last executing test programs: 17m10.089741219s ago: executing program 1 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x20000080) 17m9.861958137s ago: executing program 1 (id=664): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 17m9.450936871s ago: executing program 1 (id=665): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x20, 0x24, 0xe, {0xe, 0x21, "30b43a848130246c50b60116"}}, 0x0, 0x0, 0x0}, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_EXPIRES={0x8, 0x17, 0x6ee}, @RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000100)={0x6, 'veth0_vlan\x00', {0x2}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'veth1_virt_wifi\x00', {0x3}, 0x2}) link(0x0, &(0x7f0000000280)='./file0/file0/..\x00') syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) socket(0x1, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, 0x0) write$sndseq(r4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$tun(r5, &(0x7f0000000440)={@val={0x0, 0x823}, @void, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x2, 0x74, 0x68, 0x0, 0xe, 0x2, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x22, 0x31, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, "e0b9d8f0dbdb2d30993f9d5c68b2b46d6a9074a95ac86de16c34a34c7e3666bd9260a04702e13b771e4cc7b74cefc7fd137766e77df9f6db5e08dbf3de71f5232fabbc8e2f5c1d26dbae9aaa67381e4e9545f45b32b0c805"}}}, 0x78) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17m7.292494347s ago: executing program 1 (id=674): syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2a, 0xcd, 0x75, 0x10, 0x4e8, 0x6601, 0x3ef0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4b, 0x1, 0x80, 0x5, [{{0x9, 0x4, 0xd5, 0x3, 0x0, 0xcb, 0x7f, 0x44, 0xf}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x200002d8, [{0x0, &(0x7f0000000080)=@string={0x0, 0x3, "7017b9cc7de071e5c2a92d676bd261d8b988ca1c7bc6238ce808f2afb2e6fa923b4573dd8644d4ddb201fb426af3"}}]}) 17m5.298965286s ago: executing program 1 (id=689): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000007a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048809}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28, 0x42000}}], 0x2, 0x0) (fail_nth: 2) 17m5.010153279s ago: executing program 1 (id=691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0x4020940d, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = dup2(r5, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) mkdirat(r6, &(0x7f0000000140)='./file0\x00', 0x75) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x296, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x1, 0x3, [0x82b, 0x22e, 0xe30, 0xde9]}) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x4e24, 0x0, 'none\x00', 0x39, 0x40085, 0x13}, 0x2c) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x0, @vsock={0x28, 0x0, 0xffffffff}, @tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x3}}, @in={0x2, 0x4e20, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, 0x0, 0x0) 16m49.706869524s ago: executing program 32 (id=691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0x4020940d, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = dup2(r5, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) mkdirat(r6, &(0x7f0000000140)='./file0\x00', 0x75) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x296, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x1, 0x3, [0x82b, 0x22e, 0xe30, 0xde9]}) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x4e24, 0x0, 'none\x00', 0x39, 0x40085, 0x13}, 0x2c) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x0, @vsock={0x28, 0x0, 0xffffffff}, @tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x3}}, @in={0x2, 0x4e20, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, 0x0, 0x0) 4.164310552s ago: executing program 2 (id=4319): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 3.931852274s ago: executing program 2 (id=4325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 3.752350503s ago: executing program 2 (id=4328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3.475120781s ago: executing program 2 (id=4333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000e5cd00006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc166b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f20ff0f0000000000005dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142db5bdb0032c0b748cf0cfee621589fb3a20b407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce0787a375da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2ac4020000006e00c5b2200a91cbc0c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c243291c9b6300000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000100000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e4411b422a35d3ec4752da0588e42cdbc5fcd245ce5e3ef0dca24931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006e1c38db117fb1115221a661605f4bb9172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e3c9d21f4a3ebbd3fabf6da9a1a1f869a339f67010000100000000734fd1147d45da1a30964e15a19b33c8644fff71b0162f2e1b827e2663e06a751182e968c8ab05fa1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac6b5c58ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a834564e7191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213296cd4ecfd30efe137641471987289b8a00482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745727a44c77d097f69d19fe86f71c38a0226d44ea00ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cf7c377626b557ad31fdee17ba7bb235416e72c84afef2bdb08fb375147b028b89f15bc8976b91158c13c9876daa71e7db0f3f17376be39ea79ce1246c547c740e31c64e5d293e0e5a564dd166b60e61d6ccae46c173b8e1707b15c7d4f9d612a14c2156f4050ebefb69503fdd45e75fee4766694e890940ca9e02da1213440a3dec50ed065ceb3ae84b45163f37dbfeaec7bff2d98d877f81fa184b17f94fc26e3ab969efcd72554766939637835a0340b78e94076e8508d32f1448755216e1b12319bfb0704f27fcd939ee95729b870147346e70415da2ea338a792a0bb0a747b019d2a07c2ab71f220415129f3fea51d39f3dfa96e751d23c880e1fc9bc36432446f25bbb8432946dd3f4d6d753e3c7290358ac1089bd"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 2.846952161s ago: executing program 4 (id=4343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.81309847s ago: executing program 2 (id=4344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000040000000400000002"], 0x48) close(r2) 2.642351802s ago: executing program 4 (id=4347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.592407963s ago: executing program 2 (id=4348): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 2.328316635s ago: executing program 0 (id=4351): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 2.104452763s ago: executing program 0 (id=4355): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x70000) 1.983618576s ago: executing program 0 (id=4357): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.846088933s ago: executing program 0 (id=4358): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x210020000005) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) 1.601627486s ago: executing program 4 (id=4361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000800000001800000ffffffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdbb2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) 1.472174178s ago: executing program 4 (id=4364): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x61, 0x2e, 0x2e, 0x3d]}}, &(0x7f0000001340)=""/4096, 0x2b, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1.28840351s ago: executing program 0 (id=4366): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.287964433s ago: executing program 3 (id=4367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 1.258936247s ago: executing program 5 (id=4368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffe9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.235364152s ago: executing program 4 (id=4369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) stat(&(0x7f0000000080)='./file0\x00', 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x0, 0x400, 0x1, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x7f, 0x1, 0x401}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.120425258s ago: executing program 0 (id=4370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7ffd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x5, {0x5, 0x11, "46ff44"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.113610658s ago: executing program 5 (id=4371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) gettid() sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) 1.074390838s ago: executing program 3 (id=4372): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 703.721198ms ago: executing program 5 (id=4373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) ustat(0xffffffff, 0x0) 703.381737ms ago: executing program 3 (id=4374): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 625.293211ms ago: executing program 5 (id=4375): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 494.589091ms ago: executing program 3 (id=4376): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 208.204838ms ago: executing program 3 (id=4377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 126.821668ms ago: executing program 4 (id=4378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) connect$unix(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 124.23788ms ago: executing program 3 (id=4388): r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) r1 = memfd_create(&(0x7f0000000200)='\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xfe\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xa8ddj\x03\xbd\x16\x93\xb9r\x04h\xaa\x1aT\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa3[\x00\xa9C%}C\xf4c\xba\xf9H\x98}<\x98m#\xf5\x9e\xd3\xea\x00\x00\x00\x00', 0x3) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000f9ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000017, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r10, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x81, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x24044814) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "b53a25"}}, 0x0, 0x0, 0x0}, 0x0) 32.18573ms ago: executing program 5 (id=4379): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) close(r3) 0s ago: executing program 5 (id=4380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d000000000000000003000000000000000000000105000000200000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) kernel console output (not intermixed with test programs): 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 975.886563][T18748] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 975.886586][T18748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af03 [ 975.886602][T18748] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 975.886615][T18748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 975.886628][T18748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 975.886641][T18748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 975.886673][T18748] [ 976.111512][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.255183][T18754] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 976.757466][ T5929] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 976.947348][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 976.955015][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.978690][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.991257][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.011833][ T5929] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 977.022281][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.039465][ T5929] usb 1-1: config 0 descriptor?? [ 977.232095][T17317] Bluetooth: hci1: command 0x0406 tx timeout [ 977.260466][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 977.267932][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 977.279832][ T5929] usb 1-1: USB disconnect, device number 57 [ 977.627798][T17317] Bluetooth: hci5: command 0x0406 tx timeout [ 977.707553][T17317] Bluetooth: hci2: command 0x0406 tx timeout [ 992.921530][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.928388][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1024.181845][T11872] bond0 (unregistering): Released all slaves [ 1024.403784][T11872] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 1024.483108][T11872] dummy0: left promiscuous mode [ 1024.495317][T11872] hsr_slave_0: left promiscuous mode [ 1025.512150][T11872] IPVS: stop unused estimator thread 0... [ 1054.360822][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.367343][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1103.217605][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1103.739174][T18813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1103.754203][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1103.786934][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1104.004384][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1104.052753][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.206040][ T5894] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1104.339715][T18800] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1104.522090][ T5894] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1104.562246][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1104.591760][ T5894] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1104.646810][ T5894] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1104.694683][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.812558][T18819] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1104.941128][ T5894] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1105.432620][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3766'. [ 1105.473276][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3766'. [ 1107.047248][ T5894] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1107.118799][ T47] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1107.162527][ T9] usb 6-1: USB disconnect, device number 7 [ 1107.260663][ T5899] usb 4-1: USB disconnect, device number 91 [ 1107.289457][ T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1107.302500][ T5894] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1107.322798][ T47] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1107.349148][ T5894] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1107.381530][ T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1107.390122][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1107.411815][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.420033][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.474633][T18841] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1107.488213][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1107.501490][T18837] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1107.575490][T18847] program syz.3.3770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.638825][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3769'. [ 1107.751064][ T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1108.002985][T18848] erspan0: left allmulticast mode [ 1108.126036][T18848] erspan0: left promiscuous mode [ 1108.184849][T18848] bridge0: port 1(erspan0) entered disabled state [ 1108.773476][T18853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3771'. [ 1108.897560][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3771'. [ 1108.939350][T18853] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3771'. [ 1109.329103][ T47] usb 1-1: USB disconnect, device number 58 [ 1109.362204][T18858] sock: sock_timestamping_bind_phc: sock not bind to device [ 1109.391618][T18858] syz.3.3772: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1109.453397][T18858] CPU: 1 UID: 0 PID: 18858 Comm: syz.3.3772 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1109.453434][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1109.453450][T18858] Call Trace: [ 1109.453460][T18858] [ 1109.453470][T18858] dump_stack_lvl+0x189/0x250 [ 1109.453513][T18858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.453547][T18858] ? __pfx__printk+0x10/0x10 [ 1109.453570][T18858] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1109.453596][T18858] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1109.453621][T18858] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1109.453649][T18858] warn_alloc+0x214/0x310 [ 1109.453690][T18858] ? __pfx_warn_alloc+0x10/0x10 [ 1109.453720][T18858] ? kasan_save_track+0x4f/0x80 [ 1109.453745][T18858] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1109.453772][T18858] ? xskq_create+0x56/0x170 [ 1109.453801][T18858] ? __ia32_sys_setsockopt+0x18b/0x220 [ 1109.453829][T18858] ? __do_fast_syscall_32+0xb4/0x110 [ 1109.453858][T18858] ? do_fast_syscall_32+0x34/0x80 [ 1109.453886][T18858] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.453926][T18858] __vmalloc_node_range_noprof+0x125/0x12c0 [ 1109.453995][T18858] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1109.454033][T18858] ? __kasan_kmalloc+0x93/0xb0 [ 1109.454077][T18858] vmalloc_user_noprof+0x74/0x80 [ 1109.454111][T18858] ? xskq_create+0xbf/0x170 [ 1109.454137][T18858] xskq_create+0xbf/0x170 [ 1109.454169][T18858] xsk_init_queue+0xb0/0x110 [ 1109.454199][T18858] xsk_setsockopt+0x43f/0x710 [ 1109.454229][T18858] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1109.454267][T18858] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1109.454293][T18858] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1109.454322][T18858] do_sock_setsockopt+0x25a/0x3e0 [ 1109.454356][T18858] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1109.454383][T18858] ? __fget_files+0x2a/0x420 [ 1109.454418][T18858] ? __fget_files+0x3a0/0x420 [ 1109.454447][T18858] ? __fget_files+0x2a/0x420 [ 1109.454487][T18858] __ia32_sys_setsockopt+0x18b/0x220 [ 1109.454537][T18858] __do_fast_syscall_32+0xb4/0x110 [ 1109.454575][T18858] do_fast_syscall_32+0x34/0x80 [ 1109.454604][T18858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.454631][T18858] RIP: 0023:0xf703e539 [ 1109.454649][T18858] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1109.454668][T18858] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1109.454691][T18858] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000000011b [ 1109.454705][T18858] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1109.454719][T18858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1109.454732][T18858] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1109.454745][T18858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.454777][T18858] [ 1109.455118][T18858] Mem-Info: [ 1109.762028][T18858] active_anon:10087 inactive_anon:0 isolated_anon:0 [ 1109.762028][T18858] active_file:22700 inactive_file:40251 isolated_file:0 [ 1109.762028][T18858] unevictable:781 dirty:156 writeback:0 [ 1109.762028][T18858] slab_reclaimable:10737 slab_unreclaimable:122949 [ 1109.762028][T18858] mapped:37915 shmem:3479 pagetables:2056 [ 1109.762028][T18858] sec_pagetables:0 bounce:0 [ 1109.762028][T18858] kernel_misc_reclaimable:0 [ 1109.762028][T18858] free:1264584 free_pcp:308 free_cma:0 [ 1109.843351][T18858] Node 0 active_anon:40272kB inactive_anon:0kB active_file:90800kB inactive_file:160804kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:151592kB dirty:708kB writeback:0kB shmem:12364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:8188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1109.913560][T18858] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1109.973352][T18858] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.003766][T18858] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1110.010104][T18858] Node 0 DMA32 free:1135592kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:40264kB inactive_anon:0kB active_file:90800kB inactive_file:160712kB unevictable:1540kB writepending:708kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:768kB local_pcp:100kB free_cma:0kB [ 1110.041362][T18858] lowmem_reserve[]: 0 0 0 0 0 [ 1110.047655][T18858] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1110.195464][T18858] lowmem_reserve[]: 0 0 0 0 0 [ 1110.208332][T18858] Node 1 Normal free:3904896kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.413420][T18858] lowmem_reserve[]: 0 [ 1110.419595][ T5929] usb 3-1: USB disconnect, device number 76 [ 1110.468114][T18447] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1110.478712][T18858] 0 0 0 0 [ 1110.481909][T18858] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1110.557651][T18858] Node 0 DMA32: 306*4kB (UME) 982*8kB (UME) 635*16kB (UME) 1611*32kB (UME) 517*64kB (UME) 77*128kB (UME) 81*256kB (UM) 44*512kB (UME) 20*1024kB (UME) 10*2048kB (UME) 227*4096kB (UM) = 1127752kB [ 1110.647269][T18858] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1110.693117][T18447] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.861785][T18858] Node 1 Normal: 222*4kB (UME) 63*8kB (UME) 39*16kB (UME) 215*32kB (UME) 101*64kB (UME) 27*128kB (UME) 14*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3904896kB [ 1111.175997][T18447] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1111.198089][T18858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.208090][T18447] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.217566][T18447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.238087][T18858] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1111.247643][ T5929] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1111.297745][T18870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1111.307460][ T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1111.329138][T18858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.349463][T18858] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1111.369359][T18858] 66420 total pagecache pages [ 1111.383174][T18858] 0 pages in swap cache [ 1111.385904][T18447] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.393228][T18858] Free swap = 124996kB [ 1111.469948][ T47] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.496873][T18858] Total swap = 124996kB [ 1111.503173][ T47] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1111.534036][T18858] 2097051 pages RAM [ 1111.574255][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.596542][T18858] 0 pages HighMem/MovableOnly [ 1111.617630][ T47] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.643780][T18858] 424361 pages reserved [ 1111.648367][ T5929] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1111.663310][T18858] 0 pages cma reserved [ 1111.677801][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.732550][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.780530][T18879] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1111.794905][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.870257][ T47] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.920245][T18878] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1112.120152][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1113.307452][T18447] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1113.505387][ T5897] usb 1-1: USB disconnect, device number 59 [ 1113.589803][T18447] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1113.632884][T18447] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1113.811817][T18447] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1113.887265][T18447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.989721][T18889] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1114.041177][T18447] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1114.077295][ T5929] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1114.237834][T18896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3781'. [ 1114.451500][ T47] usb 3-1: USB disconnect, device number 77 [ 1114.584697][ T5929] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1114.604886][ T5929] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1114.702843][ T5929] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1114.709111][T18447] usb 6-1: USB disconnect, device number 8 [ 1114.799828][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.871052][T18895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1115.437215][ T47] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1115.597549][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 1115.740272][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1115.750155][ T47] usb 3-1: config 8 has an invalid descriptor of length 178, skipping remainder of the config [ 1115.760942][ T47] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1115.809951][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.816423][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.857225][ T5899] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1115.981245][ T47] usb 3-1: string descriptor 0 read error: -22 [ 1115.987860][ T47] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=fa.e5 [ 1116.000527][ T47] usb 3-1: New USB device strings: Mfr=181, Product=21, SerialNumber=69 [ 1116.046591][ T5899] usb 1-1: config 0 has no interfaces? [ 1116.059536][ T5899] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1116.070735][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.082580][ T5899] usb 1-1: Product: syz [ 1116.090050][ T5899] usb 1-1: Manufacturer: syz [ 1116.094793][ T5899] usb 1-1: SerialNumber: syz [ 1116.122311][ T5929] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1116.200787][ T5899] usb 1-1: config 0 descriptor?? [ 1116.608513][T18908] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1116.751548][ T9] usb 4-1: USB disconnect, device number 92 [ 1116.937582][T18447] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1117.052239][ T5897] usb 5-1: USB disconnect, device number 66 [ 1117.120523][T18447] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1117.141742][T18447] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1117.177711][T18447] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1117.252081][T18447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.333181][T18911] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1117.410312][T18447] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1118.003125][ T5929] usb 1-1: USB disconnect, device number 60 [ 1118.142776][T18447] usb 3-1: USB disconnect, device number 78 [ 1118.870813][T18447] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1118.950312][T18935] veth1_virt_wifi: entered promiscuous mode [ 1118.956496][T18935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3790'. [ 1118.977449][T18935] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1119.050291][T18447] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1119.111993][T18447] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1119.198657][T18447] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1119.233051][T18447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.286522][T18926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1119.350930][T18447] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1119.927678][T18447] usb 6-1: USB disconnect, device number 9 [ 1119.983974][T18941] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1120.895795][ T5929] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1121.244914][ T47] usb 1-1: USB disconnect, device number 61 [ 1121.508326][ T5929] usb 6-1: config 0 has no interfaces? [ 1121.526330][ T5929] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1121.606861][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.654660][ T5929] usb 6-1: Product: syz [ 1121.697496][ T5929] usb 6-1: Manufacturer: syz [ 1121.702122][ T5929] usb 6-1: SerialNumber: syz [ 1121.768391][ T5929] usb 6-1: config 0 descriptor?? [ 1121.777226][ T47] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 1122.224820][ T47] usb 1-1: No LPM exit latency info found, disabling LPM. [ 1122.283829][ T47] usb 1-1: config 0 has an invalid interface number: 253 but max is 2 [ 1122.754442][ T47] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1122.897814][ T5929] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1122.919941][ T47] usb 1-1: config 0 has an invalid interface number: 169 but max is 2 [ 1122.945130][ T47] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1122.966958][ T47] usb 1-1: config 0 has an invalid interface number: 4 but max is 2 [ 1123.037820][ T47] usb 1-1: config 0 has no interface number 0 [ 1123.141423][ T47] usb 1-1: config 0 has no interface number 1 [ 1123.170612][ T47] usb 1-1: config 0 has no interface number 2 [ 1123.177544][ T5929] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1123.190538][ T5929] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1123.210662][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0x4 has invalid maxpacket 1024, setting to 8 [ 1123.221933][ T5929] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.240703][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.249309][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0xD has invalid maxpacket 1200, setting to 8 [ 1123.285600][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 1123.316500][T18957] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1123.328722][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 1123.370398][ T5929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1123.434593][ T47] usb 1-1: config 0 interface 253 altsetting 120 has a duplicate endpoint with address 0xE, skipping [ 1123.588957][ T47] usb 1-1: config 0 interface 253 altsetting 120 has a duplicate endpoint with address 0xE, skipping [ 1123.600045][ T47] usb 1-1: config 0 interface 253 altsetting 120 has a duplicate endpoint with address 0xE, skipping [ 1123.610982][ T47] usb 1-1: config 0 interface 253 altsetting 120 has an invalid descriptor for endpoint zero, skipping [ 1123.622930][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0x1 has invalid maxpacket 512, setting to 8 [ 1123.641021][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0xB is Bulk; changing to Interrupt [ 1123.654698][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1123.666326][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 1123.924742][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 1124.025409][ T47] usb 1-1: config 0 interface 253 altsetting 120 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 1124.058228][ T47] usb 1-1: config 0 interface 169 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 1124.178857][ T47] usb 1-1: config 0 interface 169 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 1124.375661][ T9] usb 6-1: USB disconnect, device number 10 [ 1124.537337][ T47] usb 1-1: config 0 interface 169 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1124.567263][ T47] usb 1-1: config 0 interface 169 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 8 [ 1124.602943][ T47] usb 1-1: config 0 interface 169 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 1124.656050][ T47] usb 1-1: config 0 interface 169 altsetting 8 endpoint 0x7 is Bulk; changing to Interrupt [ 1124.738992][ T47] usb 1-1: config 0 interface 4 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 0 [ 1124.763839][ T47] usb 1-1: config 0 interface 4 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1125.385674][ T5897] usb 4-1: USB disconnect, device number 93 [ 1125.412497][ T47] usb 1-1: config 0 interface 4 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1125.442977][ T47] usb 1-1: config 0 interface 4 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 1125.457695][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1125.488182][ T47] usb 1-1: config 0 interface 4 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1125.516369][ T47] usb 1-1: config 0 interface 253 has no altsetting 0 [ 1125.587899][ T47] usb 1-1: config 0 interface 169 has no altsetting 0 [ 1125.661005][ T47] usb 1-1: config 0 interface 4 has no altsetting 0 [ 1125.726559][ T47] usb 1-1: string descriptor 0 read error: -71 [ 1125.745998][ T47] usb 1-1: New USB device found, idVendor=0403, idProduct=d071, bcdDevice=95.3d [ 1125.766515][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.794610][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.830485][ T47] usb 1-1: config 0 descriptor?? [ 1125.863010][ T47] usb 1-1: can't set config #0, error -71 [ 1125.907763][ T47] usb 1-1: USB disconnect, device number 62 [ 1125.913904][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1125.953075][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1126.021226][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.147636][T18974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1126.353552][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1126.517383][ T47] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1126.677674][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 1126.694860][ T47] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1126.703489][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.707607][ T5897] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1126.852139][ T47] usb 1-1: config 0 has no interface number 0 [ 1126.883786][ T47] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1126.943662][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.965249][ T47] usb 1-1: config 0 descriptor?? [ 1127.002580][ T47] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 1127.024063][ T47] usb 1-1: No valid video chain found. [ 1127.122076][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.160615][ T5897] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.197254][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.249554][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.289027][T18990] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1127.302796][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.377289][ T47] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1127.607702][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1127.650328][ T47] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.660695][ T47] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1127.761121][ T5897] usb 1-1: USB disconnect, device number 63 [ 1127.850094][ T5898] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1127.870012][ T47] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1127.902130][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1127.909341][ T47] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1127.925018][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.946899][ T47] usb 4-1: config 0 descriptor?? [ 1128.080882][ T5899] usb 6-1: USB disconnect, device number 11 [ 1128.111880][ T5898] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1128.149521][ T5898] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1128.166266][ T5898] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.202826][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.278347][T18999] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1128.395639][ T47] corsair-cpro 0003:1B1C:0C10.003B: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1128.627013][ T47] corsair-cpro 0003:1B1C:0C10.003B: probe with driver corsair-cpro failed with error -71 [ 1128.766600][ T47] usb 4-1: USB disconnect, device number 94 [ 1129.277777][ T5897] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1129.505727][ T5897] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.757878][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1129.775840][ T5929] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1129.833279][T18447] usb 3-1: USB disconnect, device number 79 [ 1129.856169][ T5897] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1129.960530][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 1129.966224][ T5897] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1129.990466][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1130.019112][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 1130.036417][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 1130.118367][ T5899] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1130.317886][ T5929] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1130.346532][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.369850][ T5929] usb 4-1: Product: syz [ 1130.374027][ T5929] usb 4-1: Manufacturer: syz [ 1130.419023][ T5929] usb 4-1: SerialNumber: syz [ 1130.444808][ T5929] usb 4-1: config 0 descriptor?? [ 1130.450450][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 1130.467563][ T5899] usb 6-1: config 1 has no interfaces? [ 1130.473265][ T5897] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1130.493033][ T5899] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1130.505862][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.552878][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.576055][ T5899] usb 6-1: Product: syz [ 1130.604092][ T5899] usb 6-1: Manufacturer: syz [ 1130.639235][ T5899] usb 6-1: SerialNumber: syz [ 1130.665406][ T5897] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1130.711997][T19020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.733974][T19020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.756068][ T5897] usb 1-1: invalid MIDI out EP 0 [ 1130.832542][ T5929] rc_core: IR keymap rc-streamzap not found [ 1130.865679][ T5929] Registered IR keymap rc-empty [ 1130.891932][ T5929] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1130.920006][T19014] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1130.952289][T19020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.972979][T19011] delete_channel: no stack [ 1130.981074][T19020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.005694][ T5929] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input63 [ 1131.059372][ T5929] usb 4-1: USB disconnect, device number 95 [ 1131.274234][ T5897] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1131.380212][ T5897] usb 1-1: USB disconnect, device number 64 [ 1131.443023][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1131.471660][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1132.117563][ T5929] usb 5-1: USB disconnect, device number 67 [ 1133.028867][ T5929] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1133.332127][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.353014][ T5929] usb 5-1: config 0 has no interface number 0 [ 1133.383483][ T5929] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.434469][ T5929] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1133.552309][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.662812][ T5929] usb 5-1: config 0 descriptor?? [ 1133.679239][ T5899] usb 6-1: USB disconnect, device number 12 [ 1133.732351][ T5929] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1134.054034][T19039] netlink: 'syz.4.3813': attribute type 2 has an invalid length. [ 1134.177273][ T5929] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1134.370321][ T5899] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1134.451904][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1134.469976][ T5929] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1134.495116][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1134.515347][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.540492][T19050] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1134.551042][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1134.614231][ T5897] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1134.624035][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1134.657534][ T5899] usb 1-1: config 0 has no interface number 0 [ 1134.696903][ T5899] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.774904][ T5899] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1134.806214][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.807529][ T5897] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1134.906187][ T5899] usb 1-1: config 0 descriptor?? [ 1134.943948][ T5899] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 1134.954478][ T5897] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1135.029074][ T5897] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.192588][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.280760][T19055] netlink: 'syz.0.3817': attribute type 2 has an invalid length. [ 1135.286982][T19060] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1135.346640][ T5897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1135.561398][ T5899] usb 5-1: USB disconnect, device number 68 [ 1136.017355][ T5899] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1136.173690][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1136.196019][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1136.222677][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1136.245750][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.303659][T19070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1136.311758][ T5895] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1136.336419][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1136.519535][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 1136.555766][T18447] usb 3-1: USB disconnect, device number 80 [ 1136.563800][ T5895] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1136.582084][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.675078][ T5895] usb 5-1: config 0 has no interface number 0 [ 1136.702686][ T5895] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1136.712328][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.735475][ T5895] usb 5-1: config 0 descriptor?? [ 1136.956872][T19074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3821'. [ 1137.058556][ T5895] usb 5-1: Found UVC 0.00 device (0bd3:0555) [ 1137.130535][ T5895] usb 5-1: No valid video chain found. [ 1137.498687][T18447] usb 1-1: USB disconnect, device number 65 [ 1137.786560][T18447] usb 5-1: USB disconnect, device number 69 [ 1138.353989][ T5897] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1138.440566][ T5929] usb 6-1: USB disconnect, device number 13 [ 1138.716152][ T5897] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1138.753861][ T5897] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1138.817253][T18502] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1138.830675][ T5897] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1138.865861][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.153436][T19083] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1139.166451][ T5897] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1139.216205][ T9] usb 4-1: USB disconnect, device number 96 [ 1139.327221][ T5929] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1139.351718][T18502] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1139.404463][T18502] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1139.416006][T18502] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1139.431689][T18502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.450180][T19085] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1139.565246][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1139.605695][ T5929] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1139.640961][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1139.655710][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1139.684383][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.768367][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1139.799613][T19094] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1140.815111][T18502] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.947602][ T5897] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1140.974542][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1141.137628][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 1141.155704][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.187381][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1141.212045][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.537310][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1141.565968][T18447] usb 1-1: USB disconnect, device number 66 [ 1141.602549][ T5897] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1141.614888][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1141.632196][ T9] usb 4-1: config 1 has no interfaces? [ 1141.658555][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1141.723787][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.783344][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.843297][ T5929] usb 6-1: USB disconnect, device number 14 [ 1141.967242][ T9] usb 4-1: Product: syz [ 1141.971874][ T9] usb 4-1: Manufacturer: syz [ 1141.976504][ T9] usb 4-1: SerialNumber: syz [ 1141.982183][ T5897] usb 5-1: config 0 descriptor?? [ 1142.006853][T19108] IPVS: Unknown mcast interface: veth0_virt_wifi [ 1142.207743][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 1142.231406][T19096] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1142.268916][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1142.298774][ T5897] usb 5-1: USB disconnect, device number 70 [ 1142.407534][ T5929] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1142.580115][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 1142.588212][ T5929] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1142.613671][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.676217][ T5929] usb 6-1: config 0 descriptor?? [ 1142.702707][ T5929] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1142.880942][ T5899] usb 3-1: USB disconnect, device number 81 [ 1143.677384][ T5899] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1143.842986][ T5899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1143.862336][ T5899] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1143.882289][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.941680][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.984545][T19120] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1144.025534][ T5899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.255961][ T9] usb 4-1: USB disconnect, device number 97 [ 1145.013093][T19131] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3833'. [ 1145.022415][T19132] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3834'. [ 1145.096628][T19108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1145.157399][ T5929] gspca_sonixj: i2c_w8 err -71 [ 1145.162412][ T5929] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1145.865127][ T5929] usb 6-1: USB disconnect, device number 15 [ 1146.626793][ T5899] usb 5-1: USB disconnect, device number 71 [ 1146.637384][ T5929] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1146.817542][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 1146.869393][ T5929] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1146.883170][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.896296][ T5929] usb 6-1: config 0 has no interface number 0 [ 1146.922442][ T5929] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1146.933855][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.955453][ T5929] usb 6-1: config 0 descriptor?? [ 1146.982637][ T5929] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 1146.996320][ T5929] usb 6-1: No valid video chain found. [ 1147.617580][T18447] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1147.747178][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1147.847948][ T5894] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1147.878548][ T5898] usb 6-1: USB disconnect, device number 16 [ 1147.985709][T18447] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1148.001219][T18447] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1148.011409][T18447] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.100918][T18447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.126401][T19155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1148.138465][T18447] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1148.179159][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1148.195797][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1148.219495][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.272406][ T5894] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 1148.286820][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.315597][ T5894] usb 4-1: config 0 has no interface number 0 [ 1148.342647][ T5894] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1148.458824][T19146] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1148.474965][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.483291][ T5894] usb 4-1: Product: syz [ 1148.487889][ T5894] usb 4-1: Manufacturer: syz [ 1148.506916][ T5894] usb 4-1: SerialNumber: syz [ 1148.525766][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1148.645260][ T5894] usb 4-1: config 0 descriptor?? [ 1148.802675][ T5894] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1148.847297][ T5894] pctv452e: pctv452e_power_ctrl: 1 [ 1148.847297][ T5894] [ 1148.861813][ T5894] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1148.861813][ T5894] [ 1148.966710][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 1149.438094][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1149.486173][ T5894] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1149.666197][T18447] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1150.007271][T18447] usb 6-1: Using ep0 maxpacket: 16 [ 1150.015485][T18447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.036896][T18447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.058451][T18447] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.086426][T18447] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.114619][T18447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.155565][T18447] usb 6-1: config 0 descriptor?? [ 1150.225979][ T5894] usb 3-1: USB disconnect, device number 82 [ 1150.398732][T18447] usbhid 6-1:0.0: can't add hid device: -71 [ 1150.427068][T18447] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1150.557167][ T5899] usb 5-1: USB disconnect, device number 72 [ 1150.572554][T18447] usb 6-1: USB disconnect, device number 17 [ 1150.897621][ T5898] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1151.149561][ T5898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1151.160033][ T5898] usb 3-1: config 0 has no interface number 0 [ 1151.177338][ T5899] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1151.192824][ T5898] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.217591][T19181] IPVS: Error connecting to the multicast addr [ 1151.224437][ T5898] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.240451][ T5898] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1151.251233][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.344892][ T5898] usb 3-1: config 0 descriptor?? [ 1151.353065][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1151.376116][ T5899] usb 5-1: config 1 has no interfaces? [ 1151.390125][ T5899] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1151.405503][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.444122][ T5899] usb 5-1: Product: syz [ 1151.446190][T18447] usb 4-1: USB disconnect, device number 98 [ 1151.463529][ T5899] usb 5-1: Manufacturer: syz [ 1151.469473][ T5929] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1151.514383][ T5899] usb 5-1: SerialNumber: syz [ 1151.647237][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 1151.683098][ T5929] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1151.703138][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.848340][ T5898] hid (null): global environment stack underflow [ 1151.862858][T19174] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3844'. [ 1151.899851][ T5929] usb 1-1: config 0 descriptor?? [ 1151.906910][ T5898] uclogic 0003:5543:0522.003C: global environment stack underflow [ 1151.944379][ T5898] uclogic 0003:5543:0522.003C: item 0 1 1 11 parsing failed [ 1151.956040][ T5929] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1151.986538][ T5898] uclogic 0003:5543:0522.003C: parse failed [ 1152.190770][ T5898] uclogic 0003:5543:0522.003C: probe with driver uclogic failed with error -22 [ 1152.236652][ T5898] usb 3-1: USB disconnect, device number 83 [ 1152.757967][ T47] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1152.925348][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1152.938553][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1152.948955][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1152.995577][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.155896][T19190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1153.185153][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1153.487233][T19195] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1154.145150][ T5929] gspca_sonixj: i2c_w8 err -110 [ 1154.444730][ T5929] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1155.076575][ T5899] usb 5-1: USB disconnect, device number 73 [ 1155.192559][T18447] usb 1-1: USB disconnect, device number 67 [ 1155.217224][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1155.401740][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1155.411946][ T9] usb 6-1: config 0 has no interface number 0 [ 1155.702874][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.763671][ T9] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1155.796358][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.853190][ T9] usb 6-1: config 0 descriptor?? [ 1155.891392][ T9] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1155.947433][ T47] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1156.211080][ T47] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1156.274683][T19201] netlink: 'syz.5.3849': attribute type 2 has an invalid length. [ 1156.357372][ T47] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1156.457541][T19224] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3855'. [ 1156.912584][ T9] usb 4-1: USB disconnect, device number 99 [ 1156.951110][ T47] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1157.557149][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.630373][T19215] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1157.645883][ T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1157.778149][T19231] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.3856'. [ 1158.177903][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1158.240668][ T5894] usb 6-1: USB disconnect, device number 18 [ 1158.351207][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1158.363097][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1158.446468][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1158.495021][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.526419][T19233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1158.542412][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.489948][ T9] usb 3-1: USB disconnect, device number 84 [ 1160.999247][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1161.221444][ T47] usb 4-1: USB disconnect, device number 100 [ 1161.227689][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1161.230082][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1161.263378][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.283055][ T9] usb 3-1: config 0 descriptor?? [ 1161.301131][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1162.725945][T19284] QAT: Device 6 not found [ 1162.806160][T19285] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3869'. [ 1163.915657][T19253] lo: entered allmulticast mode [ 1163.922742][T19253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1163.941927][T19253] IPVS: stopping master sync thread 17922 ... [ 1163.967508][ T9] gspca_sonixj: i2c_w8 err -71 [ 1163.972572][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1163.991263][ T9] usb 3-1: USB disconnect, device number 85 [ 1164.078128][T19296] FAULT_INJECTION: forcing a failure. [ 1164.078128][T19296] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.091722][T19296] CPU: 1 UID: 0 PID: 19296 Comm: syz.4.3875 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1164.091748][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.091762][T19296] Call Trace: [ 1164.091770][T19296] [ 1164.091791][T19296] dump_stack_lvl+0x189/0x250 [ 1164.091824][T19296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.091851][T19296] ? __pfx__printk+0x10/0x10 [ 1164.091873][T19296] ? __pfx___might_resched+0x10/0x10 [ 1164.091891][T19296] ? fs_reclaim_acquire+0x7d/0x100 [ 1164.091924][T19296] should_fail_ex+0x414/0x560 [ 1164.091948][T19296] should_failslab+0xa8/0x100 [ 1164.091975][T19296] __kmalloc_cache_noprof+0x70/0x3d0 [ 1164.092000][T19296] ? alloc_fs_context+0x61/0x7d0 [ 1164.092029][T19296] alloc_fs_context+0x61/0x7d0 [ 1164.092056][T19296] ? kfree+0x193/0x440 [ 1164.092076][T19296] ? get_fs_type+0x407/0x480 [ 1164.092108][T19296] __se_sys_fsopen+0xa5/0x2b0 [ 1164.092155][T19296] __do_fast_syscall_32+0xb4/0x110 [ 1164.092182][T19296] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.092209][T19296] do_fast_syscall_32+0x34/0x80 [ 1164.092234][T19296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1164.092257][T19296] RIP: 0023:0xf70be539 [ 1164.092273][T19296] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1164.092289][T19296] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 00000000000001ae [ 1164.092308][T19296] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000 [ 1164.092321][T19296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1164.092332][T19296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1164.092343][T19296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1164.092354][T19296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1164.092380][T19296] [ 1164.432646][ T47] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1164.821751][ T47] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1164.840168][ T47] usb 4-1: config 0 has no interface number 0 [ 1164.846363][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.907211][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.954513][ T47] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1165.027557][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.209672][ T47] usb 4-1: config 0 descriptor?? [ 1165.479701][T12529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1165.489337][T12529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1165.498320][T12529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1165.506879][T12529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1165.514574][T12529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1165.730755][ T47] hid (null): global environment stack underflow [ 1165.849634][ T47] uclogic 0003:5543:0522.003D: global environment stack underflow [ 1165.879832][ T47] uclogic 0003:5543:0522.003D: item 0 1 1 11 parsing failed [ 1165.890856][ T47] uclogic 0003:5543:0522.003D: parse failed [ 1165.899569][ T47] uclogic 0003:5543:0522.003D: probe with driver uclogic failed with error -22 [ 1166.017395][ T5899] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1166.232648][ T5894] usb 4-1: USB disconnect, device number 101 [ 1166.257747][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.285815][ T5899] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1166.447385][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.456489][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.607603][ T5911] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1166.650421][T19320] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1166.721755][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.841793][T19318] chnl_net:caif_netlink_parms(): no params data found [ 1167.111782][ T5911] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 1167.197518][ T5911] usb 5-1: config 0 has no interface number 0 [ 1167.262823][ T5911] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1167.344314][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.394803][ T5911] usb 5-1: Product: syz [ 1167.415883][ T5911] usb 5-1: Manufacturer: syz [ 1167.420596][ T5911] usb 5-1: SerialNumber: syz [ 1167.467527][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1167.478677][ T5911] usb 5-1: config 0 descriptor?? [ 1167.498410][ T5911] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1167.506410][ T5911] pctv452e: pctv452e_power_ctrl: 1 [ 1167.506410][ T5911] [ 1167.534680][ T5911] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1167.534680][ T5911] [ 1167.562399][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 1167.580452][ T5911] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1167.618924][ T5911] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1167.628731][T12529] Bluetooth: hci3: command tx timeout [ 1167.679721][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.727310][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1167.736551][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.749747][ T9] usb 3-1: config 0 descriptor?? [ 1167.759810][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1167.914717][T19318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.932961][T19318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.941034][T19318] bridge_slave_0: entered allmulticast mode [ 1167.950273][T19318] bridge_slave_0: entered promiscuous mode [ 1167.962813][T19318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.971536][T19318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.981722][T19318] bridge_slave_1: entered allmulticast mode [ 1167.990999][T19318] bridge_slave_1: entered promiscuous mode [ 1168.111837][T19318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.164118][T19318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.174513][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1168.187566][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1168.214449][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1168.332368][T19318] team0: Port device team_slave_0 added [ 1168.346235][T19318] team0: Port device team_slave_1 added [ 1168.433531][T19318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.444994][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.496346][T19318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.546496][T19318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.566186][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.638689][T19318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.816773][ T5911] usb 1-1: USB disconnect, device number 68 [ 1168.949104][T19318] hsr_slave_0: entered promiscuous mode [ 1168.955771][T19318] hsr_slave_1: entered promiscuous mode [ 1168.962772][T19318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.971605][T19318] Cannot create hsr debugfs directory [ 1169.174173][T11872] dvmrp0 (unregistering): left allmulticast mode [ 1169.270693][T11872] team0: Port device bridge2 removed [ 1169.454060][T11872] bond0 (unregistering): left promiscuous mode [ 1169.460499][T11872] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 1169.471299][T11872] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1169.484223][T11872] bond0 (unregistering): Released all slaves [ 1169.564450][T11872] tipc: Left network mode [ 1169.712616][T12529] Bluetooth: hci3: command tx timeout [ 1169.833106][ T5911] usb 5-1: USB disconnect, device number 74 [ 1169.845005][T11872] batadv_slave_1: left promiscuous mode [ 1169.893717][T11872] hsr_slave_0: left promiscuous mode [ 1170.209244][T19355] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.3884'. [ 1170.280886][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 1170.301437][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 1170.336972][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 1170.344053][ T5894] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1170.392138][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 1170.409633][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1170.486730][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1170.552795][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1170.574341][ T5894] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 1170.582901][ T5894] usb 1-1: config 0 has no interface number 0 [ 1170.593506][ T5894] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1170.604100][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.615648][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1170.627245][ T5894] usb 1-1: Product: syz [ 1170.639659][ T5894] usb 1-1: Manufacturer: syz [ 1170.653745][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1170.662911][ T5894] usb 1-1: SerialNumber: syz [ 1170.683417][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1170.694802][ T5894] usb 1-1: config 0 descriptor?? [ 1170.707666][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1170.725468][ T5894] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1170.744534][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1170.753434][ T5894] pctv452e: pctv452e_power_ctrl: 1 [ 1170.753434][ T5894] [ 1170.766037][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1170.778333][ T5894] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1170.778333][ T5894] [ 1170.795662][ T9] pwc: Registered as video103. [ 1170.852981][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 1170.859155][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input64 [ 1170.876757][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1170.938056][ T9] usb 3-1: USB disconnect, device number 86 [ 1171.167040][ T5894] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1171.558234][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1171.671205][T19370] FAULT_INJECTION: forcing a failure. [ 1171.671205][T19370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.684725][T19370] CPU: 1 UID: 0 PID: 19370 Comm: syz.4.3888 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1171.684753][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1171.684767][T19370] Call Trace: [ 1171.684776][T19370] [ 1171.684785][T19370] dump_stack_lvl+0x189/0x250 [ 1171.684824][T19370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1171.684867][T19370] ? __pfx__printk+0x10/0x10 [ 1171.684902][T19370] should_fail_ex+0x414/0x560 [ 1171.684930][T19370] _copy_to_user+0x31/0xb0 [ 1171.684963][T19370] simple_read_from_buffer+0xe1/0x170 [ 1171.684996][T19370] proc_fail_nth_read+0x1df/0x250 [ 1171.685030][T19370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1171.685076][T19370] ? rw_verify_area+0x258/0x650 [ 1171.685097][T19370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1171.685126][T19370] vfs_read+0x1fd/0x980 [ 1171.685153][T19370] ? __pfx___mutex_lock+0x10/0x10 [ 1171.685180][T19370] ? __pfx_vfs_read+0x10/0x10 [ 1171.685204][T19370] ? __fget_files+0x2a/0x420 [ 1171.685234][T19370] ? __fget_files+0x3a0/0x420 [ 1171.685259][T19370] ? __fget_files+0x2a/0x420 [ 1171.685295][T19370] ksys_read+0x145/0x250 [ 1171.685320][T19370] ? __pfx_ksys_read+0x10/0x10 [ 1171.685345][T19370] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1171.685372][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1171.685399][T19370] __do_fast_syscall_32+0xb4/0x110 [ 1171.685435][T19370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1171.685463][T19370] do_fast_syscall_32+0x34/0x80 [ 1171.685491][T19370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1171.685515][T19370] RIP: 0023:0xf70be539 [ 1171.685532][T19370] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1171.685550][T19370] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1171.685570][T19370] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50ae620 [ 1171.685584][T19370] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 1171.685596][T19370] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1171.685608][T19370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1171.685620][T19370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1171.685648][T19370] [ 1171.719005][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1171.797469][T12529] Bluetooth: hci3: command tx timeout [ 1172.007427][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1172.021134][ T9] usb 3-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 32 [ 1172.041613][ T9] usb 3-1: config 1 interface 0 altsetting 252 endpoint 0x3 has invalid maxpacket 7847, setting to 1024 [ 1172.055739][ T9] usb 3-1: config 1 interface 0 altsetting 252 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1172.087642][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1172.103066][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1172.123484][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.132040][ T9] usb 3-1: Product: syz [ 1172.145413][ T9] usb 3-1: Manufacturer: syz [ 1172.162686][ T9] usb 3-1: SerialNumber: syz [ 1172.177610][T19359] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1172.185025][T19359] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1172.463207][T19359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.473144][T19359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.563240][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1172.605620][ T9] usb 3-1: USB disconnect, device number 87 [ 1172.622402][T19376] sock: sock_timestamping_bind_phc: sock not bind to device [ 1172.633825][T19376] syz.3.3890: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1172.674742][T19376] CPU: 1 UID: 0 PID: 19376 Comm: syz.3.3890 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1172.674764][T19376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1172.674773][T19376] Call Trace: [ 1172.674779][T19376] [ 1172.674786][T19376] dump_stack_lvl+0x189/0x250 [ 1172.674813][T19376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1172.674835][T19376] ? __pfx__printk+0x10/0x10 [ 1172.674849][T19376] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1172.674865][T19376] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1172.674882][T19376] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1172.674899][T19376] warn_alloc+0x214/0x310 [ 1172.674925][T19376] ? __pfx_warn_alloc+0x10/0x10 [ 1172.674945][T19376] ? kasan_save_track+0x4f/0x80 [ 1172.674962][T19376] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1172.674980][T19376] ? xskq_create+0x56/0x170 [ 1172.674998][T19376] ? __ia32_sys_setsockopt+0x18b/0x220 [ 1172.675017][T19376] ? __do_fast_syscall_32+0xb4/0x110 [ 1172.675035][T19376] ? do_fast_syscall_32+0x34/0x80 [ 1172.675053][T19376] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1172.675077][T19376] __vmalloc_node_range_noprof+0x125/0x12c0 [ 1172.675119][T19376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1172.675142][T19376] ? __kasan_kmalloc+0x93/0xb0 [ 1172.675164][T19376] vmalloc_user_noprof+0x74/0x80 [ 1172.675185][T19376] ? xskq_create+0xbf/0x170 [ 1172.675201][T19376] xskq_create+0xbf/0x170 [ 1172.675221][T19376] xsk_init_queue+0xb0/0x110 [ 1172.675239][T19376] xsk_setsockopt+0x43f/0x710 [ 1172.675257][T19376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1172.675280][T19376] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1172.675297][T19376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1172.675314][T19376] do_sock_setsockopt+0x25a/0x3e0 [ 1172.675334][T19376] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1172.675351][T19376] ? __fget_files+0x2a/0x420 [ 1172.675374][T19376] ? __fget_files+0x3a0/0x420 [ 1172.675398][T19376] ? __fget_files+0x2a/0x420 [ 1172.675423][T19376] __ia32_sys_setsockopt+0x18b/0x220 [ 1172.675446][T19376] __do_fast_syscall_32+0xb4/0x110 [ 1172.675476][T19376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1172.675506][T19376] do_fast_syscall_32+0x34/0x80 [ 1172.675534][T19376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1172.675557][T19376] RIP: 0023:0xf703e539 [ 1172.675573][T19376] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1172.675591][T19376] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1172.675610][T19376] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000000011b [ 1172.675624][T19376] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1172.675637][T19376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.675649][T19376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1172.675661][T19376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1172.675690][T19376] [ 1172.676965][T19376] Mem-Info: [ 1173.062982][T19376] active_anon:9454 inactive_anon:0 isolated_anon:0 [ 1173.062982][T19376] active_file:22700 inactive_file:40278 isolated_file:0 [ 1173.062982][T19376] unevictable:768 dirty:157 writeback:0 [ 1173.062982][T19376] slab_reclaimable:10760 slab_unreclaimable:116977 [ 1173.062982][T19376] mapped:36201 shmem:3478 pagetables:1929 [ 1173.062982][T19376] sec_pagetables:0 bounce:0 [ 1173.062982][T19376] kernel_misc_reclaimable:0 [ 1173.062982][T19376] free:1270562 free_pcp:828 free_cma:0 [ 1173.112459][ T5899] usb 1-1: USB disconnect, device number 69 [ 1173.126904][T19376] Node 0 active_anon:38016kB inactive_anon:0kB active_file:90800kB inactive_file:160912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144904kB dirty:624kB writeback:0kB shmem:12376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12348kB pagetables:7816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1173.187597][T19376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1173.218854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.287218][T19376] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.314331][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.379982][T19376] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 1173.386710][T19376] Node 0 DMA32 free:1157416kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:40408kB inactive_anon:0kB active_file:90800kB inactive_file:160820kB unevictable:1536kB writepending:720kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:4328kB local_pcp:1236kB free_cma:0kB [ 1173.417115][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.462539][T19376] lowmem_reserve[]: 0 0 0 0 0 [ 1173.496890][T19376] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1173.612980][T19376] lowmem_reserve[]: 0 0 0 0 0 [ 1173.629328][T19376] Node 1 Normal free:3906944kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.636215][T11872] IPVS: stop unused estimator thread 0... [ 1173.751164][T19376] lowmem_reserve[]: 0 0 0 0 0 [ 1173.756085][T19376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1173.793866][T19399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3896'. [ 1173.816822][ T5894] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1173.867988][T19376] Node 0 DMA32: 1194*4kB (UE) 465*8kB (UE) 536*16kB (UME) 870*32kB (UME) 447*64kB (UME) 264*128kB (UME) 159*256kB (UM) 77*512kB (UME) 34*1024kB (UME) 4*2048kB (UME) 222*4096kB (UM) = 1139760kB [ 1173.909196][T19376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1173.970094][T12529] Bluetooth: hci3: command tx timeout [ 1174.010022][T19318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1174.029138][T19376] Node 1 Normal: 222*4kB (UME) 63*8kB (UME) 39*16kB (UME) 215*32kB (UME) 101*64kB (UME) 27*128kB (UME) 14*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 944*4096kB (M) = 3906944kB [ 1174.052607][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.067265][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1174.098541][T19318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1174.106121][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1174.156243][T19376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1174.205898][T19318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1174.212661][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1174.239292][T19376] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1174.262972][ T5894] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1174.291511][ T5894] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1174.321777][T19318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1174.356681][T19376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1174.403411][ T5894] usb 1-1: Manufacturer: syz [ 1174.426032][ T5894] usb 1-1: config 0 descriptor?? [ 1174.447901][T19376] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1174.471288][T19410] FAULT_INJECTION: forcing a failure. [ 1174.471288][T19410] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.478598][T19376] 71875 total pagecache pages [ 1174.506393][T19376] 0 pages in swap cache [ 1174.527728][ T5897] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1174.540389][T19376] Free swap = 124996kB [ 1174.544597][T19376] Total swap = 124996kB [ 1174.556870][T19410] CPU: 1 UID: 0 PID: 19410 Comm: syz.2.3899 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1174.556900][T19410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1174.556915][T19410] Call Trace: [ 1174.556924][T19410] [ 1174.556934][T19410] dump_stack_lvl+0x189/0x250 [ 1174.556974][T19410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.557006][T19410] ? __pfx__printk+0x10/0x10 [ 1174.557034][T19410] ? __pfx___might_resched+0x10/0x10 [ 1174.557067][T19410] should_fail_ex+0x414/0x560 [ 1174.557096][T19410] should_failslab+0xa8/0x100 [ 1174.557128][T19410] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1174.557158][T19410] ? __alloc_skb+0x112/0x2d0 [ 1174.557191][T19410] __alloc_skb+0x112/0x2d0 [ 1174.557223][T19410] netlink_sendmsg+0x5c6/0xb30 [ 1174.557260][T19410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1174.557290][T19410] ? __import_iovec+0x5d4/0x7f0 [ 1174.557319][T19410] ? aa_sock_msg_perm+0x94/0x160 [ 1174.557347][T19410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1174.557373][T19410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1174.557401][T19410] __sock_sendmsg+0x21c/0x270 [ 1174.557435][T19410] ____sys_sendmsg+0x505/0x830 [ 1174.557474][T19410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1174.557522][T19410] ___sys_sendmsg+0x21f/0x2a0 [ 1174.557555][T19410] ? __pfx____sys_sendmsg+0x10/0x10 [ 1174.557625][T19410] ? __fget_files+0x2a/0x420 [ 1174.557654][T19410] ? __fget_files+0x3a0/0x420 [ 1174.557695][T19410] __sys_sendmsg+0x164/0x220 [ 1174.557727][T19410] ? __pfx___sys_sendmsg+0x10/0x10 [ 1174.557785][T19410] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1174.557814][T19410] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.557851][T19410] __do_fast_syscall_32+0xb4/0x110 [ 1174.557877][T19410] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.557904][T19410] do_fast_syscall_32+0x34/0x80 [ 1174.557929][T19410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1174.557950][T19410] RIP: 0023:0xf711e539 [ 1174.557966][T19410] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1174.557982][T19410] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1174.558002][T19410] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1174.558015][T19410] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.558028][T19410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.558039][T19410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1174.558050][T19410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.558077][T19410] [ 1174.571892][T19376] 2097051 pages RAM [ 1174.830784][T19376] 0 pages HighMem/MovableOnly [ 1174.835518][T19376] 424361 pages reserved [ 1174.858063][T19376] 0 pages cma reserved [ 1174.907368][ T5894] rc_core: IR keymap rc-hauppauge not found [ 1174.913462][ T5894] Registered IR keymap rc-empty [ 1174.928901][ T5897] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1174.948888][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1174.964039][ T5897] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1175.007308][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.014522][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1175.048125][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1175.060098][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.103177][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input65 [ 1175.116093][T19398] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1175.162571][T19318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.181271][ T5897] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1175.275606][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.315238][T19318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.352460][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.418350][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.436185][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.443315][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.492779][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.540136][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.554856][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.562114][T11872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.577579][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.708254][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.737682][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.798391][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.807291][T18447] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1175.847593][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1175.898753][ T5894] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1175.942916][ T5894] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1175.962801][T18447] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 1175.988635][T18447] usb 3-1: config 0 has no interface number 0 [ 1176.034486][ T5894] usb 1-1: USB disconnect, device number 70 [ 1176.221418][T18447] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1176.301124][T18447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.332165][T19318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.392675][T18447] usb 3-1: Product: syz [ 1176.406493][T18447] usb 3-1: Manufacturer: syz [ 1176.432638][T18447] usb 3-1: SerialNumber: syz [ 1176.452431][T19428] IPVS: Error connecting to the multicast addr [ 1176.473484][T18447] usb 3-1: config 0 descriptor?? [ 1176.548040][T18447] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1176.569442][T18447] pctv452e: pctv452e_power_ctrl: 1 [ 1176.569442][T18447] [ 1176.595693][T18447] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1176.595693][T18447] [ 1176.622330][T18447] dvb-usb: bulk message failed: -22 (5/0) [ 1176.641651][T18447] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1176.664945][T19318] veth0_vlan: entered promiscuous mode [ 1176.677926][T18447] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1176.735336][T19318] veth1_vlan: entered promiscuous mode [ 1176.817291][ T5894] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1176.883753][T19318] veth0_macvtap: entered promiscuous mode [ 1176.953337][ T5911] usb 5-1: USB disconnect, device number 75 [ 1176.963951][T19318] veth1_macvtap: entered promiscuous mode [ 1176.978055][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1177.002355][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1177.055626][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.107752][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.119659][ T5894] usb 1-1: config 0 descriptor?? [ 1177.146033][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.159645][ T5894] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1177.184047][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.231441][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.246983][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.254810][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.276109][T19437] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3904'. [ 1177.279237][T19318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.331691][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.368446][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.406663][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.456579][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.515482][T19318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.586857][T19318] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.613875][T19318] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.640969][T19318] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.664327][T19318] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.814151][T19445] FAULT_INJECTION: forcing a failure. [ 1177.814151][T19445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.874310][T19445] CPU: 1 UID: 0 PID: 19445 Comm: syz.4.3905 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1177.874338][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1177.874351][T19445] Call Trace: [ 1177.874360][T19445] [ 1177.874371][T19445] dump_stack_lvl+0x189/0x250 [ 1177.874412][T19445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1177.874441][T19445] ? __pfx__printk+0x10/0x10 [ 1177.874474][T19445] should_fail_ex+0x414/0x560 [ 1177.874500][T19445] _copy_to_user+0x31/0xb0 [ 1177.874534][T19445] simple_read_from_buffer+0xe1/0x170 [ 1177.874563][T19445] proc_fail_nth_read+0x1df/0x250 [ 1177.874594][T19445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1177.874627][T19445] ? rw_verify_area+0x258/0x650 [ 1177.874648][T19445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1177.874678][T19445] vfs_read+0x1fd/0x980 [ 1177.874707][T19445] ? __pfx___mutex_lock+0x10/0x10 [ 1177.874736][T19445] ? __pfx_vfs_read+0x10/0x10 [ 1177.874760][T19445] ? __fget_files+0x2a/0x420 [ 1177.874791][T19445] ? __fget_files+0x3a0/0x420 [ 1177.874817][T19445] ? __fget_files+0x2a/0x420 [ 1177.874853][T19445] ksys_read+0x145/0x250 [ 1177.874881][T19445] ? __pfx_ksys_read+0x10/0x10 [ 1177.874910][T19445] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1177.874940][T19445] ? lockdep_hardirqs_on+0x9c/0x150 [ 1177.874967][T19445] __do_fast_syscall_32+0xb4/0x110 [ 1177.874996][T19445] ? lockdep_hardirqs_on+0x9c/0x150 [ 1177.875022][T19445] do_fast_syscall_32+0x34/0x80 [ 1177.875052][T19445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1177.875078][T19445] RIP: 0023:0xf70be539 [ 1177.875096][T19445] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1177.875114][T19445] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1177.875145][T19445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50ae620 [ 1177.875159][T19445] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 1177.875172][T19445] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1177.875186][T19445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1177.875200][T19445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1177.875232][T19445] [ 1178.310552][T11872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.359408][T11872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.432471][T19453] FAULT_INJECTION: forcing a failure. [ 1178.432471][T19453] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.506194][T18447] usb 3-1: USB disconnect, device number 88 [ 1178.517609][T19453] CPU: 1 UID: 0 PID: 19453 Comm: syz.4.3907 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1178.517639][T19453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1178.517654][T19453] Call Trace: [ 1178.517664][T19453] [ 1178.517674][T19453] dump_stack_lvl+0x189/0x250 [ 1178.517715][T19453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1178.517748][T19453] ? __pfx__printk+0x10/0x10 [ 1178.517773][T19453] ? __pfx___might_resched+0x10/0x10 [ 1178.517795][T19453] ? fs_reclaim_acquire+0x7d/0x100 [ 1178.517842][T19453] should_fail_ex+0x414/0x560 [ 1178.517878][T19453] should_failslab+0xa8/0x100 [ 1178.517905][T19453] __kmalloc_cache_noprof+0x70/0x3d0 [ 1178.517929][T19453] ? file_f_owner_allocate+0x7e/0x110 [ 1178.517961][T19453] file_f_owner_allocate+0x7e/0x110 [ 1178.517992][T19453] fcntl_dirnotify+0x207/0x690 [ 1178.518028][T19453] do_fcntl+0x6c7/0x1910 [ 1178.518050][T19453] ? __pfx_do_fcntl+0x10/0x10 [ 1178.518073][T19453] ? __fget_files+0x2a/0x420 [ 1178.518103][T19453] ? tomoyo_file_fcntl+0x78/0x210 [ 1178.518132][T19453] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1178.518161][T19453] do_compat_fcntl64+0x484/0x720 [ 1178.518180][T19453] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1178.518209][T19453] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 1178.518233][T19453] ? fput+0xa0/0xd0 [ 1178.518260][T19453] ? ksys_write+0x1f0/0x250 [ 1178.518280][T19453] ? rcu_is_watching+0x15/0xb0 [ 1178.518304][T19453] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1178.518331][T19453] ? lockdep_hardirqs_on+0x9c/0x150 [ 1178.518354][T19453] __do_fast_syscall_32+0xb4/0x110 [ 1178.518378][T19453] ? lockdep_hardirqs_on+0x9c/0x150 [ 1178.518396][T19453] do_fast_syscall_32+0x34/0x80 [ 1178.518413][T19453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1178.518429][T19453] RIP: 0023:0xf70be539 [ 1178.518446][T19453] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1178.518464][T19453] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000037 [ 1178.518482][T19453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000402 [ 1178.518495][T19453] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1178.518505][T19453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1178.518516][T19453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1178.518524][T19453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1178.518542][T19453] [ 1179.006416][T11872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.037890][T11872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.384013][T19466] sock: sock_timestamping_bind_phc: sock not bind to device [ 1179.494366][T19430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1179.577397][ T5911] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1179.719782][T19474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3912'. [ 1179.748056][ T5894] gspca_sonixj: reg_r err -110 [ 1179.752984][ T5894] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1179.775995][ T5911] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1179.804795][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 1179.834047][ T5911] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1179.880993][T19474] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3912'. [ 1179.901648][ T5911] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1179.924303][ T47] usb 1-1: USB disconnect, device number 71 [ 1179.958060][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.975262][T19464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1180.005583][ T5911] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1182.608894][T18447] usb 5-1: USB disconnect, device number 76 [ 1185.701402][T17317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1185.723168][T17317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1185.731334][T17317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1185.786998][T17317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1185.797327][T17317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1186.983378][T19561] chnl_net:caif_netlink_parms(): no params data found [ 1187.440241][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1187.493174][T19586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1187.531871][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.550587][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.577435][T19561] bridge_slave_0: entered allmulticast mode [ 1187.599631][T19561] bridge_slave_0: entered promiscuous mode [ 1187.868431][T12529] Bluetooth: hci0: command tx timeout [ 1188.690076][T11872] bond0 (unregistering): left promiscuous mode [ 1188.696761][T11872] bond0 (unregistering): Released all slaves [ 1188.712824][T11872] bond1 (unregistering): Released all slaves [ 1188.735961][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.743652][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.755815][T19561] bridge_slave_1: entered allmulticast mode [ 1188.768903][T19561] bridge_slave_1: entered promiscuous mode [ 1189.006201][T11872] tipc: Left network mode [ 1189.031356][T19561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.074785][T19561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.249790][T19561] team0: Port device team_slave_0 added [ 1189.273132][T19561] team0: Port device team_slave_1 added [ 1189.683562][T19561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.707202][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.817196][T19561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.950152][T12529] Bluetooth: hci0: command tx timeout [ 1189.998395][T11872] dummy0: left promiscuous mode [ 1190.078497][T11872] batadv_slave_1: left promiscuous mode [ 1190.135677][T11872] hsr_slave_0: left promiscuous mode [ 1190.151622][T11872] hsr_slave_1: left promiscuous mode [ 1192.000433][T19681] binder: 19680:19681 ioctl c018620c 0 returned -14 [ 1192.027640][T12529] Bluetooth: hci0: command tx timeout [ 1192.316184][T19561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.330629][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.398659][T19561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.015803][T19561] hsr_slave_0: entered promiscuous mode [ 1193.026224][T19561] hsr_slave_1: entered promiscuous mode [ 1193.065282][T11872] IPVS: stop unused estimator thread 0... [ 1194.083668][T19714] input: syz0 as /devices/virtual/input/input67 [ 1194.107261][T12529] Bluetooth: hci0: command tx timeout [ 1194.133331][T19714] input: failed to attach handler leds to device input67, error: -6 [ 1194.677859][ T5894] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1194.822196][T19561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1194.844847][T19561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1194.859096][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 1194.866328][T19561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1194.881380][ T5894] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.909630][ T5894] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.922006][T19561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1194.941337][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1194.962153][ T5894] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1195.001031][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.040995][ T5894] usb 6-1: config 0 descriptor?? [ 1195.233629][T19561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.311599][T19561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.347463][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.354712][T11872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.415795][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.423003][T11872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.473150][ T5894] hid (null): report_id 0 is invalid [ 1195.669502][ T5894] usb 6-1: USB disconnect, device number 19 [ 1195.720760][T19561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.851138][T19561] veth0_vlan: entered promiscuous mode [ 1195.871315][T19561] veth1_vlan: entered promiscuous mode [ 1195.935805][T19561] veth0_macvtap: entered promiscuous mode [ 1195.955103][T19561] veth1_macvtap: entered promiscuous mode [ 1196.006640][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.040189][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.064648][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.093041][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.104849][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1196.127129][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.152292][T19561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.187076][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.230289][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.266841][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.307342][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.347469][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.388898][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.410316][T19561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.456440][T19561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.471587][T19561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.494798][T19561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.512685][T19561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.378758][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.386649][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.540753][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.569998][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.767470][ T5899] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1197.947450][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1197.958996][ T5899] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 30, changing to 8 [ 1198.000619][ T5899] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1198.049731][ T5899] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1198.099528][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 1198.132994][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.151469][ T5899] usb 4-1: Product: syz [ 1198.155694][ T5899] usb 4-1: Manufacturer: syz [ 1198.196538][ T5899] usb 4-1: SerialNumber: syz [ 1198.514416][ T5899] usbhid 4-1:1.0: can't add hid device: -71 [ 1198.578712][ T5899] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1198.612936][ T5899] usb 4-1: USB disconnect, device number 102 [ 1199.124903][T19803] usb usb8: usbfs: process 19803 (syz.0.3985) did not claim interface 0 before use [ 1199.142842][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1199.741277][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 1203.766076][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1207.275817][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4028'. [ 1207.337211][T19961] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4028'. [ 1208.937689][ T5911] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1209.104679][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 1209.121252][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.177888][ T5911] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1209.215852][ T5911] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1209.257206][T19990] tipc: Can't bind to reserved service type 2 [ 1209.286966][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.338789][ T5911] usb 6-1: config 0 descriptor?? [ 1209.936314][ T47] usb 6-1: USB disconnect, device number 20 [ 1210.487280][ T47] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1210.676336][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.707478][ T47] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1210.716579][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.747340][T18447] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1210.929222][T18447] usb 5-1: Using ep0 maxpacket: 32 [ 1210.952899][T18447] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1210.983745][T18447] usb 5-1: config 0 has no interface number 0 [ 1211.012882][T18447] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1211.046833][T18447] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1211.076834][T18447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.110192][T18447] usb 5-1: Product: syz [ 1211.114493][T18447] usb 5-1: Manufacturer: syz [ 1211.154423][T18447] usb 5-1: SerialNumber: syz [ 1211.231375][T18447] usb 5-1: config 0 descriptor?? [ 1211.255054][T18447] smsc75xx v1.0.0 [ 1211.408182][ T47] usb 1-1: config 0 descriptor?? [ 1211.875932][ T47] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 1211.892571][T18447] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1211.924091][ T47] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003F/input/input68 [ 1211.957511][T18447] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1212.209842][ T47] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1212.302803][T18447] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1212.373374][T18447] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1212.391794][ T47] usb 1-1: USB disconnect, device number 72 [ 1212.495065][T18447] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1212.532017][T18447] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1212.597721][T18447] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1212.631711][T18447] usb 5-1: USB disconnect, device number 77 [ 1212.639173][T20074] fido_id[20074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1214.390309][ T5897] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1214.580358][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 1214.590745][T20125] netlink: 'syz.2.4068': attribute type 3 has an invalid length. [ 1214.618492][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1214.644803][ T5897] usb 1-1: config 1 has no interface number 0 [ 1214.682280][ T5897] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.693912][ T5897] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1214.706902][ T5897] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1214.731901][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.746242][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=29 [ 1214.776145][ T5897] usb 1-1: Product: syz [ 1214.783181][ T5897] usb 1-1: Manufacturer: syz [ 1214.799630][ T5897] usb 1-1: SerialNumber: syz [ 1215.227293][T18447] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1215.470480][T18447] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1215.479950][T18447] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.494199][T18447] usb 3-1: config 0 has no interface number 0 [ 1215.503341][T18447] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1215.513020][T18447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.588375][T18447] usb 3-1: Product: syz [ 1215.592639][T18447] usb 3-1: Manufacturer: syz [ 1215.608942][T18447] usb 3-1: SerialNumber: syz [ 1215.629892][T18447] usb 3-1: config 0 descriptor?? [ 1215.655370][T18447] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 1215.673040][T18447] usb 3-1: No valid video chain found. [ 1215.871376][T18447] usb 3-1: USB disconnect, device number 89 [ 1217.265210][ T5897] cdc_ncm 1-1:1.1: bind() failure [ 1217.307473][ T5897] usb 1-1: USB disconnect, device number 73 [ 1219.911634][T20172] bridge: RTM_NEWNEIGH with invalid ether address [ 1220.045039][T20181] cgroup: fork rejected by pids controller in /syz2 [ 1220.994589][T11865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.202982][T11865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.425545][T11865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.582705][T20201] netlink: 'syz.3.4091': attribute type 3 has an invalid length. [ 1221.680285][T11865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.824177][T20204] input: syz0 as /devices/virtual/input/input69 [ 1221.848013][T20204] input: failed to attach handler leds to device input69, error: -6 [ 1222.173398][T11865] bridge_slave_1: left allmulticast mode [ 1222.201017][T11865] bridge_slave_1: left promiscuous mode [ 1222.221527][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.276419][T11865] bridge_slave_0: left allmulticast mode [ 1222.295240][T11865] bridge_slave_0: left promiscuous mode [ 1222.325821][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.449351][T17317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1222.461786][T17317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1222.469745][T17317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1222.481339][T17317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1222.492791][T17317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1222.740704][T11865] bond_slave_0: left promiscuous mode [ 1222.776913][T11865] bond_slave_1: left promiscuous mode [ 1224.355930][T11865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.385359][T11865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.405043][T11865] bond0 (unregistering): Released all slaves [ 1224.806841][T11865] bond1 (unregistering): Released all slaves [ 1224.857679][T11865] bond2 (unregistering): Released all slaves [ 1225.239083][T17317] Bluetooth: hci4: command tx timeout [ 1226.340368][T11865] hsr_slave_0: left promiscuous mode [ 1226.389337][T11865] hsr_slave_1: left promiscuous mode [ 1226.395508][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.418480][T11865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.457988][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.465551][T11865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.624996][T11865] veth1_macvtap: left promiscuous mode [ 1226.663828][T11865] veth0_macvtap: left promiscuous mode [ 1226.686643][T11865] veth1_vlan: left promiscuous mode [ 1226.711081][T11865] veth0_vlan: left promiscuous mode [ 1227.307302][T17317] Bluetooth: hci4: command tx timeout [ 1227.986487][T11865] team0 (unregistering): Port device team_slave_1 removed [ 1228.073546][T11865] team0 (unregistering): Port device team_slave_0 removed [ 1229.397201][T17317] Bluetooth: hci4: command tx timeout [ 1229.659345][T20219] chnl_net:caif_netlink_parms(): no params data found [ 1230.495271][T20219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.537441][T20219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.567421][T20219] bridge_slave_0: entered allmulticast mode [ 1230.588459][T20219] bridge_slave_0: entered promiscuous mode [ 1230.649919][T20219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.667690][T20219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.687848][T20219] bridge_slave_1: entered allmulticast mode [ 1230.697781][T20219] bridge_slave_1: entered promiscuous mode [ 1230.945599][T20219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.980049][T20219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.119729][T20219] team0: Port device team_slave_0 added [ 1231.159134][T20219] team0: Port device team_slave_1 added [ 1231.262678][T20219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.289451][T20219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.359426][T20219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.458361][T20219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.467238][T17317] Bluetooth: hci4: command tx timeout [ 1231.486873][T20219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.608037][T20219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.926271][T20219] hsr_slave_0: entered promiscuous mode [ 1231.955209][T20219] hsr_slave_1: entered promiscuous mode [ 1231.973134][T20219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1231.991417][T20219] Cannot create hsr debugfs directory [ 1234.107864][T20219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1234.252674][T20219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1234.299423][T20219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1234.320897][T20219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1235.188127][T20219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.242834][T20219] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.304855][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.312193][T11865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.379145][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.386338][T11865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.547911][T20219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.702730][T20219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.773329][T20371] binder: 20368:20371 ioctl 4018620d 0 returned -22 [ 1235.798249][T20371] binder: 20368:20371 ioctl c0306201 0 returned -14 [ 1235.863925][T20219] veth0_vlan: entered promiscuous mode [ 1236.082626][T20219] veth1_vlan: entered promiscuous mode [ 1236.190146][T20219] veth0_macvtap: entered promiscuous mode [ 1236.230110][T20219] veth1_macvtap: entered promiscuous mode [ 1236.305743][T20219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.352191][T20219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.390062][T20219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.428770][T20219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.465431][T20219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.496686][T20219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.546133][T20219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.599221][T20219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.637467][T20219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.656883][T20219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.693094][T20219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.746916][T20219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.777121][T20219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.798883][T20219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.826455][T20219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.881674][T20219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.895531][T20219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.908891][T20401] netlink: 'syz.4.4129': attribute type 4 has an invalid length. [ 1236.917263][T20219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.128383][ T47] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1237.151886][T11865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.164916][T11865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.298294][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.329470][ T47] usb 1-1: config index 0 descriptor too short (expected 63524, got 36) [ 1237.341116][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.363903][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1237.414918][ T47] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1237.434899][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.446072][ T47] usb 1-1: Product: syz [ 1237.453651][ T47] usb 1-1: Manufacturer: syz [ 1237.458834][ T47] usb 1-1: SerialNumber: syz [ 1237.473105][ T47] usb 1-1: config 0 descriptor?? [ 1237.718952][T20419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.726743][T20419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.776550][ T47] usb 1-1: USB disconnect, device number 74 [ 1237.816949][T20419] bridge0: entered allmulticast mode [ 1237.901952][T20285] udevd[20285]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.008024][T20423] bridge_slave_1: left allmulticast mode [ 1238.014109][T20423] bridge_slave_1: left promiscuous mode [ 1238.036144][T20423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.121930][T20423] bridge_slave_0: left allmulticast mode [ 1238.151694][T20423] bridge_slave_0: left promiscuous mode [ 1238.158903][T20423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.672706][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.682122][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.365662][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1244.550135][T20562] binder: 20561:20562 ioctl c0306201 0 returned -14 [ 1245.010693][T20568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.018489][T20568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.054865][T20568] bridge0: entered allmulticast mode [ 1245.097777][T20569] bridge_slave_1: left allmulticast mode [ 1245.113071][T20569] bridge_slave_1: left promiscuous mode [ 1245.129500][T20569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.209312][T20569] bridge_slave_0: left allmulticast mode [ 1245.215026][T20569] bridge_slave_0: left promiscuous mode [ 1245.257881][T20569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.813085][T20582] netlink: 'syz.2.4177': attribute type 4 has an invalid length. [ 1246.227284][ T5897] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1246.399088][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 1246.426289][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.450324][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.470394][ T5897] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1246.489151][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.513187][ T5897] usb 6-1: config 0 descriptor?? [ 1246.957740][ T5897] hid-multitouch 0003:1FD2:6007.0040: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1247.145662][T18502] usb 6-1: USB disconnect, device number 21 [ 1250.720026][T20667] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1252.457432][T20688] netlink: 'syz.3.4209': attribute type 4 has an invalid length. [ 1252.931270][T20698] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.970085][T20698] bridge_slave_0: default FDB implementation only supports local addresses [ 1253.117752][ T5894] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1253.297271][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1253.316085][ T5894] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1253.356690][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.393254][ T5894] usb 3-1: config 0 has no interface number 0 [ 1253.420502][ T5894] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1253.451755][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.498453][ T5894] usb 3-1: config 0 descriptor?? [ 1253.935864][ T5929] usb 3-1: USB disconnect, device number 90 [ 1256.030888][T20738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1257.503412][T20757] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1257.523892][T20757] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1259.665136][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 1259.665155][ T30] audit: type=1326 audit(1747333802.340:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20775 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1259.748983][ T30] audit: type=1326 audit(1747333802.340:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20775 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1259.771542][T20799] bridge_slave_0: default FDB implementation only supports local addresses [ 1259.834728][ T30] audit: type=1326 audit(1747333802.340:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20775 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1259.917670][ T30] audit: type=1326 audit(1747333802.340:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20775 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1260.007166][ T30] audit: type=1326 audit(1747333802.340:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20775 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1260.087159][ T30] audit: type=1326 audit(1747333802.340:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20775 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1261.395179][T20832] pim6reg1: entered promiscuous mode [ 1261.413835][T20832] pim6reg1: entered allmulticast mode [ 1266.126390][T20907] pim6reg1: entered promiscuous mode [ 1266.156057][T20907] pim6reg1: entered allmulticast mode [ 1266.313340][T20911] pim6reg1: entered promiscuous mode [ 1266.330283][T20911] pim6reg1: entered allmulticast mode [ 1268.231709][T20968] wg2: entered promiscuous mode [ 1268.246921][T20968] wg2: entered allmulticast mode [ 1268.440524][T20981] pim6reg1: entered promiscuous mode [ 1268.456324][T20981] pim6reg1: entered allmulticast mode [ 1271.218802][ T47] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1271.379402][ T47] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 1271.401891][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.559145][ T47] usb 1-1: config 0 descriptor?? [ 1272.033839][ T47] ------------[ cut here ]------------ [ 1272.049919][ T47] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 1272.072627][ T47] shift exponent 64 is too large for 64-bit type 'unsigned long' [ 1272.081091][ T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1272.081118][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1272.081131][ T47] Workqueue: usb_hub_wq hub_event [ 1272.081167][ T47] Call Trace: [ 1272.081176][ T47] [ 1272.081185][ T47] dump_stack_lvl+0x189/0x250 [ 1272.081216][ T47] ? usb_probe_device+0x1c4/0x390 [ 1272.081235][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.081264][ T47] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1272.081294][ T47] ? __pfx__printk+0x10/0x10 [ 1272.081311][ T47] ? process_scheduled_works+0xade/0x17a0 [ 1272.081333][ T47] ? ret_from_fork_asm+0x1a/0x30 [ 1272.081366][ T47] ubsan_epilogue+0xa/0x40 [ 1272.081387][ T47] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 1272.081425][ T47] ? trace_kmalloc+0x1f/0xd0 [ 1272.081470][ T47] __kfifo_alloc+0x1a2/0x220 [ 1272.081496][ T47] wacom_parse_and_register+0x2a5/0x6510 [ 1272.081521][ T47] ? kasan_save_track+0x3e/0x80 [ 1272.081543][ T47] ? __kasan_slab_free+0x62/0x70 [ 1272.081566][ T47] ? kfree+0x193/0x440 [ 1272.081588][ T47] ? hid_open_report+0xa51/0xee0 [ 1272.081609][ T47] ? wacom_probe+0x7bb/0xa30 [ 1272.081627][ T47] ? hid_device_probe+0x397/0x710 [ 1272.081651][ T47] ? really_probe+0x26a/0x9a0 [ 1272.081677][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.081701][ T47] ? driver_probe_device+0x4f/0x430 [ 1272.081726][ T47] ? __device_attach_driver+0x2ce/0x530 [ 1272.081753][ T47] ? __device_attach+0x2b8/0x400 [ 1272.081777][ T47] ? hid_add_device+0x398/0x540 [ 1272.081800][ T47] ? usbhid_probe+0xe13/0x12a0 [ 1272.081827][ T47] ? usb_probe_interface+0x641/0xbc0 [ 1272.081845][ T47] ? really_probe+0x26a/0x9a0 [ 1272.081871][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.081895][ T47] ? driver_probe_device+0x4f/0x430 [ 1272.081922][ T47] ? bus_for_each_drv+0x251/0x2e0 [ 1272.081941][ T47] ? bus_probe_device+0x185/0x260 [ 1272.081959][ T47] ? device_add+0x7b6/0xb50 [ 1272.081980][ T47] ? usb_set_configuration+0x1a87/0x20e0 [ 1272.082009][ T47] ? usb_generic_driver_probe+0x8d/0x150 [ 1272.082037][ T47] ? usb_probe_device+0x1c4/0x390 [ 1272.082054][ T47] ? really_probe+0x26a/0x9a0 [ 1272.082079][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.082103][ T47] ? driver_probe_device+0x4f/0x430 [ 1272.082127][ T47] ? __device_attach_driver+0x2ce/0x530 [ 1272.082153][ T47] ? bus_for_each_drv+0x251/0x2e0 [ 1272.082171][ T47] ? __device_attach+0x2b8/0x400 [ 1272.082194][ T47] ? bus_probe_device+0x185/0x260 [ 1272.082216][ T47] ? __pfx_wacom_parse_and_register+0x10/0x10 [ 1272.082237][ T47] ? kthread+0x711/0x8a0 [ 1272.082259][ T47] ? ret_from_fork+0x4b/0x80 [ 1272.082279][ T47] ? ret_from_fork_asm+0x1a/0x30 [ 1272.082311][ T47] ? kasan_quarantine_put+0xdd/0x220 [ 1272.082334][ T47] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.082385][ T47] ? hid_open_report+0xa51/0xee0 [ 1272.082407][ T47] ? kfree+0x193/0x440 [ 1272.082447][ T47] ? hid_open_report+0xa51/0xee0 [ 1272.082479][ T47] ? __pfx_hid_open_report+0x10/0x10 [ 1272.082512][ T47] ? init_timer_key+0x171/0x2d0 [ 1272.082543][ T47] wacom_probe+0x80c/0xa30 [ 1272.082571][ T47] hid_device_probe+0x397/0x710 [ 1272.082605][ T47] ? driver_sysfs_add+0x1fe/0x210 [ 1272.082640][ T47] ? __pfx_hid_device_probe+0x10/0x10 [ 1272.082664][ T47] really_probe+0x26a/0x9a0 [ 1272.082703][ T47] __driver_probe_device+0x18c/0x2f0 [ 1272.082737][ T47] driver_probe_device+0x4f/0x430 [ 1272.082771][ T47] __device_attach_driver+0x2ce/0x530 [ 1272.082806][ T47] bus_for_each_drv+0x251/0x2e0 [ 1272.082828][ T47] ? __pfx___device_attach_driver+0x10/0x10 [ 1272.082858][ T47] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1272.082892][ T47] __device_attach+0x2b8/0x400 [ 1272.082923][ T47] ? __pfx___device_attach+0x10/0x10 [ 1272.082956][ T47] ? do_raw_spin_unlock+0x122/0x240 [ 1272.082987][ T47] bus_probe_device+0x185/0x260 [ 1272.083014][ T47] device_add+0x7b6/0xb50 [ 1272.083045][ T47] hid_add_device+0x398/0x540 [ 1272.083079][ T47] usbhid_probe+0xe13/0x12a0 [ 1272.083125][ T47] usb_probe_interface+0x641/0xbc0 [ 1272.083158][ T47] ? __pfx_usb_probe_interface+0x10/0x10 [ 1272.083178][ T47] really_probe+0x26a/0x9a0 [ 1272.083217][ T47] __driver_probe_device+0x18c/0x2f0 [ 1272.083251][ T47] driver_probe_device+0x4f/0x430 [ 1272.083284][ T47] __device_attach_driver+0x2ce/0x530 [ 1272.083320][ T47] bus_for_each_drv+0x251/0x2e0 [ 1272.083343][ T47] ? __pfx___device_attach_driver+0x10/0x10 [ 1272.083374][ T47] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1272.083409][ T47] __device_attach+0x2b8/0x400 [ 1272.083447][ T47] ? __pfx___device_attach+0x10/0x10 [ 1272.083479][ T47] ? do_raw_spin_unlock+0x122/0x240 [ 1272.083511][ T47] bus_probe_device+0x185/0x260 [ 1272.083538][ T47] device_add+0x7b6/0xb50 [ 1272.083570][ T47] usb_set_configuration+0x1a87/0x20e0 [ 1272.083638][ T47] usb_generic_driver_probe+0x8d/0x150 [ 1272.083674][ T47] usb_probe_device+0x1c4/0x390 [ 1272.083700][ T47] ? __pfx_usb_probe_device+0x10/0x10 [ 1272.083718][ T47] really_probe+0x26a/0x9a0 [ 1272.083755][ T47] __driver_probe_device+0x18c/0x2f0 [ 1272.083788][ T47] driver_probe_device+0x4f/0x430 [ 1272.083822][ T47] __device_attach_driver+0x2ce/0x530 [ 1272.083856][ T47] bus_for_each_drv+0x251/0x2e0 [ 1272.083879][ T47] ? __pfx___device_attach_driver+0x10/0x10 [ 1272.083910][ T47] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1272.083945][ T47] __device_attach+0x2b8/0x400 [ 1272.083977][ T47] ? __pfx___device_attach+0x10/0x10 [ 1272.084010][ T47] ? do_raw_spin_unlock+0x122/0x240 [ 1272.084042][ T47] bus_probe_device+0x185/0x260 [ 1272.084068][ T47] device_add+0x7b6/0xb50 [ 1272.084099][ T47] usb_new_device+0xa39/0x16c0 [ 1272.084143][ T47] ? __pfx_usb_new_device+0x10/0x10 [ 1272.084174][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 1272.084199][ T47] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.084230][ T47] hub_event+0x2941/0x4a00 [ 1272.084322][ T47] ? __pfx_hub_event+0x10/0x10 [ 1272.084355][ T47] ? process_scheduled_works+0x9ec/0x17a0 [ 1272.084384][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 1272.084407][ T47] ? process_scheduled_works+0x9ec/0x17a0 [ 1272.084437][ T47] ? process_scheduled_works+0x9ec/0x17a0 [ 1272.084461][ T47] process_scheduled_works+0xade/0x17a0 [ 1272.084518][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 1272.084574][ T47] worker_thread+0x8a0/0xda0 [ 1272.084598][ T47] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1272.084632][ T47] ? __kthread_parkme+0x7b/0x200 [ 1272.084668][ T47] kthread+0x711/0x8a0 [ 1272.084700][ T47] ? __pfx_worker_thread+0x10/0x10 [ 1272.084721][ T47] ? __pfx_kthread+0x10/0x10 [ 1272.084750][ T47] ? __pfx_kthread+0x10/0x10 [ 1272.084775][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 1272.084800][ T47] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.084827][ T47] ? __pfx_kthread+0x10/0x10 [ 1272.084852][ T47] ret_from_fork+0x4b/0x80 [ 1272.084875][ T47] ? __pfx_kthread+0x10/0x10 [ 1272.084901][ T47] ret_from_fork_asm+0x1a/0x30 [ 1272.084939][ T47] [ 1272.127277][ T5897] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1272.132049][ T47] ---[ end trace ]--- [ 1272.311836][ T5897] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1272.320830][ T47] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1272.320854][ T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 1272.320884][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1272.320901][ T47] Workqueue: usb_hub_wq hub_event [ 1272.320944][ T47] Call Trace: [ 1272.320955][ T47] [ 1272.320967][ T47] dump_stack_lvl+0x99/0x250 [ 1272.321006][ T47] ? __asan_memcpy+0x40/0x70 [ 1272.321033][ T47] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1272.321070][ T47] ? __pfx__printk+0x10/0x10 [ 1272.321112][ T47] panic+0x2db/0x790 [ 1272.321153][ T47] ? __pfx_panic+0x10/0x10 [ 1272.321185][ T47] ? _printk+0xcf/0x120 [ 1272.321207][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.321245][ T47] ? __pfx__printk+0x10/0x10 [ 1272.321267][ T47] ? process_scheduled_works+0xade/0x17a0 [ 1272.321293][ T47] ? ret_from_fork_asm+0x1a/0x30 [ 1272.321328][ T47] check_panic_on_warn+0x89/0xb0 [ 1272.321365][ T47] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 1272.321421][ T47] ? trace_kmalloc+0x1f/0xd0 [ 1272.321463][ T47] __kfifo_alloc+0x1a2/0x220 [ 1272.321493][ T47] wacom_parse_and_register+0x2a5/0x6510 [ 1272.321524][ T47] ? kasan_save_track+0x3e/0x80 [ 1272.321551][ T47] ? __kasan_slab_free+0x62/0x70 [ 1272.321579][ T47] ? kfree+0x193/0x440 [ 1272.321605][ T47] ? hid_open_report+0xa51/0xee0 [ 1272.321631][ T47] ? wacom_probe+0x7bb/0xa30 [ 1272.321654][ T47] ? hid_device_probe+0x397/0x710 [ 1272.321680][ T47] ? really_probe+0x26a/0x9a0 [ 1272.321710][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.321740][ T47] ? driver_probe_device+0x4f/0x430 [ 1272.321771][ T47] ? __device_attach_driver+0x2ce/0x530 [ 1272.321804][ T47] ? __device_attach+0x2b8/0x400 [ 1272.321834][ T47] ? hid_add_device+0x398/0x540 [ 1272.321864][ T47] ? usbhid_probe+0xe13/0x12a0 [ 1272.321898][ T47] ? usb_probe_interface+0x641/0xbc0 [ 1272.321920][ T47] ? really_probe+0x26a/0x9a0 [ 1272.321951][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.321981][ T47] ? driver_probe_device+0x4f/0x430 [ 1272.322014][ T47] ? bus_for_each_drv+0x251/0x2e0 [ 1272.322037][ T47] ? bus_probe_device+0x185/0x260 [ 1272.322059][ T47] ? device_add+0x7b6/0xb50 [ 1272.322085][ T47] ? usb_set_configuration+0x1a87/0x20e0 [ 1272.322121][ T47] ? usb_generic_driver_probe+0x8d/0x150 [ 1272.322155][ T47] ? usb_probe_device+0x1c4/0x390 [ 1272.322176][ T47] ? really_probe+0x26a/0x9a0 [ 1272.322207][ T47] ? __driver_probe_device+0x18c/0x2f0 [ 1272.322237][ T47] ? driver_probe_device+0x4f/0x430 [ 1272.322268][ T47] ? __device_attach_driver+0x2ce/0x530 [ 1272.322300][ T47] ? bus_for_each_drv+0x251/0x2e0 [ 1272.322323][ T47] ? __device_attach+0x2b8/0x400 [ 1272.322351][ T47] ? bus_probe_device+0x185/0x260 [ 1272.322377][ T47] ? __pfx_wacom_parse_and_register+0x10/0x10 [ 1272.322404][ T47] ? kthread+0x711/0x8a0 [ 1272.322437][ T47] ? ret_from_fork+0x4b/0x80 [ 1272.322462][ T47] ? ret_from_fork_asm+0x1a/0x30 [ 1272.322500][ T47] ? kasan_quarantine_put+0xdd/0x220 [ 1272.322528][ T47] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.322566][ T47] ? hid_open_report+0xa51/0xee0 [ 1272.322591][ T47] ? kfree+0x193/0x440 [ 1272.322626][ T47] ? hid_open_report+0xa51/0xee0 [ 1272.322661][ T47] ? __pfx_hid_open_report+0x10/0x10 [ 1272.322696][ T47] ? init_timer_key+0x171/0x2d0 [ 1272.322731][ T47] wacom_probe+0x80c/0xa30 [ 1272.322761][ T47] hid_device_probe+0x397/0x710 [ 1272.322799][ T47] ? driver_sysfs_add+0x1fe/0x210 [ 1272.322829][ T47] ? __pfx_hid_device_probe+0x10/0x10 [ 1273.131695][ T47] really_probe+0x26a/0x9a0 [ 1273.136232][ T47] __driver_probe_device+0x18c/0x2f0 [ 1273.141540][ T47] driver_probe_device+0x4f/0x430 [ 1273.146592][ T47] __device_attach_driver+0x2ce/0x530 [ 1273.152004][ T47] bus_for_each_drv+0x251/0x2e0 [ 1273.156865][ T47] ? __pfx___device_attach_driver+0x10/0x10 [ 1273.162777][ T47] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1273.168167][ T47] __device_attach+0x2b8/0x400 [ 1273.172951][ T47] ? __pfx___device_attach+0x10/0x10 [ 1273.178266][ T47] ? do_raw_spin_unlock+0x122/0x240 [ 1273.183499][ T47] bus_probe_device+0x185/0x260 [ 1273.188365][ T47] device_add+0x7b6/0xb50 [ 1273.192713][ T47] hid_add_device+0x398/0x540 [ 1273.197409][ T47] usbhid_probe+0xe13/0x12a0 [ 1273.202031][ T47] usb_probe_interface+0x641/0xbc0 [ 1273.207163][ T47] ? __pfx_usb_probe_interface+0x10/0x10 [ 1273.212805][ T47] really_probe+0x26a/0x9a0 [ 1273.217329][ T47] __driver_probe_device+0x18c/0x2f0 [ 1273.222636][ T47] driver_probe_device+0x4f/0x430 [ 1273.227685][ T47] __device_attach_driver+0x2ce/0x530 [ 1273.233081][ T47] bus_for_each_drv+0x251/0x2e0 [ 1273.237939][ T47] ? __pfx___device_attach_driver+0x10/0x10 [ 1273.243862][ T47] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1273.249247][ T47] __device_attach+0x2b8/0x400 [ 1273.254024][ T47] ? __pfx___device_attach+0x10/0x10 [ 1273.259325][ T47] ? do_raw_spin_unlock+0x122/0x240 [ 1273.264540][ T47] bus_probe_device+0x185/0x260 [ 1273.269406][ T47] device_add+0x7b6/0xb50 [ 1273.273772][ T47] usb_set_configuration+0x1a87/0x20e0 [ 1273.279276][ T47] usb_generic_driver_probe+0x8d/0x150 [ 1273.284753][ T47] usb_probe_device+0x1c4/0x390 [ 1273.289613][ T47] ? __pfx_usb_probe_device+0x10/0x10 [ 1273.294995][ T47] really_probe+0x26a/0x9a0 [ 1273.299517][ T47] __driver_probe_device+0x18c/0x2f0 [ 1273.304819][ T47] driver_probe_device+0x4f/0x430 [ 1273.309868][ T47] __device_attach_driver+0x2ce/0x530 [ 1273.315253][ T47] bus_for_each_drv+0x251/0x2e0 [ 1273.320103][ T47] ? __pfx___device_attach_driver+0x10/0x10 [ 1273.326004][ T47] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1273.331392][ T47] __device_attach+0x2b8/0x400 [ 1273.336169][ T47] ? __pfx___device_attach+0x10/0x10 [ 1273.341477][ T47] ? do_raw_spin_unlock+0x122/0x240 [ 1273.346716][ T47] bus_probe_device+0x185/0x260 [ 1273.351582][ T47] device_add+0x7b6/0xb50 [ 1273.355925][ T47] usb_new_device+0xa39/0x16c0 [ 1273.360706][ T47] ? __pfx_usb_new_device+0x10/0x10 [ 1273.365910][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 1273.371117][ T47] ? lockdep_hardirqs_on+0x9c/0x150 [ 1273.376352][ T47] hub_event+0x2941/0x4a00 [ 1273.380849][ T47] ? __pfx_hub_event+0x10/0x10 [ 1273.385648][ T47] ? process_scheduled_works+0x9ec/0x17a0 [ 1273.391399][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 1273.396613][ T47] ? process_scheduled_works+0x9ec/0x17a0 [ 1273.402355][ T47] ? process_scheduled_works+0x9ec/0x17a0 [ 1273.408093][ T47] process_scheduled_works+0xade/0x17a0 [ 1273.413678][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 1273.419699][ T47] worker_thread+0x8a0/0xda0 [ 1273.424302][ T47] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1273.430672][ T47] ? __kthread_parkme+0x7b/0x200 [ 1273.435655][ T47] kthread+0x711/0x8a0 [ 1273.439762][ T47] ? __pfx_worker_thread+0x10/0x10 [ 1273.444900][ T47] ? __pfx_kthread+0x10/0x10 [ 1273.449516][ T47] ? __pfx_kthread+0x10/0x10 [ 1273.454143][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 1273.459371][ T47] ? lockdep_hardirqs_on+0x9c/0x150 [ 1273.464590][ T47] ? __pfx_kthread+0x10/0x10 [ 1273.469198][ T47] ret_from_fork+0x4b/0x80 [ 1273.473649][ T47] ? __pfx_kthread+0x10/0x10 [ 1273.478279][ T47] ret_from_fork_asm+0x1a/0x30 [ 1273.483086][ T47] [ 1273.486469][ T47] Kernel Offset: disabled [ 1273.490851][ T47] Rebooting in 86400 seconds..