last executing test programs: 21.637273584s ago: executing program 1 (id=3706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x104, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xbc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa4, 0x1, [@m_simple={0x48, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x58, 0x13, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x5}, 0x3}}]}, {0xd, 0x6, "df76640d30b6ba2169"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, 0x0) 21.159351659s ago: executing program 1 (id=3710): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x4, 0x6, 0x1f7c, 0xa}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100100, 0x0) 15.431684757s ago: executing program 1 (id=3725): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, 0x0, 0x881) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) 13.951618272s ago: executing program 3 (id=3726): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, 0x0, 0x881) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) 13.951087081s ago: executing program 2 (id=3727): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xac, 0x1, [@m_simple={0x48, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x60, 0x13, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x5}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0xe, 0x6, "df76640d30b6ba21699a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13.552087832s ago: executing program 0 (id=3729): socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)="62a9eaa681632e65e74d991507df0f7306a43ae5d032f759d67f0f6416fbce785d27f7b036", 0x25) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000000240), 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 13.427667646s ago: executing program 4 (id=3730): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendfile(r0, r0, 0x0, 0x2000fb) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], 0x0, 0x2) 13.337709483s ago: executing program 2 (id=3731): socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)="62a9eaa681632e65e74d991507df0f7306a43ae5d032f759d67f0f6416fbce785d27f7b036", 0x25) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000000240), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 13.178603425s ago: executing program 0 (id=3732): syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xdf, 0x0, 0x2a, 0xff, 0x5}, 0x12, &(0x7f0000000400)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x4, 0x4}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0xc1, &(0x7f0000000480)=@string={0xc1, 0x3, "93386e049c87117488ad9e7c20e3f835c4ad40b067f010dd874c0f6142a1332c99eca499bd70493106dc9bbf7bd3064f8433ccbe78b6e673d0274f445d74468cece4c52d0c0b6d263d0ffa0497d970c44eea69dd3be1cbd4f20d4a9847fc9d1b41ecba3a1c653f6e9c40c4ac7653910d7c55755f080f144b5494d9c976b624ca64d5b0a2fdb1606146777d77ce3a843d1722e320eccb000d44c64dfb8bb6a837dc3a22c507cf93899f25cd85f47802dee10a94aebe00ffa01e52886f3d9a64"}}, {0x6c, &(0x7f0000000580)=@string={0x6c, 0x3, "a8d4e91b5da95acafeab162e3e96aa9b1ba467cbb0c22bedabeca33f4d0ab04b3e18475fcc5b92343c6d94ac5c9a9f42032883f7c321be555055fd2464897c4ecbc2a9b5e78561e499909e7652687533ab161a483a1d20952920f343b96eb84cdf2b7e77738849ab0ba8"}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "1ebc9a27206f5013754b5578f5588ece90fc3c000ebd25e9271337e8db151754f85f4166b1b581f4482df8c3a77c6c5785d6b45215fd0e0c72d80916a048c063692bd71527d20a5307b56c64cedc278a7f2633842a42ef30a6e1faffcd9f69458516009f4df5b4c527cf9c8a6b0984d99a84ab47066cf8a0295819f0fad2c975277ea2b70a9376494ea8215efa1b443757eb693ff5e6d40a45c5db932098a93d746c4ec539a556863f290611176cf5aa66634718aca02b"}}, {0x101, &(0x7f00000006c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40c}}]}) 13.044920245s ago: executing program 2 (id=3733): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x1, 0x1, 0x3}, 0x6) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_settings={0x27, 0x9, @fr_pvc_info=&(0x7f0000000080)={0xc5c, 'ip6tnl0\x00'}}}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) syz_usb_connect$cdc_ecm(0x1, 0x91, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x10, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0xe, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "d73d"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x400, 0xe}, [@ncm={0x6, 0x24, 0x1a, 0x40, 0x33}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x2, 0xc, 0x3, 0x3ff, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x4, [0x2]}, @mdlm={0x15, 0x24, 0x12, 0x4}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6, 0xa}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xdf, 0x0, 0x2a, 0xff, 0x5}, 0x12, &(0x7f0000000400)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x4, 0x4}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0xc1, &(0x7f0000000480)=@string={0xc1, 0x3, "93386e049c87117488ad9e7c20e3f835c4ad40b067f010dd874c0f6142a1332c99eca499bd70493106dc9bbf7bd3064f8433ccbe78b6e673d0274f445d74468cece4c52d0c0b6d263d0ffa0497d970c44eea69dd3be1cbd4f20d4a9847fc9d1b41ecba3a1c653f6e9c40c4ac7653910d7c55755f080f144b5494d9c976b624ca64d5b0a2fdb1606146777d77ce3a843d1722e320eccb000d44c64dfb8bb6a837dc3a22c507cf93899f25cd85f47802dee10a94aebe00ffa01e52886f3d9a64"}}, {0x6c, &(0x7f0000000580)=@string={0x6c, 0x3, "a8d4e91b5da95acafeab162e3e96aa9b1ba467cbb0c22bedabeca33f4d0ab04b3e18475fcc5b92343c6d94ac5c9a9f42032883f7c321be555055fd2464897c4ecbc2a9b5e78561e499909e7652687533ab161a483a1d20952920f343b96eb84cdf2b7e77738849ab0ba8"}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "1ebc9a27206f5013754b5578f5588ece90fc3c000ebd25e9271337e8db151754f85f4166b1b581f4482df8c3a77c6c5785d6b45215fd0e0c72d80916a048c063692bd71527d20a5307b56c64cedc278a7f2633842a42ef30a6e1faffcd9f69458516009f4df5b4c527cf9c8a6b0984d99a84ab47066cf8a0295819f0fad2c975277ea2b70a9376494ea8215efa1b443757eb693ff5e6d40a45c5db932098a93d746c4ec539a556863f290611176cf5aa66634718aca02b"}}, {0x101, &(0x7f00000006c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40c}}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001240), 0x440, 0x0) 12.58523507s ago: executing program 1 (id=3734): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x1, 0x1, 0x3}, 0x6) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_settings={0x27, 0x9, @fr_pvc_info=&(0x7f0000000080)={0xc5c, 'ip6tnl0\x00'}}}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) r3 = socket$xdp(0x2c, 0x3, 0x0) shutdown(r3, 0x1) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000140)=0x8001, 0x4) socket$rds(0x15, 0x5, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x91, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x10, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0xe, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "d73d"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x400, 0xe}, [@ncm={0x6, 0x24, 0x1a, 0x40, 0x33}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x2, 0xc, 0x3, 0x3ff, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x4, [0x2]}, @mdlm={0x15, 0x24, 0x12, 0x4}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6, 0xa}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xdf, 0x0, 0x2a, 0xff, 0x5}, 0x12, &(0x7f0000000400)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x4, 0x4}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0xc1, &(0x7f0000000480)=@string={0xc1, 0x3, "93386e049c87117488ad9e7c20e3f835c4ad40b067f010dd874c0f6142a1332c99eca499bd70493106dc9bbf7bd3064f8433ccbe78b6e673d0274f445d74468cece4c52d0c0b6d263d0ffa0497d970c44eea69dd3be1cbd4f20d4a9847fc9d1b41ecba3a1c653f6e9c40c4ac7653910d7c55755f080f144b5494d9c976b624ca64d5b0a2fdb1606146777d77ce3a843d1722e320eccb000d44c64dfb8bb6a837dc3a22c507cf93899f25cd85f47802dee10a94aebe00ffa01e52886f3d9a64"}}, {0x6c, &(0x7f0000000580)=@string={0x6c, 0x3, "a8d4e91b5da95acafeab162e3e96aa9b1ba467cbb0c22bedabeca33f4d0ab04b3e18475fcc5b92343c6d94ac5c9a9f42032883f7c321be555055fd2464897c4ecbc2a9b5e78561e499909e7652687533ab161a483a1d20952920f343b96eb84cdf2b7e77738849ab0ba8"}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "1ebc9a27206f5013754b5578f5588ece90fc3c000ebd25e9271337e8db151754f85f4166b1b581f4482df8c3a77c6c5785d6b45215fd0e0c72d80916a048c063692bd71527d20a5307b56c64cedc278a7f2633842a42ef30a6e1faffcd9f69458516009f4df5b4c527cf9c8a6b0984d99a84ab47066cf8a0295819f0fad2c975277ea2b70a9376494ea8215efa1b443757eb693ff5e6d40a45c5db932098a93d746c4ec539a556863f290611176cf5aa66634718aca02b"}}, {0x101, &(0x7f00000006c0)=@string={0x101, 0x3, "967e4fff0b1c7a89bd0b68a374443f818202dd58f68d4bf4a76d988dc2f9d845d6362bb6d1c0a0efd6ef13d6ff76c71d6da0a83f0a4ba51684dd1e28dd2883cc01560cc1f4f9f63ab772d041c48a75a12de09b89add3ca587ae0fe1f63e6bcec2e70cc5862746b1cf1af570f62ae2b197b13841cf17f70b6ef5e54fe152c262d8755bc1dbf76e791d9620c6f4f140c35af8ded5a20d974091c046dcacedbbcbbe901a9e603360ca7545292338e1a2887ebb2649751918327dd5defb95c013f61d8567261147b4f7f3914b691e825f53431e68c04928dbe11534a5822bfa2392eda4f91a4406700b4938ac09e80fbe9a5f8f6494c3a26cdb00bb023ce5479ae"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40c}}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001240), 0x440, 0x0) 12.400120895s ago: executing program 4 (id=3735): r0 = semget$private(0x0, 0x4, 0x201) semtimedop(r0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0b967f1b1401002dbd7000fedbdf256d00"], 0x1c}, 0x1, 0x0, 0x0, 0x6d5321d95bccbb5b}, 0x4000) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x3fa4}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000700)={r5, @in6={{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}}, [0x0, 0xfffffffffffffff0, 0x5, 0x0, 0x7fffffffffffffff, 0x8, 0x3, 0x3, 0x6, 0x6, 0x7fffffffffffffff, 0x3ff, 0x7, 0xe, 0x7fff]}, &(0x7f0000000800)=0x100) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000080), 0x171}}], 0x40000000000015e, 0x4000014) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7c}]}) semctl$IPC_RMID(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x200000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000600), 0x0) 11.536189619s ago: executing program 3 (id=3736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008840) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0xfffffffe}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r7, 0x0, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000dc0)={{0x0, 0x0, 0x80, {0x0, 0x2, 0x1}}, "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", "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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf406307302079790102030109021200015f6560700904010800ffa27d09e4ef2a62b80097b92a92f673cf16d4d0"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11.417109258s ago: executing program 0 (id=3737): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x9, 0x29, {0x29, 0x22, "b26c3d16a7aa81ec4c00000000000000041778de129425da9543187eb5a9da2637e06ac539d0e7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) 11.059885838s ago: executing program 4 (id=3738): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x93, 0x88, 0x6, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x0, 0xfe, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xed6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1f, 0x6a, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0xa3f94094bc37ea0a, 0xb, 0x8, 0x9}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x2, 0x8, 0x40, 0x5e}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x940, 0xff00, 0x40, [0xfebff0, 0xff3f00, 0x3f00]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c19}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c09}}, {0x5b, &(0x7f0000000580)=ANY=[@ANYBLOB="5b03d9cc08f23b1d8a23ebc4545c8b9cf13e390d5b6d342ecbd250b10b50904787d10500000000000000de285a0b31f93490f4c0af8406d5a41b6f7cf40e859cc9a87eedbd94b2ccc8450d"]}, {0x6e, &(0x7f00000006c0)=@string={0x6e, 0x3, "086cc7380645c56591505578e74c5b3f4b2fe1999c014e68cdc80c29ac047c994951283e56b533c8ca92919b3898d77e0bf4ba476fdd21167f80f35af010bc3c6cc0b649f3e56840ad45c96abd69febc3a2403b840c850095ba91ca8e785b9f438396ac45b9daa041027b801"}}]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.971944695s ago: executing program 2 (id=3739): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0085cd16b3f1c67126ff000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000cba10000e100000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x29c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x254, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x23c, 0x1, [@m_nat={0x108, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x10000000, 0x80000001}, @empty, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x6, 0x6979, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6, 0x3, 0x9f}, @empty, @local}}]}, {0x65, 0x6, "525dfeac86ce84c0651b02d8cfcfb2e8ebe4fa883a2e8593252c80a728a5f4291635480f6cbc84b2432cef684200149d9d5edd825c13eb2d4d0d699ac1ca3cc36e4a09f088dc445f0783cc90f1d501855767e6d7c186ca9b4e0cb1c4bf18117b10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x85, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x64, 0x13, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x5}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x11, 0x6, "df76640d30b6ba21699aad3d08"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000080)='\n', 0x1}, {0x0}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)={0x0}) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100311395b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x155551fa}) syz_usb_ep_read(r6, 0x1, 0x65, &(0x7f0000000140)=""/101) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000004600)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x7, &(0x7f0000000380)=0x419, 0x4) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.295608871s ago: executing program 0 (id=3740): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc491, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef8e, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000140a010300000000000000000700000820000000000a01020000000000000000020000090900010073797a300000000080000000160a030000000000000000000200000a5400038040000380140001006d6163766c616e3100000000000000001400010076657468315f0f006376746170000000140001006e696376663000000000000000000000080001400000000008000240000000020900020073797a310000000009000100"], 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 7.208814022s ago: executing program 4 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r1, &(0x7f0000001380)={&(0x7f0000000940), 0xc, &(0x7f0000001080)=[{&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000b40)=""/255, 0xff}, {&(0x7f0000000c40)=""/253, 0xfd}, {&(0x7f0000000d40)=""/227, 0xe3}, {&(0x7f0000000980)=""/39, 0x27}, {&(0x7f0000000ac0)=""/53, 0x35}, {&(0x7f0000000e40)=""/148, 0x94}, {&(0x7f0000000f00)=""/21, 0x15}, {&(0x7f0000000f40)=""/231, 0xe7}, {&(0x7f0000001040)}], 0xa, &(0x7f0000001140)=[{0xd0, 0x0, 0x0, ""/187}, {0xd0, 0x0, 0x0, ""/189}, {0x70, 0x0, 0x0, ""/94}, {0x18, 0x0, 0x0, ""/6}], 0x228, 0x40010042}, 0x38, 0x40002041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206050000000000000000000700000405000100070000000900020073797a31000000000c00078008001200ffffffff0500050002000000050004000100000011000300686173683a69702c6d61726b"], 0x58}}, 0x40000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000001c0)={"00000100", 0x10, 0xd, 0x3, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000004", "03000500", "e8cc1304", ["8bb61f00", "c21cd7e2ffffe7d84d000040", "000000ff0000000000000020", "0000000000000000009700"]}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000680)="5ffc9a126a", 0x5dc}], 0x2, 0x0, 0x0, 0x50}, 0x20048800) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x38, r9, 0x1, 0xffffffff, 0x4000, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) 7.12657411s ago: executing program 3 (id=3742): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000900", @ANYRES32=r1, @ANYBLOB], 0x270}}, 0x0) 7.096633591s ago: executing program 1 (id=3743): socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)="62a9eaa681632e65e74d991507df0f7306a43ae5d032f759d67f0f6416fbce785d27f7b036", 0x25) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000000240), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.914177416s ago: executing program 1 (id=3744): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00010000000000000000000713"], 0x28}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@deltfilter={0x34, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0xf, 0x8}, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}]}, 0x34}}, 0x200480c5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$kcm(0x29, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r4], 0x22c}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$cgroup_int(r5, &(0x7f0000000000)=0x2b05, 0x12) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x2bb, '\x00', r4, r5, 0x0, 0x5, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x3, 0x2, 0x3, 0x100, r7, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6440209050b02000486"], 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b01010000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) 6.691160176s ago: executing program 3 (id=3745): setrlimit(0x40000000000008, &(0x7f0000000000)) syz_clone(0x40000, &(0x7f0000000e00)="82433e445050baba2d53fe98a9c66b9b8d9c7fefceeae400c0da0989ee4573ffe28a43820e2c864e70bad9eb3126ce7b1bbd59f362a64cacd754a04255d56ad581c7e41598973fb1a7f570890205e22126c9c60c8666b299be89fc4173641c27bbc5e35665e215361079dc2caa139b74fc046814080c1043645a42ec2ccfcf91c41cf8607322b29d0b89439c495a6a48ad6cd835aedc7a1a28ff81aecf52940c28c3fcbb6319979551ccc4b27fb24154ac5aa2c757c585c75728d9770bf6ac16c3c2f8f88097f0c5458dd6d8039fb20a2dc11a935cc29aa03ed87ee14196b4b28db285fff8c67e9d7f01437e6198349193aa30e90c6ac8407dfb91497537dc390a03", 0x102, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000002400)="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") mlockall(0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, 0x4000}) 6.141285605s ago: executing program 0 (id=3746): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x1, 0x1, 0x3}, 0x6) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_settings={0x27, 0x9, @fr_pvc_info=&(0x7f0000000080)={0xc5c, 'ip6tnl0\x00'}}}) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x91, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x10, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0xe, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "d73d"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x400, 0xe}, [@ncm={0x6, 0x24, 0x1a, 0x40, 0x33}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x2, 0xc, 0x3, 0x3ff, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x4, [0x2]}, @mdlm={0x15, 0x24, 0x12, 0x4}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6d, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6, 0xa}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xdf, 0x0, 0x2a, 0xff, 0x5}, 0x12, &(0x7f0000000400)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x4, 0x4}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0xc1, &(0x7f0000000480)=@string={0xc1, 0x3, "93386e049c87117488ad9e7c20e3f835c4ad40b067f010dd874c0f6142a1332c99eca499bd70493106dc9bbf7bd3064f8433ccbe78b6e673d0274f445d74468cece4c52d0c0b6d263d0ffa0497d970c44eea69dd3be1cbd4f20d4a9847fc9d1b41ecba3a1c653f6e9c40c4ac7653910d7c55755f080f144b5494d9c976b624ca64d5b0a2fdb1606146777d77ce3a843d1722e320eccb000d44c64dfb8bb6a837dc3a22c507cf93899f25cd85f47802dee10a94aebe00ffa01e52886f3d9a64"}}, {0x6c, &(0x7f0000000580)=@string={0x6c, 0x3, "a8d4e91b5da95acafeab162e3e96aa9b1ba467cbb0c22bedabeca33f4d0ab04b3e18475fcc5b92343c6d94ac5c9a9f42032883f7c321be555055fd2464897c4ecbc2a9b5e78561e499909e7652687533ab161a483a1d20952920f343b96eb84cdf2b7e77738849ab0ba8"}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "1ebc9a27206f5013754b5578f5588ece90fc3c000ebd25e9271337e8db151754f85f4166b1b581f4482df8c3a77c6c5785d6b45215fd0e0c72d80916a048c063692bd71527d20a5307b56c64cedc278a7f2633842a42ef30a6e1faffcd9f69458516009f4df5b4c527cf9c8a6b0984d99a84ab47066cf8a0295819f0fad2c975277ea2b70a9376494ea8215efa1b443757eb693ff5e6d40a45c5db932098a93d746c4ec539a556863f290611176cf5aa66634718aca02b"}}, {0x101, &(0x7f00000006c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40c}}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001240), 0x440, 0x0) 6.033137082s ago: executing program 4 (id=3747): syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xdf, 0x0, 0x2a, 0xff, 0x5}, 0x12, &(0x7f0000000400)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x4, 0x4}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0xc1, &(0x7f0000000480)=@string={0xc1, 0x3, "93386e049c87117488ad9e7c20e3f835c4ad40b067f010dd874c0f6142a1332c99eca499bd70493106dc9bbf7bd3064f8433ccbe78b6e673d0274f445d74468cece4c52d0c0b6d263d0ffa0497d970c44eea69dd3be1cbd4f20d4a9847fc9d1b41ecba3a1c653f6e9c40c4ac7653910d7c55755f080f144b5494d9c976b624ca64d5b0a2fdb1606146777d77ce3a843d1722e320eccb000d44c64dfb8bb6a837dc3a22c507cf93899f25cd85f47802dee10a94aebe00ffa01e52886f3d9a64"}}, {0x6c, &(0x7f0000000580)=@string={0x6c, 0x3, "a8d4e91b5da95acafeab162e3e96aa9b1ba467cbb0c22bedabeca33f4d0ab04b3e18475fcc5b92343c6d94ac5c9a9f42032883f7c321be555055fd2464897c4ecbc2a9b5e78561e499909e7652687533ab161a483a1d20952920f343b96eb84cdf2b7e77738849ab0ba8"}}, {0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "1ebc9a27206f5013754b5578f5588ece90fc3c000ebd25e9271337e8db151754f85f4166b1b581f4482df8c3a77c6c5785d6b45215fd0e0c72d80916a048c063692bd71527d20a5307b56c64cedc278a7f2633842a42ef30a6e1faffcd9f69458516009f4df5b4c527cf9c8a6b0984d99a84ab47066cf8a0295819f0fad2c975277ea2b70a9376494ea8215efa1b443757eb693ff5e6d40a45c5db932098a93d746c4ec539a556863f290611176cf5aa66634718aca02b"}}, {0x101, &(0x7f00000006c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40c}}]}) 5.991466089s ago: executing program 3 (id=3748): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 5.884003712s ago: executing program 3 (id=3749): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10d8, &(0x7f0000000200)={[{0x36, 0x4e00, "229b84254139de47101a2d6005ec1a07894dcdac249b5f8ecb64c75aa58d4218b35f2b8ce4682d4be84f2c37045852112b7ccd58693f"}, {0x91, 0x4e00, "d9bb5edad0fedf4f887d9397e27b6d02fe7837bdafca955c02061f338af7c05978d2015be6ee233e84be3751ec568c690c20577cdd231972675fb65c09947b1b0effc4fbccf0e242f96c0de58c33f04d9ddba8404c47ff4f0a5d8266c3c9199485b1540122414a5381e288e57f0d4853bfbe3cd469eb356d6081625026f47a7ebee35e40d83c8f1a3a874adca682e3dcd0"}, {0x1000, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffeaa, &(0x7f0000000140)={[{0xfffffcf6, 0x4e00, "d37f50cca3b1d589042e0000000000e1666666dd8c02f1dce98d1f16c5eaa1a85fc01495364ae86a762449adb8e2ef2fa5987ee9b8a8536d9d554805b14427dceafe8cad395d939a6381a557109d9d1ca0ee7cdd102ecf7a25a6fb6f6c47c6451b05bce01f8587a00066d53fdbc9295bc0e0a52a59497dba341e6c160b1a"}]}) 5.858923101s ago: executing program 2 (id=3750): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000004c0)={0xffffa773, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x401, &(0x7f0000000500)=""/161) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x178, 0x1414, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0xfffffffffffffc56, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 4.524195153s ago: executing program 2 (id=3751): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x93, 0x88, 0x6, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x0, 0xfe, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xed6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1f, 0x6a, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0xa3f94094bc37ea0a, 0xb, 0x8, 0x9}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x2, 0x8, 0x40, 0x5e}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x940, 0xff00, 0x40, [0xfebff0, 0xff3f00, 0x3f00]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c19}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c09}}, {0x5b, &(0x7f0000000580)=ANY=[@ANYBLOB="5b03d9cc08f23b1d8a23ebc4545c8b9cf13e390d5b6d342ecbd250b10b50904787d10500000000000000de285a0b31f93490f4c0af8406d5a41b6f7cf40e859cc9a87eedbd94b2ccc8450d"]}, {0x6e, &(0x7f00000006c0)=@string={0x6e, 0x3, "086cc7380645c56591505578e74c5b3f4b2fe1999c014e68cdc80c29ac047c994951283e56b533c8ca92919b3898d77e0bf4ba476fdd21167f80f35af010bc3c6cc0b649f3e56840ad45c96abd69febc3a2403b840c850095ba91ca8e785b9f438396ac45b9daa041027b801"}}]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.342865291s ago: executing program 4 (id=3752): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x9, 0x29, {0x29, 0x22, "b26c3d16a7aa81ec4c00000000000000041778de129425da9543187eb5a9da2637e06ac539d0e7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) 0s ago: executing program 0 (id=3753): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20004014) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x4009, 0x802}, 0x0) socket(0x8, 0x80000, 0x4000) kernel console output (not intermixed with test programs): g): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.230372][ T5803] Bluetooth: hci1: command tx timeout [ 1077.842728][ T73] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.452729][ T5803] Bluetooth: hci1: command tx timeout [ 1078.620734][ T73] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.758807][T15901] chnl_net:caif_netlink_parms(): no params data found [ 1078.842792][T15993] siw: device registration error -23 [ 1079.321346][T16003] siw: device registration error -23 [ 1079.551927][T15901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.563207][T15901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.563463][T15901] bridge_slave_0: entered allmulticast mode [ 1079.584968][T15901] bridge_slave_0: entered promiscuous mode [ 1079.619531][T15901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.619784][T15901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.619998][T15901] bridge_slave_1: entered allmulticast mode [ 1079.650587][T15901] bridge_slave_1: entered promiscuous mode [ 1079.931586][T15901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.941075][T15901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.070169][ T73] bridge_slave_1: left allmulticast mode [ 1080.070196][ T73] bridge_slave_1: left promiscuous mode [ 1080.070400][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.201504][ T73] bridge_slave_0: left allmulticast mode [ 1080.201537][ T73] bridge_slave_0: left promiscuous mode [ 1080.204357][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.676573][ T5803] Bluetooth: hci1: command tx timeout [ 1080.687092][ T993] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1080.874643][ T5875] hid-generic 8003:50014:60010.0024: hidraw0: HID v700.07 Device [syz1] on syz0 [ 1080.882476][ T993] usb 3-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1080.929709][ T993] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.947867][ T993] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 1080.947899][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.947922][ T993] usb 3-1: Product: syz [ 1080.947937][ T993] usb 3-1: Manufacturer: syz [ 1080.947952][ T993] usb 3-1: SerialNumber: syz [ 1081.208770][T16014] cgroup2: Unknown parameter 'pcr' [ 1081.828929][ T993] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1081.839122][ T993] usb 3-1: USB disconnect, device number 81 [ 1082.344201][ T993] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1082.562370][ T993] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1082.562401][ T993] usb 3-1: config 0 has no interface number 0 [ 1082.564882][ T993] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1082.564913][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.564928][ T993] usb 3-1: Product: syz [ 1082.564939][ T993] usb 3-1: Manufacturer: syz [ 1082.564949][ T993] usb 3-1: SerialNumber: syz [ 1082.569097][ T993] usb 3-1: config 0 descriptor?? [ 1082.809884][ T993] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1082.818152][ T993] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1082.818944][ T993] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1082.819046][ T993] usb 3-1: media controller created [ 1082.885729][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1083.099483][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.099881][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.245531][ T73] team0: Port device bond0 removed [ 1083.264422][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.329084][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.382402][ T73] bond0 (unregistering): Released all slaves [ 1083.687068][ T73] [: left promiscuous mode [ 1084.108166][ T993] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1084.108978][T16022] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 1084.248914][T15901] team0: Port device team_slave_0 added [ 1084.252730][ T993] usb 3-1: USB disconnect, device number 82 [ 1084.257355][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.288238][T16034] team0: Port device bond0 added [ 1084.340569][T15901] team0: Port device team_slave_1 added [ 1084.771356][T11397] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1084.933096][T11397] usb 4-1: Using ep0 maxpacket: 16 [ 1084.940423][T11397] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1084.940463][T11397] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1084.940495][T11397] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1085.016242][T11397] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1085.016275][T11397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.016297][T11397] usb 4-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1085.016315][T11397] usb 4-1: Manufacturer: ᰉ [ 1085.016331][T11397] usb 4-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾 [ 1085.157136][T16047] netlink: 'syz.1.3264': attribute type 21 has an invalid length. [ 1085.312160][T15901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.312180][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.312211][T15901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.666373][T15901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.666388][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.666503][T15901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.190348][T16047] overlayfs: failed to resolve './file0/file0': -2 [ 1089.003689][T11397] usbhid 4-1:1.0: can't add hid device: -71 [ 1089.003847][T11397] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1089.257315][T11397] usb 4-1: USB disconnect, device number 82 [ 1090.575841][T11397] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1090.861750][T16064] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1091.866933][T11397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1091.867027][T11397] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 1091.868571][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.868599][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.868620][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.868654][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1091.870235][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.870265][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.870290][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.870329][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1091.872041][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.872069][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.872094][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.872132][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1091.874307][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.874337][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.874361][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.874401][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1091.877041][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.877071][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.877095][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.877129][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1091.879692][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.879719][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.879743][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.879780][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1091.887047][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.887081][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.887104][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.887141][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1091.888832][T11397] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 1091.888860][T11397] usb 4-1: config 4 has an invalid descriptor of length 90, skipping remainder of the config [ 1091.888885][T11397] usb 4-1: config 4 has no interface number 0 [ 1091.888923][T11397] usb 4-1: config 4 interface 109 has no altsetting 0 [ 1092.212832][T11397] usb 4-1: New USB device found, idVendor=0436, idProduct=042d, bcdDevice=da.49 [ 1092.212864][T11397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.212885][T11397] usb 4-1: Product: syz [ 1092.212900][T11397] usb 4-1: Manufacturer: с [ 1092.212915][T11397] usb 4-1: SerialNumber: syz [ 1093.078457][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1093.352386][T16072] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1093.365161][T11397] usb 4-1: bad CDC descriptors [ 1093.403281][T11397] usb 4-1: USB disconnect, device number 83 [ 1093.491150][T15901] hsr_slave_0: entered promiscuous mode [ 1093.492446][T15901] hsr_slave_1: entered promiscuous mode [ 1093.493367][T15901] debugfs: 'hsr0' already exists in 'hsr' [ 1093.493390][T15901] Cannot create hsr debugfs directory [ 1093.583265][T16080] team0: Port device bond0 removed [ 1093.630679][T16085] /dev/nullb0: Can't open blockdev [ 1093.795196][ T73] hsr_slave_0: left promiscuous mode [ 1093.837092][ T73] hsr_slave_1: left promiscuous mode [ 1093.838279][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.838307][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.894802][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.894849][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.964077][ T73] veth1_macvtap: left promiscuous mode [ 1094.964193][ T73] veth0_macvtap: left promiscuous mode [ 1094.964462][ T73] veth1_vlan: left promiscuous mode [ 1094.964653][ T73] veth0_vlan: left promiscuous mode [ 1095.397412][T11397] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1095.602564][T11397] usb 1-1: config 0 has an invalid interface number: 227 but max is 0 [ 1095.602596][T11397] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.602619][T11397] usb 1-1: config 0 has no interface number 0 [ 1095.606792][T11397] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=49.d0 [ 1095.606822][T11397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.606851][T11397] usb 1-1: Product: syz [ 1095.606866][T11397] usb 1-1: Manufacturer: syz [ 1095.606882][T11397] usb 1-1: SerialNumber: syz [ 1095.618335][T11397] usb 1-1: config 0 descriptor?? [ 1095.654549][T11397] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1098.006426][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1098.263021][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1100.995998][T16086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.997399][T16086] team0: Port device bond0 added [ 1101.105433][T11397] usb 1-1: USB disconnect, device number 54 [ 1101.590481][ T5803] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1103.960551][ T5875] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1104.277242][ T5875] usb 1-1: config 0 has an invalid interface number: 227 but max is 0 [ 1104.277272][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.277295][ T5875] usb 1-1: config 0 has no interface number 0 [ 1104.280424][ T5875] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=49.d0 [ 1104.280454][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.280474][ T5875] usb 1-1: Product: syz [ 1104.280489][ T5875] usb 1-1: Manufacturer: syz [ 1104.280504][ T5875] usb 1-1: SerialNumber: syz [ 1104.294704][ T5875] usb 1-1: config 0 descriptor?? [ 1104.306403][ T5875] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1104.614799][ T5875] usb 1-1: USB disconnect, device number 55 [ 1105.715263][T16053] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1105.991729][T16053] usb 3-1: Using ep0 maxpacket: 16 [ 1105.999199][T16053] usb 3-1: config 4 has an invalid interface number: 37 but max is 0 [ 1105.999230][T16053] usb 3-1: config 4 has no interface number 0 [ 1105.999282][T16053] usb 3-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1105.999308][T16053] usb 3-1: config 4 interface 37 has no altsetting 0 [ 1106.041396][T16053] usb 3-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 1106.041429][T16053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.041450][T16053] usb 3-1: Product: syz [ 1106.041466][T16053] usb 3-1: Manufacturer: syz [ 1106.041480][T16053] usb 3-1: SerialNumber: syz [ 1106.082492][T16160] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.231244][ T73] IPVS: stop unused estimator thread 0... [ 1106.871503][T15901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1106.911547][T15901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1106.961518][T15901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1106.983702][T15901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1107.103660][ T5926] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 1107.175390][T15901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.227363][T15901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.239479][T12393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.239657][T12393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.251722][T12393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.251981][T12393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.272424][ T5926] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1107.272566][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.307063][ T5926] usb 1-1: config 0 descriptor?? [ 1107.566916][ T5926] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1108.072737][ T5926] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1108.072772][ T5926] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1108.097790][ T5926] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1108.485757][ T5926] usb 1-1: USB disconnect, device number 56 [ 1108.800080][T15901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.842481][T16053] usb 3-1: USB disconnect, device number 83 [ 1110.311472][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'. [ 1110.319459][T16217] netlink: 'syz.0.3310': attribute type 9 has an invalid length. [ 1110.319483][T16217] netlink: 'syz.0.3310': attribute type 7 has an invalid length. [ 1110.319498][T16217] netlink: 'syz.0.3310': attribute type 8 has an invalid length. [ 1110.359647][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.359719][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.574475][T16222] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1110.836897][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3315'. [ 1111.099514][T15901] veth0_vlan: entered promiscuous mode [ 1111.115903][T15901] veth1_vlan: entered promiscuous mode [ 1111.282118][T15901] veth0_macvtap: entered promiscuous mode [ 1111.324152][T15901] veth1_macvtap: entered promiscuous mode [ 1111.366925][T15901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.384734][T15901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.403478][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3319'. [ 1111.422625][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3319'. [ 1111.439802][ T6083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.440312][ T6083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.442094][ T6083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.594899][ T6083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.679126][T12240] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1111.840643][T12240] usb 3-1: Using ep0 maxpacket: 16 [ 1111.846049][T12240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.846098][T12240] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1111.846121][T12240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.913895][T12240] usb 3-1: config 0 descriptor?? [ 1112.282697][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.282714][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.446932][T12240] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1112.609306][ T6312] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1112.653787][T12394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.653812][T12394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.804458][ T6312] usb 4-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1112.804519][ T6312] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1112.807891][ T6312] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 1112.807922][ T6312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.807943][ T6312] usb 4-1: Product: syz [ 1112.807960][ T6312] usb 4-1: Manufacturer: syz [ 1112.807975][ T6312] usb 4-1: SerialNumber: syz [ 1113.196776][ T5789] usb 3-1: USB disconnect, device number 84 [ 1113.352960][T16251] cgroup2: Unknown parameter 'pcr' [ 1113.954984][ T6312] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1113.977393][ T6312] usb 4-1: USB disconnect, device number 84 [ 1114.300743][ T5875] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1114.480091][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1114.482676][ T5875] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 1114.482703][ T5875] usb 5-1: config 0 has no interface number 0 [ 1114.482762][ T5875] usb 5-1: config 0 interface 25 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 1114.482789][ T5875] usb 5-1: config 0 interface 25 has no altsetting 0 [ 1114.489121][ T5875] usb 5-1: New USB device found, idVendor=1110, idProduct=9042, bcdDevice=13.33 [ 1114.489152][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.489175][ T5875] usb 5-1: Product: syz [ 1114.489191][ T5875] usb 5-1: Manufacturer: syz [ 1114.489206][ T5875] usb 5-1: SerialNumber: syz [ 1114.505036][ T5875] usb 5-1: config 0 descriptor?? [ 1114.508712][T16274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1114.596035][ T5875] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9042) Rev (0X1333): Eagle IV [ 1114.723158][T16297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3339'. [ 1114.776302][ T5875] usb 5-1: reset high-speed USB device number 85 using dummy_hcd [ 1115.003267][T16304] nbd: must specify a size in bytes for the device [ 1115.559863][ T5926] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1115.670838][T16316] siw: device registration error -23 [ 1115.733841][ T5926] usb 1-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1115.733906][ T5926] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1115.842694][ T5926] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 1115.842729][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.842752][ T5926] usb 1-1: Product: syz [ 1115.842768][ T5926] usb 1-1: Manufacturer: syz [ 1115.842784][ T5926] usb 1-1: SerialNumber: syz [ 1115.846794][ T5875] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1115.846890][ T5875] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleIV.fw [ 1115.919258][ T5875] usb 5-1: USB disconnect, device number 85 [ 1115.970784][T12240] usb 5-1: Direct firmware load for ueagle-atm/eagleIV.fw failed with error -2 [ 1115.971050][T12240] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleIV.fw [ 1115.974128][T12240] kobject: kobject_add_internal failed for firmware (error: -2 parent: 5-1) [ 1115.975175][T12240] firmware ueagle-atm!eagleIV.fw: fw_load_sysfs_fallback: device_register failed [ 1115.975548][T12240] usb 5-1: [UEAGLE-ATM] firmware is not available [ 1116.116668][T16321] CUSE: unknown device info "" [ 1116.116687][T16321] CUSE: zero length info key specified [ 1116.121056][T16308] cgroup2: Unknown parameter 'pcr' [ 1116.121480][T16321] usb usb8: usbfs: process 16321 (syz.2.3348) did not claim interface 0 before use [ 1116.845660][T16053] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 1116.928715][ T5926] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1116.973290][ T5926] usb 1-1: USB disconnect, device number 57 [ 1117.160463][T16335] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3353'. [ 1117.916144][T16053] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1117.916194][T16053] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x82 is Bulk; changing to Interrupt [ 1117.916218][T16053] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x3 is Bulk; changing to Interrupt [ 1117.916240][T16053] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1117.922591][T16053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1117.922627][T16053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.922649][T16053] usb 4-1: Product: 풨ᯩ꥝쩚꯾⸖阾鮪ꐛ쭧슰㾣੍䮰ᠾ彇富㒒洼겔驜䊟⠃⇃喾啐⓽襤乼싋떩藧邙皞桒㍵ᚫ䠚ᴺ锠
䏳溹䲸⯟睾衳ꭉꠋ [ 1117.922675][T16053] usb 4-1: Manufacturer: 㢓Ѯ螜琑궈粞㗸귄끀䲇意ꅂⰳ馤炽ㅉ뾛퍻伆㎄뻌뙸珦⟐䑏瑝豆ⷅଌ♭༽Ӻ쑰퓋ෲ顊ﱇᮝ㪺攜渿䂜계卶එ啼彵༈䬔鑔짙뙶쨤핤ꊰ뇽慠睆睽㫎㶄∗⃣쯬ഀ완כֿ뚋㞨㫜씢켇覓▟藍磴ૡ꺔¾ꃿ刞澈騽 [ 1117.922707][T16053] usb 4-1: SerialNumber: 밞➚漠ፐ䭵硕壵캎ﲐ<봎ጧᗛ吗忸晁떱ⵈ쏸粧坬횅労ﴕఎᘉ䢠揀⭩ᗗ툧匊딇摬訧♿萳䈪ワ鿍䕩ᚅ鼀어켧誜५蒚䞫氆ꃸ堩틺痉縧랢錊䥶ꡎ帡᯺㝄㽩૔악鏛頠㶩汴앎ꔹ虖⤿ᄆ気ꫵ捦ᡇꂬ [ 1117.952262][T16331] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1117.952486][T16331] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1117.952777][T16331] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1118.247922][T16331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.254340][T16331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.391265][T16053] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1118.428745][T16053] usb 4-1: USB disconnect, device number 85 [ 1118.540351][ T38] kauditd_printk_skb: 168 callbacks suppressed [ 1118.540379][ T38] audit: type=1326 audit(1761424162.239:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.540528][ T38] audit: type=1326 audit(1761424162.239:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.544186][ T38] audit: type=1326 audit(1761424162.248:11647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.545266][ T38] audit: type=1326 audit(1761424162.248:11648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.545317][ T38] audit: type=1326 audit(1761424162.248:11649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.553156][ T38] audit: type=1326 audit(1761424162.248:11650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.553213][ T38] audit: type=1326 audit(1761424162.248:11651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.553262][ T38] audit: type=1326 audit(1761424162.248:11652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.553311][ T38] audit: type=1326 audit(1761424162.248:11653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.553360][ T38] audit: type=1326 audit(1761424162.248:11654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16346 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b7ebefc9 code=0x7ffc0000 [ 1118.591226][T16347] ./cgroup: Can't lookup blockdev [ 1118.668122][T16351] 9pnet_fd: Insufficient options for proto=fd [ 1120.255832][ T10] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1120.449925][ T10] usb 5-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1120.449991][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.466883][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 1120.466922][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.466947][ T10] usb 5-1: Product: syz [ 1120.466965][ T10] usb 5-1: Manufacturer: syz [ 1120.466983][ T10] usb 5-1: SerialNumber: syz [ 1120.563105][ T5875] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1120.703836][T16358] cgroup2: Unknown parameter 'pcr' [ 1120.734053][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 1120.737153][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.737205][ T5875] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1120.737230][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.744371][ T5875] usb 4-1: config 0 descriptor?? [ 1120.994426][T10016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1121.019327][T10016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1121.026590][T10016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1121.052469][T10016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1121.062508][T10016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1121.348495][ T10] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1121.361690][ T5875] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1121.391672][ T10] usb 5-1: USB disconnect, device number 86 [ 1121.918004][ T5875] usb 4-1: USB disconnect, device number 86 [ 1123.342644][ T5806] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1123.354312][ T5803] Bluetooth: hci0: command tx timeout [ 1123.398689][ T1182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.518525][ T5806] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1123.518557][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.555335][ T5806] usb 3-1: config 0 descriptor?? [ 1123.792187][ T5806] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1123.904519][ T1182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.019499][ T5806] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1124.019541][ T5806] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1124.019857][ T5806] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1124.031263][ T5806] usb 3-1: USB disconnect, device number 85 [ 1124.346626][ T1182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.519140][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'. [ 1125.576933][ T5803] Bluetooth: hci0: command tx timeout [ 1125.756841][ T1182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.016130][T16447] netlink: 'syz.0.3395': attribute type 8 has an invalid length. [ 1126.140498][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1126.140523][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1126.199784][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1126.199809][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1126.199943][ T3562] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.209289][ T3562] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.209733][ T3562] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.210076][ T3562] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.409550][T16377] chnl_net:caif_netlink_parms(): no params data found [ 1126.459154][ T1182] bridge_slave_1: left allmulticast mode [ 1126.459185][ T1182] bridge_slave_1: left promiscuous mode [ 1126.463032][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.727971][ T1182] bridge_slave_0: left allmulticast mode [ 1126.728006][ T1182] bridge_slave_0: left promiscuous mode [ 1126.728225][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.800910][ T5803] Bluetooth: hci0: command tx timeout [ 1129.719930][ T1182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.812688][ T1182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.835390][ T1182] bond0 (unregistering): Released all slaves [ 1129.992373][ T1182] tipc: Disabling bearer [ 1129.992653][ T1182] tipc: Left network mode [ 1130.024201][ T5803] Bluetooth: hci0: command tx timeout [ 1130.376802][T16493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1130.839765][T16516] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1131.488231][T16377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.488415][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.488652][T16377] bridge_slave_0: entered allmulticast mode [ 1131.491205][T16377] bridge_slave_0: entered promiscuous mode [ 1131.570274][T16377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.570495][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.570751][T16377] bridge_slave_1: entered allmulticast mode [ 1131.573659][T16377] bridge_slave_1: entered promiscuous mode [ 1131.656307][T16539] netlink: 'syz.4.3423': attribute type 10 has an invalid length. [ 1132.009059][T16543] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1132.272779][T16559] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1132.508382][T16539] syz_tun: entered promiscuous mode [ 1132.523152][T16539] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1132.756676][T16377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.167713][ T1182] hsr_slave_0: left promiscuous mode [ 1133.192250][ T1182] hsr_slave_1: left promiscuous mode [ 1133.194622][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.194651][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.199720][T12240] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1133.245572][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.245605][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.370360][T12240] usb 1-1: Using ep0 maxpacket: 32 [ 1133.375684][T12240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.375720][T12240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.375761][T12240] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1133.375783][T12240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.426684][T12240] usb 1-1: config 0 descriptor?? [ 1133.430538][T12240] hub 1-1:0.0: USB hub found [ 1133.576699][ T1182] veth1_macvtap: left promiscuous mode [ 1133.579689][ T1182] veth0_macvtap: left promiscuous mode [ 1133.579989][ T1182] veth1_vlan: left promiscuous mode [ 1133.580181][ T1182] veth0_vlan: left promiscuous mode [ 1133.666424][T12240] hub 1-1:0.0: 1 port detected [ 1134.115126][T16591] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1134.485631][T12240] usb 1-1: USB disconnect, device number 58 [ 1134.725101][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 1134.725123][ T38] audit: type=1326 audit(1761424177.383:11670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16599 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7ffc0000 [ 1134.725254][ T38] audit: type=1326 audit(1761424177.383:11671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16599 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7ffc0000 [ 1134.725499][ T38] audit: type=1326 audit(1761424177.383:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16599 comm="syz.4.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fbe37d9efc9 code=0x7ffc0000 [ 1134.848734][ T5926] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1135.031127][ T5926] usb 3-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1135.031188][ T5926] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1135.034681][ T5926] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 1135.034704][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.034718][ T5926] usb 3-1: Product: syz [ 1135.034729][ T5926] usb 3-1: Manufacturer: syz [ 1135.034740][ T5926] usb 3-1: SerialNumber: syz [ 1135.324845][T16598] cgroup2: Unknown parameter 'pcr' [ 1135.717142][T16609] FAULT_INJECTION: forcing a failure. [ 1135.717142][T16609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.717178][T16609] CPU: 1 UID: 0 PID: 16609 Comm: syz.4.3444 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1135.717200][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1135.717217][T16609] Call Trace: [ 1135.717225][T16609] [ 1135.717233][T16609] dump_stack_lvl+0x189/0x250 [ 1135.717266][T16609] ? __pfx____ratelimit+0x10/0x10 [ 1135.717289][T16609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1135.717316][T16609] ? __pfx__printk+0x10/0x10 [ 1135.717338][T16609] ? __might_fault+0xb0/0x130 [ 1135.717373][T16609] should_fail_ex+0x46c/0x600 [ 1135.717402][T16609] _copy_from_user+0x2d/0xb0 [ 1135.717422][T16609] io_submit_one+0xc2/0x1310 [ 1135.717465][T16609] ? __pfx_io_submit_one+0x10/0x10 [ 1135.717483][T16609] ? __might_fault+0xb0/0x130 [ 1135.717518][T16609] ? __might_fault+0xb0/0x130 [ 1135.717547][T16609] __se_sys_io_submit+0x185/0x2f0 [ 1135.717576][T16609] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1135.717611][T16609] ? do_syscall_64+0xbe/0xfa0 [ 1135.717637][T16609] do_syscall_64+0xfa/0xfa0 [ 1135.717661][T16609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.717677][T16609] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1135.717695][T16609] ? clear_bhb_loop+0x60/0xb0 [ 1135.717717][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.717734][T16609] RIP: 0033:0x7fbe37d9efc9 [ 1135.717751][T16609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.717767][T16609] RSP: 002b:00007fbe35ffe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1135.717788][T16609] RAX: ffffffffffffffda RBX: 00007fbe37ff5fa0 RCX: 00007fbe37d9efc9 [ 1135.717801][T16609] RDX: 0000200000000500 RSI: 0000000000000001 RDI: 00007fbe38b2e000 [ 1135.717813][T16609] RBP: 00007fbe35ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.717824][T16609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.717835][T16609] R13: 00007fbe37ff6038 R14: 00007fbe37ff5fa0 R15: 00007fffbac62e48 [ 1135.717865][T16609] [ 1136.535271][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1136.717003][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1136.722207][ T10] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1136.722244][ T10] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1136.722273][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1136.728005][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1136.728038][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.728066][ T10] usb 5-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1136.728300][ T10] usb 5-1: Manufacturer: ᰉ [ 1136.728319][ T10] usb 5-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧 [ 1138.141753][ T5926] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1138.203814][ T5926] usb 3-1: USB disconnect, device number 86 [ 1140.013120][ T1182] team0 (unregistering): Port device team_slave_1 removed [ 1140.301402][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 1140.301540][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1140.307361][ T10] usb 5-1: USB disconnect, device number 87 [ 1140.418963][ T1182] team0 (unregistering): Port device team_slave_0 removed [ 1140.500620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.509466][T16618] tmpfs: Bad value for 'mpol' [ 1140.510060][T16618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1140.617674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.688588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.026993][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.203222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.489077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.752851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.056910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.237808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.289645][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.395870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.484529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.525538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.578707][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.635163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.697167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.847318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.951579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.075056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.144947][T16377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.271746][T16621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1143.481610][T16632] FAULT_INJECTION: forcing a failure. [ 1143.481610][T16632] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.481674][T16632] CPU: 0 UID: 0 PID: 16632 Comm: syz.3.3449 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1143.481700][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1143.481713][T16632] Call Trace: [ 1143.481722][T16632] [ 1143.481733][T16632] dump_stack_lvl+0x189/0x250 [ 1143.481773][T16632] ? __pfx____ratelimit+0x10/0x10 [ 1143.481800][T16632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1143.481834][T16632] ? __pfx__printk+0x10/0x10 [ 1143.481867][T16632] ? __pfx___might_resched+0x10/0x10 [ 1143.481897][T16632] should_fail_ex+0x46c/0x600 [ 1143.481933][T16632] should_failslab+0xa8/0x100 [ 1143.481984][T16632] __kmalloc_noprof+0xcc/0x7d0 [ 1143.482014][T16632] ? kfree+0x51/0x950 [ 1143.482037][T16632] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1143.482072][T16632] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1143.482101][T16632] ? tomoyo_domain+0xda/0x130 [ 1143.482135][T16632] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1143.482162][T16632] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1143.482191][T16632] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1143.482224][T16632] ? lockdep_hardirqs_on+0x9c/0x150 [ 1143.482272][T16632] ? __fget_files+0x2a/0x420 [ 1143.482301][T16632] ? __fget_files+0x3a6/0x420 [ 1143.482323][T16632] ? __fget_files+0x2a/0x420 [ 1143.482350][T16632] security_file_ioctl+0xcb/0x2d0 [ 1143.482370][T16632] __se_sys_ioctl+0x47/0x170 [ 1143.482393][T16632] do_syscall_64+0xfa/0xfa0 [ 1143.482420][T16632] ? lockdep_hardirqs_on+0x9c/0x150 [ 1143.482442][T16632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.482460][T16632] ? clear_bhb_loop+0x60/0xb0 [ 1143.482481][T16632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.482498][T16632] RIP: 0033:0x7f9bfbc8efc9 [ 1143.482514][T16632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.482529][T16632] RSP: 002b:00007f9bf9eac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1143.482548][T16632] RAX: ffffffffffffffda RBX: 00007f9bfbee6180 RCX: 00007f9bfbc8efc9 [ 1143.482562][T16632] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000006 [ 1143.482574][T16632] RBP: 00007f9bf9eac090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.482585][T16632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.482595][T16632] R13: 00007f9bfbee6218 R14: 00007f9bfbee6180 R15: 00007ffc478a0c38 [ 1143.482624][T16632] [ 1143.482668][T16632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1144.490675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.678532][T16636] nbd: must specify a size in bytes for the device [ 1144.787499][T16641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1144.835193][T16377] team0: Port device team_slave_0 added [ 1144.851263][T16377] team0: Port device team_slave_1 added [ 1145.051612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.262741][T16647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1145.375341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.405144][T16377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.405165][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.405195][T16377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.411777][T16377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.411799][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.411834][T16377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.591345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.666569][T16656] FAULT_INJECTION: forcing a failure. [ 1145.666569][T16656] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.666605][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.3.3458 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1145.666630][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1145.666645][T16656] Call Trace: [ 1145.666653][T16656] [ 1145.666664][T16656] dump_stack_lvl+0x189/0x250 [ 1145.666702][T16656] ? __pfx____ratelimit+0x10/0x10 [ 1145.666730][T16656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1145.666780][T16656] ? __pfx__printk+0x10/0x10 [ 1145.666813][T16656] ? __pfx___might_resched+0x10/0x10 [ 1145.666841][T16656] should_fail_ex+0x46c/0x600 [ 1145.666876][T16656] should_failslab+0xa8/0x100 [ 1145.666911][T16656] __kmalloc_noprof+0xcc/0x7d0 [ 1145.666939][T16656] ? kfree+0x51/0x950 [ 1145.666962][T16656] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1145.666987][T16656] ? rcu_is_watching+0x15/0xb0 [ 1145.667013][T16656] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1145.667069][T16656] ? tomoyo_mount_permission+0x27a/0x970 [ 1145.667095][T16656] tomoyo_mount_permission+0x377/0x970 [ 1145.667125][T16656] ? tomoyo_mount_permission+0x27a/0x970 [ 1145.667159][T16656] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1145.667217][T16656] ? __lock_acquire+0xab9/0xd20 [ 1145.667276][T16656] security_sb_mount+0xec/0x350 [ 1145.667310][T16656] path_mount+0xbc/0xfe0 [ 1145.667340][T16656] ? user_path_at+0x44/0x60 [ 1145.667375][T16656] __se_sys_mount+0x313/0x410 [ 1145.667412][T16656] ? __pfx___se_sys_mount+0x10/0x10 [ 1145.667448][T16656] ? do_syscall_64+0xbe/0xfa0 [ 1145.667475][T16656] ? __x64_sys_mount+0x20/0xc0 [ 1145.667509][T16656] do_syscall_64+0xfa/0xfa0 [ 1145.667536][T16656] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.667563][T16656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.667585][T16656] ? clear_bhb_loop+0x60/0xb0 [ 1145.667610][T16656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.667632][T16656] RIP: 0033:0x7f9bfbc8efc9 [ 1145.667651][T16656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.667671][T16656] RSP: 002b:00007f9bf9eee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.667695][T16656] RAX: ffffffffffffffda RBX: 00007f9bfbee5fa0 RCX: 00007f9bfbc8efc9 [ 1145.667712][T16656] RDX: 0000200000003680 RSI: 0000200000000000 RDI: 0000200000000140 [ 1145.667727][T16656] RBP: 00007f9bf9eee090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.667742][T16656] R10: 000000000021c041 R11: 0000000000000246 R12: 0000000000000001 [ 1145.667754][T16656] R13: 00007f9bfbee6038 R14: 00007f9bfbee5fa0 R15: 00007ffc478a0c38 [ 1145.667790][T16656] [ 1145.667800][T16656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1146.608521][T16377] hsr_slave_0: entered promiscuous mode [ 1146.609855][T16377] hsr_slave_1: entered promiscuous mode [ 1146.610754][T16377] debugfs: 'hsr0' already exists in 'hsr' [ 1146.610780][T16377] Cannot create hsr debugfs directory [ 1147.936684][T16675] Bluetooth: MGMT ver 1.23 [ 1147.941108][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1148.536311][ T1182] IPVS: stop unused estimator thread 0... [ 1148.636767][ T5875] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1148.798099][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 1148.803704][ T5875] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 1148.803733][ T5875] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1148.803753][ T5875] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1148.803773][ T5875] usb 1-1: config 0 has no interface number 0 [ 1148.803819][ T5875] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1148.803842][ T5875] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1148.803858][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.811017][ T5875] usb 1-1: config 0 descriptor?? [ 1148.827822][ T5875] usb 1-1: bad CDC descriptors [ 1148.882689][ T5926] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1148.948059][ T10] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1149.051288][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1149.055038][ T5926] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1149.055088][ T5926] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1149.055121][ T5926] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1149.060040][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1149.060079][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.060104][ T5926] usb 5-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1149.060125][ T5926] usb 5-1: Manufacturer: ᰉ [ 1149.060142][ T5926] usb 5-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1149.168922][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1149.168956][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.209978][ T10] usb 4-1: config 0 descriptor?? [ 1149.273054][ T6312] usb 1-1: USB disconnect, device number 59 [ 1151.753442][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1151.902304][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1152.865317][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1152.865350][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1152.865625][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1152.922492][ T10] usb 4-1: USB disconnect, device number 87 [ 1153.054372][ T5926] usbhid 5-1:1.0: can't add hid device: -71 [ 1153.054465][ T5926] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1153.058397][ T5926] usb 5-1: USB disconnect, device number 88 [ 1153.637258][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3477'. [ 1154.208828][T16730] nbd: must specify a size in bytes for the device [ 1154.372946][T16377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1154.419386][T16377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1154.477065][T16377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1154.524598][T16377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1154.954431][T16745] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3486'. [ 1155.456910][T16377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.509660][T16377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.529726][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.529958][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.536787][T16753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1155.586554][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.588224][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.254540][T16779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3493'. [ 1156.286919][T16777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.289261][T16777] team0: Port device bond0 added [ 1156.514554][T16377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.342300][T16377] veth0_vlan: entered promiscuous mode [ 1157.403583][T16377] veth1_vlan: entered promiscuous mode [ 1157.422960][T16789] FAULT_INJECTION: forcing a failure. [ 1157.422960][T16789] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.422998][T16789] CPU: 0 UID: 0 PID: 16789 Comm: syz.3.3499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1157.423025][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1157.423039][T16789] Call Trace: [ 1157.423048][T16789] [ 1157.423058][T16789] dump_stack_lvl+0x189/0x250 [ 1157.423108][T16789] ? __pfx____ratelimit+0x10/0x10 [ 1157.423149][T16789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1157.423179][T16789] ? __pfx__printk+0x10/0x10 [ 1157.423218][T16789] should_fail_ex+0x46c/0x600 [ 1157.423252][T16789] should_failslab+0xa8/0x100 [ 1157.423283][T16789] __kmalloc_noprof+0xcc/0x7d0 [ 1157.423311][T16789] ? ___neigh_create+0x722/0x2360 [ 1157.423345][T16789] ___neigh_create+0x722/0x2360 [ 1157.423384][T16789] ? __ipv6_neigh_lookup_noref+0x52a/0x710 [ 1157.423420][T16789] ip6_finish_output2+0xa55/0x14c0 [ 1157.423476][T16789] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1157.423502][T16789] ? ip6_mtu+0x7d/0x490 [ 1157.423520][T16789] ? ip6_mtu+0x38c/0x490 [ 1157.423542][T16789] ? ip6_finish_output+0x2ef/0x4e0 [ 1157.423563][T16789] ? ip6_output+0x126/0x550 [ 1157.423596][T16789] ip6_output+0x340/0x550 [ 1157.423630][T16789] ? ip6_send_skb+0x10f/0x390 [ 1157.423654][T16789] ip6_send_skb+0x1d5/0x390 [ 1157.423681][T16789] rawv6_push_pending_frames+0x6e6/0x8d0 [ 1157.423718][T16789] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 1157.423750][T16789] ? __pfx_raw6_getfrag+0x10/0x10 [ 1157.423783][T16789] rawv6_sendmsg+0x133d/0x1830 [ 1157.423807][T16789] ? __lock_acquire+0xab9/0xd20 [ 1157.423864][T16789] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1157.423899][T16789] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1157.423951][T16789] ? sock_rps_record_flow+0x19/0x410 [ 1157.423986][T16789] ? inet_sendmsg+0x2f4/0x370 [ 1157.424015][T16789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1157.424049][T16789] __sock_sendmsg+0x19c/0x270 [ 1157.424084][T16789] ____sys_sendmsg+0x508/0x820 [ 1157.424115][T16789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.424148][T16789] ? import_iovec+0x74/0xa0 [ 1157.424175][T16789] ___sys_sendmsg+0x21f/0x2a0 [ 1157.424201][T16789] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.424263][T16789] ? __fget_files+0x2a/0x420 [ 1157.424291][T16789] ? __fget_files+0x3a6/0x420 [ 1157.424332][T16789] __x64_sys_sendmsg+0x1a1/0x260 [ 1157.424361][T16789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1157.424396][T16789] ? __pfx_ksys_write+0x10/0x10 [ 1157.424428][T16789] ? do_syscall_64+0xbe/0xfa0 [ 1157.424460][T16789] do_syscall_64+0xfa/0xfa0 [ 1157.424486][T16789] ? lockdep_hardirqs_on+0x9c/0x150 [ 1157.424513][T16789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.424534][T16789] ? clear_bhb_loop+0x60/0xb0 [ 1157.424561][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.424581][T16789] RIP: 0033:0x7f9bfbc8efc9 [ 1157.424601][T16789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.424621][T16789] RSP: 002b:00007f9bf9eee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.424644][T16789] RAX: ffffffffffffffda RBX: 00007f9bfbee5fa0 RCX: 00007f9bfbc8efc9 [ 1157.424661][T16789] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1157.424675][T16789] RBP: 00007f9bf9eee090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.424688][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.424702][T16789] R13: 00007f9bfbee6038 R14: 00007f9bfbee5fa0 R15: 00007ffc478a0c38 [ 1157.424739][T16789] [ 1157.755665][ T5806] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1157.764501][T16377] veth0_macvtap: entered promiscuous mode [ 1157.825106][T16377] veth1_macvtap: entered promiscuous mode [ 1157.873354][T16791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3500'. [ 1157.922938][T16377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.939935][ T5806] usb 1-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 1157.940008][ T5806] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1157.949716][ T5806] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 1157.949747][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.949768][ T5806] usb 1-1: Product: syz [ 1157.949796][ T5806] usb 1-1: Manufacturer: syz [ 1157.949812][ T5806] usb 1-1: SerialNumber: syz [ 1158.035879][T16377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.136602][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.167162][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.167480][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.167523][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.231144][T16785] cgroup2: Unknown parameter 'pcr' [ 1158.934496][T16801] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1159.029124][ T5926] IPVS: starting estimator thread 0... [ 1159.797749][T16802] IPVS: using max 8 ests per chain, 19200 per kthread [ 1161.525917][ T5806] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1161.586634][ T5806] usb 1-1: USB disconnect, device number 60 [ 1161.918579][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.918604][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.935747][ T5875] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1162.001601][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.001626][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.064066][ T5806] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1162.096225][T12245] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1162.127121][ T5875] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1162.127158][ T5875] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x82 is Bulk; changing to Interrupt [ 1162.127183][ T5875] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x3 is Bulk; changing to Interrupt [ 1162.127207][ T5875] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1162.173724][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1162.173757][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.173779][ T5875] usb 3-1: Product: 풨ᯩ꥝쩚꯾⸖阾鮪ꐛ쭧슰㾣੍䮰ᠾ彇富㒒洼겔驜䊟⠃⇃喾啐⓽襤乼싋떩藧邙皞桒㍵ᚫ䠚ᴺ锠
䏳溹䲸⯟睾衳ꭉꠋ [ 1162.173804][ T5875] usb 3-1: Manufacturer: 㢓Ѯ螜琑궈粞㗸귄끀䲇意ꅂⰳ馤炽ㅉ뾛퍻伆㎄뻌뙸珦⟐䑏瑝豆ⷅଌ♭༽Ӻ쑰퓋ෲ顊ﱇᮝ㪺攜渿䂜계卶එ啼彵༈䬔鑔짙뙶쨤핤ꊰ뇽慠睆睽㫎㶄∗⃣쯬ഀ완כֿ뚋㞨㫜씢켇覓▟藍磴ૡ꺔¾ꃿ刞澈騽 [ 1162.173837][ T5875] usb 3-1: SerialNumber: 밞➚漠ፐ䭵硕壵캎ﲐ<봎ጧᗛ吗忸晁떱ⵈ쏸粧坬횅労ﴕఎᘉ䢠揀⭩ᗗ툧匊딇摬訧♿萳䈪ワ鿍䕩ᚅ鼀어켧誜५蒚䞫氆ꃸ堩틺痉縧랢錊䥶ꡎ帡᯺㝄㽩૔악鏛頠㶩汴앎ꔹ虖⤿ᄆ気ꫵ捦ᡇꂬ [ 1162.192629][T16822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1162.192776][T16822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1162.192925][T16822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1162.256905][T12245] usb 5-1: Using ep0 maxpacket: 16 [ 1162.262268][ T5806] usb 1-1: no configurations [ 1162.262289][ T5806] usb 1-1: can't read configurations, error -22 [ 1162.340206][T12245] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1162.340725][T12245] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1162.340985][T12245] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1162.410475][T12245] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1162.412948][T12245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.413759][T12245] usb 5-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1162.430063][T12245] usb 5-1: Manufacturer: ᰉ [ 1162.430089][T12245] usb 5-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ [ 1162.463940][T16822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.464407][T16822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.517588][ T5875] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1162.556190][T16053] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1162.579064][ T5806] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1162.624875][ T5875] usb 3-1: USB disconnect, device number 87 [ 1162.760070][T16053] usb 4-1: Using ep0 maxpacket: 16 [ 1162.761125][ T5806] usb 1-1: no configurations [ 1162.761367][ T5806] usb 1-1: can't read configurations, error -22 [ 1162.786394][ T5806] usb usb1-port1: attempt power cycle [ 1162.818574][T16053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.818630][T16053] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1162.818655][T16053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.051630][T16053] usb 4-1: config 0 descriptor?? [ 1165.366611][T12245] usbhid 5-1:1.0: can't add hid device: -71 [ 1165.366752][T12245] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1165.378149][ T5806] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1165.406827][T12245] usb 5-1: USB disconnect, device number 89 [ 1165.496196][ T5806] usb 1-1: device descriptor read/8, error -71 [ 1165.566643][T16053] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1166.564853][ T5875] IPVS: starting estimator thread 0... [ 1166.660982][T16053] usb 4-1: USB disconnect, device number 88 [ 1166.671706][T16850] IPVS: using max 10 ests per chain, 24000 per kthread [ 1166.951292][T16851] nbd: must specify a size in bytes for the device [ 1167.404127][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1167.436179][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1167.437504][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1167.438653][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1167.439815][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1168.995951][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'. [ 1170.156115][ T5803] Bluetooth: hci2: command tx timeout [ 1170.285106][ T5875] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1170.448699][ T5875] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1170.448731][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.448752][ T5875] usb 5-1: config 0 has no interface number 0 [ 1170.448804][ T5875] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1170.448832][ T5875] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1170.452555][ T5875] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1170.452587][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.452608][ T5875] usb 5-1: Product: syz [ 1170.452624][ T5875] usb 5-1: Manufacturer: syz [ 1170.452639][ T5875] usb 5-1: SerialNumber: syz [ 1170.460003][ T5875] usb 5-1: config 0 descriptor?? [ 1170.461665][T16897] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1170.620752][T16886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.622634][T16886] team0: Port device bond0 added [ 1170.623291][T16891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1170.724285][ T993] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1170.894712][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 1170.897375][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.897563][ T993] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1170.897659][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.962408][ T993] usb 4-1: config 0 descriptor?? [ 1171.118519][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.162410][T16925] nbd: must specify a size in bytes for the device [ 1171.269177][ T5875] usb 5-1: probing VID:PID(0424:012C) [ 1171.318639][ T5875] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1171.318673][ T5875] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1171.318843][ T5875] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 1171.380672][ T5875] usb 5-1: USB disconnect, device number 90 [ 1171.438050][ T993] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1171.845224][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.858683][ T5789] usb 4-1: USB disconnect, device number 89 [ 1171.972771][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'. [ 1172.118637][T16931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.121041][T16931] team0: Port device bond0 added [ 1172.361126][ T5803] Bluetooth: hci2: command tx timeout [ 1172.490189][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.519400][ T5875] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1172.690797][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 1172.701972][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.702034][ T5875] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1172.702064][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.708032][ T5875] usb 5-1: config 0 descriptor?? [ 1172.792040][T16947] cgroup2: Unknown parameter 'pcr' [ 1172.882942][ T993] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1172.960006][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1172.962779][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.043288][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 1173.062704][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1173.062800][ T993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1173.062828][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1173.062852][ T993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1173.077131][ T993] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 1173.077410][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.077436][ T993] usb 1-1: Product: syz [ 1173.077454][ T993] usb 1-1: Manufacturer: syz [ 1173.077472][ T993] usb 1-1: SerialNumber: syz [ 1173.105031][ T993] usb 1-1: config 0 descriptor?? [ 1173.127341][ T993] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected [ 1173.150172][ T5789] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1173.171287][ T993] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1173.189744][ T5875] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1173.320715][ T5789] usb 4-1: not running at top speed; connect to a high speed hub [ 1173.322670][ T5789] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 1173.322698][ T5789] usb 4-1: config 95 has no interface number 0 [ 1173.322735][ T5789] usb 4-1: config 95 interface 1 has no altsetting 0 [ 1173.342553][ T5789] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1173.342585][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.342607][ T5789] usb 4-1: Product: syz [ 1173.342622][ T5789] usb 4-1: Manufacturer: syz [ 1173.342637][ T5789] usb 4-1: SerialNumber: syz [ 1173.418852][T16866] chnl_net:caif_netlink_parms(): no params data found [ 1173.470199][T16943] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1173.532331][T16954] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1173.646561][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3543'. [ 1173.684792][ T5875] usb 5-1: USB disconnect, device number 91 [ 1173.786214][ T5789] usb 4-1: USB disconnect, device number 90 [ 1174.235777][ T58] bridge_slave_1: left allmulticast mode [ 1174.235803][ T58] bridge_slave_1: left promiscuous mode [ 1174.236009][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.320321][ T58] bridge_slave_0: left allmulticast mode [ 1174.320353][ T58] bridge_slave_0: left promiscuous mode [ 1174.320637][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.409496][ T993] usb 1-1: USB disconnect, device number 65 [ 1174.451108][ T993] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1174.451697][ T993] omninet 1-1:0.0: device disconnected [ 1174.583681][ T5803] Bluetooth: hci2: command tx timeout [ 1174.602937][T16973] nbd: must specify a size in bytes for the device [ 1175.300420][T16978] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1176.047772][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.047848][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.061360][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1176.644655][T16992] cgroup2: Unknown parameter 'pcr' [ 1176.982426][ T5803] Bluetooth: hci2: command tx timeout [ 1178.304094][T17004] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3557'. [ 1179.236445][T17008] FAULT_INJECTION: forcing a failure. [ 1179.236445][T17008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.236482][T17008] CPU: 1 UID: 0 PID: 17008 Comm: syz.3.3558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1179.236537][T17008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1179.236550][T17008] Call Trace: [ 1179.236559][T17008] [ 1179.236568][T17008] dump_stack_lvl+0x189/0x250 [ 1179.236603][T17008] ? __pfx____ratelimit+0x10/0x10 [ 1179.236629][T17008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1179.236659][T17008] ? __pfx__printk+0x10/0x10 [ 1179.236683][T17008] ? __might_fault+0xb0/0x130 [ 1179.236723][T17008] should_fail_ex+0x46c/0x600 [ 1179.236755][T17008] _copy_from_user+0x2d/0xb0 [ 1179.236778][T17008] ___sys_sendmsg+0x158/0x2a0 [ 1179.236805][T17008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1179.236865][T17008] ? __fget_files+0x2a/0x420 [ 1179.236892][T17008] ? __fget_files+0x3a6/0x420 [ 1179.236931][T17008] __x64_sys_sendmsg+0x1a1/0x260 [ 1179.236957][T17008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1179.236991][T17008] ? __pfx_ksys_write+0x10/0x10 [ 1179.237020][T17008] ? do_syscall_64+0xbe/0xfa0 [ 1179.237050][T17008] do_syscall_64+0xfa/0xfa0 [ 1179.237074][T17008] ? lockdep_hardirqs_on+0x9c/0x150 [ 1179.237116][T17008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.237138][T17008] ? clear_bhb_loop+0x60/0xb0 [ 1179.237165][T17008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.237186][T17008] RIP: 0033:0x7f9bfbc8efc9 [ 1179.237205][T17008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.237224][T17008] RSP: 002b:00007f9bf9ecd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.237247][T17008] RAX: ffffffffffffffda RBX: 00007f9bfbee6090 RCX: 00007f9bfbc8efc9 [ 1179.237264][T17008] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000008 [ 1179.237278][T17008] RBP: 00007f9bf9ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.237292][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.237305][T17008] R13: 00007f9bfbee6128 R14: 00007f9bfbee6090 R15: 00007ffc478a0c38 [ 1179.237340][T17008] [ 1180.614424][ T58] team0: Port device bond0 removed [ 1180.634157][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.698355][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.743694][ T58] bond0 (unregistering): Released all slaves [ 1180.925106][ T58] tipc: Disabling bearer [ 1180.933011][ T58] tipc: Left network mode [ 1180.933628][T16866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.933794][T16866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.934077][T16866] bridge_slave_0: entered allmulticast mode [ 1180.937258][T16866] bridge_slave_0: entered promiscuous mode [ 1180.946465][T16866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.946681][T16866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.946922][T16866] bridge_slave_1: entered allmulticast mode [ 1180.956127][T16866] bridge_slave_1: entered promiscuous mode [ 1181.035858][T16971] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1181.608929][T17018] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3560'. [ 1182.411815][T17026] FAULT_INJECTION: forcing a failure. [ 1182.411815][T17026] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.411854][T17026] CPU: 0 UID: 0 PID: 17026 Comm: syz.4.3564 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1182.411880][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1182.411895][T17026] Call Trace: [ 1182.411905][T17026] [ 1182.411916][T17026] dump_stack_lvl+0x189/0x250 [ 1182.411956][T17026] ? __pfx____ratelimit+0x10/0x10 [ 1182.411984][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1182.412018][T17026] ? __pfx__printk+0x10/0x10 [ 1182.412054][T17026] ? __pfx___might_resched+0x10/0x10 [ 1182.412077][T17026] ? fs_reclaim_acquire+0x7d/0x100 [ 1182.412115][T17026] should_fail_ex+0x46c/0x600 [ 1182.412152][T17026] should_failslab+0xa8/0x100 [ 1182.412187][T17026] __kmalloc_noprof+0xcc/0x7d0 [ 1182.412217][T17026] ? tomoyo_encode+0x28b/0x550 [ 1182.412250][T17026] tomoyo_encode+0x28b/0x550 [ 1182.412284][T17026] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1182.412328][T17026] tomoyo_path_perm+0x213/0x4b0 [ 1182.412364][T17026] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1182.412398][T17026] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1182.412440][T17026] ? __lock_acquire+0xab9/0xd20 [ 1182.412510][T17026] ? __pfx_current_check_access_path+0x10/0x10 [ 1182.412542][T17026] ? __d_lookup+0x66/0x780 [ 1182.412570][T17026] ? __d_lookup+0x66/0x780 [ 1182.412590][T17026] ? __d_lookup+0x6df/0x780 [ 1182.412616][T17026] tomoyo_path_rmdir+0xa2/0xe0 [ 1182.412645][T17026] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 1182.412682][T17026] ? d_lookup+0xa0/0xc0 [ 1182.412709][T17026] security_path_rmdir+0x167/0x360 [ 1182.412743][T17026] do_rmdir+0x1e8/0x550 [ 1182.412774][T17026] ? __pfx_do_rmdir+0x10/0x10 [ 1182.412802][T17026] ? strncpy_from_user+0x150/0x290 [ 1182.412836][T17026] ? getname_flags+0x1e5/0x540 [ 1182.412874][T17026] __x64_sys_rmdir+0x47/0x50 [ 1182.412900][T17026] do_syscall_64+0xfa/0xfa0 [ 1182.412927][T17026] ? lockdep_hardirqs_on+0x9c/0x150 [ 1182.412957][T17026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.412979][T17026] ? clear_bhb_loop+0x60/0xb0 [ 1182.413007][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.413030][T17026] RIP: 0033:0x7fbe37d9efc9 [ 1182.413050][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.413070][T17026] RSP: 002b:00007fbe35fdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1182.413094][T17026] RAX: ffffffffffffffda RBX: 00007fbe37ff6090 RCX: 00007fbe37d9efc9 [ 1182.413112][T17026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1182.413139][T17026] RBP: 00007fbe35fdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.413153][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.413167][T17026] R13: 00007fbe37ff6128 R14: 00007fbe37ff6090 R15: 00007fffbac62e48 [ 1182.413206][T17026] [ 1182.413230][T17026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1184.197724][T16866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.486461][T16866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.743675][ T5875] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1186.024159][ T5875] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 1186.024191][ T5875] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1186.024212][ T5875] usb 5-1: config 0 has no interface number 0 [ 1186.024266][ T5875] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x5 has invalid maxpacket 51369, setting to 64 [ 1186.024296][ T5875] usb 5-1: config 0 interface 6 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1186.024321][ T5875] usb 5-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1186.024346][ T5875] usb 5-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1186.024370][ T5875] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1186.024398][ T5875] usb 5-1: config 0 interface 6 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1186.024423][ T5875] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1186.027590][ T5875] usb 5-1: New USB device found, idVendor=0403, idProduct=cc4a, bcdDevice=f1.a9 [ 1186.027638][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.027678][ T5875] usb 5-1: Product: syz [ 1186.027694][ T5875] usb 5-1: Manufacturer: syz [ 1186.027709][ T5875] usb 5-1: SerialNumber: syz [ 1187.124304][ T5875] usb 5-1: config 0 descriptor?? [ 1187.125593][T17047] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1187.190077][T16866] team0: Port device team_slave_0 added [ 1187.279768][T16866] team0: Port device team_slave_1 added [ 1187.350300][ T5875] ftdi_sio 5-1:0.6: FTDI USB Serial Device converter detected [ 1187.352159][ T5875] ftdi_sio ttyUSB0: unknown device type: 0xf1a9 [ 1187.395050][T17069] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3570'. [ 1187.426806][ T5875] usb 5-1: USB disconnect, device number 92 [ 1187.472061][ T5875] ftdi_sio 5-1:0.6: device disconnected [ 1188.662373][ T38] audit: type=1326 audit(1761424227.829:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662481][ T38] audit: type=1326 audit(1761424227.829:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662527][ T38] audit: type=1326 audit(1761424227.829:11675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662575][ T38] audit: type=1326 audit(1761424227.829:11676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662623][ T38] audit: type=1326 audit(1761424227.829:11677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662671][ T38] audit: type=1326 audit(1761424227.829:11678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662722][ T38] audit: type=1326 audit(1761424227.829:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662777][ T38] audit: type=1326 audit(1761424227.829:11680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662826][ T38] audit: type=1326 audit(1761424227.829:11681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1188.662876][ T38] audit: type=1326 audit(1761424227.829:11682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17070 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dd62efc9 code=0x7fc00000 [ 1189.822533][T16866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.822552][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.822666][T16866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.835306][T16866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.835326][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.835361][T16866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.913268][T17105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1190.199993][T17110] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3586'. [ 1190.421100][T17112] siw: device registration error -23 [ 1190.959923][T16866] hsr_slave_0: entered promiscuous mode [ 1190.962535][T16866] hsr_slave_1: entered promiscuous mode [ 1190.963816][T16866] debugfs: 'hsr0' already exists in 'hsr' [ 1190.963844][T16866] Cannot create hsr debugfs directory [ 1191.132126][ T58] hsr_slave_0: left promiscuous mode [ 1191.175867][ T58] hsr_slave_1: left promiscuous mode [ 1191.261664][ T58] veth1_macvtap: left promiscuous mode [ 1191.261755][ T58] veth0_macvtap: left promiscuous mode [ 1191.261928][ T58] veth1_vlan: left promiscuous mode [ 1191.262069][ T58] veth0_vlan: left promiscuous mode [ 1191.656162][ T58] team0 (unregistering): Port device vlan2 removed [ 1193.955714][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1194.211288][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1199.840901][T17168] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1201.143581][ T38] kauditd_printk_skb: 24 callbacks suppressed [ 1201.143601][ T38] audit: type=1326 audit(1761424239.512:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.143748][ T38] audit: type=1326 audit(1761424239.512:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.143952][ T38] audit: type=1326 audit(1761424239.512:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.144060][ T38] audit: type=1326 audit(1761424239.512:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.144207][ T38] audit: type=1326 audit(1761424239.512:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.144355][ T38] audit: type=1326 audit(1761424239.512:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.144530][ T38] audit: type=1326 audit(1761424239.512:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.144668][ T38] audit: type=1326 audit(1761424239.512:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.144814][ T38] audit: type=1326 audit(1761424239.512:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1201.144958][ T38] audit: type=1326 audit(1761424239.512:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17159 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1203.097649][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1203.270957][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.271010][ T10] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1203.271035][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.310053][ T10] usb 1-1: config 0 descriptor?? [ 1203.778038][ T10] steelseries 0003:1038:12B6.002A: item fetching failed at offset 5/7 [ 1203.788026][ T10] steelseries 0003:1038:12B6.002A: probe with driver steelseries failed with error -22 [ 1203.896987][ T58] IPVS: stop unused estimator thread 0... [ 1203.950061][T12245] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1204.024200][ T10] usb 1-1: USB disconnect, device number 66 [ 1204.120925][T12245] usb 4-1: Using ep0 maxpacket: 16 [ 1204.123218][T12245] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1204.123252][T12245] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1204.123281][T12245] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1204.127759][T12245] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1204.127789][T12245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.127811][T12245] usb 4-1: Product: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1204.127835][T12245] usb 4-1: Manufacturer: ᰉ [ 1204.127859][T12245] usb 4-1: SerialNumber: syz [ 1205.531770][T17205] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1205.632148][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 1207.193286][T16866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1207.251918][T16866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1207.254673][T12245] usbhid 4-1:1.0: can't add hid device: -71 [ 1207.254817][T12245] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1207.281900][T12245] usb 4-1: USB disconnect, device number 91 [ 1207.328553][T16866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1207.373442][T16866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1207.749716][T16866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.823353][T16866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.838818][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.839164][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.871643][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.871887][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.244854][ T38] kauditd_printk_skb: 25 callbacks suppressed [ 1208.244875][ T38] audit: type=1326 audit(1761424246.153:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17214 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1208.244941][ T38] audit: type=1326 audit(1761424246.153:11743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17214 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1208.244991][ T38] audit: type=1326 audit(1761424246.153:11744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17214 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1208.245042][ T38] audit: type=1326 audit(1761424246.153:11745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17214 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1208.245106][ T38] audit: type=1326 audit(1761424246.153:11746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17214 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1208.245155][ T38] audit: type=1326 audit(1761424246.153:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17214 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1208.247466][ T5789] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 1208.250573][ T38] audit: type=1326 audit(1761424246.163:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17214 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1208.386362][ T5789] usb 5-1: device descriptor read/64, error -71 [ 1208.643022][ T5789] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 1208.673030][T16866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.765018][T16866] veth0_vlan: entered promiscuous mode [ 1208.780581][T16866] veth1_vlan: entered promiscuous mode [ 1208.781995][ T5789] usb 5-1: device descriptor read/64, error -71 [ 1208.831983][T16866] veth0_macvtap: entered promiscuous mode [ 1208.843935][T16866] veth1_macvtap: entered promiscuous mode [ 1208.871834][T16866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.877897][T16866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.900070][ T5789] usb usb5-port1: attempt power cycle [ 1209.867861][T17251] overlayfs: failed to resolve './file1': -2 [ 1210.011513][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.027093][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.034730][ T5789] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 1210.055222][ T5789] usb 5-1: device descriptor read/8, error -71 [ 1210.072615][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.072906][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.662076][ T5789] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 1210.675030][ T5789] usb 5-1: device descriptor read/8, error -71 [ 1210.900914][ T5789] usb usb5-port1: unable to enumerate USB device [ 1212.014192][ T6088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.014215][ T6088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.191870][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.191893][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.406365][ T38] audit: type=1326 audit(1761424250.045:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17264 comm="syz.4.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1212.460167][ T38] audit: type=1326 audit(1761424250.091:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17264 comm="syz.4.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1212.508254][ T38] audit: type=1326 audit(1761424250.101:11751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17264 comm="syz.4.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1214.372613][T17290] overlayfs: failed to resolve './file1': -2 [ 1214.912388][T17297] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3650'. [ 1216.035075][T17311] siw: device registration error -23 [ 1216.098938][T17314] nbd: must specify a size in bytes for the device [ 1216.148922][ T6312] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1216.308141][ T6312] usb 1-1: Using ep0 maxpacket: 32 [ 1216.312653][ T6312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.312679][ T6312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.314210][ T6312] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1216.314241][ T6312] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1216.314262][ T6312] usb 1-1: Manufacturer: syz [ 1216.330689][ T6312] usb 1-1: config 0 descriptor?? [ 1216.340261][T16053] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1216.517033][T16053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.517133][T16053] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1216.517151][T16053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.527934][T16053] usb 5-1: config 0 descriptor?? [ 1216.809590][ T6312] ft260 0003:0403:6030.002B: unknown main item tag 0x7 [ 1217.001926][T16053] steelseries 0003:1038:12B6.002C: item fetching failed at offset 5/7 [ 1217.005905][T16053] steelseries 0003:1038:12B6.002C: probe with driver steelseries failed with error -22 [ 1217.030636][ T6312] ft260 0003:0403:6030.002B: chip code: 0000 0000 [ 1218.095812][ T6312] ft260 0003:0403:6030.002B: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1218.189424][ T44] usb 5-1: USB disconnect, device number 97 [ 1218.312127][ T6312] ft260 0003:0403:6030.002B: failed to retrieve status: -32, no wakeup [ 1218.377404][T17326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1218.448724][T12245] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1218.511004][T11397] usb 1-1: reset high-speed USB device number 67 using dummy_hcd [ 1218.627979][T12245] usb 3-1: Using ep0 maxpacket: 16 [ 1218.630410][T12245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.630458][T12245] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1218.630476][T12245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.634647][T12245] usb 3-1: config 0 descriptor?? [ 1218.713609][ T44] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1218.877488][ T44] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1218.877516][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.877537][ T44] usb 4-1: config 0 has no interface number 0 [ 1218.877680][ T44] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1218.877709][ T44] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1218.881129][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1218.881228][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.881251][ T44] usb 4-1: Product: syz [ 1218.881267][ T44] usb 4-1: Manufacturer: syz [ 1218.881282][ T44] usb 4-1: SerialNumber: syz [ 1218.897661][ T44] usb 4-1: config 0 descriptor?? [ 1218.918302][T17326] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1219.124555][T12245] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1219.260928][ T44] usb 4-1: probing VID:PID(0424:012C) [ 1219.310968][ T44] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1219.311000][ T44] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1219.312918][ T44] vub300 4-1:0.133: probe with driver vub300 failed with error -22 [ 1219.416152][ T44] usb 4-1: USB disconnect, device number 92 [ 1219.539083][ T6312] usb 1-1: USB disconnect, device number 67 [ 1219.594868][ T5789] usb 3-1: USB disconnect, device number 88 [ 1219.674600][T17341] overlayfs: failed to resolve './file1': -2 [ 1220.154021][T17347] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1221.451086][T17363] nbd: must specify a size in bytes for the device [ 1221.585802][ T5789] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1221.717809][ T44] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1221.723528][ T5789] usb 3-1: device descriptor read/64, error -71 [ 1221.889036][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1221.895854][ T44] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1221.895905][ T44] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1221.895935][ T44] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1221.946310][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1221.946343][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.946365][ T44] usb 4-1: Manufacturer: ᰉ [ 1221.946380][ T44] usb 4-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1222.049571][ T5789] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1222.192809][ T5789] usb 3-1: device descriptor read/64, error -71 [ 1222.388415][ T5789] usb usb3-port1: attempt power cycle [ 1222.777060][ T5789] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 1222.878796][ T5789] usb 3-1: device descriptor read/8, error -71 [ 1223.152051][ T5789] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 1223.440713][ T5789] usb 3-1: device descriptor read/8, error -71 [ 1223.859062][ T5789] usb usb3-port1: unable to enumerate USB device [ 1224.917180][ T44] usbhid 4-1:1.0: can't add hid device: -71 [ 1224.917303][ T44] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1224.925242][ T44] usb 4-1: USB disconnect, device number 93 [ 1225.456215][T17383] nbd: must specify a size in bytes for the device [ 1226.038604][ T38] audit: type=1326 audit(1761424262.794:11752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.039010][ T38] audit: type=1326 audit(1761424262.794:11753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.039184][ T38] audit: type=1326 audit(1761424262.794:11754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.039234][ T38] audit: type=1326 audit(1761424262.794:11755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.042876][T17382] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1226.071617][ T38] audit: type=1326 audit(1761424262.804:11756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.071683][ T38] audit: type=1326 audit(1761424262.832:11757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.071735][ T38] audit: type=1326 audit(1761424262.832:11758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.071789][ T38] audit: type=1326 audit(1761424262.832:11759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.071842][ T38] audit: type=1326 audit(1761424262.832:11760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.071898][ T38] audit: type=1326 audit(1761424262.832:11761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17369 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfbc8efc9 code=0x7fc00000 [ 1226.956368][ T44] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1227.159334][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 1227.165748][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.165802][ T44] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1227.165827][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.233674][ T44] usb 1-1: config 0 descriptor?? [ 1227.889568][ T44] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1228.336581][ T5806] usb 1-1: USB disconnect, device number 68 [ 1228.463660][ T44] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 1228.616526][ T44] usb 5-1: device descriptor read/64, error -71 [ 1228.869587][ T44] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 1228.877440][T17409] nbd: must specify a size in bytes for the device [ 1229.008591][ T44] usb 5-1: device descriptor read/64, error -71 [ 1229.202966][ T44] usb usb5-port1: attempt power cycle [ 1229.502517][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1229.683974][ T44] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 1229.798008][ T44] usb 5-1: device descriptor read/8, error -71 [ 1230.103229][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.103284][ T10] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1230.103309][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.144757][ T44] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1230.164622][ T44] usb 5-1: device descriptor read/8, error -71 [ 1230.186667][ T10] usb 1-1: config 0 descriptor?? [ 1230.281372][ T44] usb usb5-port1: unable to enumerate USB device [ 1231.059776][ T10] steelseries 0003:1038:12B6.002F: item fetching failed at offset 5/7 [ 1231.060395][ T10] steelseries 0003:1038:12B6.002F: probe with driver steelseries failed with error -22 [ 1231.199280][T17431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3696'. [ 1231.360925][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.482531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.518484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.546549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.582105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.666556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.713707][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.837858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.926025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.939797][ T44] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1232.037725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.118447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.280547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.408371][ T5789] usb 1-1: USB disconnect, device number 69 [ 1232.591798][ T44] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1232.591829][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.591852][ T44] usb 4-1: config 0 has no interface number 0 [ 1232.591905][ T44] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1232.591941][ T44] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1232.595666][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1232.595696][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.595716][ T44] usb 4-1: Product: syz [ 1232.595731][ T44] usb 4-1: Manufacturer: syz [ 1232.595747][ T44] usb 4-1: SerialNumber: syz [ 1232.619025][ T44] usb 4-1: config 0 descriptor?? [ 1232.622457][T17430] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1232.862110][T17449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.864468][T17449] team0: Port device bond0 added [ 1232.944841][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1233.034207][ T44] usb 4-1: probing VID:PID(0424:012C) [ 1233.036322][ T44] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1233.036346][ T44] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1233.036436][ T44] vub300 4-1:0.133: probe with driver vub300 failed with error -22 [ 1233.054302][ T44] usb 4-1: USB disconnect, device number 94 [ 1233.267044][T17455] siw: device registration error -23 [ 1233.285681][T12245] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1233.457269][T12245] usb 5-1: Using ep0 maxpacket: 16 [ 1233.462887][T12245] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1233.462925][T12245] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1233.462955][T12245] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1233.477832][T12245] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1233.477871][T12245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.477892][T12245] usb 5-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1233.477909][T12245] usb 5-1: Manufacturer: ᰉ [ 1233.477923][T12245] usb 5-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1233.946404][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.434787][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.634454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.055031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.077084][T17482] nbd: must specify a size in bytes for the device [ 1237.439070][T12245] usbhid 5-1:1.0: can't add hid device: -71 [ 1237.439192][T12245] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1237.464820][T12245] usb 5-1: USB disconnect, device number 102 [ 1237.968370][T12245] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1238.551985][T12245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.552040][T12245] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1238.552066][T12245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.588936][T12245] usb 5-1: config 0 descriptor?? [ 1239.092779][T12245] steelseries 0003:1038:12B6.0030: item fetching failed at offset 5/7 [ 1239.093752][T12245] steelseries 0003:1038:12B6.0030: probe with driver steelseries failed with error -22 [ 1239.310807][T12245] usb 5-1: USB disconnect, device number 103 [ 1239.357288][ T5926] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1239.540699][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 1239.545119][ T5926] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1239.545156][ T5926] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1239.545187][ T5926] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1239.600206][ T5926] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1239.600240][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.600262][ T5926] usb 3-1: Manufacturer: ᰉ [ 1239.600278][ T5926] usb 3-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1240.063690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.084041][ T44] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1241.111264][T11397] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1241.149630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.742757][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.160503][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.192044][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.192121][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.207754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.212060][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.212096][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.212121][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1242.212167][ T44] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1242.212192][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.217778][ T44] usb 4-1: config 0 descriptor?? [ 1242.270349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.446952][T11397] usb 1-1: Using ep0 maxpacket: 16 [ 1242.462058][T11397] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1242.462100][T11397] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1242.462131][T11397] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1242.473462][T11397] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1242.473494][T11397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.473516][T11397] usb 1-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1242.473546][T11397] usb 1-1: Manufacturer: ᰉ [ 1242.473561][T11397] usb 1-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1243.310118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.414321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.477847][ T5926] usbhid 3-1:1.0: can't add hid device: -71 [ 1243.477983][ T5926] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1243.479857][ T44] uclogic 0003:5543:0005.0031: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 1243.535395][ T44] usb 4-1: USB disconnect, device number 95 [ 1243.546971][ T5926] usb 3-1: USB disconnect, device number 93 [ 1243.885472][ C1] vkms_vblank_simulate: vblank timer overrun [ 1243.999429][T11397] usbhid 1-1:1.0: can't add hid device: -71 [ 1243.999566][T11397] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1244.018230][T11397] usb 1-1: USB disconnect, device number 70 [ 1244.054432][T17525] nbd: must specify a size in bytes for the device [ 1244.538733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.825356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.248031][ T5926] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 1245.466322][ T5926] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1245.466358][ T5926] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x82 is Bulk; changing to Interrupt [ 1245.466383][ T5926] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x3 is Bulk; changing to Interrupt [ 1245.466408][ T5926] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1245.474501][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1245.474533][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.474555][ T5926] usb 3-1: Product: 풨ᯩ꥝쩚꯾⸖阾鮪ꐛ쭧슰㾣੍䮰ᠾ彇富㒒洼겔驜䊟⠃⇃喾啐⓽襤乼싋떩藧邙皞桒㍵ᚫ䠚ᴺ锠
䏳溹䲸⯟睾衳ꭉꠋ [ 1245.474581][ T5926] usb 3-1: Manufacturer: 㢓Ѯ螜琑궈粞㗸귄끀䲇意ꅂⰳ馤炽ㅉ뾛퍻伆㎄뻌뙸珦⟐䑏瑝豆ⷅଌ♭༽Ӻ쑰퓋ෲ顊ﱇᮝ㪺攜渿䂜계卶එ啼彵༈䬔鑔짙뙶쨤핤ꊰ뇽慠睆睽㫎㶄∗⃣쯬ഀ완כֿ뚋㞨㫜씢켇覓▟藍磴ૡ꺔¾ꃿ刞澈騽 [ 1245.474613][ T5926] usb 3-1: SerialNumber: 밞➚漠ፐ䭵硕壵캎ﲐ<봎ጧᗛ吗忸晁떱ⵈ쏸粧坬횅労ﴕఎᘉ䢠揀⭩ᗗ툧匊딇摬訧♿萳䈪ワ鿍䕩ᚅ鼀어켧誜५蒚䞫氆ꃸ堩틺痉縧랢錊䥶ꡎ帡᯺㝄㽩૔악鏛頠㶩汴앎ꔹ虖⤿ᄆ気ꫵ捦ᡇꂬ [ 1245.492864][T17541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1245.493183][T17541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1245.525731][T17541] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1246.374362][ T5926] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1246.397362][ T5926] usb 3-1: USB disconnect, device number 94 [ 1246.450142][T17552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.757597][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 1246.757616][ T38] audit: type=1326 audit(1761424282.185:11764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17547 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1246.757813][ T38] audit: type=1326 audit(1761424282.185:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17547 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe37d9efc9 code=0x7fc00000 [ 1246.797760][ T10] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1246.824004][ T5875] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1246.980629][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1246.984377][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.984412][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.984435][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1246.984480][ T5875] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1246.984496][ T10] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 1246.984504][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.984518][ T10] usb 4-1: config 95 has no interface number 0 [ 1246.984550][ T10] usb 4-1: config 95 interface 1 has no altsetting 0 [ 1247.036241][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1247.036436][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1247.036465][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.111487][ T5875] usb 1-1: config 0 descriptor?? [ 1247.236690][ T5926] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1247.386663][T11397] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1247.429296][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1247.434940][ T5926] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1247.435166][ T5926] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1247.435377][ T5926] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1247.488629][ T10] usb 4-1: USB disconnect, device number 96 [ 1247.516973][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1247.517097][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.517119][ T5926] usb 5-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1247.517137][ T5926] usb 5-1: Manufacturer: ᰉ [ 1247.517256][ T5926] usb 5-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1247.588652][T11397] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1247.609959][T11397] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 1247.610001][T11397] usb 3-1: config 6 has no interface number 0 [ 1247.610487][T11397] usb 3-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1247.610523][T11397] usb 3-1: config 6 interface 200 has no altsetting 0 [ 1247.693044][T11397] usb 3-1: string descriptor 0 read error: -22 [ 1247.693226][T11397] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1247.693253][T11397] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1247.694742][ T5875] uclogic 0003:5543:0005.0032: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0 [ 1248.168024][ T6312] usb 1-1: USB disconnect, device number 71 [ 1248.179720][T11397] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1250.580046][ T5926] usbhid 5-1:1.0: can't add hid device: -71 [ 1250.580179][ T5926] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1250.632495][ T5926] usb 5-1: USB disconnect, device number 104 [ 1250.887634][T11397] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1250.888697][T11397] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1250.888767][T11397] usb 3-1: media controller created [ 1251.031589][T11397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1251.045622][T17579] nbd: must specify a size in bytes for the device [ 1251.446165][T11397] dvb-usb: bulk message failed: -71 (6/0) [ 1251.487247][T11397] dvb-usb: bulk message failed: -71 (6/0) [ 1251.487396][T11397] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1251.502853][T11397] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 1251.509745][T11397] dvb-usb: schedule remote query interval to 150 msecs. [ 1251.509773][T11397] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1251.546363][T11397] usb 3-1: USB disconnect, device number 95 [ 1251.836757][T11397] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1252.264802][ T5926] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1252.490031][T17606] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3750'. [ 1252.530158][ T5875] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1253.113206][ T5926] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1253.113246][ T5926] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x82 is Bulk; changing to Interrupt [ 1253.113273][ T5926] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x3 is Bulk; changing to Interrupt [ 1253.113298][ T5926] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1253.119127][ T5926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1253.119161][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.119183][ T5926] usb 1-1: Product: 풨ᯩ꥝쩚꯾⸖阾鮪ꐛ쭧슰㾣੍䮰ᠾ彇富㒒洼겔驜䊟⠃⇃喾啐⓽襤乼싋떩藧邙皞桒㍵ᚫ䠚ᴺ锠
䏳溹䲸⯟睾衳ꭉꠋ [ 1253.119215][ T5926] usb 1-1: Manufacturer: 㢓Ѯ螜琑궈粞㗸귄끀䲇意ꅂⰳ馤炽ㅉ뾛퍻伆㎄뻌뙸珦⟐䑏瑝豆ⷅଌ♭༽Ӻ쑰퓋ෲ顊ﱇᮝ㪺攜渿䂜계卶එ啼彵༈䬔鑔짙뙶쨤핤ꊰ뇽慠睆睽㫎㶄∗⃣쯬ഀ완כֿ뚋㞨㫜씢켇覓▟藍磴ૡ꺔¾ꃿ刞澈騽 [ 1253.119299][ T5926] usb 1-1: SerialNumber: 밞➚漠ፐ䭵硕壵캎ﲐ<봎ጧᗛ吗忸晁떱ⵈ쏸粧坬횅労ﴕఎᘉ䢠揀⭩ᗗ툧匊딇摬訧♿萳䈪ワ鿍䕩ᚅ鼀어켧誜५蒚䞫氆ꃸ堩틺痉縧랢錊䥶ꡎ帡᯺㝄㽩૔악鏛頠㶩汴앎ꔹ虖⤿ᄆ気ꫵ捦ᡇꂬ [ 1253.268856][T17596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1253.271217][T17596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1253.271421][T17596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1253.428879][ T5875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1253.428979][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.429002][ T5875] usb 4-1: Product: syz [ 1253.429018][ T5875] usb 4-1: Manufacturer: syz [ 1253.429035][ T5875] usb 4-1: SerialNumber: syz [ 1253.503617][ T5875] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1253.507384][ T5926] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1253.552661][ T5926] usb 1-1: USB disconnect, device number 72 [ 1253.624549][ T44] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1253.757809][ T6312] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1253.907144][T11397] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1253.928609][ T6312] usb 3-1: Using ep0 maxpacket: 16 [ 1253.940708][ T6312] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 1253.940746][ T6312] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x2 has invalid maxpacket 57866, setting to 1024 [ 1253.940776][ T6312] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1253.946990][ T6312] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1253.947020][ T6312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.947040][ T6312] usb 3-1: Product: 쳙ᴻ⎊쓫屔鲋㻱ഹ浛⸴틋념個䞐톇 [ 1253.947057][ T6312] usb 3-1: Manufacturer: ᰉ [ 1253.947072][ T6312] usb 3-1: SerialNumber: 氈㣇䔆旅傑硕䳧㽛⽋駡Ɯ桎죍⤌Ҭ饼光㸨땖젳鋊鮑頸绗䞺ᘡ聿嫳ჰ㲼쁬䦶䁨䖭櫉榽볾␺렃졀ॐ꥛ꠜ藧㤸쑪鵛Ҫ✐Ƹ [ 1254.135366][T11397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.135585][T11397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.135611][T11397] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1254.136069][T11397] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1254.136281][T11397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.275941][T11397] usb 5-1: config 0 descriptor?? [ 1254.962299][ T44] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1256.003836][ T44] ath9k_htc: Failed to initialize the device [ 1257.914416][ T6312] usbhid 3-1:1.0: can't add hid device: -71 [ 1257.914564][ T6312] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1257.936957][T11397] uclogic 0003:5543:0005.0033: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 1257.952398][ T6312] ================================================================== [ 1257.952413][ T6312] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1257.952443][ T6312] Read of size 8 at addr ffffc900056aa008 by task kworker/0:7/6312 [ 1257.952459][ T6312] [ 1257.952471][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1257.952491][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1257.952504][ T6312] Workqueue: usb_hub_wq hub_event [ 1257.952525][ T6312] Call Trace: [ 1257.952533][ T6312] [ 1257.952543][ T6312] dump_stack_lvl+0x189/0x250 [ 1257.952574][ T6312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1257.952602][ T6312] ? __pfx__printk+0x10/0x10 [ 1257.952627][ T6312] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1257.952653][ T6312] ? __virt_addr_valid+0xdc/0x5c0 [ 1257.952681][ T6312] ? __virt_addr_valid+0xdc/0x5c0 [ 1257.952709][ T6312] print_report+0xca/0x240 [ 1257.952733][ T6312] ? __list_add_valid_or_report+0x4e/0x130 [ 1257.952753][ T6312] kasan_report+0x118/0x150 [ 1257.952781][ T6312] ? __list_add_valid_or_report+0x4e/0x130 [ 1257.952806][ T6312] __list_add_valid_or_report+0x4e/0x130 [ 1257.952836][ T6312] kcov_remote_stop+0x52d/0x660 [ 1257.952864][ T6312] hub_event+0x45d2/0x4a20 [ 1257.952906][ T6312] ? __pfx_hub_event+0x10/0x10 [ 1257.952924][ T6312] ? process_scheduled_works+0x9ef/0x17b0 [ 1257.952949][ T6312] ? _raw_spin_unlock_irq+0x23/0x50 [ 1257.952972][ T6312] ? process_scheduled_works+0x9ef/0x17b0 [ 1257.952992][ T6312] ? process_scheduled_works+0x9ef/0x17b0 [ 1257.953014][ T6312] process_scheduled_works+0xae1/0x17b0 [ 1257.953051][ T6312] ? __pfx_process_scheduled_works+0x10/0x10 [ 1257.953081][ T6312] worker_thread+0x8a0/0xda0 [ 1257.953104][ T6312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1257.953132][ T6312] ? __kthread_parkme+0x7b/0x200 [ 1257.953172][ T6312] kthread+0x711/0x8a0 [ 1257.953199][ T6312] ? __pfx_worker_thread+0x10/0x10 [ 1257.953240][ T6312] ? __pfx_kthread+0x10/0x10 [ 1257.953264][ T6312] ? rt_spin_unlock+0x150/0x200 [ 1257.953291][ T6312] ? rt_spin_unlock+0x161/0x200 [ 1257.953320][ T6312] ? __pfx_kthread+0x10/0x10 [ 1257.953345][ T6312] ret_from_fork+0x4bc/0x870 [ 1257.953367][ T6312] ? __pfx_ret_from_fork+0x10/0x10 [ 1257.953391][ T6312] ? __switch_to_asm+0x39/0x70 [ 1257.953426][ T6312] ? __switch_to_asm+0x33/0x70 [ 1257.953443][ T6312] ? __pfx_kthread+0x10/0x10 [ 1257.953469][ T6312] ret_from_fork_asm+0x1a/0x30 [ 1257.953494][ T6312] [ 1257.953502][ T6312] [ 1257.953506][ T6312] The buggy address belongs to a vmalloc virtual mapping [ 1257.953522][ T6312] Memory state around the buggy address: [ 1257.953533][ T6312] ffffc900056a9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1257.953545][ T6312] ffffc900056a9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1257.953558][ T6312] >ffffc900056aa000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1257.953572][ T6312] ^ [ 1257.953582][ T6312] ffffc900056aa080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1257.953594][ T6312] ffffc900056aa100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1257.953604][ T6312] ================================================================== [ 1257.953635][ T6312] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1257.953648][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1257.953668][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1257.953679][ T6312] Workqueue: usb_hub_wq hub_event [ 1257.953697][ T6312] Call Trace: [ 1257.953703][ T6312] [ 1257.953710][ T6312] dump_stack_lvl+0x99/0x250 [ 1257.953757][ T6312] ? __asan_memcpy+0x40/0x70 [ 1257.953777][ T6312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1257.953804][ T6312] ? __pfx__printk+0x10/0x10 [ 1257.953831][ T6312] vpanic+0x237/0x6d0 [ 1257.953848][ T6312] ? __pfx_vpanic+0x10/0x10 [ 1257.953864][ T6312] ? irqentry_exit+0x74/0x90 [ 1257.953886][ T6312] ? lockdep_hardirqs_on+0x9c/0x150 [ 1257.953911][ T6312] panic+0xb9/0xc0 [ 1257.953926][ T6312] ? __pfx_panic+0x10/0x10 [ 1257.953945][ T6312] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1257.953970][ T6312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1257.953996][ T6312] ? __list_add_valid_or_report+0x4e/0x130 [ 1257.954018][ T6312] check_panic_on_warn+0x89/0xb0 [ 1257.954035][ T6312] ? __list_add_valid_or_report+0x4e/0x130 [ 1257.954062][ T6312] end_report+0x78/0x160 [ 1257.954086][ T6312] kasan_report+0x129/0x150 [ 1257.954111][ T6312] ? __list_add_valid_or_report+0x4e/0x130 [ 1257.954137][ T6312] __list_add_valid_or_report+0x4e/0x130 [ 1257.954160][ T6312] kcov_remote_stop+0x52d/0x660 [ 1257.954186][ T6312] hub_event+0x45d2/0x4a20 [ 1257.954228][ T6312] ? __pfx_hub_event+0x10/0x10 [ 1257.954246][ T6312] ? process_scheduled_works+0x9ef/0x17b0 [ 1257.954270][ T6312] ? _raw_spin_unlock_irq+0x23/0x50 [ 1257.954299][ T6312] ? process_scheduled_works+0x9ef/0x17b0 [ 1257.954320][ T6312] ? process_scheduled_works+0x9ef/0x17b0 [ 1257.954342][ T6312] process_scheduled_works+0xae1/0x17b0 [ 1257.954376][ T6312] ? __pfx_process_scheduled_works+0x10/0x10 [ 1257.954406][ T6312] worker_thread+0x8a0/0xda0 [ 1257.954428][ T6312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1257.954456][ T6312] ? __kthread_parkme+0x7b/0x200 [ 1257.954483][ T6312] kthread+0x711/0x8a0 [ 1257.954511][ T6312] ? __pfx_worker_thread+0x10/0x10 [ 1257.954532][ T6312] ? __pfx_kthread+0x10/0x10 [ 1257.954557][ T6312] ? rt_spin_unlock+0x150/0x200 [ 1257.954576][ T6312] ? rt_spin_unlock+0x161/0x200 [ 1257.954605][ T6312] ? __pfx_kthread+0x10/0x10 [ 1257.954630][ T6312] ret_from_fork+0x4bc/0x870 [ 1257.954651][ T6312] ? __pfx_ret_from_fork+0x10/0x10 [ 1257.954674][ T6312] ? __switch_to_asm+0x39/0x70 [ 1257.954691][ T6312] ? __switch_to_asm+0x33/0x70 [ 1257.954707][ T6312] ? __pfx_kthread+0x10/0x10 [ 1257.954732][ T6312] ret_from_fork_asm+0x1a/0x30 [ 1257.954757][ T6312] [ 1257.955096][ T6312] Kernel Offset: disabled