last executing test programs: 16.602761844s ago: executing program 4 (id=388): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x43, 0x63, 0x19, 0x8, 0xeb1a, 0xa316, 0xd548, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x62, 0x5d, 0x3, 0x0, [], [{{0x9, 0x5, 0x82}}]}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x4fe, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xc4, 0xac, 0x89, 0xff, 0x19d2, 0xff91, 0x231e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ec, 0x2, 0x1, 0x4, 0x20, 0xff, [{{0x9, 0x4, 0x34, 0x4, 0x2, 0xff, 0xff, 0xff, 0x7, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "92ce185341"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xffff, 0x2, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x31, 0x8, 0x7}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x6, 0x4, 0x4, 0x101, 0x4}, @mbim={0xc, 0x24, 0x1b, 0xff, 0x6, 0x3, 0x4, 0x7, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x29}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4e}]}], [{{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x7, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x40}, @generic={0x82, 0x23, "818aed703c61c1772bc0e9d49e1fa13812ba91ef61b46db4233b5aa729999d55651d47155af35efbc9b3db36cddb34fb0c19137b3415a31b24c2d5f2d4410c96bfa2a560de440f779d363e202cbb0dd5fb8ff9aaf378ee0e6a2ba548b7587f53dea1fc7803ebbee136cc49ad1663029db7a632e51318941017d64ad834ade2d5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x5, 0x7, 0x5, [@generic={0x8f, 0xc, "f0c02ed25d46a074713f12ef139a53fad684eb6774c1569b0cc5a1f25d9bbfdb508492aea34588e30207bc4e08fb2d06fb4753858b78ceb39617c670554c02a31e376009e24f885ced76a34dab41ec814f0b937ea8dac976315f42749f758df9340099b6f14670333fd98ac8b4cbc5e5334890d9618abd63791e79a4e705bae9e98f25943ce5778f40d07e7707"}]}}]}}, {{0x9, 0x4, 0x22, 0x3, 0x3, 0xb3, 0xb6, 0x19, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x40}}, @generic={0x9f, 0xa, "da223b6fb9744bad4a7ccc8d6ede7ea78fd112d0aa6591130e334a46d87356c4328e471b3f0095468d7a738733f651d6829592185331a2285524ab927b911d6a1c99ee4d67975931a9205fc4b3f99ebdc610b190ebf6e82692577a8b47690e8f8bd31635fa87fa04d38d763556f7d710a7325cd74e182ba0aa5d317c3b47d1cbcbbf0ff2f5a15bf4dedca1593e93d99485c757ec9ef0dd3cb2175c2385"}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x53, 0x9, 0x6, [@generic={0xf6, 0x4, "bd553a214d37305f09bb51a6f3062bb289e5c0f39f4a30cebb3df3640c81755088a0c94fb661fd9d7be2e209ca84b7804802000b2fb2138f5ab2aca349eabfd3171b582daa3f53a36bbbc252c7d079f01683fde6e4353582e99b6dc581991097f0868085cda1ecbb37cce79c3d909eda8d81a61709b3717d5a55a88240106551b6ab353377f3781b2965b7293b33c2cbfadefec504ce9752d5db6c99af889867b9889f9f56218e6f49affadf260b0a088fbfd516315343b1eaf079d30e9d0af6bb4af1e865ee7679de0b14512ac9361ccf0fc81a715994bcec06de236fab38ef82fd63d807074caeff99739e91fb59403846e7fd"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x9, 0x5, 0x2, [@generic={0x4f, 0x22, "878837fa1909ca780dba495e53ae26d1a028af6a28352b2d6cf7140d716b323f180ac357b6c46a98d2af333ad9d0bbb382baa47389d35e5fa979611b0890cfaeabfdb4bb0de4066a987210b218"}, @generic={0x6f, 0xd, "697a8a3305316930c1ba90886d36eb3d994faafed5ac78e1bd2471247025e4209f88d39d228b8e439b247187a56f95e5d00b1d765f73a302b41bb0bad8c22c7149a112e959c12e9aa3298be1ddac20862d566e416ff83a75a6d3ca843bba1ba6bc25fb2f27708dac216f5a0afb"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0xd, 0x9a, 0x9, [@generic={0x7f, 0xa, "2c202bf649f14a7a384cd469d7fd98ed43d2c71e4d836ee9bf7005cd81a8aec42ab00192482299bec67a8e63ada2ef8a6bad04792c0eec1935ada924bbb1d6f57c235812abed4d1448e28f7bd7fec66ba3016247ca33826757cca56447a1efb78c53b8b4bf744c920072cd2eab246804507da7453402af8b28cbe329ed"}, @generic={0x66, 0x21, "688ea12dc5fed4c5ca1af5c208891df53c13cdf465808a36d64abd07151603a96c00db9ac2d93160e0af09e27b2d0bf5d890884a6a615a942ad241b23f7b509ee453236b07e8b72816ec2c8473c33beb5f974d9e92d8c511610617e49515e7068a2c83ac"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x29, 0x3, 0x10, 0x9}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x1, 0x9}]}, 0xa, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x409}}, {0xf, &(0x7f0000000780)=@string={0xf, 0x3, "b3961471e3d4fc1fc7d7efa235"}}, {0xbd, &(0x7f00000007c0)=@string={0xbd, 0x3, "2eaaa0f44990bdd1aa5281ed3cd0912c94d31b386de738759d76be9adbfaf45bd450b3d7360c5e19365bf2240e188856a7a6acf11cb4983063eca5f44262edb0ef958798d9095e9535f33668311f93791babd84f7de716674a477bf32d461f133bdbd362c079c30fb50547e3a9ab125874db90a1f3265178c0eb0131eba4f910d1bbbdc377f8649935a43a6f24598a2afbb3281ccaaa7d945295f9336a9868d2cadd45eced66dad208fc93bfeaf05cb975f4a3ac63a7b68bae82b2"}}, {0x9e, &(0x7f0000000880)=@string={0x9e, 0x3, "a8a3c9195ef11a58f70ecea2be7facca865d1d04cc6f6462d85f85a72a2e5b0dfc849a94b4dbf1b8096b9b86f4cddfc2ccb60aa0576a0470cb49e7731e1022fd104cbdb83dd31d60c43274fd44b0f80cb7ed1ba5c2cb396c96d502828084f22bea5b4da99b1a8a27000824c3140709e07509fd5dfbf1be350fb27e4a36ba05d66bf0893b6cf4b35e9b06ee073d0c96701847612dfc20ab4d4dc247ef"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x42a}}]}) r0 = syz_usb_connect(0x6, 0xfb4, &(0x7f0000001040)={{0x12, 0x1, 0x300, 0xd, 0x5a, 0xfb, 0x58, 0x403, 0xf9d4, 0x97d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa2, 0x4, 0x4, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0x23, 0x4, 0xa, 0x35, 0x76, 0x8, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'I'}, {0x5, 0x24, 0x0, 0xd74a}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xffff, 0x4862, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x6, 0x8, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x56, 0x8, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xdd9, 0x8, 0x2, 0xa0, 0x2, 0x3}, @country_functional={0xe, 0x24, 0x7, 0xd3, 0xffff, [0x7, 0x1, 0xe7, 0x8]}]}], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x10, 0x3, 0x8, [@generic={0x27, 0x6, "c142ba484100e0e5d56ade128fb39e7a6cf79cb343042cac6cc55521c2a7d6b7062d0483b8"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x6, 0x7, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x2, 0x5, 0x4, [@generic={0x99, 0xc, "3f4bdb00766392f72145b355f664bde2fa1451f3ad90f59d364c4054e8871e8119e0993ce991fefd2458f1cdc7f3b8f952690833828a1b3ffca3b52a3e45b71326cb89f8dea06368511c5e6362969a482bda4536f2a45f8bfcd60684d5b9b6585182ad04db192ea8dd8f05948376e97142d4630cd8d44d0b7ad14f3421b82735e5a9cd0d395a20c9c8b0bb2f40519f1e0f925cb74f6cdc"}, @generic={0x6c, 0x10, "863b09c8944655f3d4049f38a3105adce1c9f9e5eb6eb11ff79651d604fd48879db78cda85c6a1716d67a90a993d7710bed785bf24ec1940c11b8f6408a86c976ab856f486b6d841a00fa158b4f8f9ba3e7492989737ffb27ddfbfee6b07da6efa3ab71a47e44e078f50"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x70, 0xce, 0x7, [@generic={0xc5, 0xb, "c8dd9cacd0de8e324cecf970dce95bbf4cf57f0a11d88e53a3d7e1845254d8016d62df6959279121419da7ffb32e0905ad018184e57573a9ee45cf69601829eda0cb672834d723b59971552150e6056f7a7a199eb94036de4f7d8baa0db385a25e19bc93df1d4d5d4885f1049a5523e4a0ecbb88d52b60b96955dd3b712bb85f65b43957465f13ca000d9db7a1872193923cdb6050afedca7d2c7461bccf1b4515d40b87c804cda30e0cb6b0ef81e1ca55d89c7a258d9522254a62b5d86a983ccaf195"}]}}, {{0x9, 0x5, 0x7, 0xc724afc438fe7aeb, 0x10, 0x7, 0x8, 0x57, [@generic={0x5a, 0x21790490a6356912, "7eff1279f6474aafa48f29c11c73599de89f5cd9cf89f396ab6ef84732a23683f13aa5b8f31987b58c93a1a53118d614a51c034118a49ffcd62569b700b9207bafd0ac0773d2c39e30d978d0f4d78b9fdbe617a65a89fac8"}, @generic={0x1e, 0x22, "b5c8917563508241b266d632ca644c8dc9f17d8d294f73b9ef39f204"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x57, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0xfb58d33ae3645e94, 0x10, 0x200, 0x67, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7d}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x74, 0x9, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xfb42}, @generic={0xa2, 0x21, "318e1a4e23cba157aff796021123ddb013df57171d0ab8be900974896bd4de62d76735ed5b809c580917be02a568cda5ec6e3f48327610cd74e7778b1ebc9abc0601e5c97a4373df9b43dbbf15dd76fd0638ce783b2e720fa8312aaf9938fe1986f3a9daa9e06067d64c761dbd4d67ded3693a7a485b58c932bdf855202a5d8c6c4eb5e17a88a1a618b9588bfe19a39747f5ffe564a98505442812004f9e78e1"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x8, 0x8, 0x4, [@generic={0x5d, 0x31, "3b8c5ecad62afd988bbac88817cd34a49178e7e99fdd782ff922873559ca29313e0c24f33a7935009ac5a218bd276b240b273caa7e49a3da855423bbbc59255ff49f52c74c71732f59528058c2cdd3ad0df7aa303bd6440db947ae"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x81, 0x10, 0x0, [@generic={0xed, 0xe, "d6afb344bc8d786a20758bb5afe9f7c257f61b9d030ff4e2f22f2b3023e0fb5ca1acd1dd252483537ad537f276285c3563a8f1d89bea372d865378846472c0e7958eae0fae011cb8ac5206f3a5824a088b43f30b00e438d8683fdda0a11e741de4d317b23a994a89f9be61e9d06e4e95e6a20f95bcc63d3dc3d11dd036380c24a2b7712d8bed657b16c59dac002daa890355d9d0a1e8c6f721536ff2ef33c67eaf3a93e542165878927c0aa942e92d226cd1c8fafb1398b48857f3840481796a8d61936e2bd60807740824accab1b121bedb3ec2689bbb0608fcdd7994ce688235cbd94f8a51c0e319b0e7"}]}}]}}, {{0x9, 0x4, 0xc, 0xb, 0x6, 0x12, 0x34, 0x88, 0x7, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x10, 0x5a, 0x2, "49e1"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x8, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0x9, 0x12, 0x8, 0x5, 0x5, 0x7d, [@generic={0x69, 0x7, "b7ac1cfe590b5c14432bea6194ad5fee2b9cfdc47579cf360f98968c03dbc88b5836822e24c0e36d67ed1dbdde57058b2cc42d9b9dcecf874c707c26979704f08364f6909bf1b14b1199b49550fc4718f1b0f8d018f2de62911d8ad3e1f9ac990025a62ff8a817"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0xb, 0x0, [@generic={0x6b, 0xe, "18727b11488c8cc5a35fe7b54516bc77591846e6c1a7cf2e50a53915746762708fce5c9fc5d073d1aa1dbb5571b85c329cce45f83059aaa54bdbde4e08ae62dbc14d6342be1748309a61b00a44d72a9ca0ff8584500fd84cfc59a21879c6249656f158bf38ac21672d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x1, 0x57, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x8}, @generic={0x42, 0x1, "5fb5b059c738b6790e67370d42d58afcd40b57157f216b95add8520866d4b91b9f54eea8a41732b8bea3dd175c84957de885b06097331b5a8f4165c465a72422"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x852008f68d946fac, 0xd, 0xc0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x8, 0xd, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x3}]}}]}}, {{0x9, 0x4, 0x6d, 0x4, 0xc, 0x98, 0xdd, 0x42, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x5}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0x2}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x6, 0xe3, "5891df7105"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x3, 0x6, [0x3, 0x5, 0x4, 0x9, 0x3, 0x1], 0x10}]}], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xed, 0xc2b}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x9, 0xe9, 0x7, [@generic={0xde, 0xf, "63d5ec26a7c9ae5e39455afa5518b0464ae46861b78c898c2cd15a6632c2aba22a2c9086dcc7b3243b1746b14c85f98b65000de848b51977abec1310aaef07bbad3d4f236bcd86cfeb43bd92719e02025fc8fc7105a5778367ec88362a05f5701b0306883a0f6c63e9adb8214cbc59f26ae6f9d22ea4d5769ecaca44904326996a64016c30490ce66bc6bc4a84571764c1145cf07e803af2c87b1a170b924272a5b879463429d7ab1f9e2cd93508e1c9a046106195ae689f874f73e60721d5a4585837c77e184210477e528c28e0c0f7999a3425769a39d9e43d6e5e"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x10, 0x6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x5}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x2, 0xa2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x1, 0x1}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x1, 0xff, 0x6, [@generic={0x9e, 0xf, "cf3e16665c46d03aa8d75cc82b6f0b4bf039e786df4206a0f4389103c95c2dec73bf188e1651b0dbe976065d486bf843a1cd070f4e1bed2f436e18ce28d958bd448407f01e69aa5ecd215d94ed1f235b3f31a2f562aa1e0851c67c3c1b5abe50e8eecf64f3104853b1feb3b0fd0aba0f53421ed6a06ab1d79873fb04646741792904b81aae3952db29f632bab6e29612c068e64a90c9f2b489f84621"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x4f, 0x1ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x2, 0x3, 0x1, [@generic={0x46, 0xd, "11048632d3fc91e58a75e6aec94a8d205a81aa495118d101e9472ba89bc7b8a449516a33c7ed0b8e5ecb7b2a29770635d8f55515acec973c921adc7da51850e008a35301"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x40, 0x9, 0x7f, [@generic={0x6, 0x9, "f737855f"}, @generic={0xca, 0x31, "40e702356c13dbd92c9adaf843b16aea7bfea38bc557b62df7323492bb72e14bb0d57392a039b90c65fa15aa18b1542c01b55b2780824f698135fbd92307e739d7b9aab2ac23937a46a0c99b1a15a4fc3ea85e82365220827ca756ee1441691831bfea15b8dde4f205ca57328f7ba019de332ac0a12d4015ca13e65595b64547dfbd5fce1f77671f67c14442eb4cb693a1ad62d7da7c89d5de3a60ce98979068a961207b393e2f052303722e448f89ab5951033cfc21b4d8cb6054fe63abfe13424cd4419dab7802"}]}}, {{0x9, 0x5, 0xffe42aa708705fe8, 0x10, 0x8, 0x1, 0xe1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xa795}, @generic={0xfa, 0x31, "a85300b1cf0c6959692930d7a14788f76efe17a4355a864db85b40803c2cda8c01ccb5ff98ef75d65fc28130679d05b601b907e2e5beb75a2f20a17296ab132849de163d89a5903a0ac6fd49e4f5c2fc792960afd404f0b28aea7a970c87fb1080e9031e8d36b6a93032170982e3968288b4e148594743813648964e53310f54b7d3e8f6f86126a6be7b00d611d172e9c66599914ec80275a9792cbfae3188e30046807cb9bc7a08f798b7a528cb066b72d844d37fd2f2a691cf487a14b54ae4eb59bb471757f98edaa005f3acf635c1af384ec196060fa3c7aaa569f0c18b12a388e1ea6ccc012ca32fa8079420cfa1820a5faf404704ed"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x7, 0x7, 0x7, [@generic={0x31, 0x22, "27824f2b4a6f8b8c7338fef62863fc05c293d226927bd89a8214541c60db83b2cb3fe5276455caa93863ebec3d7ef3"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x5}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x4, 0x6, 0x4b, [@generic={0x2e, 0x23, "f25c328a749704ae598fd6063c6a2bf33a49aea5b4d890bb841e0c5ae0e03117641c8b4d756b670db3be3621"}, @generic={0xb0, 0x5, "b0e86412e1bf4956ca499dd704812231e927ad3f75eb122c6f855bfdac8e441fe8e5b00cc455391757b583db49fbf07d3e47165398658f2c5dc025cc9a9ac434975268b59b08e0b21083b3b276497d204af1b9a3c0c8d4fc876eff7777a720c6aab70d86907a8a24bff493b6719a37db7375c3369ea53a394a72032bf57fd5e56afb7ae26b943529eb1fb5287f4b1801c263342c1c6002166db58ee3b05837862a0cda0b99245e60800c23c54c3f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x9, 0xc5, 0x2, [@generic={0xdd, 0x24, "e4ab77f0c324a605fac9227dd3fd0b4218d7a26dec43c50fbc2e440facef99cd52b7fd476d09b5e421caee0705e482f2631d34a83a3f5633dbb9dbc1616a33ccfa946a732a9f2491e1583bcab8803c58bd932cbefa2267e681a46b0a45f6f9b722f58bbbd2a8a67e8550f2741c3cec799f3799ab0fa9177da0d491337bd9c01d6f210ee125859056a5590718c69a5ea60387ac2290449ec5f905514726b957ad424740b3d9e556fba35a3845dd4563374e48412d1c24b63e045899ae7eedff1c4984ee9f94d82b66ba1616eaaf6a62e7ffdf640ea4b6902fd25878"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0xa, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x75a}]}}]}}, {{0x9, 0x4, 0x1f, 0x3, 0x5, 0x62, 0x78, 0x28, 0xee, [@generic={0x9f, 0xc, "e58e144735ea207ff881c7524afa5264e2552ee3dbfc7b310524866abe349018fc4dd5ec40294928433250ac3471e194833e8bc53e4f85ebb14c6933fa644e5b21cb5311bf1d86b53c4102e59bb2d9bde2a2db3fe987a4f92d5e6dba740bcd27282f1df2e3643ed2fe2e6a64ac6e23685b277b3902ee489d1cef9ad89115a09c72884a71300c6963729780570b8e6931449f4ab683245bb7d0b4d76e8b"}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0xc, 0x5, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0xd1, 0x3, [@generic={0xe1, 0x4, "438afbfbc61c843a41ab0d273a71fb40ba491e8dcb7c842ae8e38198f2b8266405258a2a21fd70d95d92aeee4a82e1226298e4d258ec1fec6e19b1a4a16e1e57b12682722e268f2ed4ba2313d0db76dc5da5bb5ec349929ec254ba5576c0740b8a66daff0058ebd86d3a8970ee5097fb87d1a9e1246c7a07176106a8faca3fa8e003f17e5d1630396768a29404d00004c096f134ba3e46063148ad94faf9fc2141dd92906829c38c59fd5253ffb10def82361367f26f9efbee6a5fe617a35aea576ad297a706edc6d5c6338a26406e3137e41c5ad19347288d53ea43a634d8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x8001}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x4, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x711b}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x87}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x2, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xa}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x6, 0x1, 0xa, [@generic={0xd7, 0x2, "551ded94ee51aeeedf00cd5ce2ee05d96ff0915d76fdef9769cb595c25d3f2e4cb8319755db6fbe5d8ecf53f2bdff949a9c959b31d1e491a316417272b7c5946d04b37586af1ac6255842f2b82f2ddb72b912425792484ffb5482557993418cf8e435a0bcc59e950375cc003a0d87a5c85c82b8d91a84c8a2eaa4ccd0850c593d247471372d32f2b0ac36f8a966832c73c5b4431e5e695ad5b2fc0dee8ef93574e582c849335f7a0a8a29e5035259dca3c75e735a5f05748758d86470bc3507a6ea0b1e1f212a88c0c81344393b91e7f7a7d7e24c9"}]}}]}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x250, 0x9, 0x0, 0x3, 0x8, 0x35}, 0x122, &(0x7f0000002040)={0x5, 0xf, 0x122, 0x3, [@generic={0x2c, 0x10, 0xb, "4d3a56ccd13e9cd4f7c13b3f9b69699e802d60041f9e328dab860bf4bbcc2c1f405497d42fb0f94e69"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "acc4bc267656681128c9e8d21b70efae"}, @generic={0xdd, 0x10, 0x3, "c8378c6b9422faa3b2853eb0d872bae5ae2da3745fd7160d22f48ec619e98ebdac48e8633b94b3bcfd3711ae849e42e03f09b36bc541c3b4ee56d8e4617f4c171ee69089e40e1fdb5969196ef9fe123e57409d8db89b0e47a1c7b205cc89f335cf5be00b195acd8f3341f9e88ef14708d3eaacc8b980c921aefa237975ef672905ca7a54f2549fb9bb116fc48e48144d9fc4a4049b04110f4943f59fc865571d3e8cb3ec5aa3130ff8b66d491497e58427702ab30113679fe714724807e0c6ee7f31d87e10817e2082c6293613f31624ad76c11c3b07e8ca1ef9"}]}, 0x6, [{0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x410}}, {0xc3, &(0x7f00000021c0)=@string={0xc3, 0x3, "620ca08af76a6eda14157d91b5bc7b6b17878873fc286cb56fcb7455a5171b97c0fb70bc0a6470835b13da380b3f357b03fded54ffd7583195a3f6d35b0ce39f5a38c30c4c4dd48710c2b3e770ca67317d6df8cae329b36bf455e97938aafb5fcd1ac5f2df7148b59c8c11703c970a148899564533f39d323e87416d4a239a87ddf0f7cf4a41a02d6252511fc260042c964804195c3b91bf7c61388f1b45bedbf3c34338ab44625540b24bac5aebb010024d835f98a300031bdca041d133fa9ba5"}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000002340)=@lang_id={0x4}}, {0x76, &(0x7f0000002380)=@string={0x76, 0x3, "309a560379bdc4823797661a82d23f0e949ce37bcd90c8825e45134801e5d80bb7f428a59d7f82780b285835833319c61481a8616759da8e15d1fb8a9694d4371fce19c24f2057d6d8a78f60dcf582f574d580ec1ad422c3acf81d3906c5318848aa13d635af20300a9c744ada9ee4a17d1bb503"}}]}) syz_usb_control_io(r0, &(0x7f0000002600)={0x2c, &(0x7f0000002480)={0x40, 0x31, 0x57, {0x57, 0x2, "815f2c133258a2c4c09ecfa58fa04f29c15c661243217c16cfbdc846755ef4eda0433adaa8c9039e36833c09ca71a376a5f86df09aed97f95ef4fd19c3d908b916f10ffe67aac340c0490402516ee9165dbe417898"}}, &(0x7f0000002500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x34f0}}, &(0x7f0000002540)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4e, 0xb, 0x800}]}}, &(0x7f0000002580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x2, 0x5f, 0x5, "06f4437f", "108d9df4"}}, &(0x7f00000025c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x0, 0x0, 0x3, 0xf, 0x9, 0xfffa}}}, &(0x7f0000002a40)={0x84, &(0x7f0000002640)={0x0, 0xa, 0xf, "b913dd08ea955ceaf23522b5e9b22b"}, &(0x7f0000002680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000026c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000002740)={0x20, 0x0, 0x8, {0x200, 0x1, [0xff]}}, &(0x7f0000002780)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f00000027c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002800)={0x40, 0xb, 0x2, "123f"}, &(0x7f0000002840)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000002880)={0x40, 0x13, 0x6}, &(0x7f00000028c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002900)={0x40, 0x19, 0x2, "24d8"}, &(0x7f0000002940)={0x40, 0x1a, 0x2, 0x86df}, &(0x7f0000002980)={0x40, 0x1c, 0x1, 0x10}, &(0x7f00000029c0)={0x40, 0x1e, 0x1, 0xf6}, &(0x7f0000002a00)={0x40, 0x21, 0x1, 0x8}}) epoll_create(0xfffffffb) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000a40), 0x101040, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xf9, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x1, 0x1, 0x3, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0xc, {{0x8, 0x24, 0x6, 0x0, 0x0, "05f206"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xc, 0x3ff}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffc0, 0x3, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0xd, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0xb}, @mdlm_detail={0x81, 0x24, 0x13, 0x3d, "5a33cba301d02c517cdadbc41ab83cabbebaf255a0ceb083bfaf1d28b327538b8db69ea8f52a35a01e2dbd1d1f523bddc3eac8b80efbe915068924bb47a693bd430ee85458137936ed3c91d1a2655efa48ac4405a38ea6ea700648e22edee5f2e96492d57419283e6d5e73abd42e770720099147b25b9ee5bb21e1498c"}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0x13, 0x0, 0x7, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x43, 0x33, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x3, 0x5b}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x250, 0x8, 0xbd, 0x0, 0xff, 0x45}, 0x5b, &(0x7f0000000c00)={0x5, 0xf, 0x5b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x24, 0x6, 0x6, 0xfffe, 0xc}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x2, 0x9, 0x4, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7, 0xf, 0x4, [0xff3ff0, 0x3f0f, 0xffc00f, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "accb943e95d599b64d1c0ce4b8dd99dd"}, @generic={0xd, 0x10, 0x2, "220fdc1cf7685f4f5238"}]}, 0x5, [{0xa2, &(0x7f0000000c80)=@string={0xa2, 0x3, "0db8953a2ffa7038e2b370c95522127a9b869df0a7e168627c280fd400e1958dfccf0abefaaf5176b23652d08c816c43df72d0f70e1e7227739b8739bf5610ddc016d7ff5b5951763bdba730a6122f81d8563053b5576ca55951b9cc2217ce195064b86ef46f2dd55c1c2e46d1c1092027a7e070553c347d9a6e55879997911e49c86254af51150c489a5f786d3d72f92c997c51d81119b99ed927a7d95b8f5f"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x860}}, {0xfb, &(0x7f0000000d80)=@string={0xfb, 0x3, "f5cf5028d88a08827feb400591f77a6bea1a567afde98fdd8c58ba03a16f96f06d696ac2e0e7bed482f462011aecd0a153688c6965cf923d9eaa876345d05f27322450f67affd98a8ed46b9382ca951c1a4266f76de05f42e5ca92ab69d817e2eb79f930d6d9992fe497bb285a2efbaa3b5b08e7c68cf746b0229fe1203c7eafd5e5e17ed5bae3fb83e6ab50b3e4ccd4801a6c2206d9c5c759e60a4f3bed7e72215b888b7b3f6863211aefb8074dde166e60d8303bf8836decd647cfa2ad06605adcf920145830c5de0e353394a880fff840275ff1818eace873aeb4c80e71e523f79a0d78b1fbfec15326493c95733eafa975ef4d01b0994e"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x40c}}, {0xcd, &(0x7f0000000ec0)=@string={0xcd, 0x3, "9d92fb6b1582282a0e56c656dd159f5d876836d9637f9d37721552c186a05edb27a6019370e773adfe3237806e31456ea835e40b58e60f57e5175d09deb509449878df0e22a1602a1fe0dc1870d1d720b756eb0787857d0eb4da3b798658ae7ee4e50ebeb43d28fc9ecb9f96dda711ffbfcc759ba9811fd284e25924c9464d2ba5d6b399ad09d6288eecd0bd45aa7f98cbf2c7c8b4607f88f5f110850495eee44516b5e1bfc14559a1748e2e2d46425a9833d4a3921c8b289bbbbea76b917252ccc2957314ce3fa94ccbbd"}}]}) 15.423814565s ago: executing program 1 (id=391): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x0, 0x0}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000b80)) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0xfffffc4b}, 0xc) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000007000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70268a1a9d73cca00b4956b895c2a8a000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000056458bc9460018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000049608000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000082000000000000004200000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000180000000800000000000000090000008520000004000000bf91000000000000b702000002000000850000008500"], 0x0, 0x1, 0x28, &(0x7f0000000480)=""/40, 0x41100, 0x0, '\x00', 0x0, 0xa, r2, 0x8, &(0x7f00000005c0)={0x2, 0x6}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0x3, 0x44d}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000a00)=[r3, r4, r2, r2, r5, r3], &(0x7f0000000a40)=[{0x4, 0x1, 0x1}], 0x10, 0xa8a}, 0x90) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x100010, 0xffffffffffffffff, 0xd2fc1000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000000100)) set_robust_list(&(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000240)={&(0x7f0000000140)}}, 0x18) write$tun(0xffffffffffffffff, 0x0, 0x305) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x400800, 0x3e) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100, r7}, 0x0) memfd_create(&(0x7f0000000200)='D\xf8\xe5\x8d\xff', 0x239562136716072e) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c}, 0x6e, 0x0}, 0x0) 14.09281068s ago: executing program 4 (id=395): socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x0, 0x300) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @remote}, 0x8) r5 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000780)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r7, 0x3f, 0x7, 0xd}, 0x10) 13.260579052s ago: executing program 1 (id=397): socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) inotify_init1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "6db26c93fe5baaf1"}, 0x6}}, @CGW_DST_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x44}}, 0x0) 12.952943588s ago: executing program 0 (id=398): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', '', [], 0xa, "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"}, 0x128) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x4a, 0xff, @buffer={0x0, 0xf4, &(0x7f0000000140)=""/244}, &(0x7f0000000080)="11717b21cef016b21a51573233518caaaa6c844c2ae86b31f3e8f21c53907ba28cd2c170f4b0c5b3ce4ca7381258246efeb5c1fd4b2b2f45771029f0f924c59b31a0618fe1e412651049", &(0x7f0000000000)=""/44, 0x10000, 0x10012, 0x2, &(0x7f00000002c0)}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8b}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.578280211s ago: executing program 2 (id=400): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="e8afc94152fb373500c2e18a16916b1d3751802acfc1f8d62b6d2963d0", 0x1d}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getpid() fcntl$lock(r3, 0x5, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=""/235, 0xeb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="244200000020000100000000000000000002000000000000000000000008000400000000"], 0x24}}, 0x0) 12.208820166s ago: executing program 1 (id=401): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(r6, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:4 r'], 0x8) sendmmsg$sock(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)="53fb7ce9bca5b4c6c82fb997acc6b0361e5c15be43144f1d9cb2f738c0dcd881c2bd734b3a0d325847ea3aa2d8ef64bfd77363d3ee", 0x35}, {&(0x7f0000000640)="1bd811741a607159fda051b57d4c01e9986c2e65426807ac72604e001af6eba2fedb368d816a109958c47842f8f56a1c6fe296617bede164ba1802cd81f0d41cc77aadb91f6de5a0d05e3edd3b260afc80732ab70609c96107211530a57108325d22154b5a20a367309333edfcb7f835cae30f79c90707141097ef32c02724e039f2d610c0469b693da78e2e43cad8bdfa37546c443ece681d", 0x99}, {&(0x7f0000000580)="5de3b88de49e7b7cfec66d713c7a722698e1e8e8c77c37434d96d6f3b2f33ec2a47ba0ce18c4c391142b75b191f13f5fd350b22e27369d79c8dcc5a6b74df2f0fbfe676e05df80acc7d4928b4e1cd3911220304b334c0920817b4c7419", 0x5d}, {&(0x7f0000001e40)="a4c237fe1e955e0b4d62d671e290ed757b3bd16bc22c8d5f7382616cf3d8285ced401cd0b6eafd0067ae8231b3946c49935d657c5b6cd0cdd3b2a16361798d72b0dfdf40a0f52f35edfbd2c71b98556bb7f278d91a81969882139ddfd9e2545f1ac87cbf596ba24df1652d6a7b66d7f60bfce17090e35aec34c994d838f15cd3f25a5f06cbe86ca048c8b55e7386eeeeb3caa85ae9d8020f7e3aeca070bb35737728ef0cf9027ee56784c9cbd7c69bd73179aa323b9ebde9619f97ccb01ab6993194625b137f83400dae9ef708e298afcad6d9c2e4631fe3347c5b09e57eedf757081a963ea1ffa481dded5d96ea0d1914db375a44169fc748309139", 0xfc}], 0x4}}], 0x1, 0x0) 10.993146962s ago: executing program 1 (id=402): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000002000128008000100736974001400028008000300ff"], 0x40}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@dev, 0x0, r3}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x40, r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r9, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xd8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x8, 'caif0\x00', {'nr0\x00'}}) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r14 = dup(r13) ioctl$PTP_EXTTS_REQUEST2(r14, 0xc0603d0f, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 10.830792772s ago: executing program 2 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000640), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r3, r3}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'sha384-generic\x00'}}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0108000000031c", @ANYRES32=r0, @ANYRESHEX], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100", 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) 10.694119865s ago: executing program 3 (id=404): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)=@known='trusted.overlay.redirect\x00') 6.81815208s ago: executing program 0 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000000)) wait4(0x0, &(0x7f0000000040), 0x40000000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 6.714893304s ago: executing program 3 (id=406): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x293528}) 6.609169895s ago: executing program 1 (id=407): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x0, 0x0}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000b80)) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940), 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x256, 0x5, 0x3, 0x2d62, r3, 0x5, '\x00', 0x0, r2, 0x3, 0x4, 0x3, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000007000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70268a1a9d73cca00b4956b895c2a8a000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000056458bc9460018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000049608000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000082000000000000004200000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000180000000800000000000000090000008520000004000000bf91000000000000b702000002000000850000008500"], 0x0, 0x1, 0x28, &(0x7f0000000480)=""/40, 0x41100, 0x0, '\x00', 0x0, 0xa, r2, 0x8, &(0x7f00000005c0)={0x2, 0x6}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0x3, 0x44d}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000a00)=[r3, r4, r2, r2, r5, r3], &(0x7f0000000a40)=[{0x4, 0x1, 0x1}], 0x10, 0xa8a}, 0x90) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x100010, 0xffffffffffffffff, 0xd2fc1000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000000100)) set_robust_list(&(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000240)={&(0x7f0000000140)}}, 0x18) write$tun(0xffffffffffffffff, 0x0, 0x305) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x400800, 0x3e) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000280)={0x100, r7}, 0x0) memfd_create(&(0x7f0000000200)='D\xf8\xe5\x8d\xff', 0x239562136716072e) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c}, 0x6e, 0x0}, 0x0) 6.563027159s ago: executing program 2 (id=408): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) semtimedop(0xffffffffffffffff, &(0x7f00000003c0)=[{0x4, 0xc01e, 0x1000}, {0x3, 0x9, 0x1800}, {0x3, 0x3ff, 0x1000}, {0x4, 0x10, 0x800}], 0x4, &(0x7f0000000400)={0x77359400}) r0 = socket(0x10, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x2, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c0000f9b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x1, 0x9, 0x1}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000540)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000580)=[{0x3, 0x4, 0xd, 0x3}, {0x4, 0x1, 0x2, 0xb}, {0x5, 0x1, 0x10, 0x6}, {0x0, 0x5, 0x4, 0x5}, {0x5, 0x2, 0x5, 0x5}], 0x10, 0xb}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x4, 0xe, 0xd, 0xf0b2, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, @generic={0x10, 0x2, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x1, 0x9d, &(0x7f0000000ac0)=""/157, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000bc0)=[r1, r1, r1], &(0x7f0000000c00)=[{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x4, 0xc}, {0x5, 0x4, 0x5, 0x2}, {0x2, 0x4, 0x6, 0xb}, {0x4, 0x5, 0x9, 0xf}, {0x3, 0x4, 0x10, 0x4}, {0x1, 0x0, 0x2, 0xb}, {0x5, 0x3, 0x1, 0x4}], 0x10, 0x14452562}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='thread_noise\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x4841}, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r7, &(0x7f00000012c0)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000980)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}, {{&(0x7f00000008c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000d80)=""/217, 0xd9}], 0x1, &(0x7f0000000940)=""/13, 0xd}, 0x4}, {{&(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001380)=""/179, 0xb3}, {&(0x7f0000000f80)=""/164, 0xa4}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000980)}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000001040)=""/198, 0xc6}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000001140)=""/106, 0x6a}], 0x8, &(0x7f0000001240)=""/123, 0x7b}, 0x78c}], 0x3, 0x2, 0x0) 6.524450685s ago: executing program 4 (id=409): socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x718f, &(0x7f0000000180)={0x0, 0x1edd0, 0x200}, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040fe1e000004fb00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) prctl$PR_SET_MM(0x29, 0x0, &(0x7f0000ffc000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x0) epoll_create1(0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fcntl$addseals(r5, 0x5, 0x0) connect$unix(r4, &(0x7f0000000000)=@abs, 0x6e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000440), 0x4) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 5.458850051s ago: executing program 0 (id=410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xe5e3a7264bab7a56, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() 5.436774009s ago: executing program 2 (id=411): socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) inotify_init1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "6db26c93fe5baaf1"}, 0x6}}, @CGW_DST_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x44}}, 0x0) 5.433087756s ago: executing program 3 (id=412): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = dup2(r0, r0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x4, @any, 0x4, 0x2}, 0xe) read(r0, 0x0, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xd2) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) write$binfmt_elf32(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46003fa420530000000000000003000626c90000"], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRES8=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x90) ioprio_get$uid(0x3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000800)=@urb_type_iso={0x0, {0x8}, 0x4, 0xa0, &(0x7f0000000400)="a7a3b75077d6d3545ed407f883b3adf859643cb349f35029a5a74b7b1ede40098f72709104b8bc547da4334f5591cae475304754e1bc330165f1a2513f99e85eb124d896cf90755a1d4933835df3a7315c7f27d63ba48cb43bafab5c39197ed9e16d27ff571f81b1a15c81792df661ec", 0x70, 0x8, 0x10000, 0x5c, 0x8, 0x5, &(0x7f0000000480)="7ad8b330434d3a2747569970fd5d0c51e9003ef9028840e21017b3b6e1b424f9f6e13e604d4d41e1f6b5c95bbe5894c8b6dd0720e54ac4f17110d6296743006ba54f", [{0xc, 0xfffffff8, 0x4}, {0xb, 0x3, 0x1ff}, {0xe69, 0x5e9, 0x101}, {0xe, 0x6, 0xd}, {0x17ad, 0x2, 0x200}, {0x1000, 0xffff}, {0xf31f, 0x9, 0x1800000}, {0xb, 0x184, 0x100}, {0x5, 0x6452, 0x10000}, {0x3}, {0x6, 0xba6f, 0xffffffff}, {0x3, 0x1, 0xe0000}, {0xff, 0x0, 0x1}, {0x8, 0x6, 0x9}, {0xe1a, 0x9, 0xee}, {0x0, 0x8, 0xfffffffb}, {0x6, 0x4, 0x10}, {0x9, 0x401, 0xba7}, {0x9, 0x2e1c8dc6, 0x6}, {0x0, 0x2, 0x5}, {0x2000000, 0x6, 0x9}, {0x8470, 0xc, 0xc}, {0x2, 0x6, 0x8a}, {0xffff, 0x0, 0xb}, {0x5, 0x6}, {0xb33e, 0x2, 0x13c2f69c}, {0x3, 0xd, 0x8}, {0x7, 0x0, 0x8000000}, {0x33, 0x0, 0x95a}, {0xd4, 0x4, 0x10}, {0x0, 0x2, 0x18}, {0x4, 0x7fff, 0x45a}, {0x1, 0x0, 0x10000}, {0x5, 0x4}, {0x0, 0x7, 0x8}, {0x0, 0x7, 0x50}, {0x0, 0x0, 0x4}, {0x600000, 0xf, 0x9}, {0x0, 0x3, 0x10}, {0x2, 0xd, 0x2}, {0x7, 0x7, 0xfffffabd}, {0xfffffffa, 0x5, 0x21fe9bd2}, {0xc3, 0x0, 0x80000000}, {0x4, 0x1316f0bc}, {0x4, 0xfffffffe, 0x4}, {0xa0df}, {0x0, 0x40, 0x1}, {0x3, 0xe, 0xb}, {0x8, 0x4, 0xfffffffa}, {0x0, 0xf21, 0x6}, {0x1, 0x0, 0x6}, {}, {0x80000001, 0x2, 0x4}, {0xdb2, 0x5, 0x1}, {0x0, 0x4a7}, {0x81, 0x2, 0x60}, {0x5, 0x10000}, {0x7ff, 0x2, 0x5}, {0x0, 0x7, 0x6}, {0xdbd5, 0x100, 0x6}, {0x0, 0x3, 0x2}, {0x1000, 0x6, 0x6}, {0x7fffffff, 0x3, 0x2}, {0x7fffffff, 0x6}, {0x80000000, 0x6, 0x7}, {0x5, 0x2, 0x1}, {0x6, 0x8, 0x1000}, {0xcf1c, 0x8, 0x9}, {0x0, 0x0, 0x903d}, {0x4, 0x0, 0x7}, {0x3e49, 0x0, 0x2}, {0x0, 0x2, 0x8}, {0x7, 0x3, 0xfffffffb}, {0xfffffc01, 0x7, 0x80000000}, {0x4391, 0xfffffff8, 0x3}, {0x1, 0x5, 0x10}, {0xfff, 0x0, 0x5}, {0x1, 0xf4e5}, {0x5, 0x413bd1de}, {0x2, 0x7}, {0x0, 0x1, 0x5}, {0x1, 0x7fffffff, 0x8}, {0x920, 0x3, 0xe9c5}, {0x8, 0x100, 0x3}, {0x74, 0xe489, 0xc692}, {0x83, 0x0, 0x7d1a}, {0x8, 0x40}, {0xfffffffa, 0x1, 0x4}, {0x40, 0x2, 0xffff62ed}, {0xfffff433}, {0x8, 0x8, 0x59d7}, {0x0, 0x5b6b, 0x3}]}) 5.227241506s ago: executing program 4 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xa, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "1400000023000000"}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, r2}, 0x10) r3 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000019640)={{0x5, 0xbc}, {0x4, 0x1}, 0x800, 0xa, 0x7}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000a9000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.138744991s ago: executing program 0 (id=414): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x39}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16}]}, 0x18}}, 0x0) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r7, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001c80)=""/4117, 0x1015}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000005200)=""/240, 0xf0}], 0x3}}], 0x1, 0x0, 0x0) prlimit64(r3, 0x8, &(0x7f0000000840)={0x4, 0x89}, &(0x7f0000000880)) fcntl$setlease(r7, 0x400, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000940)=@vsock, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/30, 0x1e}], 0x4}, 0xb}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'bond0\x00'}}, 0x1e) sendmmsg$sock(r8, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000180)="dd367ccff6d4e26ba11a54fb1913f20e37617a790a6a3a50ee7b8518478cd167e2de3d79364e036cae33971889c72b0199a1446835022b5ea7467b2c7395bd11876a5080cb6727b5100777e937337ea2bdba244a626cbde67917fd452857fb41bb8b5ba0ec9b58903335164c907cf5387e8cee3946cacd325010180543a6087359e23810043db1c9bf3dc18d2097f675f0abe1e890a1ceca965c9c1827af1ca63261deb25566cb6b869b82a1e959", 0xae}, {&(0x7f0000000240)="ff08563cc459fdaa768c7b4b5da9a86e574aedb2b48c666387a520e98bf73762c0bfa04e5c7cc19fde5fb73e6680f8a6232155833ccd129dbd3559a4cc2023a276ba467d6925133ccdf21d3bdbdd", 0x4e}, {&(0x7f0000000300)="f51c3983559c891656479f12098f807e9accc84995b16dfbfb1a7880886508b892cba2fd685e37db8e5e47c1522358035712ff621138e7bf2c6df1e45486d1b46910fc7739207c5114bfc6b32b0d4dca6a35027c7340", 0x56}, {&(0x7f0000000040)="c205067ea3ea4809c2afbbd72c419a3743b6a16046a3db3bc04ca2e9f68b9a57844bb846e093", 0x26}, {&(0x7f00000003c0)="bfeab5234620e816378a5129849d97ef4277b9f3f736ba2cde0e898e3e1a7b75c8336372c146d5864184dba56ff6e9bcd0f02ae7cdbd83d3613e9cbfa705d5e7adc178a2aad4b97a23b758377f3ea51299003f5130e0e458cadb21816c40759956e2262b02737eacf35a687c0584f6511473ffee658c2028fad0e574a097e9f10de987fff09995d5790076f5a0652a3cd0d726e5c763c5978a7809d5cc3543fd76996e773010b7537fc5e092d06409534810aa48fae8dbf9811343d8a9813abf5f983cb2edd173af75d739544d6c3bb4d2861a983a7e31620844c9996009e5e8155a6eaf40d6f814b50564c2142cea0cc6a8c7b27ed087094224e155710f4f0e972922b3e04b77b9df81d81a40022314050566e196dcddf99ea2dad2f5ecc54dff4aefa22a2ab55de99832d4f0aad762efdf30a89b18411741cce07b920a4f7af00607777849b2bc52ed2cd60672d20838bdd97de550dd2dd405ef683cbcef6fd2d6c2cc72c7d75a4976bc0a110e0e402fb27e3e52b28f24df55391ad26b5061d8b0f5a0d8bf38a676f9d83bb064f0e79b8375024b4d423d43d14b64a855f2919f577d46ce535bfdf94b38aa2429b1059d54f825b59791b0f9a2e736160c311cf1054603edc709ff9cf7cd895612a74efb2d8b59edc9ae3de2cbcd558dd0c1d83de9dc62384d88c0e287de9661aa9e965610558828c05f5d1c6d97306411954843a13725fa4022ab62467cf355d42088f6575690a5c59ffe8a93ebe817b73c4491561925a84a08eb46680c0fd572600567b471b2a831a8584732a2f484ac8204a48a17745f3c7988bb1d08a0c834f345058b5d8bc3308f935005f82dcebccf91f3ede1209ecd6715b7252f7406d3ac32e78bcab9032cf3b568d305fa248d83d77493253f852838d1a9bafba811bc2821520397c35d5b939ae513b98040864c9ea8132520d705c765f49b09caa24d688b92dea8ad27b3ab25d81bcca4eb9ac208e7c380fb983444840a611fecba0c5e468ff0f4ab900eef03cf816b6e213f04b437822d7bf3829e283e58c16ebbb80d91af64cea4c5fee41239ec5daacba4a81530c4888599e013de23fd0068946e65dd59edea310ed539a4bea51f25758f948021330a4461187415d5c3e83954526c0fcbabee54a3daad112f10016d19ba5a7560d564b188a0465e5eacf4b6216eb949ad6b3c9544e646bbac9c737ab017438b6e283e3ed73ae96f152820392ff2d0d59759ce78fc7bc705b792f82460cb21ac7cd62df5e3b88add4e9ba7f5a5fcef73b6a53cc058c73f7a9e89368db260371827597a0f0c1018e58711e9bff2128e845c82910b71b4329c6be404458792bc3b6254aa1a75fe0df49b9526ddb2f9daf2ba6502d2ad285823d9437cf2580a6e37f78590cd6ac8b565fca8bc1cd312269f38ac8579c935c0e1fa89bc69c3ad49ace92caa9df720fbde5d719781d47daa456a28e93e1d2a900d810a331774c68a56e39ff1d8f917d5d59b8c2f75381cdd8fadac8df80d105656e1a3197609162aa9f8a70d27a22b9a90980da66317b851b186b55e8c72e7fe63ccf6dc59c8b6b7fdebe491", 0x463}], 0x5}}], 0x1, 0x0) r9 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.889062636s ago: executing program 0 (id=415): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0x0, @local}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) epoll_create1(0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040), 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "d61b58"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'veth0\x00', {0x4}, 0x7ff}) 4.116532091s ago: executing program 2 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}, @mbim={0xc}, @mbim_extended={0x8}, @obex={0x5}, @acm={0x4}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x200000071, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0x4020565b, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) ioctl$SNAPSHOT_FREE(r4, 0x40043311) 4.079043159s ago: executing program 3 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet(0x2, 0x6, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setpgid(0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) 3.874747482s ago: executing program 4 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000640), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r3, r3}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'sha384-generic\x00'}}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0108000000031c", @ANYRES32=r0, @ANYRESHEX], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100", 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) 3.828395537s ago: executing program 3 (id=419): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rxrpc_transmit\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000b40), 0x2b842ac, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000140)={0x0, 0x0}) r12 = syz_open_procfs(r11, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r12, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.775057888s ago: executing program 3 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000000)) wait4(0x0, &(0x7f0000000040), 0x40000000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 195.636829ms ago: executing program 1 (id=421): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000780)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/231) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpgrp(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8d}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 126.739136ms ago: executing program 2 (id=422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x5, &(0x7f0000000540)=""/181, 0xb5}, 0xd6}], 0x1, 0x40012102, &(0x7f0000000640)={0x0, 0x989680}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}) creat(&(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x86) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, r6}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 23.681612ms ago: executing program 0 (id=423): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x293528}) 0s ago: executing program 4 (id=424): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) semtimedop(0xffffffffffffffff, &(0x7f00000003c0)=[{0x4, 0xc01e, 0x1000}, {0x3, 0x9, 0x1800}, {0x3, 0x3ff, 0x1000}, {0x4, 0x10, 0x800}], 0x4, &(0x7f0000000400)={0x77359400}) r0 = socket(0x10, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x2, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c0000f9b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x1, 0x9, 0x1}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000540)=[r1, r1, r1, r1, r1, r1], &(0x7f0000000580)=[{0x3, 0x4, 0xd, 0x3}, {0x4, 0x1, 0x2, 0xb}, {0x5, 0x1, 0x10, 0x6}, {0x0, 0x5, 0x4, 0x5}, {0x5, 0x2, 0x5, 0x5}], 0x10, 0xb}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x4, 0xe, 0xd, 0xf0b2, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, @generic={0x10, 0x2, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x1, 0x9d, &(0x7f0000000ac0)=""/157, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0xc, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000bc0)=[r1, r1, r1], &(0x7f0000000c00)=[{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x4, 0xc}, {0x5, 0x4, 0x5, 0x2}, {0x2, 0x4, 0x6, 0xb}, {0x4, 0x5, 0x9, 0xf}, {0x3, 0x4, 0x10, 0x4}, {0x1, 0x0, 0x2, 0xb}, {0x5, 0x3, 0x1, 0x4}], 0x10, 0x14452562}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='thread_noise\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x4841}, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r7, &(0x7f00000012c0)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000980)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}, {{&(0x7f00000008c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000d80)=""/217, 0xd9}], 0x1, &(0x7f0000000940)=""/13, 0xd}, 0x4}, {{&(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001380)=""/179, 0xb3}, {&(0x7f0000000f80)=""/164, 0xa4}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000980)}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000001040)=""/198, 0xc6}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000001140)=""/106, 0x6a}], 0x8, &(0x7f0000001240)=""/123, 0x7b}, 0x78c}], 0x3, 0x2, 0x0) kernel console output (not intermixed with test programs): failed: -22 [ 133.176689][ T5268] usb 1-1: Using ep0 maxpacket: 8 [ 133.185957][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.208577][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.220950][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.227953][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.234930][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.241932][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.248913][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.255930][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.262937][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.269901][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 133.276691][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 133.288333][ T5268] usb 1-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=d5.48 [ 133.297499][ T5268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.306371][ T5268] usb 1-1: Product: syz [ 133.318020][ T5268] usb 1-1: Manufacturer: syz [ 133.322708][ T5268] usb 1-1: SerialNumber: syz [ 133.337989][ T5272] usb 5-1: USB disconnect, device number 6 [ 133.352878][ T5268] usb 1-1: config 0 descriptor?? [ 133.377258][ T5268] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 133.387798][ T5268] em28xx 1-1:0.0: Video interface 0 found: [ 133.543960][ T940] pwc: send_video_command error -71 [ 133.551915][ T5733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.571263][ T940] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 133.579763][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.596153][ T940] Philips webcam 3-1:250.0: probe with driver Philips webcam failed with error -71 [ 133.631334][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.632757][ T940] usb 3-1: USB disconnect, device number 3 [ 133.699972][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.748451][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.883720][ T5231] Bluetooth: hci5: command tx timeout [ 133.924757][ T5268] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 135.938455][ T5268] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 135.952626][ T5268] em28xx 1-1:0.0: board has no eeprom [ 135.963711][ T5231] Bluetooth: hci5: command tx timeout [ 136.043941][ T5268] em28xx 1-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 136.062160][ T5268] em28xx 1-1:0.0: analog set to bulk mode. [ 136.084135][ T46] em28xx 1-1:0.0: Registering V4L2 extension [ 136.112550][ T5268] usb 1-1: USB disconnect, device number 10 [ 136.154685][ T5268] em28xx 1-1:0.0: Disconnecting em28xx [ 136.214539][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.397790][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.933622][ T46] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 141.160862][ T46] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 141.188370][ T35] bond0 (unregistering): Released all slaves [ 141.200674][ T46] em28xx 1-1:0.0: No AC97 audio processor [ 141.301805][ T5669] team0: Port device team_slave_1 added [ 141.323227][ T46] em28xx 1-1:0.0: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 141.361020][ T46] em28xx 1-1:0.0: Binding DVB extension [ 141.370383][ T46] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0 [ 141.400298][ T46] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 141.430579][ T46] em28xx 1-1:0.0: Remote control support is not available for this card. [ 141.442552][ T5268] em28xx 1-1:0.0: Closing input extension [ 141.627160][ T5268] em28xx 1-1:0.0: Freeing device [ 142.105666][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.163762][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.023428][ T5669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.053500][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.160185][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 143.184852][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.191808][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.253463][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 143.258648][ T5669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.288893][ T8] usb 3-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 143.316429][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 143.325498][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.330437][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 143.369060][ T8] usb 3-1: Product: syz [ 143.373455][ T8] usb 3-1: Manufacturer: syz [ 143.378074][ T8] usb 3-1: SerialNumber: syz [ 143.415853][ T8] usb 3-1: config 0 descriptor?? [ 143.442070][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 143.617507][ T5669] hsr_slave_0: entered promiscuous mode [ 143.651321][ T5669] hsr_slave_1: entered promiscuous mode [ 143.668072][ T5669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.693089][ T5669] Cannot create hsr debugfs directory [ 143.702860][ T5310] usb 3-1: USB disconnect, device number 4 [ 143.790581][ T35] hsr_slave_0: left promiscuous mode [ 143.798653][ T35] hsr_slave_1: left promiscuous mode [ 143.806214][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.814360][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.823224][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.838292][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.868178][ T35] veth1_macvtap: left promiscuous mode [ 143.877042][ T35] veth0_macvtap: left promiscuous mode [ 143.882864][ T35] veth1_vlan: left promiscuous mode [ 143.890436][ T35] veth0_vlan: left promiscuous mode [ 143.923693][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.143752][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 144.153615][ T8] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 144.169871][ T8] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.194540][ T8] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.219504][ T8] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.235582][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 144.253613][ T8] usb 5-1: config 0 has no interface number 0 [ 144.275126][ T8] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 144.312742][ T8] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 144.340140][ T8] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.368694][ T8] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.402355][ T8] usb 5-1: config 0 interface 125 has no altsetting 0 [ 144.413502][ T8] usb 5-1: config 0 interface 125 has no altsetting 2 [ 144.434894][ T8] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 144.448808][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.468937][ T8] usb 5-1: Product: syz [ 144.503544][ T5268] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.625491][ T8] usb 5-1: Manufacturer: syz [ 144.630573][ T8] usb 5-1: SerialNumber: syz [ 144.637816][ T8] usb 5-1: config 0 descriptor?? [ 144.646214][ T8] usb 5-1: selecting invalid altsetting 2 [ 144.831527][ T5784] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 145.223682][ T5310] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.347257][ T5268] usb 4-1: Using ep0 maxpacket: 8 [ 145.354621][ C0] usb 5-1: async_complete: urb error -71 [ 145.360359][ C0] usb 5-1: async_complete: urb error -71 [ 145.366037][ C0] usb 5-1: async_complete: urb error -71 [ 145.371705][ C0] usb 5-1: async_complete: urb error -71 [ 145.380189][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.397139][ T8] get_1284_register: usb error -71 [ 145.413449][ T8] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 145.424573][ T5268] usb 4-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=d5.48 [ 145.454305][ T5268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.459193][ T8] usb 5-1: USB disconnect, device number 7 [ 145.501766][ T5268] usb 4-1: Product: syz [ 145.522177][ T5268] usb 4-1: Manufacturer: syz [ 145.533195][ T5268] usb 4-1: SerialNumber: syz [ 145.561106][ T5268] usb 4-1: config 0 descriptor?? [ 145.578013][ T5268] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 145.587626][ T5268] em28xx 4-1:0.0: Video interface 0 found: [ 145.593475][ T5310] usb 1-1: device descriptor read/64, error -71 [ 145.772974][ T35] team0 (unregistering): Port device team_slave_1 removed [ 145.780138][ T5776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.797582][ T5776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.828203][ T5776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.839304][ T5776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.848224][ T35] team0 (unregistering): Port device team_slave_0 removed [ 145.904772][ T5310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.013997][ T5268] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 146.073756][ T5310] usb 1-1: device descriptor read/64, error -71 [ 146.132581][ T5268] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 146.144564][ T5268] em28xx 4-1:0.0: board has no eeprom [ 146.215413][ T5310] usb usb1-port1: attempt power cycle [ 146.228649][ T5268] em28xx 4-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 146.263147][ T5268] em28xx 4-1:0.0: analog set to bulk mode. [ 146.278974][ T46] em28xx 4-1:0.0: Registering V4L2 extension [ 146.307862][ T5268] usb 4-1: USB disconnect, device number 4 [ 146.343959][ T5268] em28xx 4-1:0.0: Disconnecting em28xx [ 146.496641][ T46] em28xx 4-1:0.0: Config register raw data: 0xffffffed [ 146.523554][ T46] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 146.549817][ T46] em28xx 4-1:0.0: No AC97 audio processor [ 146.559997][ T46] em28xx 4-1:0.0: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 146.569080][ T46] em28xx 4-1:0.0: Binding DVB extension [ 146.582772][ T46] em28xx 4-1:0.0: no endpoint for DVB mode and transfer type 0 [ 146.591375][ T46] em28xx 4-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 146.624837][ T46] em28xx 4-1:0.0: Remote control support is not available for this card. [ 146.653641][ T5310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.667064][ T5268] em28xx 4-1:0.0: Closing input extension [ 146.679115][ T5268] em28xx 4-1:0.0: Freeing device [ 146.695136][ T5310] usb 1-1: device descriptor read/8, error -71 [ 146.789865][ T5797] trusted_key: syz.3.126 sent an empty control message without MSG_MORE. [ 146.985027][ T5310] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 147.079695][ T5310] usb 1-1: device descriptor read/8, error -71 [ 147.307392][ T5310] usb usb1-port1: unable to enumerate USB device [ 151.839478][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 151.915406][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 152.052867][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 154.051035][ T5669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.073436][ T5669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.101253][ T5669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.144598][ T5669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.310407][ T5844] overlayfs: missing 'workdir' [ 157.384633][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.411336][ T5669] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.436675][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.443904][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.469105][ T5310] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.476319][ T5310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.552932][ T5669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.694939][ T8] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 158.085957][ T8] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.100495][ T8] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 158.346273][ T8] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 161.467486][ T5222] Bluetooth: hci1: command 0x0406 tx timeout [ 162.945217][ T8] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 162.993520][ T8] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 163.029972][ T8] usb 5-1: Manufacturer: syz [ 163.045461][ T8] usb 5-1: can't set config #36, error -71 [ 163.066326][ T8] usb 5-1: USB disconnect, device number 8 [ 163.196396][ T5862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.143'. [ 163.297789][ T5862] unsupported nlmsg_type 40 [ 163.319629][ T5862] tipc: Started in network mode [ 163.368107][ T5862] tipc: Node identity :, cluster identity 4711 [ 163.381918][ T5862] tipc: Enabling of bearer rejected, failed to enable media [ 163.446667][ T5669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.565238][ T5222] Bluetooth: hci1: command 0x0406 tx timeout [ 163.579639][ T5669] veth0_vlan: entered promiscuous mode [ 163.601229][ T5669] veth1_vlan: entered promiscuous mode [ 163.708886][ T5669] veth0_macvtap: entered promiscuous mode [ 163.744898][ T5669] veth1_macvtap: entered promiscuous mode [ 163.820126][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.820143][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.820149][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.820157][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.820162][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.820170][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.820176][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.820183][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.827005][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.846554][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.846571][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.846577][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.846585][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.846590][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.846597][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.846603][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.846611][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.849167][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.876664][ T5669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.876711][ T5669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.876738][ T5669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.876764][ T5669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.398644][ T5224] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.431513][ T980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.480154][ T980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.561733][ T2534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.573841][ T2534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.591596][ T5224] usb 3-1: config 1 interface 0 altsetting 231 bulk endpoint 0x1 has invalid maxpacket 32 [ 164.619837][ T5224] usb 3-1: config 1 interface 0 has no altsetting 0 [ 164.679897][ T5224] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.701803][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.731429][ T5224] usb 3-1: Product: à Œ [ 164.742129][ T5224] usb 3-1: Manufacturer: ȗ⩪㞄밽屠莅ã©é½Ÿà­¾á—žæ´«ëœ à¶“ç—ǽ馊䚭讇ã•ã£¸ê—Œã“›á½‹æ¥„銹ꋥ껗⊻矤كç®è¤Ÿá„†è¨€æ™”é£§î¿€ì³¾æ…§í•€ï…–åŒ¥å¿‹å‘‘ë“„ì¯®á€ˆí†‰î˜¤è–“ä†»ç¿³ì¼Šï¹°æˆ [ 164.829750][ T5224] usb 3-1: SerialNumber: ц [ 164.854907][ T5880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.178776][ T5224] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 231 proto 1 vid 0x0525 pid 0xA4A8 [ 165.249900][ T5224] usb 3-1: USB disconnect, device number 5 [ 165.270813][ T5224] usblp0: removed [ 166.843480][ T5231] Bluetooth: hci0: command 0x0406 tx timeout [ 171.185383][ T5923] FAULT_INJECTION: forcing a failure. [ 171.185383][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 171.237827][ T5923] CPU: 1 UID: 0 PID: 5923 Comm: syz.3.157 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 171.248486][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 171.258582][ T5923] Call Trace: [ 171.261882][ T5923] [ 171.264838][ T5923] dump_stack_lvl+0x241/0x360 [ 171.269572][ T5923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.274814][ T5923] ? __pfx__printk+0x10/0x10 [ 171.279436][ T5923] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 171.284927][ T5923] ? __pfx___might_resched+0x10/0x10 [ 171.290243][ T5923] should_fail_ex+0x3b0/0x4e0 [ 171.294951][ T5923] should_failslab+0xac/0x100 [ 171.299660][ T5923] ? assoc_array_delete+0x107/0x1120 [ 171.304972][ T5923] __kmalloc_cache_noprof+0x6c/0x2c0 [ 171.310304][ T5923] assoc_array_delete+0x107/0x1120 [ 171.315446][ T5923] ? __mutex_lock+0x2ef/0xd70 [ 171.320159][ T5923] ? __pfx_assoc_array_delete+0x10/0x10 [ 171.325697][ T5923] ? key_move+0x1eb/0x930 [ 171.330018][ T5923] ? __pfx___mutex_lock+0x10/0x10 [ 171.335057][ T5923] ? __pfx_down_write_nested+0x10/0x10 [ 171.340540][ T5923] key_move+0x209/0x930 [ 171.344712][ T5923] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 171.350897][ T5923] ? __pfx_key_move+0x10/0x10 [ 171.355581][ T5923] ? __pfx_lock_release+0x10/0x10 [ 171.360622][ T5923] keyctl_keyring_move+0xd6/0x110 [ 171.365646][ T5923] __se_sys_keyctl+0x64f/0xa50 [ 171.370405][ T5923] ? __pfx___se_sys_keyctl+0x10/0x10 [ 171.375684][ T5923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.382095][ T5923] ? __fget_files+0x3f6/0x470 [ 171.386777][ T5923] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.392754][ T5923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.399075][ T5923] ? do_syscall_64+0x100/0x230 [ 171.403850][ T5923] ? __x64_sys_keyctl+0x20/0xc0 [ 171.408712][ T5923] do_syscall_64+0xf3/0x230 [ 171.413218][ T5923] ? clear_bhb_loop+0x35/0x90 [ 171.417889][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.423792][ T5923] RIP: 0033:0x7fb0001779f9 [ 171.428204][ T5923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.447818][ T5923] RSP: 002b:00007fb000fab048 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 171.456226][ T5923] RAX: ffffffffffffffda RBX: 00007fb000305f80 RCX: 00007fb0001779f9 [ 171.464186][ T5923] RDX: 00000000151ffa66 RSI: 00000000151ffa66 RDI: 000000000000001e [ 171.472145][ T5923] RBP: 00007fb000fab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.480104][ T5923] R10: 000000000cb69cea R11: 0000000000000246 R12: 0000000000000001 [ 171.488067][ T5923] R13: 000000000000000b R14: 00007fb000305f80 R15: 00007ffeeea4e848 [ 171.496215][ T5923] [ 171.854425][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 171.984951][ T5942] FAULT_INJECTION: forcing a failure. [ 171.984951][ T5942] name failslab, interval 1, probability 0, space 0, times 0 [ 172.026512][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.3.166 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 172.037152][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 172.047220][ T5942] Call Trace: [ 172.050509][ T5942] [ 172.053444][ T5942] dump_stack_lvl+0x241/0x360 [ 172.058152][ T5942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.063377][ T5942] ? __pfx__printk+0x10/0x10 [ 172.068016][ T5942] should_fail_ex+0x3b0/0x4e0 [ 172.072728][ T5942] should_failslab+0xac/0x100 [ 172.077431][ T5942] ? netlbl_cfg_cipsov4_map_add+0x7b/0x5e0 [ 172.083262][ T5942] __kmalloc_cache_noprof+0x6c/0x2c0 [ 172.088579][ T5942] netlbl_cfg_cipsov4_map_add+0x7b/0x5e0 [ 172.094249][ T5942] smk_cipso_doi+0x300/0x590 [ 172.098860][ T5942] ? __pfx_sscanf+0x10/0x10 [ 172.103373][ T5942] ? __pfx_smk_cipso_doi+0x10/0x10 [ 172.108498][ T5942] ? __might_fault+0xc6/0x120 [ 172.113193][ T5942] smk_write_doi+0x1b2/0x280 [ 172.117800][ T5942] ? __pfx_smk_write_doi+0x10/0x10 [ 172.122953][ T5942] vfs_writev+0x5af/0xbb0 [ 172.127305][ T5942] ? __pfx___mutex_trylock_common+0x10/0x10 [ 172.133222][ T5942] ? __pfx_smk_write_doi+0x10/0x10 [ 172.138355][ T5942] ? __pfx_vfs_writev+0x10/0x10 [ 172.143223][ T5942] ? vfs_write+0x7c4/0xc90 [ 172.147667][ T5942] ? __fget_files+0x29/0x470 [ 172.152291][ T5942] do_writev+0x1b1/0x350 [ 172.156555][ T5942] ? __pfx_do_writev+0x10/0x10 [ 172.161335][ T5942] ? do_syscall_64+0x100/0x230 [ 172.166121][ T5942] ? do_syscall_64+0xb6/0x230 [ 172.170825][ T5942] do_syscall_64+0xf3/0x230 [ 172.174296][ T5222] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 172.175340][ T5942] ? clear_bhb_loop+0x35/0x90 [ 172.187552][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.193464][ T5942] RIP: 0033:0x7fb0001779f9 [ 172.197896][ T5942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.217507][ T5942] RSP: 002b:00007fb000fab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 172.225930][ T5942] RAX: ffffffffffffffda RBX: 00007fb000305f80 RCX: 00007fb0001779f9 [ 172.233900][ T5942] RDX: 0000000000000001 RSI: 0000000020001d40 RDI: 0000000000000008 [ 172.241863][ T5942] RBP: 00007fb000fab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.249830][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.257795][ T5942] R13: 000000000000000b R14: 00007fb000305f80 R15: 00007ffeeea4e848 [ 172.265871][ T5942] [ 172.299749][ T5311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.302691][ T5942] smk_cipso_doi:715 map add rc = -12 [ 173.048640][ T8] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1064, setting to 1024 [ 173.074989][ T8] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 173.086315][ T8] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.102025][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 173.126597][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 173.136863][ T5311] usb 2-1: Using ep0 maxpacket: 16 [ 173.150331][ T5311] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 173.163488][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.177282][ T5311] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.193511][ T8] usb 3-1: Product: 䨬ी귵﫻奯豴ᔔ䠺鷗˖ [ 173.200083][ T5311] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.230478][ T8] usb 3-1: Manufacturer: á„ [ 173.240721][ T8] usb 3-1: SerialNumber: syz [ 173.261019][ T5311] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.283037][ T5955] FAULT_INJECTION: forcing a failure. [ 173.283037][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 173.301683][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.3.168 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 173.306502][ T5925] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.312305][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 173.324037][ T5311] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 173.329438][ T5955] Call Trace: [ 173.329454][ T5955] [ 173.329463][ T5955] dump_stack_lvl+0x241/0x360 [ 173.349191][ T5955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.354409][ T5955] ? __pfx__printk+0x10/0x10 [ 173.359013][ T5955] ? __kmalloc_noprof+0xb0/0x400 [ 173.363967][ T5955] ? __pfx___might_resched+0x10/0x10 [ 173.369271][ T5955] should_fail_ex+0x3b0/0x4e0 [ 173.373956][ T5955] ? iovec_from_user+0x87/0x240 [ 173.378823][ T5955] should_failslab+0xac/0x100 [ 173.383516][ T5955] ? iovec_from_user+0x87/0x240 [ 173.388367][ T5955] __kmalloc_noprof+0xd8/0x400 [ 173.393146][ T5955] iovec_from_user+0x87/0x240 [ 173.397821][ T5955] __import_iovec+0x132/0x820 [ 173.402499][ T5955] import_iovec+0xeb/0x120 [ 173.406931][ T5955] copy_msghdr_from_user+0x52f/0x680 [ 173.412226][ T5955] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 173.418039][ T5955] do_recvmmsg+0x40f/0xae0 [ 173.422445][ T5955] ? mark_lock+0x9a/0x350 [ 173.426786][ T5955] ? __pfx_do_recvmmsg+0x10/0x10 [ 173.431729][ T5955] ? __pfx___might_resched+0x10/0x10 [ 173.437028][ T5955] ? __might_fault+0xaa/0x120 [ 173.441696][ T5955] ? __pfx_lock_release+0x10/0x10 [ 173.446716][ T5955] ? vfs_write+0x7c4/0xc90 [ 173.451149][ T5955] ? get_timespec64+0x19c/0x280 [ 173.456039][ T5955] __x64_sys_recvmmsg+0x1b8/0x250 [ 173.461091][ T5955] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 173.466659][ T5955] ? do_syscall_64+0x100/0x230 [ 173.471435][ T5955] ? do_syscall_64+0xb6/0x230 [ 173.476122][ T5955] do_syscall_64+0xf3/0x230 [ 173.480621][ T5955] ? clear_bhb_loop+0x35/0x90 [ 173.485297][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.491200][ T5955] RIP: 0033:0x7fb0001779f9 [ 173.495609][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.515205][ T5955] RSP: 002b:00007fb000fab048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 173.523626][ T5955] RAX: ffffffffffffffda RBX: 00007fb000305f80 RCX: 00007fb0001779f9 [ 173.531671][ T5955] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 173.539646][ T5955] RBP: 00007fb000fab0a0 R08: 0000000020003700 R09: 0000000000000000 [ 173.547610][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.555587][ T5955] R13: 000000000000000b R14: 00007fb000305f80 R15: 00007ffeeea4e848 [ 173.563586][ T5955] [ 173.596701][ T5311] usb 2-1: config 0 has no interface number 0 [ 173.613149][ T5311] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 173.661522][ T5311] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 173.678479][ T5311] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.750811][ T5311] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.773480][ T940] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 173.790785][ T5960] sp0: Synchronizing with TNC [ 173.808781][ T5960] FAULT_INJECTION: forcing a failure. [ 173.808781][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 173.816850][ T5311] usb 2-1: config 0 interface 125 has no altsetting 0 [ 173.821764][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.3.170 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 173.838748][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 173.848804][ T5960] Call Trace: [ 173.852184][ T5960] [ 173.855123][ T5960] dump_stack_lvl+0x241/0x360 [ 173.859821][ T5960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.865037][ T5960] ? __pfx__printk+0x10/0x10 [ 173.869631][ T5960] ? fs_reclaim_acquire+0x93/0x140 [ 173.874743][ T5960] ? __pfx___might_resched+0x10/0x10 [ 173.880047][ T5960] should_fail_ex+0x3b0/0x4e0 [ 173.884724][ T5960] ? tomoyo_encode+0x26f/0x540 [ 173.889482][ T5960] should_failslab+0xac/0x100 [ 173.894166][ T5960] ? tomoyo_encode+0x26f/0x540 [ 173.898935][ T5960] __kmalloc_noprof+0xd8/0x400 [ 173.903717][ T5960] tomoyo_encode+0x26f/0x540 [ 173.908315][ T5960] tomoyo_realpath_from_path+0x59e/0x5e0 [ 173.914043][ T5960] tomoyo_path_number_perm+0x23a/0x880 [ 173.919505][ T5960] ? tomoyo_path_number_perm+0x208/0x880 [ 173.925136][ T5960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.931125][ T5960] ? __fget_files+0x29/0x470 [ 173.935719][ T5960] ? __fget_files+0x3f6/0x470 [ 173.940379][ T5960] ? __fget_files+0x29/0x470 [ 173.944966][ T5960] security_file_ioctl+0x75/0xb0 [ 173.949919][ T5960] __se_sys_ioctl+0x47/0x170 [ 173.954608][ T5960] do_syscall_64+0xf3/0x230 [ 173.959112][ T5960] ? clear_bhb_loop+0x35/0x90 [ 173.963800][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.969692][ T5960] RIP: 0033:0x7fb0001779f9 [ 173.974119][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.993730][ T5960] RSP: 002b:00007fb000fab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.002157][ T5960] RAX: ffffffffffffffda RBX: 00007fb000305f80 RCX: 00007fb0001779f9 [ 174.010123][ T5960] RDX: 0000000020001100 RSI: 0000000000008925 RDI: 0000000000000003 [ 174.018082][ T5960] RBP: 00007fb000fab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.026057][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.034025][ T5960] R13: 000000000000000b R14: 00007fb000305f80 R15: 00007ffeeea4e848 [ 174.042002][ T5960] [ 174.070090][ T5960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.083996][ T5925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.158'. [ 174.093094][ T5311] usb 2-1: config 0 interface 125 has no altsetting 2 [ 174.096995][ T5925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.158'. [ 174.123280][ T5311] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 174.150747][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.171522][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.186041][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.202644][ T940] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 174.203852][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 174.215622][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.230634][ T5311] usb 2-1: Product: syz [ 174.230656][ T5311] usb 2-1: Manufacturer: syz [ 174.242766][ T5311] usb 2-1: SerialNumber: syz [ 174.296173][ T5311] usb 2-1: config 0 descriptor?? [ 174.301076][ T940] usb 5-1: config 0 descriptor?? [ 174.323505][ T8] usb 3-1: USB disconnect, device number 6 [ 174.341480][ T5311] usb 2-1: selecting invalid altsetting 2 [ 174.363985][ T8] usblp0: removed [ 174.449947][ T5963] netlink: 576 bytes leftover after parsing attributes in process `syz.3.171'. [ 174.545380][ C0] usb 2-1: async_complete: urb error -71 [ 174.551092][ C0] usb 2-1: async_complete: urb error -71 [ 174.556816][ C0] usb 2-1: async_complete: urb error -71 [ 174.562600][ C0] usb 2-1: async_complete: urb error -71 [ 174.594523][ T5311] get_1284_register: usb error -71 [ 174.603953][ T5311] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 174.652166][ T5311] usb 2-1: USB disconnect, device number 6 [ 174.729062][ T5965] sp0: Synchronizing with TNC [ 174.731990][ T5952] ptrace attach of "./syz-executor exec"[5214] was attempted by "./syz-executor exec"[5952] [ 174.777136][ T940] usbhid 5-1:0.0: can't add hid device: -71 [ 174.785327][ T940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 174.824115][ T940] usb 5-1: USB disconnect, device number 9 [ 175.135641][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 175.161619][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 175.182424][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 175.484869][ T5987] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 175.783585][ T940] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.943709][ T940] usb 3-1: device descriptor read/64, error -71 [ 176.273580][ T940] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.453651][ T940] usb 3-1: device descriptor read/64, error -71 [ 176.589396][ T940] usb usb3-port1: attempt power cycle [ 176.976784][ T5222] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 177.013575][ T940] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 177.065989][ T940] usb 3-1: device descriptor read/8, error -71 [ 177.155334][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 177.343638][ T940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.367836][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 177.479638][ T940] usb 3-1: device descriptor read/8, error -71 [ 178.938474][ T940] usb usb3-port1: unable to enumerate USB device [ 178.944070][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.960587][ T8] usb 4-1: config 1 has no interface number 1 [ 178.991673][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 179.043680][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.095488][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.112883][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.123721][ T8] usb 4-1: Product: syz [ 179.137836][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 179.143453][ T8] usb 4-1: Manufacturer: syz [ 179.172855][ T8] usb 4-1: SerialNumber: syz [ 179.243200][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 179.282266][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 179.309925][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 179.689379][ T6033] netlink: 'syz.3.188': attribute type 322 has an invalid length. [ 180.157042][ T6042] FAULT_INJECTION: forcing a failure. [ 180.157042][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.235380][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.198 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 180.246029][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.256112][ T6042] Call Trace: [ 180.259499][ T6042] [ 180.262451][ T6042] dump_stack_lvl+0x241/0x360 [ 180.267160][ T6042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.272376][ T6042] ? __pfx__printk+0x10/0x10 [ 180.276979][ T6042] ? snprintf+0xda/0x120 [ 180.281217][ T6042] should_fail_ex+0x3b0/0x4e0 [ 180.285892][ T6042] _copy_to_user+0x2f/0xb0 [ 180.290307][ T6042] simple_read_from_buffer+0xca/0x150 [ 180.295680][ T6042] proc_fail_nth_read+0x1e9/0x250 [ 180.300742][ T6042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.306286][ T6042] ? rw_verify_area+0x520/0x6b0 [ 180.311136][ T6042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.316772][ T6042] vfs_read+0x204/0xbc0 [ 180.320929][ T6042] ? __pfx_lock_release+0x10/0x10 [ 180.325959][ T6042] ? __pfx_vfs_read+0x10/0x10 [ 180.330631][ T6042] ? __fget_files+0x29/0x470 [ 180.335216][ T6042] ? __fget_files+0x3f6/0x470 [ 180.339896][ T6042] ksys_read+0x1a0/0x2c0 [ 180.344136][ T6042] ? __pfx_ksys_read+0x10/0x10 [ 180.348890][ T6042] ? do_syscall_64+0x100/0x230 [ 180.353653][ T6042] ? do_syscall_64+0xb6/0x230 [ 180.358327][ T6042] do_syscall_64+0xf3/0x230 [ 180.362824][ T6042] ? clear_bhb_loop+0x35/0x90 [ 180.367496][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.373391][ T6042] RIP: 0033:0x7f2d41b7643c [ 180.377815][ T6042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 180.397496][ T6042] RSP: 002b:00007f2d4299a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.405912][ T6042] RAX: ffffffffffffffda RBX: 00007f2d41d05f80 RCX: 00007f2d41b7643c [ 180.413895][ T6042] RDX: 000000000000000f RSI: 00007f2d4299a0b0 RDI: 0000000000000004 [ 180.421857][ T6042] RBP: 00007f2d4299a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.429820][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.437789][ T6042] R13: 000000000000000b R14: 00007f2d41d05f80 R15: 00007fff13dae0a8 [ 180.445767][ T6042] [ 181.282274][ T8] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 181.325465][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 181.325580][ T5225] Bluetooth: hci3: command 0x0406 tx timeout [ 181.331615][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 181.339687][ T5225] Bluetooth: hci2: command 0x0406 tx timeout [ 184.496154][ T8] usb 4-1: USB disconnect, device number 5 [ 185.241791][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 185.294373][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.748580][ T6086] Bluetooth: MGMT ver 1.23 [ 186.055374][ T6090] xt_CT: No such helper "pptp" [ 186.338917][ T6096] FAULT_INJECTION: forcing a failure. [ 186.338917][ T6096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.406946][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.4.216 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 186.417587][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 186.427663][ T6096] Call Trace: [ 186.430962][ T6096] [ 186.433910][ T6096] dump_stack_lvl+0x241/0x360 [ 186.438620][ T6096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.443840][ T6096] ? __pfx__printk+0x10/0x10 [ 186.448428][ T6096] ? __pfx_lock_release+0x10/0x10 [ 186.453453][ T6096] ? __lock_acquire+0x137a/0x2040 [ 186.458488][ T6096] should_fail_ex+0x3b0/0x4e0 [ 186.463164][ T6096] _copy_from_user+0x2f/0xe0 [ 186.467751][ T6096] do_ipv6_setsockopt+0x2f1/0x3630 [ 186.472861][ T6096] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 186.478407][ T6096] ? get_pid_task+0x23/0x1f0 [ 186.482983][ T6096] ? __pfx_lock_release+0x10/0x10 [ 186.488085][ T6096] ? kstrtouint_from_user+0x128/0x190 [ 186.493461][ T6096] ? mark_lock+0x9a/0x350 [ 186.497800][ T6096] ? __lock_acquire+0x137a/0x2040 [ 186.502838][ T6096] ? __pfx_lock_acquire+0x10/0x10 [ 186.507862][ T6096] ipv6_setsockopt+0x5c/0x1a0 [ 186.512539][ T6096] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 186.518430][ T6096] do_sock_setsockopt+0x3af/0x720 [ 186.523457][ T6096] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 186.529008][ T6096] ? __fget_files+0x29/0x470 [ 186.533678][ T6096] ? __fget_files+0x3f6/0x470 [ 186.538348][ T6096] __sys_setsockopt+0x1ae/0x250 [ 186.543188][ T6096] __x64_sys_setsockopt+0xb5/0xd0 [ 186.548207][ T6096] do_syscall_64+0xf3/0x230 [ 186.552698][ T6096] ? clear_bhb_loop+0x35/0x90 [ 186.557364][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.563249][ T6096] RIP: 0033:0x7fcffed779f9 [ 186.567671][ T6096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.587266][ T6096] RSP: 002b:00007fcfffb85048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.595669][ T6096] RAX: ffffffffffffffda RBX: 00007fcffef05f80 RCX: 00007fcffed779f9 [ 186.603621][ T6096] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 186.611572][ T6096] RBP: 00007fcfffb850a0 R08: 00000000000004b8 R09: 0000000000000000 [ 186.619524][ T6096] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 186.627480][ T6096] R13: 000000000000000b R14: 00007fcffef05f80 R15: 00007fffddc2d5c8 [ 186.635447][ T6096] [ 187.734346][ T5268] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 187.909434][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 187.957737][ T5268] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.977069][ T5268] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 188.022852][ T5268] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.060898][ T5268] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 188.070546][ T5268] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 188.123550][ T5268] usb 5-1: Manufacturer: syz [ 188.128199][ T5268] usb 5-1: SerialNumber: syz [ 188.243261][ T6119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.194401][ T5268] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 189.202342][ T5268] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input8 [ 189.245922][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.253544][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.260570][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.267557][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.274520][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.281459][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.288482][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.295396][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 189.302146][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 189.329713][ T5268] usb 5-1: USB disconnect, device number 10 [ 190.846121][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 192.286119][ T6170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.927717][ T6177] Zero length message leads to an empty skb [ 193.177647][ T5216] syz-executor (5216) used greatest stack depth: 18928 bytes left [ 193.306695][ T2574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.353524][ T5271] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 193.465778][ T2574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.548256][ T5271] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.578583][ T5271] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 193.596317][ T5271] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 193.598517][ T2574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.625608][ T5271] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 193.634986][ T5271] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 193.643262][ T5271] usb 1-1: Manufacturer: syz [ 193.653140][ T5271] usb 1-1: SerialNumber: syz [ 193.684984][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 193.742182][ T2574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.823559][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.889621][ T5271] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 193.916065][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.930626][ T5271] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input9 [ 193.941407][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.247'. [ 193.943441][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.973172][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 193.980179][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 193.987167][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 193.994144][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 194.001055][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 194.007990][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 194.014923][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 194.021821][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 194.028567][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 194.060563][ T8] usb 5-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 194.069976][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 194.077181][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.093548][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.108370][ T5271] usb 1-1: USB disconnect, device number 15 [ 194.114890][ T9] usb 2-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=d5.48 [ 194.125879][ T2574] bridge_slave_1: left allmulticast mode [ 194.131140][ T8] usb 5-1: SerialNumber: syz [ 194.138509][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.150504][ T6206] [U] [ 194.153751][ T6206] [U] \ÏfŸN#k·v”„í42yÛìÐláÞ% [ 194.158640][ T6206] [U] ˆŠ [ 194.161583][ T6206] [U] [ 194.164265][ T6206] [U] [ 194.167063][ T9] usb 2-1: Product: syz [ 194.171250][ T9] usb 2-1: Manufacturer: syz [ 194.174750][ T2574] bridge_slave_1: left promiscuous mode [ 194.181671][ T6206] [U] [ 194.182959][ T9] usb 2-1: SerialNumber: syz [ 194.184362][ T6206] [U] [ 194.184419][ T6206] [U] [ 194.184446][ T6206] [U] [ 194.200013][ T2574] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.208645][ T6206] [U] [ 194.211378][ T6206] [U] [ 194.214085][ T6206] [U] [ 194.227603][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.238571][ T2574] bridge_slave_0: left allmulticast mode [ 194.244755][ T2574] bridge_slave_0: left promiscuous mode [ 194.245871][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.250985][ T2574] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.266717][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.280461][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.289862][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 194.297836][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.332860][ T9] usb 2-1: config 0 descriptor?? [ 194.345353][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 194.363091][ T9] em28xx 2-1:0.0: Video interface 0 found: [ 194.444337][ T8] usb 5-1: 0:12 : does not exist [ 194.549544][ T8] usb 5-1: USB disconnect, device number 11 [ 194.555867][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.597950][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.608788][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.618035][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.670896][ T6204] [U] [ 194.715431][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.759225][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.998637][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.002534][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 195.126497][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.147882][ T9] em28xx 2-1:0.0: board has no eeprom [ 195.228669][ T9] em28xx 2-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 195.250704][ T9] em28xx 2-1:0.0: analog set to bulk mode. [ 195.256803][ T8] em28xx 2-1:0.0: Registering V4L2 extension [ 195.269664][ T9] usb 2-1: USB disconnect, device number 7 [ 195.296766][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 195.470787][ T8] em28xx 2-1:0.0: Config register raw data: 0xffffffed [ 195.493515][ T8] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 195.500582][ T8] em28xx 2-1:0.0: No AC97 audio processor [ 195.511721][ T8] em28xx 2-1:0.0: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 195.529478][ T8] em28xx 2-1:0.0: Binding DVB extension [ 195.542463][ T8] em28xx 2-1:0.0: no endpoint for DVB mode and transfer type 0 [ 195.568090][ T8] em28xx 2-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 195.582364][ T8] em28xx 2-1:0.0: Remote control support is not available for this card. [ 195.591172][ T9] em28xx 2-1:0.0: Closing input extension [ 195.611571][ T9] em28xx 2-1:0.0: Freeing device [ 196.463989][ T5234] Bluetooth: hci2: command tx timeout [ 196.488187][ T2574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.554005][ T2574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.620688][ T2574] bond0 (unregistering): Released all slaves [ 196.713467][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 198.309810][ T6241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.523682][ T5234] Bluetooth: hci2: command tx timeout [ 198.566969][ T2574] hsr_slave_0: left promiscuous mode [ 198.596253][ T2574] hsr_slave_1: left promiscuous mode [ 198.625595][ T2574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.640776][ T2574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.660688][ T2574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.678758][ T2574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.776149][ T2574] veth1_macvtap: left promiscuous mode [ 198.802238][ T2574] veth0_macvtap: left promiscuous mode [ 198.811466][ T2574] veth1_vlan: left promiscuous mode [ 198.834143][ T2574] veth0_vlan: left promiscuous mode [ 200.123548][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 200.223789][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 200.318033][ T5268] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.348760][ T9] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.370781][ T9] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.390847][ T2574] team0 (unregistering): Port device team_slave_1 removed [ 200.392670][ T9] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.437242][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 200.445050][ T9] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 200.481613][ T9] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 200.488922][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 200.500708][ T9] usb 1-1: Manufacturer: syz [ 200.507690][ T5268] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.518532][ T5268] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.523509][ T9] usb 1-1: SerialNumber: syz [ 200.538072][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 200.551700][ T5268] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.571246][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.586619][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.597008][ T2574] team0 (unregistering): Port device team_slave_0 removed [ 200.604319][ T5234] Bluetooth: hci2: command tx timeout [ 200.624747][ T25] usb 4-1: config 0 descriptor?? [ 200.631666][ T5268] usb 5-1: config 0 descriptor?? [ 200.646318][ T25] smsusb:smsusb_probe: board id=8, interface number 0 [ 200.675131][ T25] smsusb:smsusb_probe: Device initialized with return code -19 [ 200.766210][ T9] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 200.800179][ T9] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input10 [ 200.867643][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.874665][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.881653][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.888622][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.895605][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.902634][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.909645][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.916669][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 200.923549][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 201.761450][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.774837][ T9] usb 1-1: USB disconnect, device number 16 [ 201.818241][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.240799][ T6275] random: crng reseeded on system resumption [ 202.370620][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.380228][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.477019][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 202.687113][ T5234] Bluetooth: hci2: command tx timeout [ 202.724278][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.801406][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.812396][ T6208] bridge_slave_0: entered allmulticast mode [ 202.825732][ T6208] bridge_slave_0: entered promiscuous mode [ 202.839439][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.899627][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.933338][ T6208] bridge_slave_1: entered allmulticast mode [ 202.943485][ T5224] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.960472][ T6208] bridge_slave_1: entered promiscuous mode [ 202.976045][ T25] usb 4-1: USB disconnect, device number 6 [ 203.052848][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 203.124209][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.172084][ T5224] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.197610][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.211325][ T5224] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 203.230291][ T5224] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.277128][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.346578][ T6208] team0: Port device team_slave_0 added [ 203.366403][ T6284] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 203.386256][ T5224] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.405917][ T6208] team0: Port device team_slave_1 added [ 203.726941][ T5268] usb 5-1: USB disconnect, device number 12 [ 203.739175][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.748557][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.573536][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.660136][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.681704][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.493335][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.563582][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 205.634974][ T5224] usb 2-1: USB disconnect, device number 8 [ 205.706348][ T6208] hsr_slave_0: entered promiscuous mode [ 205.724546][ T9] usb 1-1: device descriptor read/64, error -71 [ 205.732184][ T6208] hsr_slave_1: entered promiscuous mode [ 206.013494][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 206.193530][ T9] usb 1-1: device descriptor read/64, error -71 [ 206.313973][ T9] usb usb1-port1: attempt power cycle [ 206.387911][ T6208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.403319][ T6208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.432587][ T6208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.491792][ T6208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.830156][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.895410][ T6325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.915139][ T9] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 206.920944][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.959396][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.966633][ T5224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.015092][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.022246][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.083677][ T9] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 207.149018][ T9] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.211252][ T9] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 207.303226][ T9] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.326467][ T9] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 207.357531][ T9] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 207.388088][ T9] usb 1-1: Manufacturer: syz [ 207.410579][ T9] usb 1-1: SerialNumber: syz [ 207.574562][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.643191][ T9] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 207.694312][ T9] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input11 [ 207.715632][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.722662][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.729663][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.736749][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.743786][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.750797][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.757829][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.764869][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 207.771666][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 207.798731][ T9] usb 1-1: USB disconnect, device number 20 [ 207.836175][ T6208] veth0_vlan: entered promiscuous mode [ 207.867674][ T6208] veth1_vlan: entered promiscuous mode [ 207.966102][ T6208] veth0_macvtap: entered promiscuous mode [ 207.994862][ T6208] veth1_macvtap: entered promiscuous mode [ 208.058918][ T6334] FAULT_INJECTION: forcing a failure. [ 208.058918][ T6334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.081430][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.100080][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.1.277 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 208.110706][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.120758][ T6334] Call Trace: [ 208.124037][ T6334] [ 208.126954][ T6334] dump_stack_lvl+0x241/0x360 [ 208.131632][ T6334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.136824][ T6334] ? __pfx__printk+0x10/0x10 [ 208.141407][ T6334] ? __pfx_lock_release+0x10/0x10 [ 208.146428][ T6334] should_fail_ex+0x3b0/0x4e0 [ 208.151098][ T6334] _copy_from_user+0x2f/0xe0 [ 208.155679][ T6334] copy_msghdr_from_user+0xae/0x680 [ 208.160875][ T6334] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 208.166693][ T6334] __sys_sendmsg+0x23d/0x3a0 [ 208.171284][ T6334] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.176385][ T6334] ? vfs_write+0x7c4/0xc90 [ 208.180822][ T6334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.187141][ T6334] ? do_syscall_64+0x100/0x230 [ 208.191899][ T6334] ? do_syscall_64+0xb6/0x230 [ 208.196569][ T6334] do_syscall_64+0xf3/0x230 [ 208.201072][ T6334] ? clear_bhb_loop+0x35/0x90 [ 208.205743][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.211633][ T6334] RIP: 0033:0x7f55b7f779f9 [ 208.216040][ T6334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.235651][ T6334] RSP: 002b:00007f55b8cbe048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.244067][ T6334] RAX: ffffffffffffffda RBX: 00007f55b8105f80 RCX: 00007f55b7f779f9 [ 208.252029][ T6334] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 208.260025][ T6334] RBP: 00007f55b8cbe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.267989][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.275954][ T6334] R13: 000000000000000b R14: 00007f55b8105f80 R15: 00007ffdfed71958 [ 208.283926][ T6334] [ 208.287318][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.305252][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.362424][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.395239][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.423409][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.433300][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.435426][ T6341] FAULT_INJECTION: forcing a failure. [ 208.435426][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 208.475455][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.503532][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.3.280 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 208.514165][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.524244][ T6341] Call Trace: [ 208.527539][ T6341] [ 208.530484][ T6341] dump_stack_lvl+0x241/0x360 [ 208.535198][ T6341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.540422][ T6341] ? __pfx__printk+0x10/0x10 [ 208.545056][ T6341] ? fs_reclaim_acquire+0x93/0x140 [ 208.550190][ T6341] ? __pfx___might_resched+0x10/0x10 [ 208.555503][ T6341] should_fail_ex+0x3b0/0x4e0 [ 208.560213][ T6341] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 208.565958][ T6341] should_failslab+0xac/0x100 [ 208.570662][ T6341] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 208.576467][ T6341] __kmalloc_noprof+0xd8/0x400 [ 208.581254][ T6341] ? kfree+0x4e/0x360 [ 208.585262][ T6341] tomoyo_realpath_from_path+0xcf/0x5e0 [ 208.590926][ T6341] tomoyo_path_number_perm+0x23a/0x880 [ 208.596408][ T6341] ? tomoyo_path_number_perm+0x208/0x880 [ 208.602051][ T6341] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.608082][ T6341] ? __fget_files+0x29/0x470 [ 208.612687][ T6341] ? __fget_files+0x3f6/0x470 [ 208.617371][ T6341] ? __fget_files+0x29/0x470 [ 208.621982][ T6341] security_file_ioctl+0x75/0xb0 [ 208.626939][ T6341] __se_sys_ioctl+0x47/0x170 [ 208.631552][ T6341] do_syscall_64+0xf3/0x230 [ 208.636071][ T6341] ? clear_bhb_loop+0x35/0x90 [ 208.640760][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.646672][ T6341] RIP: 0033:0x7fb0001779f9 [ 208.651097][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.670717][ T6341] RSP: 002b:00007fb000fab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.679152][ T6341] RAX: ffffffffffffffda RBX: 00007fb000305f80 RCX: 00007fb0001779f9 [ 208.687135][ T6341] RDX: 0000000020000080 RSI: 00000000000089ea RDI: 0000000000000005 [ 208.695118][ T6341] RBP: 00007fb000fab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.703099][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.711079][ T6341] R13: 000000000000000b R14: 00007fb000305f80 R15: 00007ffeeea4e848 [ 208.719078][ T6341] [ 208.726180][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.777669][ T6341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.783938][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.798206][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.829692][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.859438][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.872011][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.888068][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.919693][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.942869][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.085653][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.504890][ T6208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.567602][ T6208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.603987][ T6208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.632496][ T6208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.732043][ T6360] overlayfs: failed to resolve './file1': -2 [ 209.916595][ T980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.013803][ T6365] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 210.246667][ T980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.313941][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 210.473870][ T46] usb 4-1: device descriptor read/64, error -71 [ 210.637627][ T2574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.706979][ T2574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.527536][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 212.683776][ T46] usb 4-1: device descriptor read/64, error -71 [ 212.698504][ T6375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.863882][ T46] usb usb4-port1: attempt power cycle [ 213.463604][ T5224] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 214.006126][ T5224] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.021096][ T5224] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 214.034752][ T5224] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.047628][ T5224] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 214.059026][ T5224] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 214.068023][ T5224] usb 1-1: Manufacturer: syz [ 214.075486][ T5224] usb 1-1: SerialNumber: syz [ 214.323254][ T5224] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 214.363876][ T5224] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input12 [ 214.383669][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.397175][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.404624][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.411666][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.418622][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.425570][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.432512][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.439479][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.446404][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 214.453247][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 214.472385][ T5224] usb 1-1: USB disconnect, device number 21 [ 214.643555][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 214.659128][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.689782][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.701456][ T25] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 214.711058][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.726662][ T25] usb 4-1: config 0 descriptor?? [ 215.183171][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.193959][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.237743][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 215.259172][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 215.296013][ T25] usb 4-1: USB disconnect, device number 10 [ 215.603867][ T6420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.663588][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 215.864089][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 215.905630][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.958159][ T8] usb 5-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=d5.48 [ 216.014010][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.069621][ T8] usb 5-1: Product: syz [ 216.088858][ T8] usb 5-1: Manufacturer: syz [ 216.105348][ T8] usb 5-1: SerialNumber: syz [ 216.145957][ T6430] FAULT_INJECTION: forcing a failure. [ 216.145957][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.160941][ T8] usb 5-1: config 0 descriptor?? [ 216.205791][ T8] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 216.248767][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.1.303 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 216.259606][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 216.269674][ T6430] Call Trace: [ 216.272970][ T6430] [ 216.275916][ T6430] dump_stack_lvl+0x241/0x360 [ 216.280630][ T6430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.285865][ T6430] ? __pfx__printk+0x10/0x10 [ 216.290493][ T6430] ? snprintf+0xda/0x120 [ 216.294763][ T6430] should_fail_ex+0x3b0/0x4e0 [ 216.299471][ T6430] _copy_to_user+0x2f/0xb0 [ 216.303912][ T6430] simple_read_from_buffer+0xca/0x150 [ 216.309750][ T6430] proc_fail_nth_read+0x1e9/0x250 [ 216.314804][ T6430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.320377][ T6430] ? rw_verify_area+0x520/0x6b0 [ 216.325249][ T6430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.330825][ T6430] vfs_read+0x204/0xbc0 [ 216.335001][ T6430] ? __pfx_lock_release+0x10/0x10 [ 216.340055][ T6430] ? __pfx_vfs_read+0x10/0x10 [ 216.344754][ T6430] ? __fget_files+0x29/0x470 [ 216.349361][ T6430] ? __fget_files+0x3f6/0x470 [ 216.354047][ T6430] ksys_read+0x1a0/0x2c0 [ 216.358288][ T6430] ? __pfx_ksys_read+0x10/0x10 [ 216.363041][ T6430] ? do_syscall_64+0x100/0x230 [ 216.367806][ T6430] ? do_syscall_64+0xb6/0x230 [ 216.372483][ T6430] do_syscall_64+0xf3/0x230 [ 216.376983][ T6430] ? clear_bhb_loop+0x35/0x90 [ 216.381741][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.387631][ T6430] RIP: 0033:0x7f55b7f7643c [ 216.392037][ T6430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 216.411636][ T6430] RSP: 002b:00007f55b8cbe040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.420047][ T6430] RAX: ffffffffffffffda RBX: 00007f55b8105f80 RCX: 00007f55b7f7643c [ 216.428011][ T6430] RDX: 000000000000000f RSI: 00007f55b8cbe0b0 RDI: 0000000000000006 [ 216.435970][ T6430] RBP: 00007f55b8cbe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 216.443946][ T6430] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 216.451921][ T6430] R13: 000000000000000b R14: 00007f55b8105f80 R15: 00007ffdfed71958 [ 216.459907][ T6430] [ 216.479471][ T8] em28xx 5-1:0.0: Video interface 0 found: [ 216.590514][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.657235][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.694648][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.711351][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.803833][ T8] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 217.204622][ T8] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 217.217058][ T8] em28xx 5-1:0.0: board has no eeprom [ 217.324040][ T8] em28xx 5-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 217.380004][ T8] em28xx 5-1:0.0: analog set to bulk mode. [ 217.483962][ T5271] em28xx 5-1:0.0: Registering V4L2 extension [ 217.663528][ T8] usb 5-1: USB disconnect, device number 13 [ 217.670550][ T8] em28xx 5-1:0.0: Disconnecting em28xx [ 222.311998][ T5271] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 222.328412][ T5271] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 222.354065][ T5271] em28xx 5-1:0.0: No AC97 audio processor [ 222.374449][ T5271] em28xx 5-1:0.0: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 222.416103][ T5271] em28xx 5-1:0.0: Binding DVB extension [ 222.435290][ T5271] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 222.443917][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 222.500897][ T5271] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 222.562257][ T5271] em28xx 5-1:0.0: Remote control support is not available for this card. [ 222.587446][ T8] em28xx 5-1:0.0: Closing input extension [ 222.628561][ T8] em28xx 5-1:0.0: Freeing device [ 225.212238][ T6470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.978882][ T6486] fuse: Unknown parameter 'ÿ0x000000000000000d' [ 226.156512][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.167322][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.176256][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.191062][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.201984][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.212344][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.411318][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.283637][ T5234] Bluetooth: hci1: command tx timeout [ 230.382291][ T5234] Bluetooth: hci1: command tx timeout [ 230.843201][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.943244][ T6514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.951866][ T5268] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 231.010167][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.135096][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.166107][ T5268] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 231.198890][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.239095][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.311211][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.354115][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.377724][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.394723][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.408693][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.420637][ T5268] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.431334][ T5268] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 231.443040][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.488680][ T5268] pwc: Logitech QuickCam detected (reserved ID). [ 231.549240][ T5268] pwc: Warning: more than 1 configuration available. [ 231.701635][ T11] bridge_slave_1: left allmulticast mode [ 231.716775][ T11] bridge_slave_1: left promiscuous mode [ 231.745030][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.776380][ T11] bridge_slave_0: left allmulticast mode [ 231.807684][ T11] bridge_slave_0: left promiscuous mode [ 231.832204][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.960290][ T5268] pwc: send_video_command error -71 [ 231.972644][ T5268] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 231.986249][ T5268] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71 [ 232.045931][ T5268] usb 2-1: USB disconnect, device number 9 [ 232.443905][ T5234] Bluetooth: hci1: command tx timeout [ 232.472389][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 232.772038][ T5234] Bluetooth: hci2: ISO packet for unknown connection handle 1741 [ 232.889535][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.917288][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.932225][ T11] bond0 (unregistering): Released all slaves [ 232.978332][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 233.248502][ T5268] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 233.290733][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.298378][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.305983][ T6488] bridge_slave_0: entered allmulticast mode [ 233.314428][ T5224] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 233.440560][ T6488] bridge_slave_0: entered promiscuous mode [ 233.497036][ T6542] openvswitch: netlink: Unknown nsh attribute 0 [ 233.524631][ T5268] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 233.555659][ T5224] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 233.782468][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 233.933077][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 233.946073][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.958200][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.965942][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.975324][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 234.011958][ T6488] bridge_slave_1: entered allmulticast mode [ 234.051014][ T6488] bridge_slave_1: entered promiscuous mode [ 234.096439][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 234.106859][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.122038][ T5268] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 234.130876][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 234.141695][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 234.152276][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.171697][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 234.186355][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 234.197074][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.237212][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 234.260619][ T5268] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 234.268900][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 234.292224][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 234.312145][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.339527][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 234.355764][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 234.384228][ T5224] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 234.390503][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.410169][ T5224] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 234.418887][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.428389][ T5268] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.440327][ T5268] usb 3-1: string descriptor 0 read error: -22 [ 234.451443][ T5268] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 234.463451][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.471760][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.528161][ T5234] Bluetooth: hci1: command tx timeout [ 234.839182][ T5224] pwc: Logitech QuickCam detected (reserved ID). [ 234.852049][ T5224] pwc: Warning: more than 1 configuration available. [ 234.885462][ T5268] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 235.353689][ T5271] usb 3-1: USB disconnect, device number 11 [ 235.425437][ T11] hsr_slave_0: left promiscuous mode [ 235.448267][ T11] hsr_slave_1: left promiscuous mode [ 235.466070][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.473790][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.482084][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.489949][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.527068][ T11] veth1_macvtap: left promiscuous mode [ 235.532848][ T11] veth0_macvtap: left promiscuous mode [ 235.544011][ T11] veth1_vlan: left promiscuous mode [ 235.549388][ T11] veth0_vlan: left promiscuous mode [ 235.645154][ T5224] pwc: send_video_command error -71 [ 235.650411][ T5224] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 235.678978][ T5224] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71 [ 235.703519][ T5311] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 235.706836][ T5224] usb 2-1: USB disconnect, device number 10 [ 235.923668][ T5311] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 235.957619][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.031393][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.066213][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.079342][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.124998][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.141490][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.198963][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.235712][ T5311] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 236.269725][ T5311] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 236.300150][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.403753][ T5311] pwc: Logitech QuickCam detected (reserved ID). [ 236.457572][ T5311] pwc: Warning: more than 1 configuration available. [ 241.743626][ T5311] pwc: send_video_command error -110 [ 241.936092][ T5311] pwc: Failed to set video mode VGA@30 fps; return code = -110 [ 241.953523][ T5311] Philips webcam 5-1:250.0: probe with driver Philips webcam failed with error -110 [ 242.137262][ T5311] usb 5-1: USB disconnect, device number 14 [ 243.273236][ T6579] FAULT_INJECTION: forcing a failure. [ 243.273236][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 243.293748][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.1.349 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 243.304389][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 243.314470][ T6579] Call Trace: [ 243.317759][ T6579] [ 243.320695][ T6579] dump_stack_lvl+0x241/0x360 [ 243.325406][ T6579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.330625][ T6579] ? __pfx__printk+0x10/0x10 [ 243.335230][ T6579] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 243.340790][ T6579] ? __pfx___might_resched+0x10/0x10 [ 243.346098][ T6579] should_fail_ex+0x3b0/0x4e0 [ 243.350789][ T6579] ? getname_flags+0xb7/0x540 [ 243.355502][ T6579] should_failslab+0xac/0x100 [ 243.360194][ T6579] ? getname_flags+0xb7/0x540 [ 243.364887][ T6579] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 243.370281][ T6579] getname_flags+0xb7/0x540 [ 243.374809][ T6579] do_sys_openat2+0xd2/0x1d0 [ 243.379421][ T6579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.385427][ T6579] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.390646][ T6579] ? __fget_files+0x3f6/0x470 [ 243.395436][ T6579] __x64_sys_open+0x225/0x270 [ 243.400147][ T6579] ? __pfx___x64_sys_open+0x10/0x10 [ 243.405375][ T6579] ? __secure_computing+0x125/0x370 [ 243.410599][ T6579] do_syscall_64+0xf3/0x230 [ 243.415125][ T6579] ? clear_bhb_loop+0x35/0x90 [ 243.419819][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.425743][ T6579] RIP: 0033:0x7f55b7f779f9 [ 243.430176][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.449808][ T6579] RSP: 002b:00007f55b8cbe048 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 243.458255][ T6579] RAX: ffffffffffffffda RBX: 00007f55b8105f80 RCX: 00007f55b7f779f9 [ 243.466259][ T6579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000209e1000 [ 243.474248][ T6579] RBP: 00007f55b8cbe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 243.482244][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.490238][ T6579] R13: 000000000000000b R14: 00007f55b8105f80 R15: 00007ffdfed71958 [ 243.498246][ T6579] [ 243.501316][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.589616][ T11] team0 (unregistering): Port device team_slave_1 removed [ 243.714043][ T11] team0 (unregistering): Port device team_slave_0 removed [ 243.924919][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 244.721458][ T6488] team0: Port device team_slave_0 added [ 244.876836][ T6488] team0: Port device team_slave_1 added [ 244.915117][ T5234] Bluetooth: hci5: ISO packet for unknown connection handle 1741 [ 245.009761][ T6584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.060965][ T6584] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 245.076341][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.094918][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.120907][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.129226][ T6584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.141622][ T6584] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 245.181979][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.223543][ T5268] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 245.294521][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.304895][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.338745][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.412912][ T6584] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 245.433572][ T6584] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 245.455016][ T5268] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 245.483584][ T25] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 245.492918][ T6584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.517569][ T6584] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 245.541372][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 245.562347][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.577634][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 245.589116][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 245.601880][ T5268] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 245.609807][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 245.620011][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.630487][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 245.643118][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 245.694947][ T5268] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 245.709157][ T6488] hsr_slave_0: entered promiscuous mode [ 245.712653][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 245.714989][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 245.732485][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.745423][ T25] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.756423][ T6488] hsr_slave_1: entered promiscuous mode [ 245.763296][ T25] usb 3-1: config 1 has no interface number 1 [ 245.770173][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 245.770201][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.793331][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 245.793951][ T6488] Cannot create hsr debugfs directory [ 245.817988][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 245.831657][ T5268] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 245.845933][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.854153][ T6584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.860943][ T5268] usb 2-1: string descriptor 0 read error: -22 [ 245.865235][ T6584] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 245.870800][ T25] usb 3-1: string descriptor 0 read error: -22 [ 245.882521][ T5268] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.901523][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.910991][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.919297][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.945109][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 245.961497][ T5268] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 245.972476][ T25] usb 3-1: low speed audio streaming not supported [ 246.016175][ T8] usb 4-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 246.056820][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.077002][ T8] usb 4-1: Product: syz [ 246.081202][ T8] usb 4-1: Manufacturer: syz [ 246.086790][ T8] usb 4-1: SerialNumber: syz [ 246.138605][ T8] usb 4-1: config 0 descriptor?? [ 246.160021][ T8] usb-storage 4-1:0.0: USB Mass Storage device detected [ 246.219007][ T25] usb 2-1: USB disconnect, device number 11 [ 246.823945][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.876768][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.968786][ T8] usb 3-1: USB disconnect, device number 12 [ 247.476682][ T6488] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.509805][ T6488] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.523099][ T6488] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.545380][ T6488] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.613488][ T5268] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 247.879136][ T5268] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.937032][ T5268] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 247.959050][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.988089][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.013188][ T5268] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 248.032622][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.039804][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.051974][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.059141][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.106611][ T5268] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 248.169845][ T5268] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 248.230906][ T5268] usb 5-1: Manufacturer: syz [ 248.265434][ T5268] usb 5-1: SerialNumber: syz [ 248.500545][ T25] usb 4-1: USB disconnect, device number 11 [ 248.528037][ T5268] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 248.587283][ T5268] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input13 [ 248.599947][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.607000][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.614039][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.614939][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.621045][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.634928][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.641850][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.648769][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.655708][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 248.662455][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 248.684809][ T5268] usb 5-1: USB disconnect, device number 15 [ 248.845985][ T6488] veth0_vlan: entered promiscuous mode [ 248.869583][ T6488] veth1_vlan: entered promiscuous mode [ 248.961131][ T6488] veth0_macvtap: entered promiscuous mode [ 248.978718][ T6488] veth1_macvtap: entered promiscuous mode [ 249.022672][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.041627][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.063342][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.078383][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.114782][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.148613][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.190832][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.240718][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.269068][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.301171][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.349252][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.361549][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.378944][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.449679][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.480990][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.512892][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.562232][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.593842][ T6646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.635026][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.218140][ T6488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.411638][ T6488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.446137][ T6488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.464316][ T6488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.923755][ T8] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 251.320416][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 251.366275][ T5218] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 251.486337][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 251.527198][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.541847][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.550943][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 251.562409][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.572215][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.596650][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 251.614752][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 251.635646][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.646178][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 251.663449][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.676404][ T5218] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 251.697576][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.705856][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.717663][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.728287][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 251.735847][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 251.765801][ T5218] usb 4-1: config 0 descriptor?? [ 251.787917][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.828634][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 251.865612][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.922771][ T8] usb 2-1: string descriptor 0 read error: -22 [ 251.929936][ T8] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 251.950187][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.016916][ T8] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 252.091200][ T6667] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 252.140014][ T5218] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 252.152550][ T5218] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 252.161922][ T5218] [drm:udl_init] *ERROR* Selecting channel failed [ 252.192048][ T5218] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 252.200237][ T5218] [drm] Initialized udl on minor 2 [ 252.217727][ T5270] usb 2-1: USB disconnect, device number 12 [ 252.232990][ T5218] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 252.244756][ T5268] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 252.248846][ T5218] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 252.263824][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 252.279552][ T5218] usb 4-1: USB disconnect, device number 12 [ 252.285773][ T943] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 252.304374][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 252.453460][ T5268] usb 1-1: Using ep0 maxpacket: 8 [ 252.464733][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 252.486511][ T943] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 252.486699][ T5268] usb 1-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=d5.48 [ 252.504049][ T943] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 252.521515][ T943] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 252.524275][ T5268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.545614][ T5268] usb 1-1: Product: syz [ 252.549824][ T5268] usb 1-1: Manufacturer: syz [ 252.560984][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.562264][ T5268] usb 1-1: SerialNumber: syz [ 252.597635][ T5268] usb 1-1: config 0 descriptor?? [ 252.628478][ T5268] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 252.643454][ T5268] em28xx 1-1:0.0: Video interface 0 found: [ 252.824753][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.834354][ T6664] tipc: Started in network mode [ 252.847311][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.851273][ T6664] tipc: Node identity 080211, cluster identity 4711 [ 252.878948][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.887811][ T6664] tipc: Enabled bearer , priority 10 [ 252.903688][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.950583][ T943] usb 3-1: USB disconnect, device number 13 [ 253.173640][ T5270] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 253.283023][ T5268] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 253.453820][ T5268] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 253.520991][ T5268] em28xx 1-1:0.0: board has no eeprom [ 253.633587][ T5268] em28xx 1-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 253.740498][ T5268] em28xx 1-1:0.0: analog set to bulk mode. [ 253.804433][ T5224] em28xx 1-1:0.0: Registering V4L2 extension [ 253.849153][ T5268] usb 1-1: USB disconnect, device number 22 [ 253.911086][ T5268] em28xx 1-1:0.0: Disconnecting em28xx [ 254.099342][ T5272] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 254.123013][ T8] tipc: Node number set to 134353152 [ 254.180680][ T6691] FAULT_INJECTION: forcing a failure. [ 254.180680][ T6691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.193897][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz.1.379 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 [ 254.204508][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 254.214580][ T6691] Call Trace: [ 254.217872][ T6691] [ 254.220815][ T6691] dump_stack_lvl+0x241/0x360 [ 254.225516][ T6691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.230736][ T6691] ? __pfx__printk+0x10/0x10 [ 254.235398][ T6691] ? __pfx_lock_release+0x10/0x10 [ 254.240462][ T6691] should_fail_ex+0x3b0/0x4e0 [ 254.245169][ T6691] _copy_from_user+0x2f/0xe0 [ 254.249780][ T6691] copy_msghdr_from_user+0xae/0x680 [ 254.255002][ T6691] ? __pfx___might_resched+0x10/0x10 [ 254.260329][ T6691] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 254.266186][ T6691] ? __might_fault+0xaa/0x120 [ 254.270902][ T6691] __sys_sendmmsg+0x374/0x740 [ 254.275625][ T6691] ? __pfx___sys_sendmmsg+0x10/0x10 [ 254.280880][ T6691] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 254.286801][ T6691] ? ksys_write+0x23e/0x2c0 [ 254.291491][ T6691] ? __pfx_lock_release+0x10/0x10 [ 254.296544][ T6691] ? vfs_write+0x7c4/0xc90 [ 254.300983][ T6691] ? __mutex_unlock_slowpath+0x21d/0x750 [ 254.306635][ T6691] ? __pfx_vfs_write+0x10/0x10 [ 254.311432][ T6691] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.317434][ T6691] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.323877][ T6691] ? do_syscall_64+0x100/0x230 [ 254.328674][ T6691] __x64_sys_sendmmsg+0xa0/0xb0 [ 254.330131][ T5224] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 254.333529][ T6691] do_syscall_64+0xf3/0x230 [ 254.333557][ T6691] ? clear_bhb_loop+0x35/0x90 [ 254.333579][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.333604][ T6691] RIP: 0033:0x7f55b7f779f9 [ 254.333622][ T6691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.333638][ T6691] RSP: 002b:00007f55b8cbe048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 254.333660][ T6691] RAX: ffffffffffffffda RBX: 00007f55b8105f80 RCX: 00007f55b7f779f9 [ 254.333674][ T6691] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 254.333688][ T6691] RBP: 00007f55b8cbe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 254.333699][ T6691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.333710][ T6691] R13: 000000000000000b R14: 00007f55b8105f80 R15: 00007ffdfed71958 [ 254.333738][ T6691] [ 254.333831][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.361568][ T5270] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.388667][ T5224] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 254.424954][ T5270] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.472565][ T5270] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 254.514624][ T5270] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 254.523943][ T5224] em28xx 1-1:0.0: No AC97 audio processor [ 254.523970][ T5224] em28xx 1-1:0.0: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 254.524061][ T5224] em28xx 1-1:0.0: Binding DVB extension [ 254.525973][ T5224] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0 [ 255.005621][ T6697] overlayfs: failed to resolve './file1': -2 [ 255.021423][ T5224] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 255.029915][ T5224] em28xx 1-1:0.0: Remote control support is not available for this card. [ 256.209147][ T5272] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.234140][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.240501][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.255322][ T5272] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.313589][ T5268] em28xx 1-1:0.0: Closing input extension [ 256.320136][ T5272] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.335108][ T5268] em28xx 1-1:0.0: Freeing device [ 256.340332][ T5270] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 256.357635][ T5272] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 256.373521][ T940] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 256.381796][ T5272] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 256.391060][ T5272] usb 5-1: Manufacturer: syz [ 256.397006][ T5272] usb 5-1: SerialNumber: syz [ 256.423243][ T5270] usb 4-1: Manufacturer: syz [ 256.437438][ T5272] usb 5-1: can't set config #36, error -71 [ 256.463427][ T5270] usb 4-1: SerialNumber: syz [ 256.468804][ T5272] usb 5-1: USB disconnect, device number 16 [ 256.563562][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 256.664852][ T940] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 256.764108][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.772442][ T940] usb 2-1: Product: syz [ 256.780165][ T940] usb 2-1: Manufacturer: syz [ 256.785466][ T940] usb 2-1: SerialNumber: syz [ 256.792628][ T940] usb 2-1: config 0 descriptor?? [ 256.805769][ T5270] usb 4-1: can't set config #36, error -71 [ 257.113004][ T5270] usb 4-1: USB disconnect, device number 13 [ 257.893524][ T5268] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 257.955958][ T6714] tun0: tun_chr_ioctl cmd 1074025676 [ 257.962503][ T6714] tun0: owner set to 0 [ 258.198198][ T5224] usb 2-1: USB disconnect, device number 13 [ 258.234903][ T5268] usb 3-1: Using ep0 maxpacket: 16 [ 258.247963][ T5268] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 258.257013][ T5268] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.266255][ T5268] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.303601][ T5268] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 258.333492][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.357406][ T5268] usb 3-1: config 0 has no interface number 0 [ 258.486693][ T5268] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 258.511959][ T5268] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 258.683601][ T5270] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 259.381402][ T5268] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 259.399748][ T5268] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.413412][ T5268] usb 3-1: config 0 interface 125 has no altsetting 0 [ 259.420211][ T5268] usb 3-1: config 0 interface 125 has no altsetting 2 [ 259.429994][ T5268] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 259.443816][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.475452][ T5268] usb 3-1: Product: syz [ 259.479668][ T5268] usb 3-1: Manufacturer: syz [ 259.518714][ T5268] usb 3-1: SerialNumber: syz [ 259.531426][ T5268] usb 3-1: config 0 descriptor?? [ 259.544974][ T5268] usb 3-1: selecting invalid altsetting 2 [ 259.623654][ T5270] usb 5-1: Using ep0 maxpacket: 8 [ 259.634206][ T5270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.652789][ T5270] usb 5-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=d5.48 [ 259.663467][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.685378][ T5270] usb 5-1: Product: syz [ 259.696380][ T5270] usb 5-1: Manufacturer: syz [ 259.703801][ T5270] usb 5-1: SerialNumber: syz [ 259.729102][ T5270] usb 5-1: config 0 descriptor?? [ 259.745878][ C1] usb 3-1: async_complete: urb error -71 [ 259.751594][ C1] usb 3-1: async_complete: urb error -71 [ 259.757324][ C1] usb 3-1: async_complete: urb error -71 [ 259.763058][ C1] usb 3-1: async_complete: urb error -71 [ 259.763309][ T5270] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 259.789743][ T5311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.798224][ T5270] em28xx 5-1:0.0: Video interface 0 found: [ 259.811419][ T5268] get_1284_register: usb error -71 [ 259.823497][ T5268] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 259.875153][ T5268] usb 3-1: USB disconnect, device number 14 [ 259.971568][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.981606][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.993742][ T5311] usb 2-1: Using ep0 maxpacket: 16 [ 259.998511][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.009891][ T5311] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 260.011117][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.026925][ T5311] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 260.046119][ T5311] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 260.056998][ T5311] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 260.065891][ T5311] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.075050][ T5311] usb 2-1: config 0 has no interface number 0 [ 260.082653][ T5311] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 260.103850][ T5311] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 260.114014][ T5311] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 260.124478][ T5311] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.138172][ T5311] usb 2-1: config 0 interface 125 has no altsetting 0 [ 260.148518][ T5311] usb 2-1: config 0 interface 125 has no altsetting 2 [ 260.159007][ T5311] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 260.170257][ T5270] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 260.176417][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.185206][ T5311] usb 2-1: Product: syz [ 260.189722][ T5311] usb 2-1: Manufacturer: syz [ 260.194537][ T5311] usb 2-1: SerialNumber: syz [ 260.202868][ T5311] usb 2-1: config 0 descriptor?? [ 260.211497][ T5311] usb 2-1: selecting invalid altsetting 2 [ 260.243636][ T5224] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 260.280739][ T5270] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 260.303444][ T5270] em28xx 5-1:0.0: board has no eeprom [ 260.387140][ T5270] em28xx 5-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 260.401925][ T5270] em28xx 5-1:0.0: analog set to bulk mode. [ 260.408722][ T8] em28xx 5-1:0.0: Registering V4L2 extension [ 260.428747][ C0] usb 2-1: async_complete: urb error -71 [ 260.434486][ C0] usb 2-1: async_complete: urb error -71 [ 260.438744][ T5224] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.440166][ C0] usb 2-1: async_complete: urb error -71 [ 260.457339][ C0] usb 2-1: async_complete: urb error -71 [ 260.483535][ T5224] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 260.499502][ T5270] usb 5-1: USB disconnect, device number 17 [ 260.506440][ T8] em28xx 5-1:0.0: reading from i2c device at 0xb8 failed (error=-19) [ 260.517127][ T5311] get_1284_register: usb error -71 [ 260.522361][ T5311] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 260.531651][ T8] em28xx 5-1:0.0: reading from i2c device at 0xba failed (error=-19) [ 260.542965][ T5270] em28xx 5-1:0.0: Disconnecting em28xx [ 260.547849][ T5224] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 260.560352][ T5311] usb 2-1: USB disconnect, device number 14 [ 260.614443][ T5224] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 260.635369][ T5224] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 260.667131][ T8] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 260.670783][ T5224] usb 1-1: Manufacturer: syz [ 260.686986][ T8] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 260.703542][ T5224] usb 1-1: SerialNumber: syz [ 260.726322][ T8] em28xx 5-1:0.0: No AC97 audio processor [ 260.740513][ T8] em28xx 5-1:0.0: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 260.761380][ T8] em28xx 5-1:0.0: Binding DVB extension [ 260.783007][ T8] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 260.797396][ T8] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 260.817026][ T8] em28xx 5-1:0.0: Remote control support is not available for this card. [ 260.837604][ T5270] em28xx 5-1:0.0: Closing input extension [ 260.855501][ T5270] em28xx 5-1:0.0: Freeing device [ 260.949469][ T5224] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 260.972247][ T5224] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input14 [ 261.105948][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.112895][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.119826][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.126781][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.133863][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.140857][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.147793][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.154703][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 261.161460][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 261.182365][ T5224] usb 1-1: USB disconnect, device number 23 [ 262.344014][ T5270] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 262.407433][ T6767] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.587597][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 262.618921][ T5270] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.636338][ T5270] usb 1-1: config 0 has no interface number 0 [ 262.656553][ T5270] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.750330][ T5270] usb 1-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 263.814272][ T5270] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.843995][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.883708][ T5270] usb 1-1: config 0 descriptor?? [ 263.922284][ T5270] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 264.127736][ T5311] usb 1-1: USB disconnect, device number 24 [ 268.415761][ T6795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.615514][ T5268] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 269.850098][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 269.943484][ T5268] usb 2-1: Using ep0 maxpacket: 16 [ 270.046262][ T5268] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 270.047982][ T6810] process 'syz.3.412' launched './file0' with NULL argv: empty string added [ 270.054767][ T5268] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 270.054795][ T5268] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 270.054872][ T5268] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 270.054945][ T5268] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.121030][ T5268] usb 2-1: config 0 has no interface number 0 [ 270.219091][ T5268] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 270.230729][ T5268] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 270.241770][ T5268] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.251983][ T5268] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.266606][ T5268] usb 2-1: config 0 interface 125 has no altsetting 0 [ 270.274717][ T5268] usb 2-1: config 0 interface 125 has no altsetting 2 [ 270.602486][ T5268] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 270.622545][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.632492][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 270.643655][ T5268] usb 2-1: Product: syz [ 270.647834][ T5268] usb 2-1: Manufacturer: syz [ 270.652407][ T5268] usb 2-1: SerialNumber: syz [ 270.660038][ T5268] usb 2-1: config 0 descriptor?? [ 270.670514][ T5268] usb 2-1: selecting invalid altsetting 2 [ 270.927801][ C1] usb 2-1: async_complete: urb error -71 [ 270.933543][ C1] usb 2-1: async_complete: urb error -71 [ 270.939262][ C1] usb 2-1: async_complete: urb error -71 [ 270.944981][ C1] usb 2-1: async_complete: urb error -71 [ 270.978440][ T5268] get_1284_register: usb error -71 [ 270.998120][ T5268] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 271.034765][ T5268] usb 2-1: USB disconnect, device number 15 [ 271.203557][ T5270] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 272.844015][ T5270] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.693303][ T5270] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 273.976830][ T5270] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 273.986263][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.604376][ T5270] usb 3-1: config 0 descriptor?? [ 274.651239][ T5270] usb 3-1: can't set config #0, error -71 [ 274.705792][ T5270] usb 3-1: USB disconnect, device number 15 [ 379.843388][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 379.850370][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5857/1:b..l P2943/1:b..l [ 379.859825][ C1] rcu: (detected by 1, t=10502 jiffies, g=20641, q=478 ncpus=2) [ 379.867553][ C1] task:kworker/u8:12 state:R running task stack:20144 pid:2943 tgid:2943 ppid:2 flags:0x00004000 [ 379.880190][ C1] Workqueue: bat_events batadv_nc_worker [ 379.885829][ C1] Call Trace: [ 379.889103][ C1] [ 379.892030][ C1] __schedule+0x17ae/0x4a10 [ 379.896886][ C1] ? __pfx___schedule+0x10/0x10 [ 379.901727][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.907718][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 379.912993][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 379.918091][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 379.923803][ C1] irqentry_exit+0x5e/0x90 [ 379.928212][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 379.933827][ C1] RIP: 0010:lock_release+0x175/0xa30 [ 379.939131][ C1] Code: f7 e8 0f a7 87 00 48 c7 c0 10 e7 3a 93 49 39 06 0f 84 ee 04 00 00 4c 8d b4 24 b0 00 00 00 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 <74> 08 4c 89 f7 e8 d1 a7 87 00 4c 89 6c 24 50 48 c7 84 24 b0 00 00 [ 379.959512][ C1] RSP: 0018:ffffc90009d87a20 EFLAGS: 00000246 [ 379.965574][ C1] RAX: ffffffff933ae710 RBX: 1ffff920013b0f5a RCX: ffffffff816fe240 [ 379.973538][ C1] RDX: 0000000000000000 RSI: ffffffff8c3f8920 RDI: ffffffff8c3f88e0 [ 379.981680][ C1] RBP: ffffc90009d87b48 R08: ffffffff8ff6956f R09: 1ffffffff1fed2ad [ 379.989665][ C1] R10: dffffc0000000000 R11: fffffbfff1fed2ae R12: 1ffff920013b0f50 [ 379.997652][ C1] R13: ffffffff8b77920b R14: ffffc90009d87ad0 R15: dffffc0000000000 [ 380.005619][ C1] ? batadv_nc_worker+0xcb/0x610 [ 380.010549][ C1] ? lock_release+0xb0/0xa30 [ 380.015129][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 380.020138][ C1] ? batadv_nc_worker+0xcb/0x610 [ 380.025058][ C1] ? __pfx_lock_release+0x10/0x10 [ 380.030085][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.036169][ C1] ? batadv_nc_worker+0xcb/0x610 [ 380.041093][ C1] batadv_nc_worker+0x28b/0x610 [ 380.045953][ C1] ? batadv_nc_worker+0xcb/0x610 [ 380.050991][ C1] ? process_scheduled_works+0x945/0x1830 [ 380.056708][ C1] process_scheduled_works+0xa2c/0x1830 [ 380.062266][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.068263][ C1] ? assign_work+0x364/0x3d0 [ 380.072890][ C1] worker_thread+0x86d/0xd40 [ 380.077476][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.083385][ C1] ? __kthread_parkme+0x169/0x1d0 [ 380.088408][ C1] ? __pfx_worker_thread+0x10/0x10 [ 380.093516][ C1] kthread+0x2f0/0x390 [ 380.097574][ C1] ? __pfx_worker_thread+0x10/0x10 [ 380.102666][ C1] ? __pfx_kthread+0x10/0x10 [ 380.107240][ C1] ret_from_fork+0x4b/0x80 [ 380.111644][ C1] ? __pfx_kthread+0x10/0x10 [ 380.116223][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.120983][ C1] [ 380.124076][ C1] task:udevd state:R running task stack:24864 pid:5857 tgid:5857 ppid:4672 flags:0x00000002 [ 380.135803][ C1] Call Trace: [ 380.139076][ C1] [ 380.141999][ C1] __schedule+0x17ae/0x4a10 [ 380.146510][ C1] ? __pfx___schedule+0x10/0x10 [ 380.151357][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.157589][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 380.162859][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 380.167959][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 380.173919][ C1] irqentry_exit+0x5e/0x90 [ 380.178362][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.184430][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x1d6/0x220 [ 380.191268][ C1] Code: 62 e8 3e 1f 7b ff 4d 85 f6 48 bb 00 00 00 00 00 fc ff df 75 07 e8 2a 1f 7b ff eb 06 e8 23 1f 7b ff fb 48 c7 04 24 0e 36 e0 45 <4a> c7 04 23 00 00 00 00 66 42 c7 44 23 09 00 00 42 c6 44 23 0b 00 [ 380.210870][ C1] RSP: 0018:ffffc90004917640 EFLAGS: 00000293 [ 380.216925][ C1] RAX: ffffffff8218572d RBX: dffffc0000000000 RCX: ffff88802204bc00 [ 380.224881][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.232837][ C1] RBP: ffffc900049176f0 R08: ffffffff82185708 R09: 1ffffffff269dd07 [ 380.240814][ C1] R10: dffffc0000000000 R11: fffffbfff269dd08 R12: 1ffff92000922ec8 [ 380.248788][ C1] R13: ffffc90004917660 R14: 0000000000000200 R15: 0000000000000046 [ 380.256754][ C1] ? seqcount_lockdep_reader_access+0x1a8/0x220 [ 380.262982][ C1] ? seqcount_lockdep_reader_access+0x1cd/0x220 [ 380.269213][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 380.275784][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.281846][ C1] prepend_path+0xe1/0xbe0 [ 380.286249][ C1] ? prepend_path+0x2f/0xbe0 [ 380.290820][ C1] d_absolute_path+0x179/0x310 [ 380.295573][ C1] ? __pfx_d_absolute_path+0x10/0x10 [ 380.300852][ C1] ? rcu_is_watching+0x15/0xb0 [ 380.305604][ C1] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 380.311312][ C1] ? trace_kmalloc+0x1f/0xd0 [ 380.315883][ C1] ? __kmalloc_noprof+0x21a/0x400 [ 380.320894][ C1] tomoyo_realpath_from_path+0x2b4/0x5e0 [ 380.326519][ C1] tomoyo_path_perm+0x2b7/0x740 [ 380.331349][ C1] ? terminate_walk+0x365/0x430 [ 380.336181][ C1] ? tomoyo_path_perm+0x287/0x740 [ 380.341185][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 380.346563][ C1] security_inode_getattr+0xd8/0x130 [ 380.351865][ C1] vfs_getattr+0x45/0x430 [ 380.356184][ C1] vfs_statx+0x199/0x490 [ 380.360412][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 380.365162][ C1] ? getname_flags+0x1e3/0x540 [ 380.369999][ C1] vfs_fstatat+0x145/0x190 [ 380.374400][ C1] __x64_sys_newfstatat+0x11d/0x1a0 [ 380.379578][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 380.385277][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.391245][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.397556][ C1] ? do_syscall_64+0x100/0x230 [ 380.402317][ C1] ? do_syscall_64+0xb6/0x230 [ 380.406985][ C1] do_syscall_64+0xf3/0x230 [ 380.411473][ C1] ? clear_bhb_loop+0x35/0x90 [ 380.416133][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.422012][ C1] RIP: 0033:0x7fca165165f4 [ 380.426409][ C1] RSP: 002b:00007fffd1201ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 380.434806][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca165165f4 [ 380.442758][ C1] RDX: 00007fffd1201d18 RSI: 0000559554843760 RDI: 00000000ffffff9c [ 380.450712][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 000055955483f640 [ 380.458667][ C1] R10: 0000000000000100 R11: 0000000000000202 R12: 0000000000006180 [ 380.466628][ C1] R13: 0000000000006180 R14: 0000559554843760 R15: 000055955484ce10 [ 380.474591][ C1] [ 380.477601][ C1] rcu: rcu_preempt kthread starved for 10562 jiffies! g20641 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 380.488777][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 380.498727][ C1] rcu: RCU grace-period kthread stack dump: [ 380.504599][ C1] task:rcu_preempt state:R running task stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 380.516315][ C1] Call Trace: [ 380.519577][ C1] [ 380.522491][ C1] __schedule+0x17ae/0x4a10 [ 380.526992][ C1] ? __pfx___schedule+0x10/0x10 [ 380.531824][ C1] ? __pfx_lock_release+0x10/0x10 [ 380.536857][ C1] ? __asan_memset+0x23/0x50 [ 380.541431][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 380.547219][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.553530][ C1] ? schedule+0x90/0x320 [ 380.557752][ C1] schedule+0x14b/0x320 [ 380.561888][ C1] schedule_timeout+0x1be/0x310 [ 380.566722][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 380.572074][ C1] ? __pfx_process_timeout+0x10/0x10 [ 380.577433][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 380.582966][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 380.587802][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 380.592983][ C1] ? rcu_gp_init+0x1256/0x1630 [ 380.597733][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 380.602650][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 380.609146][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 380.614417][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.620295][ C1] ? finish_swait+0xd4/0x1e0 [ 380.624873][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 380.629446][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.634625][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.640502][ C1] ? __kthread_parkme+0x169/0x1d0 [ 380.645624][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.650807][ C1] kthread+0x2f0/0x390 [ 380.654859][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.660035][ C1] ? __pfx_kthread+0x10/0x10 [ 380.664613][ C1] ret_from_fork+0x4b/0x80 [ 380.669013][ C1] ? __pfx_kthread+0x10/0x10 [ 380.673586][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.678347][ C1] [ 380.681354][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 380.687675][ C1] Sending NMI from CPU 1 to CPUs 0: [ 380.692905][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30