [ 1132.684751][ T5872] usb 1-1: config 6 interface 29 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 63 [ 1132.684787][ T5872] usb 1-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1132.684808][ T5872] usb 1-1: config 6 interface 37 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1132.684830][ T5872] usb 1-1: config 6 interface 37 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1132.684848][ T5872] usb 1-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1132.684881][ T5872] usb 1-1: config 6 interface 103 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1132.684900][ T5872] usb 1-1: config 6 interface 103 altsetting 64 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1132.684922][ T5872] usb 1-1: config 6 interface 103 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 1132.684941][ T5872] usb 1-1: config 6 interface 96 has no altsetting 0 [ 1132.684957][ T5872] usb 1-1: config 6 interface 29 has no altsetting 0 [ 1132.684973][ T5872] usb 1-1: config 6 interface 37 has no altsetting 0 [ 1132.684989][ T5872] usb 1-1: config 6 interface 103 has no altsetting 0 [ 1132.686115][ T36] audit: type=1400 audit(1775986229.936:464908): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17325 comm="syz.0.3468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1132.694759][ T5872] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=dc.f3 [ 1132.694787][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.694806][ T5872] usb 1-1: Product: у [ 1132.694818][ T5872] usb 1-1: Manufacturer: ԗ烕岞浒ꔊ㨑镋⩦圝؁秽艨꟯惏┏䷋ᜣ뎁덝ᗽ琾ᒰ夦ܸℭ㥝ꪱ㾭饊텼鹞࿸㪜왮뭱⽇珅穜睞ᗉ念㩖뉺શꑳ톾埘鑾ⳗ鿾锽韓辦ﰇ祤乸㑁ظ꟠萨o贍䉚堭줔倇ᚷ촊꡺濠ꍕࠆ滜ᆏ뛭坴夣ꏜ㪥僟⦜뮓즰撌捾璍춓䒑蘒琢ၒѬꁂẅ苙褠㑭뗢༃ꎢ退锋᰷ᜑﳩए﹊㈦㑚徃⃗౦ [ 1132.694845][ T5872] usb 1-1: SerialNumber: 釲኱䭔븗閜匂孃懠펶캦卼璷ࢫ⛕퍖瓎咍藒勚䑇劘ꓠ舔캺㚏饖똚ꬎﱜ嬤쌀蘆ြ巸㨷붽樏ᱪ斱蜀ꄢꌔꏣꉊ䴊䲙畽즯⭼ᥠಔ㽺뗀톷ᱏᤓ쩚ᓺ [ 1132.987538][ T5872] kobil_sct 1-1:6.96: KOBIL USB smart card terminal converter detected [ 1133.016474][ T5872] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1133.108641][ T5872] kobil_sct 1-1:6.29: required endpoints missing [ 1133.123563][ T5872] kobil_sct 1-1:6.37: required endpoints missing [ 1133.133160][ T5872] kobil_sct 1-1:6.103: required endpoints missing [ 1133.154971][ T5872] usb 1-1: USB disconnect, device number 25 [ 1133.195895][ T5872] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1133.198673][ T5872] kobil_sct 1-1:6.96: device disconnected [ 1133.536770][T17275] tipc: Disabling bearer [ 1133.798229][ T5977] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1133.798513][ T5977] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1133.837072][ T5977] usb 4-1: USB disconnect, device number 25 [ 1134.178665][T17334] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1134.802002][T17346] binder: 17336:17346 ioctl 4018620d 0 returned -22 [ 1134.849099][ T5977] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1135.261522][ T5977] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1135.261551][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.428770][ T5977] usb 4-1: config 0 descriptor?? [ 1135.453503][ T5977] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1135.815013][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1135.815103][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1136.032141][ T5977] gp8psk: usb out operation failed. [ 1136.032159][ T5977] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1136.032197][ T5977] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1136.158910][ T5977] usb 4-1: USB disconnect, device number 26 [ 1137.451327][ T5817] audit_log_start: 8777 callbacks suppressed [ 1137.451345][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1137.451356][ T5817] audit: audit_lost=131896 audit_rate_limit=0 audit_backlog_limit=64 [ 1137.451370][ T5817] audit: backlog limit exceeded [ 1137.451398][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1137.451410][ T5817] audit: audit_lost=131897 audit_rate_limit=0 audit_backlog_limit=64 [ 1137.451423][ T5817] audit: backlog limit exceeded [ 1137.451446][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1137.451457][ T5817] audit: audit_lost=131898 audit_rate_limit=0 audit_backlog_limit=64 [ 1137.451470][ T5817] audit: backlog limit exceeded [ 1137.451493][ T5817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1138.047449][T17364] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1138.218308][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1138.375069][T17374] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1138.530563][T17364] sp0: Synchronizing with TNC [ 1138.634060][ T5872] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1138.754158][ T5977] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1138.801505][ T5872] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1138.801534][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.801552][ T5872] usb 4-1: Product: syz [ 1138.801564][ T5872] usb 4-1: Manufacturer: syz [ 1138.801575][ T5872] usb 4-1: SerialNumber: syz [ 1138.828038][ T5872] usb 4-1: config 0 descriptor?? [ 1138.849529][ T5964] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1138.872412][ T5872] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1138.930918][ T5977] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1138.930944][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.930958][ T5977] usb 3-1: config 0 has no interface number 0 [ 1138.930994][ T5977] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1138.931014][ T5977] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1138.992603][ T5977] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1138.992632][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.992649][ T5977] usb 3-1: Product: syz [ 1138.992662][ T5977] usb 3-1: Manufacturer: syz [ 1138.992676][ T5977] usb 3-1: SerialNumber: syz [ 1139.044424][ T5964] usb 1-1: not running at top speed; connect to a high speed hub [ 1139.063920][ T5977] usb 3-1: config 0 descriptor?? [ 1139.066945][ T5964] usb 1-1: config 93 has an invalid interface number: 120 but max is 2 [ 1139.067163][ T5964] usb 1-1: config 93 contains an unexpected descriptor of type 0x2, skipping [ 1139.067181][ T5964] usb 1-1: config 93 has an invalid interface number: 212 but max is 2 [ 1139.067251][ T5964] usb 1-1: config 93 has an invalid interface number: 136 but max is 2 [ 1139.067270][ T5964] usb 1-1: config 93 has an invalid interface number: 31 but max is 2 [ 1139.067287][ T5964] usb 1-1: config 93 has 4 interfaces, different from the descriptor's value: 3 [ 1139.067306][ T5964] usb 1-1: config 93 has no interface number 0 [ 1139.067320][ T5964] usb 1-1: config 93 has no interface number 1 [ 1139.067334][ T5964] usb 1-1: config 93 has no interface number 2 [ 1139.067346][ T5964] usb 1-1: config 93 has no interface number 3 [ 1139.067472][ T5964] usb 1-1: config 93 interface 120 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1139.067499][ T5964] usb 1-1: config 93 interface 120 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1139.067575][ T5964] usb 1-1: config 93 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1139.067596][ T5964] usb 1-1: config 93 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 64 [ 1139.067621][ T5964] usb 1-1: config 93 interface 120 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1139.067642][ T5964] usb 1-1: config 93 interface 120 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1139.067662][ T5964] usb 1-1: config 93 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1139.067740][ T5964] usb 1-1: config 93 interface 120 altsetting 0 endpoint 0x3 has invalid maxpacket 256, setting to 64 [ 1139.067767][ T5964] usb 1-1: config 93 interface 120 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1139.067791][ T5964] usb 1-1: config 93 interface 120 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1139.067828][ T5964] usb 1-1: config 93 interface 212 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1139.068270][ T5964] usb 1-1: too many endpoints for config 93 interface 136 altsetting 169: 199, using maximum allowed: 30 [ 1139.068311][ T5964] usb 1-1: config 93 interface 136 altsetting 169 has a duplicate endpoint with address 0x3, skipping [ 1139.068332][ T5964] usb 1-1: config 93 interface 136 altsetting 169 has a duplicate endpoint with address 0x7, skipping [ 1139.068352][ T5964] usb 1-1: config 93 interface 136 altsetting 169 has a duplicate endpoint with address 0x2, skipping [ 1139.068421][ T5964] usb 1-1: config 93 interface 136 altsetting 169 has a duplicate endpoint with address 0x1, skipping [ 1139.068442][ T5964] usb 1-1: config 93 interface 136 altsetting 169 has a duplicate endpoint with address 0x9, skipping [ 1139.068461][ T5964] usb 1-1: config 93 interface 136 altsetting 169 has 5 endpoint descriptors, different from the interface descriptor's value: 199 [ 1139.068496][ T5964] usb 1-1: config 93 interface 31 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1139.068517][ T5964] usb 1-1: config 93 interface 31 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1139.068589][ T5964] usb 1-1: config 93 interface 31 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1139.068612][ T5964] usb 1-1: config 93 interface 31 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1139.068630][ T5964] usb 1-1: config 93 interface 212 has no altsetting 0 [ 1139.068647][ T5964] usb 1-1: config 93 interface 136 has no altsetting 0 [ 1139.068663][ T5964] usb 1-1: config 93 interface 31 has no altsetting 0 [ 1139.215240][ T5964] usb 1-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice=75.87 [ 1139.215287][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.215305][ T5964] usb 1-1: Product: syz [ 1139.215318][ T5964] usb 1-1: Manufacturer: 클㍄ණ媕鿐䵻솋㗋뀲Vꔳ↝찵쫼쥝캒䕚蜆ྫྷ腂獦詻墡䟓⦃佴惄᛺㞡䯑饥⵬ᕄ耭楽⮡嶞紸堩⺳וֹ᯺핧᜼㏃卸섉ട폗䞧௿൚渚鞽百≝걤랁䗬 [ 1139.215340][ T5964] usb 1-1: SerialNumber: syz [ 1139.518679][ T5872] gspca_sunplus: reg_w_riv err -71 [ 1139.518772][ T5872] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1139.541897][T17386] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1139.544576][ T5872] usb 4-1: USB disconnect, device number 27 [ 1139.646145][T17382] syz_tun: entered allmulticast mode [ 1139.763372][T17382] syz_tun: left allmulticast mode [ 1139.796387][ T5872] usb 3-1: USB disconnect, device number 117 [ 1139.820868][T12419] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1139.823969][ T5964] usbhid 1-1:93.120: couldn't find an input interrupt endpoint [ 1139.824969][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1139.825476][ T5964] snd-usb-audio 1-1:93.120: probe with driver snd-usb-audio failed with error -2 [ 1140.003879][T12419] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1140.003908][T12419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.197324][T12419] usb 5-1: config 0 descriptor?? [ 1140.202991][T12419] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1140.234423][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.234945][ T5964] snd-usb-audio 1-1:93.212: probe with driver snd-usb-audio failed with error -2 [ 1140.277680][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.285744][ T5964] snd-usb-audio 1-1:93.136: probe with driver snd-usb-audio failed with error -2 [ 1140.309205][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.527050][T12419] gp8psk: usb in 128 operation failed. [ 1140.729528][ T5964] snd-usb-audio 1-1:93.31: probe with driver snd-usb-audio failed with error -2 [ 1140.747538][ T5964] usb 1-1: USB disconnect, device number 26 [ 1140.809846][T17408] binder: 17404:17408 ioctl 4018620d 0 returned -22 [ 1141.682410][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1141.682544][T17415] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 1142.251017][ T36] kauditd_printk_skb: 13784 callbacks suppressed [ 1142.251047][ T36] audit: type=1400 audit(1775986239.312:478694): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="udevd" name="/" dev="sda1" ino=2 [ 1142.251090][ T36] audit: type=1400 audit(1775986239.322:478713): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=17412 comm="dhcpcd-run-hook" name="null" dev="devtmpfs" ino=5 [ 1142.251177][ T36] audit: type=1400 audit(1775986239.322:478714): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=5164 comm="udevd" name="queue" dev="tmpfs" ino=13407 [ 1142.251215][ T36] audit: type=1400 audit(1775986239.333:478715): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17414 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1142.251251][ T36] audit: type=1400 audit(1775986239.312:478710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5818 comm="udevd" name="dummy_hcd.2" dev="sysfs" ino=26088 [ 1142.251489][ T36] audit: type=1400 audit(1775986239.333:478716): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1142.251534][ T36] audit: type=1400 audit(1775986239.385:478717): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=17410 comm="syz.0.3487" opid=17410 ocomm="syz.0.3487" [ 1142.251619][ T36] audit: type=1400 audit(1775986239.942:478718): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1142.251657][ T36] audit: type=1400 audit(1775986239.942:478719): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=14054 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1142.251693][ T36] audit: type=1400 audit(1775986239.942:478720): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=14054 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1142.517343][ T5805] udevd[5805]: setting mode of /dev/bus/usb/001/026 to 020664 failed: No such file or directory [ 1142.517912][ T5805] udevd[5805]: setting owner of /dev/bus/usb/001/026 to uid=0, gid=0 failed: No such file or directory [ 1142.540181][T17416] netlink: 'syz.3.3488': attribute type 2 has an invalid length. [ 1142.797995][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:93.31/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.839257][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1142.839464][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1143.497831][T12419] gp8psk: usb in 146 operation failed. [ 1143.497890][T12419] gp8psk: failed to get FW version [ 1143.498843][T12419] gp8psk: usb in 149 operation failed. [ 1143.498856][T12419] gp8psk: failed to get FPGA version [ 1143.499374][T12419] gp8psk: usb in 138 operation failed. [ 1143.499387][T12419] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1143.499424][T12419] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1143.596088][ T5977] usb 5-1: USB disconnect, device number 27 [ 1144.066678][T17130] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1144.108023][T17130] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1144.193077][T17130] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1144.198685][T17434] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1144.244990][T17130] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1144.526015][ T5872] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1144.545130][T12419] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1144.669494][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 1144.763152][T12419] usb 3-1: Using ep0 maxpacket: 8 [ 1144.956670][ T5872] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.956701][ T5872] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1144.956723][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1144.956792][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1144.956812][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.219254][ T5872] usb 4-1: config 0 descriptor?? [ 1145.257687][T12419] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.68 [ 1145.257714][T12419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.257799][T12419] usb 3-1: Product: syz [ 1145.257813][T12419] usb 3-1: Manufacturer: syz [ 1145.257826][T12419] usb 3-1: SerialNumber: syz [ 1145.464885][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.576273][T12419] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 1145.580212][T12419] kalmia 3-1:1.0: probe with driver kalmia failed with error -71 [ 1145.645032][T12419] usb 3-1: USB disconnect, device number 118 [ 1145.660961][T17438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.662329][T17438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.698091][ T5872] hid_parser_main: 170 callbacks suppressed [ 1145.698112][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698146][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698170][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698195][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698220][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698245][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698269][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698294][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698319][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698342][ T5872] logitech 0003:046D:C295.0028: unknown main item tag 0x0 [ 1145.698579][ T5872] logitech 0003:046D:C295.0028: item fetching failed at offset 35/41 [ 1145.699337][ T5872] logitech 0003:046D:C295.0028: parse failed [ 1145.699435][ T5872] logitech 0003:046D:C295.0028: probe with driver logitech failed with error -22 [ 1145.746507][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.836559][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.836736][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.871208][T17454] netlink: 'syz.4.3497': attribute type 2 has an invalid length. [ 1145.874186][ T5915] usb 4-1: USB disconnect, device number 28 [ 1145.942558][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.942687][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.059021][ T5872] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1146.207797][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.207850][ T5872] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1146.207871][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.262960][ T5872] usb 1-1: config 0 descriptor?? [ 1146.286459][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 1146.663059][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1146.664199][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 1146.665313][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1146.667548][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 1146.678958][ T5977] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1146.837253][ T5977] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1146.837283][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.837300][ T5977] usb 5-1: Product: syz [ 1146.837313][ T5977] usb 5-1: Manufacturer: syz [ 1146.837326][ T5977] usb 5-1: SerialNumber: syz [ 1146.848268][ T5977] usb 5-1: config 0 descriptor?? [ 1146.871167][ T5977] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1147.027316][ T36] kauditd_printk_skb: 16907 callbacks suppressed [ 1147.027335][ T36] audit: type=1400 audit(1775986245.002:487933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="sda1" ino=2 [ 1147.027811][ T36] audit: type=1400 audit(1775986245.002:487934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 1147.029186][ T36] audit: type=1400 audit(1775986245.002:487936): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5817 comm="udevd" path="/dev/loop9" dev="devtmpfs" ino=656 [ 1147.029548][ T36] audit: type=1400 audit(1775986245.002:487935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="/" dev="sda1" ino=2 [ 1147.036483][ T36] audit: type=1400 audit(1775986245.002:487937): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="/" dev="sysfs" ino=1 [ 1147.036527][ T36] audit: type=1400 audit(1775986245.013:487938): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="sda1" ino=2 [ 1147.036561][ T36] audit: type=1400 audit(1775986245.013:487939): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1147.036659][ T36] audit: type=1400 audit(1775986245.013:487940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 1147.036696][ T36] audit: type=1400 audit(1775986245.013:487941): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=5817 comm="udevd" name="loop9" dev="devtmpfs" ino=656 [ 1147.036729][ T36] audit: type=1400 audit(1775986245.013:487942): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="sda1" ino=2 [ 1147.281294][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.316502][ T5977] gspca_sunplus: reg_w_riv err -71 [ 1147.316603][ T5977] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1147.364483][ T5977] usb 5-1: USB disconnect, device number 28 [ 1148.676022][ T5872] pwc: recv_control_msg error -71 req 04 val 1300 [ 1148.676464][ T5872] pwc: recv_control_msg error -71 req 04 val 1400 [ 1148.676931][ T5872] pwc: recv_control_msg error -71 req 02 val 2000 [ 1148.677383][ T5872] pwc: recv_control_msg error -71 req 02 val 2100 [ 1148.677828][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 1148.681375][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 1148.681719][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 1148.682040][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 1148.682643][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 1148.682961][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 1148.683375][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 1148.683693][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 1148.698165][ T5872] pwc: Registered as video103. [ 1148.701347][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43 [ 1148.808381][ T5872] usb 1-1: USB disconnect, device number 27 [ 1148.981326][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1148.981349][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1149.968601][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1150.009559][T12419] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1150.133974][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1150.171885][T12419] usb 4-1: Using ep0 maxpacket: 8 [ 1150.172710][T12419] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1150.187538][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.187563][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.187581][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.187600][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.190936][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.190960][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.190977][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.190996][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.205480][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.205505][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.205522][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.205541][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.223518][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.223544][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.223562][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.223581][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.236333][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.236360][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.236384][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.236401][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.258071][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.258096][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.258114][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.258131][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.268874][ T5872] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1150.285090][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.285115][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.285132][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.285151][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.309527][T12419] usb 4-1: config 0 has too many interfaces: 117, using maximum allowed: 32 [ 1150.309550][T12419] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1150.309567][T12419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 117 [ 1150.309585][T12419] usb 4-1: config 0 has no interface number 0 [ 1150.328924][T12419] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1150.328952][T12419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1150.328969][T12419] usb 4-1: SerialNumber: syz [ 1150.362740][T12419] usb 4-1: config 0 descriptor?? [ 1150.386866][T12419] gspca_main: 0000:0000 too many config [ 1150.387578][T12419] usbhid 4-1:0.16: couldn't find an input interrupt endpoint [ 1150.411774][ T5872] usb 5-1: device descriptor read/64, error -71 [ 1150.574293][ T5964] usb 4-1: USB disconnect, device number 29 [ 1150.641069][ T5872] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1150.659170][T17130] veth0_vlan: entered promiscuous mode [ 1150.710164][T17130] veth1_vlan: entered promiscuous mode [ 1150.782585][ T5872] usb 5-1: device descriptor read/64, error -71 [ 1150.808272][T17130] veth0_macvtap: entered promiscuous mode [ 1150.823013][T17130] veth1_macvtap: entered promiscuous mode [ 1150.878969][ T5872] usb usb5-port1: attempt power cycle [ 1150.891169][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.935124][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.007771][ T8769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.007913][ T8769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.007948][ T8769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.007980][ T8769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.250159][T12419] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1151.250836][ T5872] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1151.271544][ T5872] usb 5-1: device descriptor read/8, error -71 [ 1151.409576][ T1402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.409594][ T1402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.443937][T12419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.443992][T12419] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1151.444011][T12419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.515337][T12419] usb 3-1: config 0 descriptor?? [ 1151.535648][ T5872] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1151.555850][ T5872] usb 5-1: device descriptor read/8, error -71 [ 1151.573113][T12419] pwc: Askey VC010 type 2 USB webcam detected. [ 1151.660006][ T5872] usb usb5-port1: unable to enumerate USB device [ 1151.797336][ T36] kauditd_printk_skb: 15539 callbacks suppressed [ 1151.797354][ T36] audit: type=1400 audit(1775986250.010:496249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="sda1" ino=2 [ 1151.797393][ T36] audit: type=1400 audit(1775986250.010:496250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1151.797428][ T36] audit: type=1400 audit(1775986250.010:496251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="/" dev="sda1" ino=2 [ 1151.797465][ T36] audit: type=1400 audit(1775986250.010:496252): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1151.797504][ T36] audit: type=1400 audit(1775986250.010:496253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1151.797535][ T36] audit: type=1400 audit(1775986250.010:496254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1151.797570][ T36] audit: type=1400 audit(1775986250.010:496255): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6240 comm="udevd" path="/run/udev/data/c189:374.tmp" dev="tmpfs" ino=13534 [ 1151.797606][ T36] audit: type=1400 audit(1775986250.010:496256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1151.797643][ T36] audit: type=1400 audit(1775986250.010:496257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1151.797678][ T36] audit: type=1400 audit(1775986250.010:496258): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="udevd" name="/" dev="sda1" ino=2 [ 1151.948282][ T5872] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1152.016221][T12419] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1152.027613][T12419] pwc: recv_control_msg error -32 req 02 val 2700 [ 1152.061065][T12419] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1152.066053][T12419] pwc: recv_control_msg error -32 req 04 val 1000 [ 1152.069108][T12419] pwc: recv_control_msg error -32 req 04 val 1300 [ 1152.069946][T12419] pwc: recv_control_msg error -32 req 04 val 1400 [ 1152.104490][T12419] pwc: recv_control_msg error -32 req 02 val 2000 [ 1152.105354][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.105372][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.170638][ T5964] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1152.184196][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.184251][ T5872] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1152.184322][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.218917][ T5872] usb 4-1: config 0 descriptor?? [ 1152.283872][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 1152.313077][T12419] pwc: recv_control_msg error -71 req 04 val 1500 [ 1152.313818][T12419] pwc: recv_control_msg error -71 req 02 val 2500 [ 1152.314352][T12419] pwc: recv_control_msg error -71 req 02 val 2400 [ 1152.314861][T12419] pwc: recv_control_msg error -71 req 02 val 2600 [ 1152.315572][T12419] pwc: recv_control_msg error -71 req 02 val 2900 [ 1152.316075][T12419] pwc: recv_control_msg error -71 req 02 val 2800 [ 1152.321092][T12419] pwc: recv_control_msg error -71 req 04 val 1100 [ 1152.324862][T12419] pwc: recv_control_msg error -71 req 04 val 1200 [ 1152.395417][ T5964] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1152.395443][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.453636][ T5964] usb 1-1: config 0 descriptor?? [ 1152.458920][ T5964] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1152.576028][T12419] pwc: Registered as video103. [ 1152.618031][T12419] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 1152.642595][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1152.650299][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 1152.674199][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1152.692507][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 1152.761113][ T5964] gp8psk: usb in 128 operation failed. [ 1152.972053][T12419] usb 3-1: USB disconnect, device number 119 [ 1153.656239][T17539] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1154.450700][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1154.450990][T17544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1155.210958][ T5872] pwc: recv_control_msg error -71 req 04 val 1300 [ 1155.211421][ T5872] pwc: recv_control_msg error -71 req 04 val 1400 [ 1155.212315][ T5872] pwc: recv_control_msg error -71 req 02 val 2000 [ 1155.212878][ T5872] pwc: recv_control_msg error -71 req 02 val 2100 [ 1155.213339][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 1155.214273][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 1155.222307][ T5964] gp8psk: usb in 146 operation failed. [ 1155.222323][ T5964] gp8psk: failed to get FW version [ 1155.222655][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 1155.222714][ T5964] gp8psk: usb in 149 operation failed. [ 1155.222726][ T5964] gp8psk: failed to get FPGA version [ 1155.223184][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 1155.223643][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 1155.224084][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 1155.224809][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 1155.225306][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 1155.225537][ T5964] gp8psk: usb in 138 operation failed. [ 1155.225552][ T5964] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1155.225586][ T5964] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1155.405071][ T5964] usb 1-1: USB disconnect, device number 28 [ 1155.445928][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1155.473092][ T5872] pwc: Registered as video103. [ 1155.476219][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 1155.477864][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1155.507115][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1155.527715][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1155.531986][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1155.597423][ T5872] usb 4-1: USB disconnect, device number 30 [ 1155.720127][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3520'. [ 1155.803072][T17554] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1156.047003][T17559] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 1156.047109][T17559] nbd: couldn't find a device at index 1048596 [ 1156.269590][ T5915] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1156.412212][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 1156.428247][ T5915] usb 1-1: config 0 has no interfaces? [ 1156.428283][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1156.428302][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.498461][ T5915] usb 1-1: config 0 descriptor?? [ 1156.564497][ T36] kauditd_printk_skb: 14522 callbacks suppressed [ 1156.564515][ T36] audit: type=1400 audit(1775986255.008:504427): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="udev" dev="sda1" ino=1222 [ 1156.564552][ T36] audit: type=1400 audit(1775986255.008:504428): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5164 comm="udevd" path="/lib/udev/rules.d" dev="sda1" ino=1229 [ 1156.564586][ T36] audit: type=1400 audit(1775986255.008:504429): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sda1" ino=2 [ 1156.583616][ T5872] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1156.588680][ T36] audit: type=1400 audit(1775986255.039:504430): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17563 comm="syz.3.3525" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1156.588730][ T36] audit: type=1400 audit(1775986255.039:504431): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17563 comm="syz.3.3525" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1156.588765][ T36] audit: type=1400 audit(1775986255.039:504432): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17563 comm="syz.3.3525" path="/dev/raw-gadget" dev="devtmpfs" ino=815 [ 1156.588800][ T36] audit: type=1400 audit(1775986255.039:504433): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sda1" ino=2 [ 1156.588836][ T36] audit: type=1400 audit(1775986255.039:504434): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5164 comm="udevd" name="/" dev="sysfs" ino=1 [ 1156.588869][ T36] audit: type=1400 audit(1775986255.039:504435): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="sda1" ino=2 [ 1156.588904][ T36] audit: type=1400 audit(1775986255.039:504436): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1156.726509][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 1156.734990][ T5872] usb 4-1: config 0 has no interfaces? [ 1156.735027][ T5872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1156.735048][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.754792][T17558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.757373][T17558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.826652][ T5872] usb 4-1: config 0 descriptor?? [ 1157.120427][ T5872] usb 4-1: USB disconnect, device number 31 [ 1157.158292][ T5964] usb 1-1: USB disconnect, device number 29 [ 1157.358050][T17581] input: syz0 as /devices/virtual/input/input46 [ 1157.441025][ T5915] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1157.527535][ T5114] Bluetooth: hci2: command tx timeout [ 1157.587703][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.587759][ T5915] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1157.587778][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.630563][ T5915] usb 6-1: config 0 descriptor?? [ 1157.645066][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 1157.874776][ T8769] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.047560][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1158.048976][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 1158.049633][ T5915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1158.075291][ T5915] pwc: recv_control_msg error -32 req 04 val 1000 [ 1158.212645][ T2051] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1158.271683][ T5802] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1158.364741][ T2051] usb 4-1: Using ep0 maxpacket: 16 [ 1158.369333][ T2051] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1158.369358][ T2051] usb 4-1: config 1 has no interface number 0 [ 1158.369396][ T2051] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1158.369776][ T2051] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1158.369797][ T2051] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1158.421276][T17595] FAULT_INJECTION: forcing a failure. [ 1158.421276][T17595] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.421311][T17595] CPU: 0 UID: 0 PID: 17595 Comm: syz.0.3534 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1158.421336][T17595] Tainted: [L]=SOFTLOCKUP [ 1158.421343][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1158.421353][T17595] Call Trace: [ 1158.421360][T17595] [ 1158.421367][T17595] dump_stack_lvl+0xe8/0x150 [ 1158.421397][T17595] should_fail_ex+0x46b/0x600 [ 1158.421427][T17595] should_failslab+0xa8/0x100 [ 1158.421447][T17595] __kmalloc_noprof+0xdf/0x7b0 [ 1158.421463][T17595] ? iovec_from_user+0x87/0x250 [ 1158.421483][T17595] iovec_from_user+0x87/0x250 [ 1158.421503][T17595] __import_iovec+0x163/0x7e0 [ 1158.421532][T17595] ? __lock_acquire+0x6b5/0x2cf0 [ 1158.421554][T17595] import_iovec+0x73/0xa0 [ 1158.421575][T17595] vfs_readv+0x1cc/0x850 [ 1158.421604][T17595] ? __pfx_vfs_readv+0x10/0x10 [ 1158.421635][T17595] ? __fget_files+0x2a/0x420 [ 1158.421660][T17595] ? __fget_files+0x3a6/0x420 [ 1158.421680][T17595] ? __fget_files+0x2a/0x420 [ 1158.421707][T17595] __x64_sys_preadv+0x1a2/0x2b0 [ 1158.421730][T17595] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1158.421757][T17595] do_syscall_64+0x14d/0xf80 [ 1158.421776][T17595] ? trace_irq_disable+0x3b/0x150 [ 1158.421795][T17595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.421812][T17595] ? clear_bhb_loop+0x40/0x90 [ 1158.421833][T17595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.421849][T17595] RIP: 0033:0x7fcc8164c819 [ 1158.421866][T17595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.421881][T17595] RSP: 002b:00007fcc7f89e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1158.421900][T17595] RAX: ffffffffffffffda RBX: 00007fcc818c5fa0 RCX: 00007fcc8164c819 [ 1158.421913][T17595] RDX: 000000000000003f RSI: 0000200000000040 RDI: 0000000000000004 [ 1158.421924][T17595] RBP: 00007fcc7f89e090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.421935][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.421945][T17595] R13: 00007fcc818c6038 R14: 00007fcc818c5fa0 R15: 00007ffec1009638 [ 1158.421974][T17595] [ 1158.431142][ T2051] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1158.431532][ T2051] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1158.431553][ T2051] usb 4-1: Product: syz [ 1158.431565][ T2051] usb 4-1: Manufacturer: syz [ 1158.431576][ T2051] usb 4-1: SerialNumber: syz [ 1158.431605][ T5802] usb 5-1: Using ep0 maxpacket: 32 [ 1158.535811][ T5802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.535835][ T5802] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1158.566336][ T5802] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1158.566365][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.566382][ T5802] usb 5-1: Product: syz [ 1158.566395][ T5802] usb 5-1: Manufacturer: syz [ 1158.566408][ T5802] usb 5-1: SerialNumber: syz [ 1158.661686][ T8769] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.761557][ T5802] usb 5-1: config 0 descriptor?? [ 1158.766139][T17586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1158.766811][T17586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1158.837145][T17545] chnl_net:caif_netlink_parms(): no params data found [ 1158.881093][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'. [ 1159.227722][T17600] libceph: resolve '0..' (ret=-3): failed [ 1159.479669][ T2051] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1159.507799][ T5114] Bluetooth: hci2: command tx timeout [ 1160.193564][ T5114] Bluetooth: hci5: command 0x0c1a tx timeout [ 1160.203839][ T8769] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.264572][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 1160.303856][ T5872] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1160.303880][ T5872] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1160.345771][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 1160.427329][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 1160.767504][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 1161.083443][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 1161.199132][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 1161.308985][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 1161.419332][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 1161.489336][ T5114] Bluetooth: hci2: command tx timeout [ 1161.497266][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 1161.513481][ T36] kauditd_printk_skb: 10952 callbacks suppressed [ 1161.513498][ T36] audit: type=1400 audit(1775986260.205:511826): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5538 comm="crond" name="/" dev="sda1" ino=2 [ 1161.513712][ T36] audit: type=1400 audit(1775986260.205:511827): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5538 comm="crond" name="etc" dev="sda1" ino=116 [ 1161.513912][ T36] audit: type=1400 audit(1775986260.205:511828): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5538 comm="crond" name="cron" dev="sda1" ino=120 [ 1161.514235][ T36] audit: type=1400 audit(1775986260.205:511829): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5538 comm="crond" path="/etc/cron/crontabs" dev="sda1" ino=121 [ 1161.514611][ T36] audit: type=1400 audit(1775986260.205:511830): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5538 comm="crond" name="crontabs" dev="sda1" ino=121 [ 1161.514930][ T36] audit: type=1400 audit(1775986260.205:511831): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5538 comm="crond" name="/" dev="sda1" ino=2 [ 1161.515125][ T36] audit: type=1400 audit(1775986260.205:511832): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5538 comm="crond" name="etc" dev="sda1" ino=116 [ 1161.580759][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 1161.709302][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 1161.748136][ T36] audit: type=1400 audit(1775986260.457:511833): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1183 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.10 dest=36984 netif=eth0 [ 1161.791405][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 1161.894086][ T36] audit: type=1400 audit(1775986260.604:511834): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5795 comm="syz-executor" opid=17598 ocomm="syz.0.3536" [ 1161.896719][ T36] audit: type=1400 audit(1775986260.604:511835): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5795 comm="syz-executor" opid=17598 ocomm="syz.0.3536" [ 1162.082622][ T2051] usb 4-1: USB disconnect, device number 32 [ 1162.126990][ T5915] pwc: Registered as video103. [ 1162.265863][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 1162.288223][T17583] bridge0: entered promiscuous mode [ 1162.303397][T17583] bridge0: port 3(macvlan2) entered blocking state [ 1162.303623][T17583] bridge0: port 3(macvlan2) entered disabled state [ 1162.303838][T17583] macvlan2: entered allmulticast mode [ 1162.303853][T17583] bridge0: entered allmulticast mode [ 1162.375031][ T5915] usb 6-1: USB disconnect, device number 54 [ 1162.397086][T17583] macvlan2: left allmulticast mode [ 1162.397108][T17583] bridge0: left allmulticast mode [ 1162.407102][T17616] netlink: 'syz.5.3541': attribute type 10 has an invalid length. [ 1162.407428][T17583] bridge0: left promiscuous mode [ 1162.771127][ T5802] usb 5-1: USB disconnect, device number 33 [ 1162.845174][T17616] veth0_vlan: left promiscuous mode [ 1162.847556][T17616] veth0_vlan: entered promiscuous mode [ 1162.868601][T17616] team0: Device veth0_vlan failed to register rx_handler [ 1162.908540][T17619] wg1 speed is unknown, defaulting to 1000 [ 1163.196937][ T8769] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.471173][ T5114] Bluetooth: hci2: command tx timeout [ 1163.688912][ T5915] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1163.832726][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 1163.835014][T17619] wg1 speed is unknown, defaulting to 1000 [ 1163.852866][ T5915] usb 5-1: config 6 has an invalid interface number: 96 but max is 2 [ 1163.852894][ T5915] usb 5-1: config 6 has an invalid interface number: 29 but max is 2 [ 1163.852912][ T5915] usb 5-1: config 6 has an invalid interface number: 37 but max is 2 [ 1163.852930][ T5915] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 1163.852946][ T5915] usb 5-1: config 6 has an invalid interface number: 103 but max is 2 [ 1163.852962][ T5915] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 1163.852980][ T5915] usb 5-1: config 6 has no interface number 0 [ 1163.852995][ T5915] usb 5-1: config 6 has no interface number 1 [ 1163.853007][ T5915] usb 5-1: config 6 has no interface number 2 [ 1163.853018][ T5915] usb 5-1: config 6 has no interface number 3 [ 1163.853081][ T5915] usb 5-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1163.853100][ T5915] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1163.853121][ T5915] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1163.853142][ T5915] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xB, skipping [ 1163.853160][ T5915] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1163.853180][ T5915] usb 5-1: config 6 interface 96 altsetting 214 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1163.853199][ T5915] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0x4, skipping [ 1163.853225][ T5915] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xF, skipping [ 1163.853242][ T5915] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xC, skipping [ 1163.853262][ T5915] usb 5-1: config 6 interface 96 altsetting 214 has a duplicate endpoint with address 0xE, skipping [ 1163.853281][ T5915] usb 5-1: config 6 interface 96 altsetting 214 has an invalid descriptor for endpoint zero, skipping [ 1163.853297][ T5915] usb 5-1: too many endpoints for config 6 interface 29 altsetting 245: 63, using maximum allowed: 30 [ 1163.853327][ T5915] usb 5-1: config 6 interface 29 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 63 [ 1163.853358][ T5915] usb 5-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 1163.853378][ T5915] usb 5-1: config 6 interface 37 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1163.853399][ T5915] usb 5-1: config 6 interface 37 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1163.853417][ T5915] usb 5-1: config 6 interface 37 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1163.853445][ T5915] usb 5-1: config 6 interface 103 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1163.853464][ T5915] usb 5-1: config 6 interface 103 altsetting 64 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1163.853486][ T5915] usb 5-1: config 6 interface 103 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 1163.853504][ T5915] usb 5-1: config 6 interface 96 has no altsetting 0 [ 1163.853519][ T5915] usb 5-1: config 6 interface 29 has no altsetting 0 [ 1163.853534][ T5915] usb 5-1: config 6 interface 37 has no altsetting 0 [ 1163.853549][ T5915] usb 5-1: config 6 interface 103 has no altsetting 0 [ 1163.906297][T17545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.906485][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.906660][T17545] bridge_slave_0: entered allmulticast mode [ 1163.909658][T17545] bridge_slave_0: entered promiscuous mode [ 1163.913136][T17545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.913318][T17545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.913476][T17545] bridge_slave_1: entered allmulticast mode [ 1163.916299][T17545] bridge_slave_1: entered promiscuous mode [ 1163.994151][ T5915] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=dc.f3 [ 1163.994178][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.994196][ T5915] usb 5-1: Product: у [ 1163.994209][ T5915] usb 5-1: Manufacturer: ԗ烕岞浒ꔊ㨑镋⩦圝؁秽艨꟯惏┏䷋ᜣ뎁덝ᗽ琾ᒰ夦ܸℭ㥝ꪱ㾭饊텼鹞࿸㪜왮뭱⽇珅穜睞ᗉ念㩖뉺શꑳ톾埘鑾ⳗ鿾锽韓辦ﰇ祤乸㑁ظ꟠萨o贍䉚堭줔倇ᚷ촊꡺濠ꍕࠆ滜ᆏ뛭坴夣ꏜ㪥僟⦜뮓즰撌捾璍춓䒑蘒琢ၒѬꁂẅ苙褠㑭뗢༃ꎢ退锋᰷ᜑﳩए﹊㈦㑚徃⃗౦ [ 1163.994237][ T5915] usb 5-1: SerialNumber: 釲኱䭔븗閜匂孃懠펶캦卼璷ࢫ⛕퍖瓎咍藒勚䑇劘ꓠ舔캺㚏饖똚ꬎﱜ嬤쌀蘆ြ巸㨷붽樏ᱪ斱蜀ꄢꌔꏣꉊ䴊䲙畽즯⭼ᥠಔ㽺뗀톷ᱏᤓ쩚ᓺ [ 1164.058754][T17545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.066251][T17545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.166285][ T5802] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1164.330975][ T5802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.331024][ T5802] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1164.331045][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.361300][ T5802] usb 1-1: config 0 descriptor?? [ 1164.428543][ T5802] pwc: Askey VC010 type 2 USB webcam detected. [ 1164.623605][ T5915] kobil_sct 5-1:6.96: KOBIL USB smart card terminal converter detected [ 1164.635650][T17646] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1164.637534][T17646] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1164.638842][T17646] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 1164.680359][ T5915] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1164.699008][T17619] wg1 speed is unknown, defaulting to 1000 [ 1164.739139][T17545] team0: Port device team_slave_0 added [ 1164.752022][ T5915] kobil_sct 5-1:6.29: required endpoints missing [ 1164.769340][ T5915] kobil_sct 5-1:6.37: required endpoints missing [ 1164.780722][ T5802] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1164.788163][T17545] team0: Port device team_slave_1 added [ 1164.799652][ T5915] kobil_sct 5-1:6.103: required endpoints missing [ 1164.807004][T17619] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1164.820958][ T5802] pwc: recv_control_msg error -32 req 02 val 2700 [ 1164.822001][ T5915] usb 5-1: USB disconnect, device number 34 [ 1164.827066][ T5802] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1164.829740][ T5802] pwc: recv_control_msg error -32 req 04 val 1000 [ 1164.939584][ T5915] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1164.940366][ T5915] kobil_sct 5-1:6.96: device disconnected [ 1165.021695][T17619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1165.465448][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1165.628848][T17545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.628863][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.628883][T17545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.701649][T17545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.701665][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.701689][T17545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.872145][T17619] wg1 speed is unknown, defaulting to 1000 [ 1165.984542][T17619] wg1 speed is unknown, defaulting to 1000 [ 1166.185071][T17619] wg1 speed is unknown, defaulting to 1000 [ 1166.274169][T17545] hsr_slave_0: entered promiscuous mode [ 1166.281304][ T36] kauditd_printk_skb: 15195 callbacks suppressed [ 1166.281319][ T36] audit: type=1400 audit(1775986265.203:522144): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=17663 comm="modprobe" path="/lib/libpam_misc.so.0.82.1" dev="sda1" ino=1125 [ 1166.281354][ T36] audit: type=1400 audit(1775986265.203:522145): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="net" dev="sysfs" ino=264436 [ 1166.282029][ T36] audit: type=1400 audit(1775986265.203:522146): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="block" dev="sysfs" ino=12970 [ 1166.282061][ T36] audit: type=1400 audit(1775986265.203:522147): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5817 comm="udevd" name="eth8" dev="sysfs" ino=265298 [ 1166.287149][ T36] audit: type=1400 audit(1775986265.213:522148): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="/" dev="sda1" ino=2 [ 1166.287193][ T36] audit: type=1400 audit(1775986265.213:522149): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="/" dev="sysfs" ino=1 [ 1166.288102][ T36] audit: type=1400 audit(1775986265.213:522150): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5817 comm="udevd" name="ifindex" dev="sysfs" ino=265308 [ 1166.288226][ T36] audit: type=1400 audit(1775986265.213:522151): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1166.291771][ T36] audit: type=1400 audit(1775986265.213:522152): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5817 comm="udevd" path="/sys/devices/netdevsim2/net/eth8/ifindex" dev="sysfs" ino=265308 [ 1166.292542][ T36] audit: type=1400 audit(1775986265.224:522153): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6240 comm="udevd" name="/" dev="sda1" ino=2 [ 1166.323760][T17545] hsr_slave_1: entered promiscuous mode [ 1166.334837][T17545] debugfs: 'hsr0' already exists in 'hsr' [ 1166.334864][T17545] Cannot create hsr debugfs directory [ 1166.530215][T17619] wg1 speed is unknown, defaulting to 1000 [ 1166.670103][ T5872] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1166.670126][ T5872] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1166.670332][ C0] ------------[ cut here ]------------ [ 1166.670341][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 1166.670367][ C0] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd16/0xff0, CPU#0: ktimers/0/16 [ 1166.670399][ C0] Modules linked in: [ 1166.670416][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1166.670437][ C0] Tainted: [L]=SOFTLOCKUP [ 1166.670443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1166.670451][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 1166.670472][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 20 4b 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 b8 [ 1166.670485][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 1166.670501][ C0] RAX: 1ffff1100f4e0153 RBX: ffff88807a700a98 RCX: ffff88801caa0000 [ 1166.670516][ C0] RDX: ffff888039cf4168 RSI: ffffffff8a1549f0 RDI: ffffffff8f6d4030 [ 1166.670536][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1166.670548][ C0] R10: dffffc0000000000 R11: ffffffff818d60b0 R12: 0000000000000100 [ 1166.670562][ C0] R13: dffffc0000000000 R14: ffffffff8f6d4030 R15: ffff888039cf4168 [ 1166.670576][ C0] FS: 0000000000000000(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 1166.670589][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.670598][ C0] CR2: 00007f216925da08 CR3: 000000003a9fe000 CR4: 00000000003526f0 [ 1166.670612][ C0] Call Trace: [ 1166.670618][ C0] [ 1166.670636][ C0] call_timer_fn+0x192/0x640 [ 1166.670652][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1166.670671][ C0] ? call_timer_fn+0xd4/0x640 [ 1166.670684][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1166.670714][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1166.670732][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1166.670753][ C0] __run_timer_base+0x764/0x9f0 [ 1166.670784][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1166.670801][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1166.670833][ C0] run_timer_softirq+0xb7/0x170 [ 1166.670852][ C0] handle_softirqs+0x1de/0x6f0 [ 1166.670878][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1166.670897][ C0] run_ktimerd+0x69/0x100 [ 1166.670911][ C0] smpboot_thread_fn+0x541/0xa50 [ 1166.670931][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1166.670958][ C0] kthread+0x388/0x470 [ 1166.670974][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1166.670992][ C0] ? __pfx_kthread+0x10/0x10 [ 1166.671009][ C0] ret_from_fork+0x51e/0xb90 [ 1166.671030][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.671047][ C0] ? __switch_to+0xc7d/0x1450 [ 1166.671068][ C0] ? __pfx_kthread+0x10/0x10 [ 1166.671083][ C0] ret_from_fork_asm+0x1a/0x30 [ 1166.671111][ C0] [ 1166.671125][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1166.671140][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1166.671159][ C0] Tainted: [L]=SOFTLOCKUP [ 1166.671164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1166.671172][ C0] Call Trace: [ 1166.671183][ C0] [ 1166.671189][ C0] vpanic+0x56c/0xa60 [ 1166.671210][ C0] ? __pfx__printk+0x10/0x10 [ 1166.671225][ C0] ? __pfx_vpanic+0x10/0x10 [ 1166.671241][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1166.671260][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1166.671285][ C0] panic+0xc5/0xd0 [ 1166.671303][ C0] ? __pfx_panic+0x10/0x10 [ 1166.671328][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1166.671346][ C0] __warn+0x315/0x4f0 [ 1166.671363][ C0] ? __queue_work+0xd16/0xff0 [ 1166.671383][ C0] ? __queue_work+0xd16/0xff0 [ 1166.671402][ C0] __report_bug+0x29a/0x540 [ 1166.671417][ C0] ? __queue_work+0xcc6/0xff0 [ 1166.671433][ C0] ? call_timer_fn+0x192/0x640 [ 1166.671451][ C0] ? __queue_work+0xd16/0xff0 [ 1166.671469][ C0] ? __pfx___report_bug+0x10/0x10 [ 1166.671484][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1166.671504][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1166.671522][ C0] ? look_up_lock_class+0x57/0x110 [ 1166.671539][ C0] ? register_lock_class+0x31/0x2e0 [ 1166.671557][ C0] report_bug_entry+0x19a/0x290 [ 1166.671573][ C0] ? __queue_work+0xd40/0xff0 [ 1166.671589][ C0] ? __queue_work+0xd45/0xff0 [ 1166.671606][ C0] handle_bug+0xce/0x200 [ 1166.671624][ C0] exc_invalid_op+0x1a/0x50 [ 1166.671641][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1166.671655][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 1166.671674][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 20 4b 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 b8 [ 1166.671688][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 1166.671708][ C0] RAX: 1ffff1100f4e0153 RBX: ffff88807a700a98 RCX: ffff88801caa0000 [ 1166.671719][ C0] RDX: ffff888039cf4168 RSI: ffffffff8a1549f0 RDI: ffffffff8f6d4030 [ 1166.671730][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1166.671738][ C0] R10: dffffc0000000000 R11: ffffffff818d60b0 R12: 0000000000000100 [ 1166.671749][ C0] R13: dffffc0000000000 R14: ffffffff8f6d4030 R15: ffff888039cf4168 [ 1166.671763][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1166.671785][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1166.671815][ C0] call_timer_fn+0x192/0x640 [ 1166.671829][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1166.671847][ C0] ? call_timer_fn+0xd4/0x640 [ 1166.671861][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1166.671883][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1166.671902][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1166.671923][ C0] __run_timer_base+0x764/0x9f0 [ 1166.671957][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1166.671974][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1166.672007][ C0] run_timer_softirq+0xb7/0x170 [ 1166.672027][ C0] handle_softirqs+0x1de/0x6f0 [ 1166.672053][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1166.672072][ C0] run_ktimerd+0x69/0x100 [ 1166.672086][ C0] smpboot_thread_fn+0x541/0xa50 [ 1166.672106][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1166.672133][ C0] kthread+0x388/0x470 [ 1166.672148][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1166.672166][ C0] ? __pfx_kthread+0x10/0x10 [ 1166.672182][ C0] ret_from_fork+0x51e/0xb90 [ 1166.672209][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.672227][ C0] ? __switch_to+0xc7d/0x1450 [ 1166.672248][ C0] ? __pfx_kthread+0x10/0x10 [ 1166.672264][ C0] ret_from_fork_asm+0x1a/0x30 [ 1166.672292][ C0] [ 1166.674038][ C0] Kernel Offset: disabled