last executing test programs: 7m27.10332617s ago: executing program 2 (id=66): inotify_init1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000764000/0x3000)=nil, 0x3000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x4010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711872000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@private2, r2}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 7m26.418206876s ago: executing program 2 (id=68): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioprio_set$pid(0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) r5 = eventfd2(0xffff5faa, 0x80000) close(0x3) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f00000000bac600"], 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r8, 0x1000) sendfile(r5, r8, 0x0, 0x10000000000c352) splice(r3, 0x0, r2, 0x0, 0x100, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m22.168781088s ago: executing program 2 (id=74): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x48}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r6, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x20, r3, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000033c0)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4116, 0x1014}, {&(0x7f0000000dc0)=""/4126, 0x101e}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000200)=""/233, 0xe9}], 0x6}, 0x40002120) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x5c, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast}, {@loopback}, {@private}, {@local}, {@multicast1}, {@dev}]}, @lsrr={0x83, 0x3, 0x10}]}}}}}}}, 0x0) 7m19.693623145s ago: executing program 2 (id=76): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r2, 0x0, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 7m19.558002781s ago: executing program 2 (id=77): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) gettid() timer_create(0x2, &(0x7f0000000240)={0x0, 0x9, 0x800000000004, @thr={&(0x7f0000000380)="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", &(0x7f0000000100)="eb2da2cf29f61982c59dcbe8e33061bfd1715ac00c2696ed7f4552693e5b2fb9f8c5982b34765c5e13ef6948f00db2a41988d60cb2a2670e92ff9f34183689604b9a171ab2835c44a11c883c935b47ee84c4166ae66cb3c79f2ec595034a356a5d2afd9bf4411a863fe0"}}, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x4}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 7m18.398579608s ago: executing program 2 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='inode32']) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c0000002500210320bd7006fddbdf2505000000080031800400b4804937bc7dc8f096b040c0ebe0ea62b27c9e23437925e893802b7764ac5640d4122204e876686bb92d"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/243, 0xf3, 0x95f) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 7m2.259652288s ago: executing program 32 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='inode32']) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c0000002500210320bd7006fddbdf2505000000080031800400b4804937bc7dc8f096b040c0ebe0ea62b27c9e23437925e893802b7764ac5640d4122204e876686bb92d"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/243, 0xf3, 0x95f) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 13.761498753s ago: executing program 1 (id=1725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x203, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x10000, 0x100) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x8915) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r5 = semget(0x0, 0x4, 0x39c) semop(r5, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80801, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) 11.810099028s ago: executing program 1 (id=1732): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900002700000000000000faff00", [0x8, 0xffffffff9673e35f]}}) 11.635872203s ago: executing program 1 (id=1735): bpf$MAP_CREATE(0x0, 0x0, 0x48) 11.327413618s ago: executing program 1 (id=1736): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x40045304, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 10.977035905s ago: executing program 3 (id=1738): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="66d440000000004043552205000080715cb67e0000000109022400010000000009040000010300000009210000000122f6000905810300000000006f04aafeafa8aa85a5d83927745b63930f7aa8ab"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 10.737160742s ago: executing program 0 (id=1739): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x0, 0x1}) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x7984, 0xfffffffffffffffc}, 0x0) 9.885886383s ago: executing program 1 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000001840)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="3014d1d7cc3396"], 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000080)={0x18, r7, 0xffffffffffffffe3, 0x9}) keyctl$KEYCTL_MOVE(0x1e, r5, r5, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) 9.450331426s ago: executing program 0 (id=1744): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r2, r3, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00@'], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8121}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x0, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x404}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 8.667645618s ago: executing program 4 (id=1746): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x1007, 0x1, 0x7fffffff}, {0x1, 0x10002, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x44, 0xff9, 0x9}, 0x28) getpid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) sendmsg$nl_generic(r5, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000a00)={0x2ac, 0x2e, 0x300, 0x70bd2d, 0x3, {0x15}, [@nested={0x4, 0x78}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x1a8, 0x113, 0x0, 0x1, [@generic="617524a8b8e1d784b31128985c62701b9bdc5ba57898c6586a6c4c507dfe8ee3799e9bd3c40264a02dbd2acbf130e89178b45f46c6ef20bdfe9e285c4fa8b7c7e79eb7a3a3513b20", @generic="1e896b852a84ff47030cd27271850732439ae9e1d6d253b1ad7429db7533461208bb945893f4e610e2869c729e3ed04cbefaa9943d91dcb8d2fbc50ac660083887847e5c2b3547f8c192aa66b46567864ca1c74378979a9ee9d129d25333cf49af0daf48", @nested={0x4, 0xba}, @typed={0x4, 0x56}, @nested={0x4, 0xde}, @generic="002849b791419c572458e74c078864824e12d31366c1e5aeab14cd56f2d2f8b3e2ae84df8c90aea54e7bf0104a51427528e019f4f41a810fef327e4fcfff6dd6780bccf20252730812c7b2af45c5bc501379c07a29bd61f0b1d074b2ea5816f89f9f8e87", @generic="a0499ca5a837b6d902a8f5058f0d0d35533c53fadadee491df99ee8a3d050d4ce2f2b01916d863d2fb1db73a53d9cdf4771db4883e20068ad07a5075694a17c7f0b95ac5e04a7bd65e33e4bafcb2efe93471edbd094f718a997695af575e643cfc8b19544d8f929138b863bdf6911df5", @typed={0x8, 0x33, 0x0, 0x0, @u32=0x7fa287a3}, @typed={0x8, 0x13d, 0x0, 0x0, @uid}, @typed={0x8, 0xd2, 0x0, 0x0, @pid=r6}]}, @nested={0xc7, 0x84, 0x0, 0x1, [@generic="e5c00b39af410331bff2f23889ced432748711948c2fbd88133734cf4affe2f5d166f570ba7391a213747bafda8f44aef0171e022195a7a2e3878d615c", @generic="af621277b6c8ba2bc545e5fbd3c6f6054b78de3fbd2441ac3e0938269b9dc91e8396c668644d00b3d66270bcfd8e8d75bb51fb9953882386a457cc825a97532311e408ee71a70e9f353c48b082310e2527106af61c3183e2580298a0fb598b75acf3c3c6b95d", @typed={0x8, 0xcf, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @nested={0x4, 0x1}]}, @nested={0x10, 0xd2, 0x0, 0x1, [@typed={0x4, 0x148}, @nested={0x4, 0xd9}, @nested={0x4, 0x10}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x10}, 0xc0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) 8.630166901s ago: executing program 0 (id=1747): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e1450009058313"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r3, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044811}, 0x4) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4069, 0xfe5}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000000)=""/40, 0x28}], 0x4}, 0x6}], 0x1, 0x400100c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.102093335s ago: executing program 3 (id=1748): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000100)=0x808c) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) 6.391136322s ago: executing program 4 (id=1750): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) (fail_nth: 1) 5.431416835s ago: executing program 4 (id=1751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d4"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40840}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 5.21302452s ago: executing program 0 (id=1753): close(0x3) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(0xffffffffffffffff, 0x3b3e, 0x4) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x404000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00'], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 4.402607825s ago: executing program 3 (id=1754): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0014000000", 0x28}, {&(0x7f00000004c0)="0bf5c5748a60", 0x6}], 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x10}, {0x3, 0x8}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x2c008890) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="321c00001cb79341f64d4a162b9cfd38c3b3fff7fe5b1a6f1767051939a74b96e973dd481e0efb328d69575db0c04df1d80c005f1fef9a9553fcf167f8460f6cb901dadac502fdc915a0e812587ddb262400"/97, @ANYRES16, @ANYBLOB="01002abd7000ffdbdf25080000000c00018008000100", @ANYRES32=r10, @ANYBLOB="14000280100003800c0001800800010006000000"], 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x8080) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aedf5510ac05269289b201020301090222000100000000090400000103e9000009fb000000000000000705d77b"], 0x0) 4.251242631s ago: executing program 5 (id=1755): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 4.092897539s ago: executing program 5 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000003060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 4.003283095s ago: executing program 1 (id=1757): syz_io_uring_setup(0x2ac8, &(0x7f0000000280)={0x0, 0x8d00, 0x1, 0x0, 0xff}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x24, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000300)='./file0\x00', 0x188, 0x503, 0x23456}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r3, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) unshare(0x2040400) (async) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="700100001a00330600000000fddbdf250a010101000000000000000000000000ffffffff000000000000000000000000000040004e2480010000a0a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x170}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 3.755590403s ago: executing program 5 (id=1758): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x7fd3be16, 0x1, 0x0, 0x6dd, 0x10, 0x200, 0x100, 0x3, 0x20, 0xffffffff, 0x20, 0x7, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x3b8, 0x35, 0x400, 0x70bd2d, 0x25dfdbff, {0xb}, [@generic="ad94c2a3636f255c7934976427734b3c4331a380401c16c6adbfabd9c38406b3af5d0d83123406113ade664973b47fb1db5b26e9d34ca34ea3e4a2ff5e3210ca12fc4e28581b73d256ce4c15f0dd04e8282e0bc5e2179eeed8ed9322b4f56d56787e1e86fd89692a6c6ffc8e2aad3c195b30a01c90f5893c9c20945bda29adcde0a63b6d7c217dcbf9bc2dc23340fc1626a4e19b95bce742690d094a064f48e5e6cad6ad0e68d6d914af15c559d70ff036b9ceb67c3484462cdb1ab082985829b51058b4a0d9927311c0c6f983e57e16424f6123db77244d75de04c6", @nested={0x1af, 0xdd, 0x0, 0x1, [@nested={0x4, 0x1d}, @generic="8e89c0b61dcfc87f544e79c0fcecae545d4447f376fe70c39fccda8152e68468dcf1a2999544919c8b9ac6dffab9d0f3e1e49416df266153c388b8f4ce7e8070b45266d1e54098af5b53bd26f8828499048ea137f3305831c8cef6076e545119b0e5cdc7263d50f50521d519f90b7c09d9936aa7933c5c401794b7dd0d4b661148be360a2621841009aea63aebabafe7346550df5ecd72869d7509f0ca1780fd7d3176bb1eb4baf158fd458ede9406b9b30f0c46c1533ba2700b8e82d654d29eee4bdd1293a2f31f4b8f53940af2fe88af", @nested={0x4, 0x9c}, @typed={0x4b, 0xbc, 0x0, 0x0, @binary="8545a48ed1629909b868f3f00fb6236e601cd96ad074d83cff7296e50969220bbf3b483ef5ed7d7cb2411b6bebe909d1c7cbc3e6b430d8523cb929a59d27c45ae05a3fb08d80ca"}, @generic="6309c597c28712f109af8e92f2109c973143915294ddfbb9b62a5066e5570a47823de77a9b332ba1527fcab6b50275fc6a53eacd3798992337d3b50216f47d200b29415bd5b51d796c125d2aaffd4af6aa305452e835039c9b6b8c6a59e9237dc547450488ce84bd2e571546d198ba80089f83436f71e4d086d303c766a95599a54811ec01cf"]}, @generic="a0cb9ccbadfb1eaee75e5666", @generic="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", @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r0}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x20001080}, 0x24048805) 3.571397759s ago: executing program 5 (id=1759): openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) memfd_create(0x0, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) (fail_nth: 1) 3.143940947s ago: executing program 4 (id=1760): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x1007, 0x1, 0x7fffffff}, {0x1, 0x10002, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x44, 0xff9, 0x9}, 0x28) r6 = getpid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) sendmsg$nl_generic(r5, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000a00)={0x394, 0x2e, 0x300, 0x70bd2d, 0x3, {0x15}, [@nested={0xe9, 0x78, 0x0, 0x1, [@nested={0x4, 0x5f}, @typed={0x8, 0x11, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x22}, @nested={0x4, 0xaf}, @generic="a82e58862bee91d91bceee4a44c8ced19ab1dc33d2b16bcc54dc5c5075ff360404be35240132ec636af4d897721cbde1a22b39c8597f7873b9b89eb08be8f6562cb5770cbd29184899cfa50dfd09902996a8c996792b95472ad28565c763219391a1", @generic="a794f98c78688a77ac6468884f044dba", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x5}, @generic="9666b8dd63e7cad90e1b284f7f97294456841c243b39bf6929a60e4488c670708fcd3940fc5f55ade066618ae4805842633dc0521606dd6e1f42194e3a0fb0778297f502e4fa85d62171293bd17d7cfb41d159"]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x1a8, 0x113, 0x0, 0x1, [@generic="617524a8b8e1d784b31128985c62701b9bdc5ba57898c6586a6c4c507dfe8ee3799e9bd3c40264a02dbd2acbf130e89178b45f46c6ef20bdfe9e285c4fa8b7c7e79eb7a3a3513b20", @generic="1e896b852a84ff47030cd27271850732439ae9e1d6d253b1ad7429db7533461208bb945893f4e610e2869c729e3ed04cbefaa9943d91dcb8d2fbc50ac660083887847e5c2b3547f8c192aa66b46567864ca1c74378979a9ee9d129d25333cf49af0daf48", @nested={0x4, 0xba}, @typed={0x4, 0x56}, @nested={0x4, 0xde}, @generic="002849b791419c572458e74c078864824e12d31366c1e5aeab14cd56f2d2f8b3e2ae84df8c90aea54e7bf0104a51427528e019f4f41a810fef327e4fcfff6dd6780bccf20252730812c7b2af45c5bc501379c07a29bd61f0b1d074b2ea5816f89f9f8e87", @generic="a0499ca5a837b6d902a8f5058f0d0d35533c53fadadee491df99ee8a3d050d4ce2f2b01916d863d2fb1db73a53d9cdf4771db4883e20068ad07a5075694a17c7f0b95ac5e04a7bd65e33e4bafcb2efe93471edbd094f718a997695af575e643cfc8b19544d8f929138b863bdf6911df5", @typed={0x8, 0x33, 0x0, 0x0, @u32=0x7fa287a3}, @typed={0x8, 0x13d, 0x0, 0x0, @uid}, @typed={0x8, 0xd2, 0x0, 0x0, @pid=r7}]}, @nested={0xc7, 0x84, 0x0, 0x1, [@generic="e5c00b39af410331bff2f23889ced432748711948c2fbd88133734cf4affe2f5d166f570ba7391a213747bafda8f44aef0171e022195a7a2e3878d615c", @generic="af621277b6c8ba2bc545e5fbd3c6f6054b78de3fbd2441ac3e0938269b9dc91e8396c668644d00b3d66270bcfd8e8d75bb51fb9953882386a457cc825a97532311e408ee71a70e9f353c48b082310e2527106af61c3183e2580298a0fb598b75acf3c3c6b95d", @typed={0x8, 0xcf, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @nested={0x4, 0x1}]}, @nested={0x10, 0xd2, 0x0, 0x1, [@typed={0x4, 0x148}, @nested={0x4, 0xd9}, @nested={0x4, 0x10}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x10}, 0xc0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) 2.824480819s ago: executing program 3 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000001c0)) 2.461893024s ago: executing program 3 (id=1762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2b, 0x80801, 0x1) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc00", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.302357976s ago: executing program 3 (id=1763): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e1450009058313"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r4, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044811}, 0x4) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4069, 0xfe5}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000000)=""/40, 0x28}], 0x4}, 0x6}], 0x1, 0x400100c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.139213878s ago: executing program 5 (id=1764): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7fffffff, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0xca, {0xffff, 0x1}, {0x4c, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x1000, 0x7}, {0x0, 0x5, 0x3, 0x3, 0x6, 0x21}]}) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000004080100000000f6ff060000080500030021000000f80000ea679d63001a09f4cd4e7fb3324dd21f3f000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000053c0001800c00028005000100000000002c00018014000300fc0100000000000000000000f400000007000400000000000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc060000000000000000000000000000140004"], 0xc8}}, 0x0) 2.102137039s ago: executing program 4 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$FICLONE(r0, 0x40049409, r2) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x3}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x14}) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x51) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90003b4c", @ANYRES16=r6, @ANYBLOB="20002abd7000fedbdf25010000000900010073797a300000000014000200626f6e643000000000000000000000000900010073797a30000000000900030073797a30000000000900030073797a32000000001400020076657468305f766972745f77696669000900010073797a30000000000900010073797a32000000000900030073797a3200000000"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x48000) ioctl$UI_DEV_CREATE(r4, 0x5501) r8 = creat(&(0x7f0000000180)='./file0\x00', 0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x808000, &(0x7f0000000380)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x34}}, {@allow_other}, {@allow_other}], [{@smackfsdef}, {@fsname={'fsname', 0x3d, 'syz1\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) r10 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f0000000500)={0x50, 0x50c, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @period={0x0, 0x8643, 0x1f, 0x5, 0x10, {0x81, 0x2, 0x3, 0xa}, 0x0, 0x0}}) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000040)={0x7, 0x0, [{0xb5b, 0x0, 0x4}, {0xba5, 0x0, 0xec7}, {0x28c, 0x0, 0x8}, {0x315, 0x0, 0x3}, {0x40000100, 0x0, 0x5}, {0x1, 0x0, 0x8}, {0xb7f, 0x0, 0x6}]}) 2.022850811s ago: executing program 5 (id=1766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x8, 0x0, 0x7f, 0xf, 0xffffffff}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) preadv2(r0, &(0x7f0000000880)=[{&(0x7f0000001200)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/65, 0x41}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x2b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000004000000d11200000400000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r1, 0x0, 0x0}, 0x20) r2 = getpid() mmap(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32=r3, @ANYRES16, @ANYRES32=r0, @ANYRES8=r2, @ANYRES8=r3], 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = inotify_init1(0x1800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x810, r4, 0x9e1c7000) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_cred(r5, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x40001e0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) recvmmsg(r3, &(0x7f0000000cc0)=[{{&(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/113, 0x71}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x4, &(0x7f00000009c0)=""/191, 0xbf}, 0x10cd}, {{&(0x7f0000000a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000b00)=""/118, 0x76}], 0x2}, 0x4000001}], 0x2, 0x100, 0x0) socket$inet(0x2, 0x3, 0x8d) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x4, &(0x7f0000000840)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febcc001800000000000c00d359a88e50fbf18900000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2, 0x4}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r3, 0x800009) 1.603409111s ago: executing program 4 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000001840)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="3014d1d7cc3396"], 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000080)={0x18, r7, 0xffffffffffffffe3, 0x9}) keyctl$KEYCTL_MOVE(0x1e, r5, r5, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) 397.621028ms ago: executing program 0 (id=1768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x0, 0x9, 0x7fff, 0x100000001, 0x0, 0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x3, &(0x7f0000000300)=""/4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000100)={0x6, 0xa703138, 0x2, @discrete={0x3, 0x5}}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ffc, 0x62}}}}, [@NL80211_ATTR_IFNAME={0x53, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) geteuid() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x4, 0x0, 0x0, 0xfb, &(0x7f0000000380)="818e0c9d7a65f839e802a4158267b64ab7db10334587f46598502d71f44c090792766856db088846f21d0a9982461a2203cfd5812c9d6daddbf04dde05cca0f162124b93007350c31c2f8f1c600328b5c24114a057f82eb107e981eeaf5422215ccb5d3d31ba2c867cfbcf78cec5f146167316341c6a946bb9ce74a4da493916ab2992c861d048f0a73ab0083dd8e2e2499071bca2a73427664019718d38aa97fadd3c7784600b050e0f46963cf22a169c260454279d7f132ad0921a7b601fbd3e29c37de08e559e0e86df79ca041075af06527c95b2c4817b9ffce0b3764e755bd68fd47df3ccc614a25ab65263c965bfdd1e417b720777813450", 0x8}) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 0s ago: executing program 0 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000002200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102400, 0x19000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0xee01, r3}, 0xc) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d00), 0x420482, 0x0) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000000)={0xffffffffffffffff, r5, 0x439}) newfstatat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresgid(&(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000003c0)="4647483ef7f8ccdaf59fc2ad2805128763c6134e878892b64ca51288a73846b43138fe3f44d47e1b3f231534d30460a3af29c28bf0cafddae942015bab71e5d2cc59fa14a7c98c052bb97f3f971fb044057023713643ba88aab31b083dd27c31a340955e0b7776323a25d25ce67e2f3b0d4aeace9698afe0bd412fb9c2ac3c16569da41e464b99758d3838b90d3f9c64a9cfc06807da646f790b42cba343dc5b2bd3ac3134cfffe1715c0ed048ad7ffa71297c28c4610d3fb7b69938cfa84d359429f0f28b252ec8e03180fdde2a69", 0xcf}], 0x1, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="97067b4e8925d76c593a6e5881fbe4382d0c3a53aaf7e769911e5ca48395e747cf5ae7ce269d205de900b94a381f7136fddd7b1c714c8073cd40ea0410ebb5aca5b2d927b64290227c7fbcce1ef365f9a9d566f6ac27f5a908e5192436b50b6a77dc410904f148712b6a4a67497070b691a4364b48fe6ef5f1991ea301d0e1fc60a8894c4d2dd73a209e9d1a959918eee1c50e8b5482af0e5b9a44d0d0fd203b02dd1c25658f49b5b8ebda5b2536e53f2105", 0xb2}, {&(0x7f0000000140)}, {&(0x7f00000004c0)="97a504c2471a6947b88269a9eca4a582983e622e1fc393f1959c43aca141f2a121eb84d70159d4a18744dbc2de42be96c9e0c0da9cb858935d0e2c409374be6e3dc9ec2b43a9ada5e78c65c203391a6d95692fd66a11d05be39c9347d543e39d825fa2c75323a151973ef97a2a7da39b1af23b11a6da54aa8c9c721cd2456ac4ddc2299a34e5", 0x86}, {&(0x7f0000000180)="fe818d345d", 0x5}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000001000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000007c0)="fea6953312890eee93b9a589f91216aa461d14fc312b9c457cc1706c3c2f77315b32f1c6b2e2acb9a9e08a0e985961bc2f7d22eb3d1b6ff2e0986bd652c029f8607b3d0ba1ac92ce4c4225bc5066c73f46aebc802396977034dd6c846c8f85be43e2bb09556875207e4317ced0f9b1e56aa684986118f942b14e7acefca1f0c99a16e0a65c1e3a35903438ae9601198073ace56afd1c80e82bf77b05594a5c9e", 0xa0}, {&(0x7f0000000880)="1cfee3b8f332081967ce30f1e55f2abf837c57beaf1b847a4088465412d631c5346b3cd8075719c1220b06531d7212785af9fa39b752e59beb7a342957393545367e4e17694253a40537e0d7c68dd2ca6825cec6967dc035ed32", 0x5a}, {&(0x7f00000062c0)="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", 0x1000}, {&(0x7f0000000900)="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", 0xfd}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x24, 0x1, 0x1, [r4, r1, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0xa0}}], 0x3, 0x40005) memfd_create(0x0, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) kernel console output (not intermixed with test programs): pe 10 has an invalid length. [ 438.390027][ T9799] batman_adv: batadv0: Adding interface: netdevsim0 [ 438.390047][ T9799] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.390081][ T9799] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 438.420577][ T5804] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 438.430479][ T1246] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 438.570444][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 438.575914][ T5804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.575943][ T5804] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.578362][ T5804] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 438.578392][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 438.578416][ T5804] usb 4-1: Product: syz [ 438.578432][ T5804] usb 4-1: Manufacturer: syz [ 438.578448][ T5804] usb 4-1: SerialNumber: syz [ 438.630466][ T1246] usb 5-1: Using ep0 maxpacket: 16 [ 438.647272][ T1246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.647306][ T1246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 438.647333][ T1246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 438.681151][ T1246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.681183][ T1246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 438.681206][ T1246] usb 5-1: SerialNumber: syz [ 438.716784][ T5804] usb 4-1: config 0 descriptor?? [ 438.721640][ T9794] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 438.752489][ T1246] cdc_acm 5-1:1.0: skipping garbage [ 438.753866][ T1246] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 438.760557][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 438.910460][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 438.912903][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 438.912939][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 438.912968][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 438.915415][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 438.915446][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.915469][ T31] usb 1-1: Product: syz [ 438.915485][ T31] usb 1-1: Manufacturer: syz [ 438.915501][ T31] usb 1-1: SerialNumber: syz [ 438.975242][ T31] usb 1-1: config 0 descriptor?? [ 439.017894][ T36] usb 5-1: USB disconnect, device number 49 [ 439.042450][ T31] appledisplay 1-1:0.0: Submitting URB failed [ 439.042644][ T31] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 439.306773][ T31] usb 1-1: USB disconnect, device number 39 [ 439.338071][ T9815] netlink: 380 bytes leftover after parsing attributes in process `syz.5.1305'. [ 439.906962][ T9820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1307'. [ 439.980584][ T5804] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 440.091483][ T9821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1307'. [ 440.130438][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 440.315729][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.315832][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.347789][ T5804] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 440.347832][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.347854][ T5804] usb 5-1: Product: syz [ 440.347870][ T5804] usb 5-1: Manufacturer: syz [ 440.347885][ T5804] usb 5-1: SerialNumber: syz [ 440.406311][ T5804] r8152-cfgselector 5-1: Unknown version 0x0000 [ 440.406341][ T5804] r8152-cfgselector 5-1: config 0 descriptor?? [ 440.866284][ T9835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.041411][ T31] r8152-cfgselector 5-1: USB disconnect, device number 50 [ 441.420102][ T9855] netlink: 380 bytes leftover after parsing attributes in process `syz.4.1319'. [ 441.730456][ T5878] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 441.860438][ T5878] usb 2-1: device descriptor read/64, error -71 [ 441.898443][ T6062] usb 4-1: USB disconnect, device number 49 [ 442.083898][ T9872] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 442.100444][ T5878] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 442.230438][ T5878] usb 2-1: device descriptor read/64, error -71 [ 442.239638][ T6062] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 442.341383][ T5878] usb usb2-port1: attempt power cycle [ 442.400615][ T6062] usb 5-1: Using ep0 maxpacket: 16 [ 442.405967][ T6062] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 442.406000][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.406022][ T6062] usb 5-1: Product: syz [ 442.406037][ T6062] usb 5-1: Manufacturer: syz [ 442.406054][ T6062] usb 5-1: SerialNumber: syz [ 442.454094][ T6062] r8152-cfgselector 5-1: Unknown version 0x0000 [ 442.454124][ T6062] r8152-cfgselector 5-1: config 0 descriptor?? [ 442.690572][ T5878] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 442.712434][ T5878] usb 2-1: device descriptor read/8, error -71 [ 442.904325][ T9900] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1334'. [ 442.990846][ T5878] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 443.013236][ T5878] usb 2-1: device descriptor read/8, error -71 [ 443.121193][ T5878] usb usb2-port1: unable to enumerate USB device [ 443.252613][ T9908] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1343'. [ 445.091584][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1348'. [ 445.131952][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1348'. [ 445.544083][ T6062] r8152-cfgselector 5-1: Unknown version 0x0000 [ 445.544596][ T6062] r8152-cfgselector 5-1: bad CDC descriptors [ 445.596316][ T6062] r8152-cfgselector 5-1: USB disconnect, device number 51 [ 445.960491][ T6058] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 446.047480][ T9954] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1353'. [ 446.090614][ T5804] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 446.110685][ T6062] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 446.112805][ T6058] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 446.112833][ T6058] usb 4-1: config 0 has no interface number 0 [ 446.112878][ T6058] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.112908][ T6058] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 446.112928][ T6058] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 446.112947][ T6058] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 446.112972][ T6058] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 446.112991][ T6058] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.113022][ T6058] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 446.113040][ T6058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.117931][ T6058] usb 4-1: config 0 descriptor?? [ 446.134735][ T9943] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.136004][ T9943] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.250492][ T5804] usb 2-1: device descriptor read/64, error -71 [ 446.267028][ T6058] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 446.300478][ T6062] usb 5-1: Using ep0 maxpacket: 16 [ 446.303652][ T6062] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.303683][ T6062] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 446.303709][ T6062] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 446.305195][ T6062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.305224][ T6062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 446.305247][ T6062] usb 5-1: SerialNumber: syz [ 446.394907][ T9946] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 446.443392][ T6062] cdc_acm 5-1:1.0: skipping garbage [ 446.448486][ T6062] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 446.490489][ T5804] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 446.620496][ T5804] usb 2-1: device descriptor read/64, error -71 [ 446.689041][ T6049] usb 5-1: USB disconnect, device number 52 [ 446.730890][ T5804] usb usb2-port1: attempt power cycle [ 447.071355][ T5804] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 447.093573][ T5804] usb 2-1: device descriptor read/8, error -71 [ 447.294970][ T6049] usb 4-1: USB disconnect, device number 50 [ 447.326374][ T6049] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 447.338285][ T5804] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 447.361327][ T5804] usb 2-1: device descriptor read/8, error -71 [ 447.470902][ T5804] usb usb2-port1: unable to enumerate USB device [ 447.750819][ T6049] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 447.900461][ T6049] usb 5-1: Using ep0 maxpacket: 16 [ 447.922050][ T6049] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 447.922082][ T6049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.922105][ T6049] usb 5-1: Product: syz [ 447.922122][ T6049] usb 5-1: Manufacturer: syz [ 447.922138][ T6049] usb 5-1: SerialNumber: syz [ 447.980887][ T6049] r8152-cfgselector 5-1: Unknown version 0x0000 [ 447.980917][ T6049] r8152-cfgselector 5-1: config 0 descriptor?? [ 449.490147][T10014] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1373'. [ 450.361020][ T5871] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 450.553658][T10031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.775454][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.776508][ T5871] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.776537][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.850886][ T6049] r8152-cfgselector 5-1: Unknown version 0x0000 [ 450.851398][ T6049] r8152-cfgselector 5-1: bad CDC descriptors [ 450.960621][ T5871] usb 2-1: config 0 descriptor?? [ 450.963934][ T6049] r8152-cfgselector 5-1: USB disconnect, device number 53 [ 452.500925][ T5871] usbhid 2-1:0.0: can't add hid device: -71 [ 452.501055][ T5871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 452.659276][ T5871] usb 2-1: USB disconnect, device number 49 [ 452.842726][T10052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1389'. [ 452.900760][T10054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1389'. [ 452.990440][ T5871] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 453.120482][ T5871] usb 2-1: device descriptor read/64, error -71 [ 453.370477][ T5871] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 453.648331][ T5871] usb 2-1: device descriptor read/64, error -71 [ 453.754263][ T5871] usb usb2-port1: attempt power cycle [ 454.421762][ T6058] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 454.873193][ T6058] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 454.873226][ T6058] usb 5-1: config 0 has no interface number 0 [ 454.873288][ T6058] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 454.873319][ T6058] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 454.875551][ T6058] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 454.875581][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 454.875605][ T6058] usb 5-1: Manufacturer: syz [ 454.875621][ T6058] usb 5-1: SerialNumber: syz [ 454.976982][ T6058] usb 5-1: config 0 descriptor?? [ 455.191651][ T5871] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 455.215342][ T5871] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 455.215374][ T5871] usb 2-1: config 0 has no interface number 0 [ 455.215441][ T5871] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 455.215472][ T5871] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 455.217905][ T5871] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 455.217936][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 455.217959][ T5871] usb 2-1: Manufacturer: syz [ 455.217975][ T5871] usb 2-1: SerialNumber: syz [ 455.322659][ T5871] usb 2-1: config 0 descriptor?? [ 456.564672][ T6058] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 456.564957][ T6058] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 456.596157][ T6058] usb 5-1: USB disconnect, device number 54 [ 457.807794][ T5871] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 457.808090][ T5871] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 457.891694][ T5871] usb 2-1: USB disconnect, device number 52 [ 459.711487][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1409'. [ 459.768220][T10134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.600599][ T1246] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 462.689563][T10157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.771996][ T1246] usb 1-1: Using ep0 maxpacket: 8 [ 462.774320][ T1246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.774347][ T1246] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.777340][ T1246] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 462.777370][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 462.777393][ T1246] usb 1-1: Product: syz [ 462.777408][ T1246] usb 1-1: Manufacturer: syz [ 462.777425][ T1246] usb 1-1: SerialNumber: syz [ 462.883781][ T1246] usb 1-1: config 0 descriptor?? [ 463.451032][ T6058] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 464.481940][ T6058] usb 4-1: Using ep0 maxpacket: 16 [ 464.594203][ T6058] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 464.594238][ T6058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.594261][ T6058] usb 4-1: Product: syz [ 464.594276][ T6058] usb 4-1: Manufacturer: syz [ 464.594291][ T6058] usb 4-1: SerialNumber: syz [ 464.599879][ T6058] usb 4-1: config 0 descriptor?? [ 464.652177][ T6058] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 464.854661][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.856987][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.293259][ T6058] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 465.308861][ T6058] usb 4-1: USB disconnect, device number 51 [ 465.324758][ T6047] udevd[6047]: setting mode of /dev/bus/usb/004/051 to 020664 failed: No such file or directory [ 465.324945][ T6047] udevd[6047]: setting owner of /dev/bus/usb/004/051 to uid=0, gid=0 failed: No such file or directory [ 465.537400][ T6058] usb 1-1: USB disconnect, device number 40 [ 465.730456][ T6062] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 465.880470][ T6062] usb 5-1: Using ep0 maxpacket: 16 [ 465.882959][ T6062] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 465.882989][ T6062] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 465.883016][ T6062] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 465.884561][ T6062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.884589][ T6062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 465.884611][ T6062] usb 5-1: SerialNumber: syz [ 465.931585][T10217] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 465.980566][ T6058] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 465.983180][ T6062] cdc_acm 5-1:1.0: skipping garbage [ 465.984503][ T6062] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 466.100875][ T1246] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 466.130453][ T6058] usb 1-1: Using ep0 maxpacket: 16 [ 466.132391][ T6058] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 466.132412][ T6058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.159396][ T6058] usb 1-1: config 0 descriptor?? [ 466.190498][ T6058] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 466.210242][ T6062] usb 5-1: USB disconnect, device number 55 [ 466.230467][ T10] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 466.270050][ T1246] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 466.270083][ T1246] usb 2-1: config 0 has no interface number 0 [ 466.270131][ T1246] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 466.270160][ T1246] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 466.278108][ T1246] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 466.278141][ T1246] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 466.278164][ T1246] usb 2-1: Manufacturer: syz [ 466.278180][ T1246] usb 2-1: SerialNumber: syz [ 466.341026][ T1246] usb 2-1: config 0 descriptor?? [ 466.384144][ T6058] usb 1-1: Detected FT232A [ 466.390128][ T6058] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 466.416423][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 466.416453][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.416475][ T10] usb 4-1: config 0 has no interface number 0 [ 466.416578][ T10] usb 4-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.416611][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 466.416646][ T10] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 466.416727][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.497588][ T10] usb 4-1: config 0 descriptor?? [ 466.533617][ T10] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 468.214087][ T1246] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 468.214383][ T1246] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 468.240171][ T1246] usb 2-1: USB disconnect, device number 53 [ 469.233035][ T1246] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 469.764293][ T1246] usb 5-1: Using ep0 maxpacket: 16 [ 469.794454][ T1246] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 469.794486][ T1246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.833385][ T1246] usb 5-1: config 0 descriptor?? [ 469.847843][ T1246] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 469.917325][ T6058] usb 4-1: USB disconnect, device number 52 [ 470.044014][ T1246] usb 5-1: Detected FT232A [ 470.055446][ T1246] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 470.653295][ T10] usb 5-1: USB disconnect, device number 56 [ 470.680512][ T1246] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 470.684715][ T10] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 470.685420][ T10] ftdi_sio 5-1:0.0: device disconnected [ 470.844330][ T1246] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.844389][ T1246] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 470.844419][ T1246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 470.844449][ T1246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 470.844475][ T1246] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 470.900508][ T1246] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 470.900548][ T1246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 470.900570][ T1246] usb 2-1: Product: syz [ 470.900586][ T1246] usb 2-1: Manufacturer: syz [ 470.900601][ T1246] usb 2-1: SerialNumber: syz [ 470.951610][ T1246] usb 2-1: config 0 descriptor?? [ 471.008670][ T6049] usb 1-1: USB disconnect, device number 41 [ 471.052233][ T6049] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.056530][ T6049] ftdi_sio 1-1:0.0: device disconnected [ 471.160776][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 471.312565][ T1246] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 471.312852][ T1246] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 471.349223][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.349275][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.349301][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.395647][ T1246] usb 2-1: USB disconnect, device number 54 [ 471.431289][ T10] usb 5-1: config 0 descriptor?? [ 471.966979][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 471.967114][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 472.002439][ T10] usb 5-1: USB disconnect, device number 57 [ 472.210440][ T6049] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 472.370564][ T6049] usb 4-1: Using ep0 maxpacket: 8 [ 472.373164][ T6049] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.373191][ T6049] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.377486][ T6049] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 472.377516][ T6049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 472.377539][ T6049] usb 4-1: Product: syz [ 472.377554][ T6049] usb 4-1: Manufacturer: syz [ 472.377570][ T6049] usb 4-1: SerialNumber: syz [ 472.449412][ T6049] usb 4-1: config 0 descriptor?? [ 472.482155][ T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 472.762741][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.765842][ T10] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 472.765874][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 472.765897][ T10] usb 5-1: Product: syz [ 472.765913][ T10] usb 5-1: Manufacturer: syz [ 472.765930][ T10] usb 5-1: SerialNumber: syz [ 472.907649][ T10] usb 5-1: config 0 descriptor?? [ 474.891926][ T6062] usb 4-1: USB disconnect, device number 53 [ 475.266780][ T6049] usb 5-1: USB disconnect, device number 58 [ 475.704378][ T6054] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 475.758696][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1497'. [ 475.822756][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1497'. [ 475.863767][ T6054] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 475.863798][ T6054] usb 5-1: config 0 has no interface number 0 [ 475.863842][ T6054] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 475.863869][ T6054] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 475.866684][ T6054] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 475.866714][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 475.866736][ T6054] usb 5-1: Manufacturer: syz [ 475.866750][ T6054] usb 5-1: SerialNumber: syz [ 475.907106][ T6054] usb 5-1: config 0 descriptor?? [ 476.380576][ T6062] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 476.539482][ T6062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.539540][ T6062] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 476.539732][ T6062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.625404][ T6062] usb 2-1: config 0 descriptor?? [ 476.958814][ T6054] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 476.959287][ T6054] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 476.997783][ T6054] usb 5-1: USB disconnect, device number 59 [ 477.234845][ T6062] usbhid 2-1:0.0: can't add hid device: -71 [ 477.234969][ T6062] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.316775][ T6062] usb 2-1: USB disconnect, device number 55 [ 477.610472][ T1246] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 477.760464][ T6062] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 477.770401][ T1246] usb 4-1: Using ep0 maxpacket: 8 [ 477.785680][ T1246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.785712][ T1246] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 477.795925][ T1246] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 477.796020][ T1246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 477.796090][ T1246] usb 4-1: Product: syz [ 477.796129][ T1246] usb 4-1: Manufacturer: syz [ 477.796176][ T1246] usb 4-1: SerialNumber: syz [ 477.859764][ T1246] usb 4-1: config 0 descriptor?? [ 477.900467][ T6062] usb 2-1: device descriptor read/64, error -71 [ 479.824578][T10456] autofs4:pid:10456:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 480.571095][ T1246] usb 4-1: USB disconnect, device number 54 [ 480.791091][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 481.479099][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 481.479131][ T10] usb 5-1: config 0 has no interface number 0 [ 481.479178][ T10] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 481.479208][ T10] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 481.482548][ T10] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 481.482578][ T10] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 481.482600][ T10] usb 5-1: Manufacturer: syz [ 481.482615][ T10] usb 5-1: SerialNumber: syz [ 481.549980][ T10] usb 5-1: config 0 descriptor?? [ 482.054751][ T10] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 482.055049][ T10] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 482.082669][ T10] usb 5-1: USB disconnect, device number 60 [ 482.376418][T10499] autofs4:pid:10499:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 482.612054][ T6062] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 483.740637][ T6058] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 483.760396][ T6062] usb 2-1: Using ep0 maxpacket: 16 [ 483.762907][ T6062] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 483.762937][ T6062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.768592][ T6062] usb 2-1: config 0 descriptor?? [ 483.803162][ T6062] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 483.900531][ T6058] usb 4-1: Using ep0 maxpacket: 8 [ 483.903089][ T6058] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.903116][ T6058] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 483.936019][ T6058] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 483.936275][ T6058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 483.936300][ T6058] usb 4-1: Product: syz [ 483.936316][ T6058] usb 4-1: Manufacturer: syz [ 483.936331][ T6058] usb 4-1: SerialNumber: syz [ 483.974392][ T6062] usb 2-1: Detected FT232A [ 483.987116][ T6058] usb 4-1: config 0 descriptor?? [ 483.997938][ T6062] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 484.430398][ T10] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 484.626799][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.626859][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.629889][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 484.629930][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 484.629952][ T10] usb 1-1: Product: syz [ 484.629969][ T10] usb 1-1: Manufacturer: syz [ 484.629985][ T10] usb 1-1: SerialNumber: syz [ 484.763707][ T10] usb 1-1: config 0 descriptor?? [ 484.781218][ T10] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 484.781314][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 484.789357][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 485.803276][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.824447][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.828139][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.845556][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.850090][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.083859][ T10] usb 4-1: USB disconnect, device number 55 [ 487.022688][ T6058] usb 2-1: USB disconnect, device number 58 [ 487.080781][ T6058] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 487.086194][ T6058] ftdi_sio 2-1:0.0: device disconnected [ 487.205221][ T10] usb 1-1: USB disconnect, device number 42 [ 487.450583][ T6058] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 487.603064][ T6058] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 487.603097][ T6058] usb 5-1: config 0 has no interface number 0 [ 487.603144][ T6058] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 487.603173][ T6058] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 487.605086][ T6058] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 487.605116][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 487.605137][ T6058] usb 5-1: Manufacturer: syz [ 487.605156][ T6058] usb 5-1: SerialNumber: syz [ 487.617569][ T6058] usb 5-1: config 0 descriptor?? [ 487.684511][T10577] autofs4:pid:10577:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 487.802082][ T102] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 487.893901][ T757] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.913120][ T60] Bluetooth: hci2: command tx timeout [ 488.202624][ T6058] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 488.202900][ T6058] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 488.239759][T10545] chnl_net:caif_netlink_parms(): no params data found [ 488.252893][ T102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.252946][ T102] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 488.252971][ T102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.309910][ T6058] usb 5-1: USB disconnect, device number 61 [ 488.353415][ T102] usb 1-1: config 0 descriptor?? [ 488.890092][ T102] usbhid 1-1:0.0: can't add hid device: -71 [ 488.890245][ T102] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 488.928024][ T102] usb 1-1: USB disconnect, device number 43 [ 489.213575][ T6058] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 489.990405][ T60] Bluetooth: hci2: command tx timeout [ 490.050229][ T757] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.170391][ T6058] usb 5-1: Using ep0 maxpacket: 8 [ 490.187390][ T6058] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.187420][ T6058] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.217064][ T6058] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 490.217100][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 490.217123][ T6058] usb 5-1: Product: syz [ 490.217139][ T6058] usb 5-1: Manufacturer: syz [ 490.217155][ T6058] usb 5-1: SerialNumber: syz [ 490.267379][ T6058] usb 5-1: config 0 descriptor?? [ 490.350437][ T102] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 490.443359][ T757] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.490594][ T102] usb 1-1: device descriptor read/64, error -71 [ 490.501839][ T1246] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 490.573557][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.573791][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.574002][T10545] bridge_slave_0: entered allmulticast mode [ 490.576865][T10545] bridge_slave_0: entered promiscuous mode [ 490.638686][ T10] usb 5-1: USB disconnect, device number 62 [ 490.665819][ T1246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.665889][ T1246] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.670183][ T1246] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 490.670217][ T1246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 490.670234][ T1246] usb 4-1: Product: syz [ 490.670245][ T1246] usb 4-1: Manufacturer: syz [ 490.670256][ T1246] usb 4-1: SerialNumber: syz [ 490.735152][ T1246] usb 4-1: config 0 descriptor?? [ 490.751430][ T1246] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 490.751489][ T1246] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 490.751886][ T1246] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 490.780439][ T102] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 490.873699][ T757] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.920481][ T102] usb 1-1: device descriptor read/64, error -71 [ 490.972793][ T6049] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 491.018295][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.018433][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.018694][T10545] bridge_slave_1: entered allmulticast mode [ 491.047097][ T102] usb usb1-port1: attempt power cycle [ 491.053763][T10545] bridge_slave_1: entered promiscuous mode [ 491.130345][ T6049] usb 2-1: Using ep0 maxpacket: 16 [ 491.136914][ T6049] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 491.136946][ T6049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.190750][ T6049] usb 2-1: config 0 descriptor?? [ 491.200245][T10545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.228567][ T6049] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 491.267047][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.331535][T10545] team0: Port device team_slave_0 added [ 491.336614][T10545] team0: Port device team_slave_1 added [ 491.395373][T10545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.395391][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.395420][T10545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.408617][ T6049] usb 2-1: Detected FT232A [ 491.452907][ T6049] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 491.513534][ T1246] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 491.566676][T10545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.566696][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.566725][T10545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.675063][ T1246] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 491.675094][ T1246] usb 5-1: config 0 has no interface number 0 [ 491.675151][ T1246] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 491.675180][ T1246] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 491.677490][ T1246] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 491.677523][ T1246] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 491.677545][ T1246] usb 5-1: Manufacturer: syz [ 491.677560][ T1246] usb 5-1: SerialNumber: syz [ 491.723758][ T1246] usb 5-1: config 0 descriptor?? [ 491.915659][T10545] hsr_slave_0: entered promiscuous mode [ 491.917082][T10545] hsr_slave_1: entered promiscuous mode [ 491.918107][T10545] debugfs: 'hsr0' already exists in 'hsr' [ 491.918145][T10545] Cannot create hsr debugfs directory [ 492.257546][ T60] Bluetooth: hci2: command tx timeout [ 492.294702][ T1246] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 492.295002][ T1246] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 493.170604][ T1246] usb 5-1: USB disconnect, device number 63 [ 493.249905][ T6058] usb 4-1: USB disconnect, device number 56 [ 493.650458][ T6058] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 493.812648][ T6058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.812705][ T6058] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 493.812723][ T6058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.818284][ T6058] usb 4-1: config 0 descriptor?? [ 494.310474][ T60] Bluetooth: hci2: command tx timeout [ 494.351643][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1567'. [ 494.367427][ T6058] usbhid 4-1:0.0: can't add hid device: -71 [ 494.367560][ T6058] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 494.428800][ T6058] usb 4-1: USB disconnect, device number 57 [ 494.459242][ T10] usb 2-1: USB disconnect, device number 59 [ 494.483097][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 494.517063][ T10] ftdi_sio 2-1:0.0: device disconnected [ 494.665929][ T757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.741658][ T757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.783838][ T757] bond0 (unregistering): Released all slaves [ 494.891453][ T6058] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 495.050407][ T6058] usb 4-1: device descriptor read/64, error -71 [ 495.067508][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 495.138649][ T6062] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 495.232038][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 495.238619][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.238648][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.247697][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 495.247731][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 495.247752][ T10] usb 2-1: Product: syz [ 495.247768][ T10] usb 2-1: Manufacturer: syz [ 495.247784][ T10] usb 2-1: SerialNumber: syz [ 495.290384][ T6058] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 495.296165][ T6062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.298021][ T6062] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 495.298098][ T6062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 495.298187][ T6062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 495.298250][ T6062] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 495.320922][ T6062] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 495.321012][ T6062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 495.321065][ T6062] usb 1-1: Product: syz [ 495.321106][ T6062] usb 1-1: Manufacturer: syz [ 495.321146][ T6062] usb 1-1: SerialNumber: syz [ 495.395042][ T10] usb 2-1: config 0 descriptor?? [ 495.420557][ T6062] usb 1-1: config 0 descriptor?? [ 495.436128][ T6058] usb 4-1: device descriptor read/64, error -71 [ 495.543283][ T6058] usb usb4-port1: attempt power cycle [ 495.766848][ T6062] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 495.767282][ T6062] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 495.807113][ T6062] usb 1-1: USB disconnect, device number 47 [ 495.881061][ T6058] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 495.901158][ T6058] usb 4-1: device descriptor read/8, error -71 [ 495.940413][ T1246] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 496.094094][ T1246] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 496.094125][ T1246] usb 5-1: config 0 has no interface number 0 [ 496.094174][ T1246] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 496.094203][ T1246] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 496.096314][ T1246] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 496.096346][ T1246] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 496.096370][ T1246] usb 5-1: Manufacturer: syz [ 496.096387][ T1246] usb 5-1: SerialNumber: syz [ 496.140659][ T6058] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 496.164288][ T6058] usb 4-1: device descriptor read/8, error -71 [ 496.187352][ T1246] usb 5-1: config 0 descriptor?? [ 496.270744][ T6058] usb usb4-port1: unable to enumerate USB device [ 497.824039][ T1246] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 497.824330][ T1246] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 498.018699][ T1246] usb 5-1: USB disconnect, device number 64 [ 498.083183][ T102] usb 2-1: USB disconnect, device number 60 [ 498.619207][T10680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.560510][ T6058] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 499.658411][T10688] autofs4:pid:10688:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 499.720445][ T6058] usb 1-1: Using ep0 maxpacket: 16 [ 499.722903][ T6058] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.722933][ T6058] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.722960][ T6058] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 499.724516][ T6058] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.724542][ T6058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 499.724564][ T6058] usb 1-1: SerialNumber: syz [ 499.782181][ T1246] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 499.805154][T10676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.819753][ T6058] cdc_acm 1-1:1.0: skipping garbage [ 499.826419][ T6058] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 499.940590][ T1246] usb 5-1: Using ep0 maxpacket: 16 [ 499.943231][ T1246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.943267][ T1246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.943286][ T1246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 499.944556][ T1246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.944602][ T1246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 499.944618][ T1246] usb 5-1: SerialNumber: syz [ 500.010842][T10684] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 500.028457][ T1246] cdc_acm 5-1:1.0: skipping garbage [ 500.040982][ T1246] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 500.071175][ T6058] usb 1-1: USB disconnect, device number 48 [ 500.218458][T10400] usb 5-1: USB disconnect, device number 65 [ 500.469692][T10696] kvm: kvm [10692]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 500.520539][ T757] hsr_slave_0: left promiscuous mode [ 500.561193][ T757] hsr_slave_1: left promiscuous mode [ 500.562086][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.562105][ T757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.624510][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.624538][ T757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.630626][ T6058] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 500.974223][ T757] veth1_macvtap: left promiscuous mode [ 500.974333][ T757] veth0_macvtap: left promiscuous mode [ 500.974584][ T757] veth1_vlan: left promiscuous mode [ 500.974757][ T757] veth0_vlan: left promiscuous mode [ 501.901938][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.902013][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.908210][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 501.932917][ T6058] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 501.932950][ T6058] usb 2-1: config 0 has no interface number 0 [ 501.933000][ T6058] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 501.933032][ T6058] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 501.941454][ T6058] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 501.941487][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 501.941511][ T6058] usb 2-1: Manufacturer: syz [ 501.941528][ T6058] usb 2-1: SerialNumber: syz [ 502.023672][ T6058] usb 2-1: config 0 descriptor?? [ 502.060431][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 502.062867][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.062895][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 502.066145][ T10] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 502.066175][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 502.066199][ T10] usb 4-1: Product: syz [ 502.066215][ T10] usb 4-1: Manufacturer: syz [ 502.066231][ T10] usb 4-1: SerialNumber: syz [ 502.100036][ T10] usb 4-1: config 0 descriptor?? [ 504.356142][ T10] usb 4-1: USB disconnect, device number 62 [ 504.571197][ T757] team0 (unregistering): Port device team_slave_1 removed [ 504.631791][ T757] team0 (unregistering): Port device team_slave_0 removed [ 504.987190][ T6058] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 504.987524][ T6058] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 505.015511][ T6058] usb 2-1: USB disconnect, device number 61 [ 505.444049][T10723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.180441][ T31] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 506.402744][ T31] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 506.402776][ T31] usb 4-1: config 0 has no interface number 0 [ 506.402823][ T31] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 506.402853][ T31] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 506.404667][ T31] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 506.404699][ T31] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 506.404723][ T31] usb 4-1: Manufacturer: syz [ 506.404739][ T31] usb 4-1: SerialNumber: syz [ 506.474655][ T31] usb 4-1: config 0 descriptor?? [ 506.490463][ T10] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 506.682781][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.682841][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.682866][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 506.689148][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 506.689183][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 506.689206][ T10] usb 1-1: Product: syz [ 506.689222][ T10] usb 1-1: Manufacturer: syz [ 506.689239][ T10] usb 1-1: SerialNumber: syz [ 506.840504][ T10] usb 1-1: config 0 descriptor?? [ 507.388345][ T10] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 507.388437][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 507.388977][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 508.020481][ T6058] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 508.181614][ T6058] usb 5-1: Using ep0 maxpacket: 16 [ 508.184960][ T6058] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 508.184992][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.323888][ T6058] usb 5-1: config 0 descriptor?? [ 508.341032][ T6058] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 508.412487][T10545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 508.544199][ T6058] usb 5-1: Detected FT232A [ 508.567363][ T6058] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 508.598972][T10545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 508.703368][T10545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 508.782846][T10545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 508.786323][T10758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.786880][T10758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.079936][T10400] usb 5-1: USB disconnect, device number 66 [ 509.181879][T10400] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 509.189617][T10400] ftdi_sio 5-1:0.0: device disconnected [ 509.365588][ T10] usb 1-1: USB disconnect, device number 49 [ 509.880390][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.170682][ T102] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 510.442750][ T102] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 510.442781][ T102] usb 5-1: config 0 has no interface number 0 [ 510.442912][ T102] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 510.442944][ T102] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 510.509745][ T102] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 510.509835][ T102] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 510.509858][ T102] usb 5-1: Manufacturer: syz [ 510.509875][ T102] usb 5-1: SerialNumber: syz [ 510.523709][T10545] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.565290][ T102] usb 5-1: config 0 descriptor?? [ 510.613004][ T1815] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.613269][ T1815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.647789][ T3208] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.648847][ T3208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.074353][ T102] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 511.074830][ T102] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 511.148256][ T102] usb 5-1: USB disconnect, device number 67 [ 511.512947][ T31] usbtouchscreen 4-1:0.214: Failed to read FW rev: -110 [ 511.513213][ T31] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -110 [ 513.425490][T10545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.745475][T10808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.452559][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.511378][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.434936][T10545] veth0_vlan: entered promiscuous mode [ 515.472146][T10545] veth1_vlan: entered promiscuous mode [ 515.512704][ T102] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 515.535082][T10400] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 515.655058][T10545] veth0_macvtap: entered promiscuous mode [ 515.692083][ T102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.692137][ T102] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 515.692164][ T102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.711432][T10400] usb 1-1: Using ep0 maxpacket: 8 [ 515.739765][T10545] veth1_macvtap: entered promiscuous mode [ 515.742586][T10400] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.742613][T10400] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.772414][T10400] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 515.772447][T10400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 515.772469][T10400] usb 1-1: Product: syz [ 515.772485][T10400] usb 1-1: Manufacturer: syz [ 515.772500][T10400] usb 1-1: SerialNumber: syz [ 515.777819][ T102] usb 2-1: config 0 descriptor?? [ 515.822781][T10400] usb 1-1: config 0 descriptor?? [ 515.951771][T10545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.307677][ T102] usbhid 2-1:0.0: can't add hid device: -71 [ 516.307809][ T102] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 516.335179][T10545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.369569][ T102] usb 2-1: USB disconnect, device number 62 [ 516.409838][ T1815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.410134][ T1815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.449404][ T1815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.449465][ T1815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.651847][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.652437][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.964800][ T102] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 518.130427][ T6058] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 518.132268][ T102] usb 2-1: device descriptor read/64, error -71 [ 518.370365][ T6058] usb 5-1: Using ep0 maxpacket: 16 [ 518.375027][ T6058] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 518.375060][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.439623][ T6058] usb 5-1: config 0 descriptor?? [ 518.461868][ T6058] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 518.690882][ T6058] usb 5-1: Detected FT232A [ 518.775805][ T31] usb 1-1: USB disconnect, device number 50 [ 518.811404][ T6058] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 519.062482][ T3208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.062504][ T3208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.330457][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.330480][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.391723][ T31] usb 5-1: USB disconnect, device number 68 [ 519.425192][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 519.429300][ T31] ftdi_sio 5-1:0.0: device disconnected [ 519.887643][T10879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1620'. [ 519.922026][T10879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.477653][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'. [ 522.718565][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.719030][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.840394][ T6058] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 523.005593][ T6058] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.010490][ T6058] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.010519][ T6058] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 523.060801][ T6049] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 523.061828][ T6058] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 523.061857][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 523.061880][ T6058] usb 2-1: Product: syz [ 523.061896][ T6058] usb 2-1: Manufacturer: syz [ 523.061911][ T6058] usb 2-1: SerialNumber: syz [ 523.116150][ T6058] usb 2-1: config 0 descriptor?? [ 523.136061][ T6058] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 523.136169][ T6058] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 523.136747][ T6058] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 523.223045][ T6049] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 523.223078][ T6049] usb 5-1: config 0 has no interface number 0 [ 523.223147][ T6049] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 523.223177][ T6049] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 523.227547][ T6049] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 523.227586][ T6049] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 523.227607][ T6049] usb 5-1: Manufacturer: syz [ 523.227623][ T6049] usb 5-1: SerialNumber: syz [ 523.280194][ T6049] usb 5-1: config 0 descriptor?? [ 523.501687][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.502410][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.860443][ T6049] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 523.860473][ T6058] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 523.860729][ T6049] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 523.890599][ T6049] usb 5-1: USB disconnect, device number 69 [ 524.027199][ T6058] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.027253][ T6058] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 524.027280][ T6058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.082085][ T6058] usb 6-1: config 0 descriptor?? [ 524.511933][ T6058] usbhid 6-1:0.0: can't add hid device: -71 [ 524.512070][ T6058] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 524.536409][ T6058] usb 6-1: USB disconnect, device number 8 [ 524.758888][ T6049] usb 4-1: USB disconnect, device number 63 [ 524.930415][T10400] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 525.220467][ T6058] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 525.255585][T10400] usb 5-1: Using ep0 maxpacket: 16 [ 525.257666][T10400] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.257698][T10400] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 525.257722][T10400] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 525.258904][T10400] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.258932][T10400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 525.258973][T10400] usb 5-1: SerialNumber: syz [ 525.282735][T10913] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 525.316272][T10400] cdc_acm 5-1:1.0: skipping garbage [ 525.327980][T10400] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 525.370480][ T6058] usb 6-1: device descriptor read/64, error -71 [ 525.519721][ T10] usb 5-1: USB disconnect, device number 70 [ 525.547046][ T102] usb 2-1: USB disconnect, device number 65 [ 525.632961][ T6058] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 525.772274][ T6058] usb 6-1: device descriptor read/64, error -71 [ 526.001692][ T6058] usb usb6-port1: attempt power cycle [ 526.230497][ T102] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 526.391350][ T102] usb 2-1: Using ep0 maxpacket: 16 [ 526.394993][ T102] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 526.395024][ T102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.479184][ T102] usb 2-1: config 0 descriptor?? [ 526.525644][ T102] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 526.751931][ T6062] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 526.759405][ T102] usb 2-1: Detected FT232A [ 526.795071][ T102] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 526.905025][T10928] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1633'. [ 526.948661][T10928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.252357][ T6062] usb 5-1: Using ep0 maxpacket: 16 [ 527.581634][ T6062] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.581668][ T6062] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 527.581695][ T6062] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 527.592625][ T6062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.592660][ T6062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 527.592682][ T6062] usb 5-1: SerialNumber: syz [ 527.656606][T10922] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.694245][ T6062] cdc_acm 5-1:1.0: skipping garbage [ 527.695662][ T6062] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 527.715158][ T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 527.900456][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 527.903122][ T31] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 527.903150][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.938576][ T31] usb 1-1: config 0 descriptor?? [ 527.949322][ T6054] usb 5-1: USB disconnect, device number 71 [ 528.177873][ T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 529.298327][ T31] usb 1-1: Detected FT232A [ 531.206601][ T31] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 531.360880][ T6062] usb 1-1: USB disconnect, device number 51 [ 531.378955][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 531.483050][ T6062] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 531.483817][ T6062] ftdi_sio 1-1:0.0: device disconnected [ 531.661527][ T31] usb 2-1: USB disconnect, device number 66 [ 531.774185][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 531.774667][ T31] ftdi_sio 2-1:0.0: device disconnected [ 532.340434][ T1246] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 532.501855][ T1246] usb 4-1: Using ep0 maxpacket: 8 [ 532.504692][ T1246] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 532.504728][ T1246] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 532.504756][ T1246] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 532.504782][ T1246] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.504825][ T1246] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.504850][ T1246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.842960][ T1246] usb 4-1: GET_CAPABILITIES returned 0 [ 532.843017][ T1246] usbtmc 4-1:16.0: can't read capabilities [ 533.053548][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 533.516300][T10969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1644'. [ 533.552532][T10969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.470510][ T6062] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 534.631771][ T6062] usb 1-1: Using ep0 maxpacket: 8 [ 534.634449][ T6062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.634484][ T6062] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 534.638147][ T6062] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 534.638178][ T6062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 534.638200][ T6062] usb 1-1: Product: syz [ 534.638217][ T6062] usb 1-1: Manufacturer: syz [ 534.638233][ T6062] usb 1-1: SerialNumber: syz [ 534.722770][ T6062] usb 1-1: config 0 descriptor?? [ 535.740457][ T6062] usb 4-1: USB disconnect, device number 64 [ 537.230457][ T6049] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 537.233615][T10993] autofs4:pid:10993:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 537.280800][ T1246] usb 1-1: USB disconnect, device number 52 [ 537.381058][ T6049] usb 2-1: Using ep0 maxpacket: 16 [ 537.390176][ T6049] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 537.390210][ T6049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.390232][ T6049] usb 2-1: Product: syz [ 537.418537][ T6049] usb 2-1: Manufacturer: syz [ 537.418558][ T6049] usb 2-1: SerialNumber: syz [ 537.553376][ T6049] usb 2-1: config 0 descriptor?? [ 537.580662][ T6049] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 537.762057][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.762625][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.820917][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1651'. [ 537.900565][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 537.920406][ T102] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 538.051613][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 538.055034][ T31] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 538.055067][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.069497][ T31] usb 1-1: config 0 descriptor?? [ 538.070502][ T102] usb 4-1: Using ep0 maxpacket: 16 [ 538.084349][ T102] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 538.084440][ T102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.276153][ T6049] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 538.781699][ T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 538.782077][ T102] usb 4-1: config 0 descriptor?? [ 538.841030][ T31] usb 1-1: Detected FT232A [ 538.874656][ T6049] usb 2-1: USB disconnect, device number 67 [ 538.876990][ T102] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 538.912395][ T31] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 538.990566][ T102] usb 4-1: Detected FT232A [ 539.012776][ T102] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 539.392351][ T102] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 541.401706][T11017] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 541.556085][T11015] 9p: Bad value for 'rfdno' [ 541.820882][ T102] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.821017][ T102] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 231 [ 541.821044][ T102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.821100][ T102] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 541.821127][ T102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.888231][ T102] usb 5-1: config 0 descriptor?? [ 541.889176][T11010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.914816][ T6054] usb 4-1: USB disconnect, device number 65 [ 541.957717][ T6054] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 541.958500][ T6054] ftdi_sio 4-1:0.0: device disconnected [ 541.978998][T11020] atomic_op ffff888073c5e218 conn xmit_atomic 0000000000000000 [ 542.040639][ T6049] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 542.105739][ T102] ath6kl: Failed to submit usb control message: -71 [ 542.105794][ T102] ath6kl: unable to send the bmi data to the device: -71 [ 542.105812][ T102] ath6kl: Unable to send get target info: -71 [ 542.110481][ T102] ath6kl: Failed to init ath6kl core: -71 [ 542.150451][ T102] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 542.190407][ T6049] usb 6-1: Using ep0 maxpacket: 32 [ 542.191118][ T6049] usb 6-1: too many configurations: 127, using maximum allowed: 8 [ 542.192853][ T6049] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 542.192889][ T6049] usb 6-1: can't read configurations, error -61 [ 542.270785][ T102] usb 5-1: USB disconnect, device number 72 [ 542.320928][ T6049] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 542.480853][ T6049] usb 6-1: Using ep0 maxpacket: 32 [ 542.481886][ T6049] usb 6-1: too many configurations: 127, using maximum allowed: 8 [ 542.486478][ T6049] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 542.486516][ T6049] usb 6-1: can't read configurations, error -61 [ 542.487024][ T6049] usb usb6-port1: attempt power cycle [ 542.660412][ T102] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 542.865083][ T6049] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 542.869695][ T102] usb 4-1: device descriptor read/64, error -71 [ 543.021062][ T5871] usb 1-1: USB disconnect, device number 53 [ 543.038268][ T5871] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 543.039014][ T5871] ftdi_sio 1-1:0.0: device disconnected [ 543.070350][ T6049] usb 6-1: device not accepting address 14, error -71 [ 543.125863][ T102] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 543.180574][T11032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1664'. [ 543.201817][T11032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1664'. [ 543.260719][ T102] usb 4-1: device descriptor read/64, error -71 [ 543.381821][ T102] usb usb4-port1: attempt power cycle [ 543.577909][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.690414][ T6049] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 543.719031][ T6049] usb 6-1: Using ep0 maxpacket: 8 [ 543.721236][ T6049] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.721262][ T6049] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.724602][ T6049] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 543.724629][ T6049] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 543.724651][ T6049] usb 6-1: Product: syz [ 543.724669][ T6049] usb 6-1: Manufacturer: syz [ 543.724680][ T6049] usb 6-1: SerialNumber: syz [ 543.730625][ T102] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 543.772519][ T102] usb 4-1: device descriptor read/8, error -71 [ 543.815631][ T6049] usb 6-1: config 0 descriptor?? [ 544.150488][ T102] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 544.258240][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1667'. [ 544.296917][T11044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.368779][ T102] usb 4-1: device descriptor read/8, error -71 [ 544.495199][ T102] usb usb4-port1: unable to enumerate USB device [ 546.703978][ T5871] usb 6-1: USB disconnect, device number 15 [ 546.932806][T11071] FAULT_INJECTION: forcing a failure. [ 546.932806][T11071] name failslab, interval 1, probability 0, space 0, times 0 [ 546.932857][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.4.1673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 546.932888][T11071] Tainted: [L]=SOFTLOCKUP [ 546.932897][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.932920][T11071] Call Trace: [ 546.932933][T11071] [ 546.932943][T11071] dump_stack_lvl+0xe8/0x150 [ 546.933068][T11071] should_fail_ex+0x46b/0x600 [ 546.933222][T11071] should_failslab+0xa8/0x100 [ 546.933320][T11071] __kmalloc_cache_noprof+0x84/0x690 [ 546.933381][T11071] ? drm_atomic_state_alloc+0xa9/0x100 [ 546.933456][T11071] drm_atomic_state_alloc+0xa9/0x100 [ 546.933478][T11071] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 546.933541][T11071] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 546.933582][T11071] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 546.933671][T11071] ? lockdep_hardirqs_on+0x7a/0x110 [ 546.933725][T11071] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 546.933749][T11071] ? mutex_lock_nested+0x152/0x1d0 [ 546.933767][T11071] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 546.933794][T11071] drm_client_modeset_commit_locked+0xce/0x4d0 [ 546.933823][T11071] drm_client_modeset_commit+0x4a/0x70 [ 546.933846][T11071] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 546.933932][T11071] drm_fbdev_client_restore+0x1b/0x30 [ 546.933952][T11071] drm_client_dev_restore+0x14f/0x290 [ 546.933981][T11071] drm_release+0x330/0x400 [ 546.934024][T11071] ? __pfx_drm_release+0x10/0x10 [ 546.934046][T11071] __fput+0x461/0xa90 [ 546.934120][T11071] fput_close_sync+0x11f/0x240 [ 546.934141][T11071] ? __pfx_fput_close_sync+0x10/0x10 [ 546.934173][T11071] __x64_sys_close+0x7e/0x110 [ 546.934222][T11071] do_syscall_64+0x14d/0xf80 [ 546.934281][T11071] ? trace_irq_disable+0x3b/0x150 [ 546.934322][T11071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.934357][T11071] ? clear_bhb_loop+0x40/0x90 [ 546.934379][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.934397][T11071] RIP: 0033:0x7f7a120cc799 [ 546.934414][T11071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.934430][T11071] RSP: 002b:00007f7a102dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 546.934450][T11071] RAX: ffffffffffffffda RBX: 00007f7a12346180 RCX: 00007f7a120cc799 [ 546.934463][T11071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 546.934473][T11071] RBP: 00007f7a102dc090 R08: 0000000000000000 R09: 0000000000000000 [ 546.934484][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.934494][T11071] R13: 00007f7a12346218 R14: 00007f7a12346180 R15: 00007ffea84fe738 [ 546.934523][T11071] [ 547.221292][ T102] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 547.370364][ T102] usb 5-1: Using ep0 maxpacket: 16 [ 547.390502][ T102] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 547.390524][ T102] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.390544][ T102] usb 5-1: config 0 has no interface number 0 [ 547.399107][ T102] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 547.399139][ T102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.399162][ T102] usb 5-1: Product: syz [ 547.399178][ T102] usb 5-1: Manufacturer: syz [ 547.399194][ T102] usb 5-1: SerialNumber: syz [ 547.536625][ T102] usb 5-1: config 0 descriptor?? [ 547.787367][ T102] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 547.787427][ T102] uvcvideo 5-1:0.105: No valid video chain found. [ 547.940411][ T102] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 548.026496][ T6058] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 548.113162][ T102] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 548.113195][ T102] usb 2-1: config 0 has no interface number 0 [ 548.113240][ T102] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 548.113270][ T102] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 548.117632][ T102] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 548.117656][ T102] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 548.117671][ T102] usb 2-1: Manufacturer: syz [ 548.117682][ T102] usb 2-1: SerialNumber: syz [ 548.125104][ T102] usb 2-1: config 0 descriptor?? [ 548.230734][ T6054] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 548.263601][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.263659][ T6058] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 548.263741][ T6058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 548.263759][ T6058] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 548.267669][ T6058] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 548.267760][ T6058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 548.267776][ T6058] usb 1-1: Product: syz [ 548.267787][ T6058] usb 1-1: Manufacturer: syz [ 548.267797][ T6058] usb 1-1: SerialNumber: syz [ 548.392457][ T6054] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 548.392479][ T6054] usb 6-1: config 0 has no interface number 0 [ 548.392511][ T6054] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 548.392531][ T6054] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 548.394365][ T6054] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 548.394395][ T6054] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 548.394483][ T6054] usb 6-1: Manufacturer: syz [ 548.394495][ T6054] usb 6-1: SerialNumber: syz [ 548.427372][ T6058] usb 1-1: config 0 descriptor?? [ 550.024034][ T102] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 550.024324][ T102] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 550.104077][ T6054] usb 6-1: config 0 descriptor?? [ 550.137001][ T6058] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 550.137109][ T6058] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 550.138733][ T6058] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 550.184507][ T102] usb 2-1: USB disconnect, device number 68 [ 551.800823][ T6054] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 551.801020][ T6054] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 551.919344][ T6054] usb 6-1: USB disconnect, device number 16 [ 552.018054][ T6058] usb 1-1: USB disconnect, device number 54 [ 552.280893][T11084] FAULT_INJECTION: forcing a failure. [ 552.280893][T11084] name failslab, interval 1, probability 0, space 0, times 0 [ 552.280923][T11084] CPU: 0 UID: 0 PID: 11084 Comm: syz.0.1680 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.280945][T11084] Tainted: [L]=SOFTLOCKUP [ 552.280951][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.280960][T11084] Call Trace: [ 552.280966][T11084] [ 552.280973][T11084] dump_stack_lvl+0xe8/0x150 [ 552.281002][T11084] should_fail_ex+0x46b/0x600 [ 552.281035][T11084] should_failslab+0xa8/0x100 [ 552.281062][T11084] __kmalloc_noprof+0xdf/0x7b0 [ 552.281093][T11084] ? kfree+0x4d/0x6c0 [ 552.281113][T11084] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 552.281238][T11084] tomoyo_realpath_from_path+0xe3/0x5d0 [ 552.281272][T11084] ? tomoyo_path_number_perm+0x219/0x630 [ 552.281293][T11084] tomoyo_path_number_perm+0x246/0x630 [ 552.281317][T11084] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 552.281341][T11084] ? __lock_acquire+0x6b5/0x2cf0 [ 552.281395][T11084] ? __fget_files+0x2a/0x420 [ 552.281443][T11084] ? __fget_files+0x2a/0x420 [ 552.281461][T11084] ? __fget_files+0x3a6/0x420 [ 552.281479][T11084] ? __fget_files+0x2a/0x420 [ 552.281501][T11084] security_file_ioctl+0xc3/0x2a0 [ 552.281561][T11084] __se_sys_ioctl+0x47/0x170 [ 552.281621][T11084] do_syscall_64+0x14d/0xf80 [ 552.281644][T11084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.281661][T11084] ? clear_bhb_loop+0x40/0x90 [ 552.281681][T11084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.281697][T11084] RIP: 0033:0x7fb23083c799 [ 552.281712][T11084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.281727][T11084] RSP: 002b:00007fb22ea96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.281744][T11084] RAX: ffffffffffffffda RBX: 00007fb230ab5fa0 RCX: 00007fb23083c799 [ 552.281757][T11084] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 552.281767][T11084] RBP: 00007fb22ea96090 R08: 0000000000000000 R09: 0000000000000000 [ 552.281777][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.281786][T11084] R13: 00007fb230ab6038 R14: 00007fb230ab5fa0 R15: 00007ffc39c05508 [ 552.281811][T11084] [ 552.281818][T11084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.994075][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1681'. [ 553.291026][ T6054] usb 5-1: USB disconnect, device number 73 [ 553.562392][T11098] FAULT_INJECTION: forcing a failure. [ 553.562392][T11098] name failslab, interval 1, probability 0, space 0, times 0 [ 553.562433][T11098] CPU: 0 UID: 0 PID: 11098 Comm: syz.3.1686 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 553.562463][T11098] Tainted: [L]=SOFTLOCKUP [ 553.562471][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.562485][T11098] Call Trace: [ 553.562493][T11098] [ 553.562504][T11098] dump_stack_lvl+0xe8/0x150 [ 553.562542][T11098] should_fail_ex+0x46b/0x600 [ 553.562584][T11098] should_failslab+0xa8/0x100 [ 553.562622][T11098] kmem_cache_alloc_noprof+0x87/0x680 [ 553.562655][T11098] ? lockdep_hardirqs_on+0x7a/0x110 [ 553.562686][T11098] ? do_getname+0x2e/0x250 [ 553.562713][T11098] do_getname+0x2e/0x250 [ 553.562733][T11098] ? getname_flags+0x11/0x20 [ 553.562759][T11098] do_sys_openat2+0xca/0x200 [ 553.562787][T11098] ? __pfx_do_sys_openat2+0x10/0x10 [ 553.562823][T11098] ? ksys_write+0x248/0x270 [ 553.562855][T11098] ? __pfx_ksys_write+0x10/0x10 [ 553.562890][T11098] __x64_sys_openat+0x138/0x170 [ 553.562921][T11098] do_syscall_64+0x14d/0xf80 [ 553.562949][T11098] ? trace_irq_disable+0x3b/0x150 [ 553.562975][T11098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.562997][T11098] ? clear_bhb_loop+0x40/0x90 [ 553.563024][T11098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.563047][T11098] RIP: 0033:0x7fd10dd3c799 [ 553.563067][T11098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.563087][T11098] RSP: 002b:00007fd10bf8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 553.563111][T11098] RAX: ffffffffffffffda RBX: 00007fd10dfb5fa0 RCX: 00007fd10dd3c799 [ 553.563128][T11098] RDX: 0000000000000002 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 553.563144][T11098] RBP: 00007fd10bf8e090 R08: 0000000000000000 R09: 0000000000000000 [ 553.563159][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.563172][T11098] R13: 00007fd10dfb6038 R14: 00007fd10dfb5fa0 R15: 00007ffe1eed6008 [ 553.563207][T11098] [ 553.801949][ T6054] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 553.960542][ T6054] usb 5-1: Using ep0 maxpacket: 8 [ 553.969385][ T6054] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.969415][ T6054] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.991228][ T6054] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 553.991334][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 553.991407][ T6054] usb 5-1: Product: syz [ 553.991460][ T6054] usb 5-1: Manufacturer: syz [ 553.991500][ T6054] usb 5-1: SerialNumber: syz [ 554.038786][ T6054] usb 5-1: config 0 descriptor?? [ 554.170534][ T5871] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 554.345324][ T5871] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 554.345358][ T5871] usb 4-1: config 0 has no interface number 0 [ 554.345420][ T5871] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 554.345459][ T5871] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 554.349098][ T5871] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 554.349129][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 554.349152][ T5871] usb 4-1: Manufacturer: syz [ 554.349169][ T5871] usb 4-1: SerialNumber: syz [ 554.425209][ T5871] usb 4-1: config 0 descriptor?? [ 554.520995][ T6054] usb 5-1: USB disconnect, device number 74 [ 556.204500][ T5871] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 556.204795][ T5871] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 556.237606][ T5871] usb 4-1: USB disconnect, device number 70 [ 556.560467][ T6054] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 556.640413][ T6049] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 556.717215][ T6054] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.717244][ T6054] usb 2-1: config 0 has no interface number 0 [ 556.717293][ T6054] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.717320][ T6054] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.717350][ T6054] usb 2-1: config 0 interface 1 has no altsetting 0 [ 556.717398][ T6054] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 556.717422][ T6054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.807676][ T6054] usb 2-1: config 0 descriptor?? [ 556.827473][ T6054] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 556.875576][ T6049] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.875641][ T6049] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 556.875670][ T6049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 556.875698][ T6049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 556.875720][ T6049] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 556.879570][ T6049] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 556.879602][ T6049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 556.879626][ T6049] usb 5-1: Product: syz [ 556.879642][ T6049] usb 5-1: Manufacturer: syz [ 556.879657][ T6049] usb 5-1: SerialNumber: syz [ 556.930440][ T5871] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 556.985356][ T6049] usb 5-1: config 0 descriptor?? [ 557.060523][ T6054] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 557.150442][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 557.154212][ T5871] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.154380][ T5871] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 557.154465][ T5871] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 557.154493][ T5871] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.154540][ T5871] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.154619][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.220369][ T6054] usb 1-1: Using ep0 maxpacket: 16 [ 557.233501][ T6054] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 557.233535][ T6054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.262657][ T6049] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 557.262963][ T6049] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 557.267079][ T6054] usb 1-1: config 0 descriptor?? [ 557.306524][ T6049] usb 5-1: USB disconnect, device number 75 [ 557.325593][ T6054] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 557.479451][ T6054] usb 1-1: Detected FT232A [ 557.484686][ T6054] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 557.514966][ T5871] usb 6-1: GET_CAPABILITIES returned 0 [ 557.515140][ T5871] usbtmc 6-1:16.0: can't read capabilities [ 557.724897][ T6054] usb 6-1: USB disconnect, device number 17 [ 558.275513][ T6054] usb 2-1: USB disconnect, device number 69 [ 559.360750][ T6062] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 559.520385][ T6062] usb 5-1: Using ep0 maxpacket: 32 [ 559.524320][ T6062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.524356][ T6062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.524400][ T6062] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.524425][ T6062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.528294][ T6062] usb 5-1: config 0 descriptor?? [ 559.617421][ T6062] hub 5-1:0.0: USB hub found [ 559.794579][ T6062] hub 5-1:0.0: 19 ports detected [ 559.795128][ T6062] hub 5-1:0.0: insufficient power available to use all downstream ports [ 560.993804][ T6062] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 560.993838][ T6062] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 561.038728][ T6062] usbhid 5-1:0.0: can't add hid device: -32 [ 561.038827][ T6062] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 561.093244][ T102] usb 1-1: USB disconnect, device number 55 [ 561.188424][ T102] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 561.189202][ T102] ftdi_sio 1-1:0.0: device disconnected [ 561.536159][ T5871] usb 5-1: USB disconnect, device number 76 [ 562.061830][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 562.090463][ T5871] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 562.241314][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 562.243365][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.243385][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.245647][ T5871] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 562.245668][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 562.245684][ T5871] usb 5-1: Product: syz [ 562.245695][ T5871] usb 5-1: Manufacturer: syz [ 562.245705][ T5871] usb 5-1: SerialNumber: syz [ 562.322424][ T5871] usb 5-1: config 0 descriptor?? [ 562.410493][ T6054] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 562.581254][ T6054] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 562.581293][ T6054] usb 6-1: config 0 has no interface number 0 [ 562.581355][ T6054] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 562.581393][ T6054] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 562.585604][ T6054] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 562.585638][ T6054] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 562.585660][ T6054] usb 6-1: Manufacturer: syz [ 562.585676][ T6054] usb 6-1: SerialNumber: syz [ 562.654951][ T6054] usb 6-1: config 0 descriptor?? [ 564.497763][ T6054] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 564.498055][ T6054] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 564.504190][ T6054] usb 6-1: USB disconnect, device number 18 [ 564.528611][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.528690][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.751371][ T6062] usb 5-1: USB disconnect, device number 77 [ 565.486747][T11215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1710'. [ 565.906325][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1708'. [ 565.955184][T11216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.272318][ T6054] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 567.330372][ T102] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 567.420497][ T6054] usb 1-1: Using ep0 maxpacket: 16 [ 567.426225][ T6054] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 567.426260][ T6054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.457581][ T6054] usb 1-1: config 0 descriptor?? [ 567.482245][ T102] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 567.482276][ T102] usb 5-1: config 0 has no interface number 0 [ 567.482322][ T102] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 567.482352][ T102] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 567.486676][ T102] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 567.486708][ T102] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 567.486731][ T102] usb 5-1: Manufacturer: syz [ 567.486746][ T102] usb 5-1: SerialNumber: syz [ 567.489110][ T6054] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 568.164126][ T102] usb 5-1: config 0 descriptor?? [ 568.179042][ T6054] usb 1-1: Detected FT232A [ 568.229895][ T6054] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 568.402425][T11232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.680519][ T102] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 568.681233][ T102] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 568.732249][T11232] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 568.779499][ T102] usb 5-1: USB disconnect, device number 78 [ 568.926685][T11232] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 569.003588][T11232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 569.003680][T11232] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 569.065367][T11232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 569.065475][T11232] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 569.305529][T11232] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 569.305661][T11232] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 570.241489][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 570.282385][T11232] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 570.340803][T11232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.341156][T11232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 570.401731][T11232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 570.627368][T11254] Illegal XDP return value 4294967282 on prog (id 72) dev N/A, expect packet loss! [ 571.090219][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 571.117333][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 571.152906][T11259] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1721'. [ 571.216857][T11261] FAULT_INJECTION: forcing a failure. [ 571.216857][T11261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.216888][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.5.1722 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 571.216917][T11261] Tainted: [L]=SOFTLOCKUP [ 571.216923][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.216933][T11261] Call Trace: [ 571.216939][T11261] [ 571.216945][T11261] dump_stack_lvl+0xe8/0x150 [ 571.216976][T11261] should_fail_ex+0x46b/0x600 [ 571.217008][T11261] _copy_from_user+0x2d/0xb0 [ 571.217103][T11261] __sys_bpf+0x229/0x950 [ 571.217135][T11261] ? __pfx___sys_bpf+0x10/0x10 [ 571.217153][T11261] ? rt_mutex_slowunlock+0x1cb/0x300 [ 571.217183][T11261] ? ksys_write+0x248/0x270 [ 571.217209][T11261] ? __pfx_ksys_write+0x10/0x10 [ 571.217237][T11261] __x64_sys_bpf+0x7c/0x90 [ 571.217255][T11261] do_syscall_64+0x14d/0xf80 [ 571.217277][T11261] ? trace_irq_disable+0x3b/0x150 [ 571.217302][T11261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.217319][T11261] ? clear_bhb_loop+0x40/0x90 [ 571.217338][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.217354][T11261] RIP: 0033:0x7ffa053cc799 [ 571.217369][T11261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.217384][T11261] RSP: 002b:00007ffa03626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.217403][T11261] RAX: ffffffffffffffda RBX: 00007ffa05645fa0 RCX: 00007ffa053cc799 [ 571.217415][T11261] RDX: 0000000000000050 RSI: 0000200000000ac0 RDI: 0000000000000000 [ 571.217425][T11261] RBP: 00007ffa03626090 R08: 0000000000000000 R09: 0000000000000000 [ 571.217435][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.217444][T11261] R13: 00007ffa05646038 R14: 00007ffa05645fa0 R15: 00007ffcee7cc8c8 [ 571.217469][T11261] [ 571.297951][ T102] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 571.351023][T11263] Bluetooth: hci4: command 0x0406 tx timeout [ 572.045748][ T102] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.048490][ T102] usb 4-1: not running at top speed; connect to a high speed hub [ 572.067522][ T102] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.089959][ T102] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 572.089992][ T102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.090071][ T102] usb 4-1: Product: syz [ 572.090089][ T102] usb 4-1: Manufacturer: syz [ 572.090106][ T102] usb 4-1: SerialNumber: syz [ 572.314142][T11263] Bluetooth: hci0: command 0x0406 tx timeout [ 572.614555][T11263] Bluetooth: hci2: command 0x0c1a tx timeout [ 572.830995][ T102] usb 4-1: USB disconnect, device number 71 [ 573.126007][T11263] Bluetooth: hci1: command 0x0406 tx timeout [ 573.158391][ T6054] usb 1-1: USB disconnect, device number 56 [ 573.193311][T11263] Bluetooth: hci3: command 0x0406 tx timeout [ 573.490767][T11263] Bluetooth: hci4: command 0x0406 tx timeout [ 573.721239][ T6054] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 573.763990][ T6054] ftdi_sio 1-1:0.0: device disconnected [ 574.020082][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1729'. [ 574.020176][T11285] netlink: 30 bytes leftover after parsing attributes in process `syz.3.1729'. [ 574.020197][T11285] tipc: Invalid UDP bearer configuration [ 574.038732][T11285] tipc: Enabling of bearer rejected, failed to enable media [ 574.110430][ T5871] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 574.168738][T11291] loop2: detected capacity change from 0 to 7 [ 574.181794][T11291] Dev loop2: unable to read RDB block 7 [ 574.181840][T11291] loop2: AHDI p1 p2 p3 [ 574.181872][T11291] loop2: partition table partially beyond EOD, truncated [ 574.182117][T11291] loop2: p1 start 1601398130 is beyond EOD, truncated [ 574.182143][T11291] loop2: p2 start 1702059890 is beyond EOD, truncated [ 574.183611][T11285] batadv1: entered promiscuous mode [ 574.183638][T11285] batadv1: entered allmulticast mode [ 574.204164][T11285] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 574.279392][ T5871] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 574.281126][ T5871] usb 5-1: config 0 has no interface number 0 [ 574.281198][ T5871] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 574.281230][ T5871] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 574.286440][ T5871] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 574.286470][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 574.286493][ T5871] usb 5-1: Manufacturer: syz [ 574.286509][ T5871] usb 5-1: SerialNumber: syz [ 574.314829][ T5871] usb 5-1: config 0 descriptor?? [ 574.391812][T11263] Bluetooth: hci0: command 0x0406 tx timeout [ 574.408766][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1733'. [ 574.861630][T11263] Bluetooth: hci2: command 0x0c1a tx timeout [ 574.861818][ T5871] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 574.862111][ T5871] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 574.920539][ T5871] usb 5-1: USB disconnect, device number 79 [ 575.199097][T11306] FAULT_INJECTION: forcing a failure. [ 575.199097][T11306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.199138][T11306] CPU: 0 UID: 0 PID: 11306 Comm: syz.4.1737 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 575.199170][T11306] Tainted: [L]=SOFTLOCKUP [ 575.199178][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.199201][T11306] Call Trace: [ 575.199210][T11306] [ 575.199220][T11306] dump_stack_lvl+0xe8/0x150 [ 575.199260][T11306] should_fail_ex+0x46b/0x600 [ 575.199302][T11306] _copy_from_user+0x2d/0xb0 [ 575.199332][T11306] get_timespec64+0x96/0x1b0 [ 575.199392][T11306] ? __pfx_get_timespec64+0x10/0x10 [ 575.199411][T11306] ? rt_mutex_slowunlock+0x1cb/0x300 [ 575.199437][T11306] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 575.199470][T11306] __se_sys_pselect6+0x13a/0x320 [ 575.199503][T11306] ? __pfx___se_sys_pselect6+0x10/0x10 [ 575.199528][T11306] ? __pfx_ksys_write+0x10/0x10 [ 575.199568][T11306] ? __x64_sys_pselect6+0x21/0xf0 [ 575.199596][T11306] do_syscall_64+0x14d/0xf80 [ 575.199625][T11306] ? trace_irq_disable+0x3b/0x150 [ 575.199651][T11306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.199674][T11306] ? clear_bhb_loop+0x40/0x90 [ 575.199702][T11306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.199725][T11306] RIP: 0033:0x7f7a120cc799 [ 575.199747][T11306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.199767][T11306] RSP: 002b:00007f7a1031e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 575.199791][T11306] RAX: ffffffffffffffda RBX: 00007f7a12345fa0 RCX: 00007f7a120cc799 [ 575.199808][T11306] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 575.199823][T11306] RBP: 00007f7a1031e090 R08: 0000200000000280 R09: 0000000000000000 [ 575.199839][T11306] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 575.199854][T11306] R13: 00007f7a12346038 R14: 00007f7a12345fa0 R15: 00007ffea84fe738 [ 575.199890][T11306] [ 575.283927][T11308] ptrace attach of "./syz-executor exec"[5795] was attempted by " [ 576.010383][T11263] Bluetooth: hci4: command 0x0406 tx timeout [ 576.185091][ T1246] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 576.361022][ T1246] usb 4-1: Using ep0 maxpacket: 16 [ 576.363488][ T1246] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.363524][ T1246] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.363550][ T1246] usb 4-1: config 0 interface 0 has no altsetting 0 [ 576.363586][ T1246] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 576.363610][ T1246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.440586][ T1246] usb 4-1: config 0 descriptor?? [ 576.550417][ T6049] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 576.680510][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 576.700971][ T6049] usb 2-1: Using ep0 maxpacket: 16 [ 576.704091][ T6049] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 576.704123][ T6049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.752298][ T6049] usb 2-1: config 0 descriptor?? [ 576.779478][ T6049] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 576.840530][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 576.842880][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.842931][ T31] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 576.842958][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.849399][ T31] usb 6-1: config 0 descriptor?? [ 576.870463][T11263] Bluetooth: hci2: command 0x0c1a tx timeout [ 576.923701][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.933482][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.967231][ T1246] hid (null): global environment stack underflow [ 576.967540][ T1246] hid (null): bogus close delimiter [ 576.967560][ T1246] hid (null): bogus close delimiter [ 576.967941][ T6049] usb 2-1: Detected FT232A [ 576.971363][ T6049] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 577.003411][ T37] audit: type=1326 audit(1772537742.156:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11323 comm="syz.4.1745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a120cc799 code=0x0 [ 577.016120][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016183][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016260][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016290][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016355][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016430][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016459][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016525][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016584][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.016613][ T1246] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 577.026561][ T1246] cougar 0003:060B:500A.000A: global environment stack underflow [ 577.026586][ T1246] cougar 0003:060B:500A.000A: item 0 2 1 11 parsing failed [ 577.028098][ T1246] cougar 0003:060B:500A.000A: parse failed [ 577.028308][ T1246] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 577.153870][ T31] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 577.200090][ T1246] usb 4-1: USB disconnect, device number 72 [ 577.398505][ T6049] usb 6-1: USB disconnect, device number 19 [ 577.570547][ T6054] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 577.720387][ T6054] usb 5-1: Using ep0 maxpacket: 8 [ 577.725321][ T6054] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.725350][ T6054] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.765570][ T6054] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 577.765603][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 577.765626][ T6054] usb 5-1: Product: syz [ 577.765642][ T6054] usb 5-1: Manufacturer: syz [ 577.765658][ T6054] usb 5-1: SerialNumber: syz [ 577.790769][ T10] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 577.896336][ T6054] usb 5-1: config 0 descriptor?? [ 579.302605][ T10] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 579.302638][ T10] usb 1-1: config 0 has no interface number 0 [ 579.302695][ T10] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 579.302725][ T10] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 579.305975][ T10] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 579.306008][ T10] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 579.306031][ T10] usb 1-1: Manufacturer: syz [ 579.306047][ T10] usb 1-1: SerialNumber: syz [ 579.312169][ T10] usb 1-1: config 0 descriptor?? [ 579.484595][ T6049] usb 5-1: USB disconnect, device number 80 [ 580.088574][ T10] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 580.088859][ T10] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 580.119746][ T10] usb 1-1: USB disconnect, device number 57 [ 580.166458][T11341] FAULT_INJECTION: forcing a failure. [ 580.166458][T11341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.166498][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.4.1750 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 580.166538][T11341] Tainted: [L]=SOFTLOCKUP [ 580.166546][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.166561][T11341] Call Trace: [ 580.166570][T11341] [ 580.166580][T11341] dump_stack_lvl+0xe8/0x150 [ 580.166620][T11341] should_fail_ex+0x46b/0x600 [ 580.166666][T11341] _copy_from_user+0x2d/0xb0 [ 580.166694][T11341] __sys_bpf+0x229/0x950 [ 580.166725][T11341] ? __pfx___sys_bpf+0x10/0x10 [ 580.166750][T11341] ? rt_mutex_slowunlock+0x1cb/0x300 [ 580.166794][T11341] ? ksys_write+0x248/0x270 [ 580.166829][T11341] ? __pfx_ksys_write+0x10/0x10 [ 580.166867][T11341] __x64_sys_bpf+0x7c/0x90 [ 580.166892][T11341] do_syscall_64+0x14d/0xf80 [ 580.166921][T11341] ? trace_irq_disable+0x3b/0x150 [ 580.166945][T11341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.166967][T11341] ? clear_bhb_loop+0x40/0x90 [ 580.166994][T11341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.167017][T11341] RIP: 0033:0x7f7a120cc799 [ 580.167038][T11341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.167058][T11341] RSP: 002b:00007f7a1031e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.167082][T11341] RAX: ffffffffffffffda RBX: 00007f7a12345fa0 RCX: 00007f7a120cc799 [ 580.167099][T11341] RDX: 0000000000000050 RSI: 0000200000000ac0 RDI: 0000000000000000 [ 580.167114][T11341] RBP: 00007f7a1031e090 R08: 0000000000000000 R09: 0000000000000000 [ 580.167129][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.167142][T11341] R13: 00007f7a12346038 R14: 00007f7a12345fa0 R15: 00007ffea84fe738 [ 580.167178][T11341] [ 580.381663][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1749'. [ 580.809680][T11347] FAULT_INJECTION: forcing a failure. [ 580.809680][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 580.809751][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.5.1752 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 580.809785][T11347] Tainted: [L]=SOFTLOCKUP [ 580.809793][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.809806][T11347] Call Trace: [ 580.809817][T11347] [ 580.809828][T11347] dump_stack_lvl+0xe8/0x150 [ 580.809865][T11347] should_fail_ex+0x46b/0x600 [ 580.809897][T11347] should_failslab+0xa8/0x100 [ 580.809926][T11347] __kmalloc_cache_noprof+0x84/0x690 [ 580.809954][T11347] ? assoc_array_delete+0xcf/0xfb0 [ 580.810071][T11347] assoc_array_delete+0xcf/0xfb0 [ 580.810103][T11347] ? preempt_schedule_common+0x82/0xd0 [ 580.810147][T11347] ? preempt_schedule_thunk+0x16/0x30 [ 580.810166][T11347] ? __pfx_assoc_array_delete+0x10/0x10 [ 580.810193][T11347] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 580.810216][T11347] ? mutex_lock_nested+0x152/0x1d0 [ 580.810254][T11347] ? key_move+0x1d2/0x790 [ 580.810311][T11347] key_move+0x1e8/0x790 [ 580.810335][T11347] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 580.810397][T11347] ? __pfx_key_move+0x10/0x10 [ 580.810426][T11347] ? keyctl_keyring_move+0x27/0x110 [ 580.810482][T11347] keyctl_keyring_move+0xd6/0x110 [ 580.810506][T11347] __se_sys_keyctl+0x75e/0x9e0 [ 580.810531][T11347] ? __pfx___se_sys_keyctl+0x10/0x10 [ 580.810563][T11347] ? irqentry_exit+0x59e/0x620 [ 580.810585][T11347] ? lockdep_hardirqs_on+0x7a/0x110 [ 580.810607][T11347] ? irqentry_exit+0x59e/0x620 [ 580.810646][T11347] ? trace_irq_disable+0x3b/0x150 [ 580.810680][T11347] ? __x64_sys_keyctl+0x20/0xc0 [ 580.810704][T11347] do_syscall_64+0x14d/0xf80 [ 580.810726][T11347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.810743][T11347] ? clear_bhb_loop+0x40/0x90 [ 580.810763][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.810779][T11347] RIP: 0033:0x7ffa053cc799 [ 580.810795][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.810809][T11347] RSP: 002b:00007ffa03605028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 580.810826][T11347] RAX: ffffffffffffffda RBX: 00007ffa05646090 RCX: 00007ffa053cc799 [ 580.810838][T11347] RDX: fffffffffffffffe RSI: 0000000013723c4e RDI: 000000000000001e [ 580.810849][T11347] RBP: 00007ffa03605090 R08: 0000000000000000 R09: 0000000000000000 [ 580.810859][T11347] R10: 0000000013723c4e R11: 0000000000000246 R12: 0000000000000001 [ 580.810869][T11347] R13: 00007ffa05646128 R14: 00007ffa05646090 R15: 00007ffcee7cc8c8 [ 580.810894][T11347] [ 581.294587][ T31] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 581.451091][ T6054] usb 2-1: USB disconnect, device number 70 [ 581.466721][ T6054] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 581.467211][ T6054] ftdi_sio 2-1:0.0: device disconnected [ 581.530771][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 581.533345][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.533401][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 581.534924][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.534954][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 581.534976][ T31] usb 5-1: SerialNumber: syz [ 581.613684][T11351] netlink: 'syz.3.1754': attribute type 10 has an invalid length. [ 581.758986][ T31] cdc_acm 5-1:1.0: skipping garbage [ 581.826332][T11351] batman_adv: batadv0: Adding interface: netdevsim0 [ 581.826347][T11351] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.826370][T11351] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 581.901087][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 581.962105][ T31] usb 5-1: USB disconnect, device number 81 [ 582.010402][ T5871] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 582.050364][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 582.070513][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 582.070545][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.070567][ T10] usb 1-1: Product: syz [ 582.070583][ T10] usb 1-1: Manufacturer: syz [ 582.070598][ T10] usb 1-1: SerialNumber: syz [ 582.120447][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 582.120475][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 582.190495][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 582.193584][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 582.193850][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 582.193880][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 582.197618][ T5871] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 582.197640][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.197696][ T5871] usb 4-1: Product: syz [ 582.197707][ T5871] usb 4-1: Manufacturer: syz [ 582.197718][ T5871] usb 4-1: SerialNumber: syz [ 582.283674][ T5871] usb 4-1: config 0 descriptor?? [ 582.297903][ T5871] appledisplay 4-1:0.0: Submitting URB failed [ 582.298180][ T5871] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5 [ 582.336546][ T10] r8152-cfgselector 1-1: Unknown version 0x0080 [ 582.351645][ T10] r8152-cfgselector 1-1: bad CDC descriptors [ 582.449289][T11368] FAULT_INJECTION: forcing a failure. [ 582.449289][T11368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.449355][T11368] CPU: 0 UID: 0 PID: 11368 Comm: syz.5.1759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.449392][T11368] Tainted: [L]=SOFTLOCKUP [ 582.449401][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.449415][T11368] Call Trace: [ 582.449424][T11368] [ 582.449433][T11368] dump_stack_lvl+0xe8/0x150 [ 582.449473][T11368] should_fail_ex+0x46b/0x600 [ 582.449505][T11368] _copy_from_user+0x2d/0xb0 [ 582.449526][T11368] tipc_setsockopt+0x275/0x990 [ 582.449636][T11368] ? irqentry_exit+0x59e/0x620 [ 582.449663][T11368] ? __pfx_tipc_setsockopt+0x10/0x10 [ 582.449685][T11368] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 582.449751][T11368] ? __pfx_tipc_setsockopt+0x10/0x10 [ 582.449770][T11368] do_sock_setsockopt+0x17c/0x1b0 [ 582.449841][T11368] __x64_sys_setsockopt+0x143/0x1b0 [ 582.449866][T11368] do_syscall_64+0x14d/0xf80 [ 582.449888][T11368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.449905][T11368] ? clear_bhb_loop+0x40/0x90 [ 582.449925][T11368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.449941][T11368] RIP: 0033:0x7ffa053cc799 [ 582.449957][T11368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.449972][T11368] RSP: 002b:00007ffa03605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 582.449988][T11368] RAX: ffffffffffffffda RBX: 00007ffa05646090 RCX: 00007ffa053cc799 [ 582.450000][T11368] RDX: 0000000000000081 RSI: 000000000000010f RDI: 0000000000000005 [ 582.450010][T11368] RBP: 00007ffa03605090 R08: 000000000000004a R09: 0000000000000000 [ 582.450020][T11368] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 582.450030][T11368] R13: 00007ffa05646128 R14: 00007ffa05646090 R15: 00007ffcee7cc8c8 [ 582.450055][T11368] [ 582.687232][ T5871] usb 4-1: USB disconnect, device number 73 [ 583.150391][ T6054] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 583.300474][ T6054] usb 5-1: Using ep0 maxpacket: 8 [ 583.305196][ T6054] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.305225][ T6054] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.309648][ T6054] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 583.309676][ T6054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 583.309699][ T6054] usb 5-1: Product: syz [ 583.309717][ T6054] usb 5-1: Manufacturer: syz [ 583.309727][ T6054] usb 5-1: SerialNumber: syz [ 583.380571][ T6054] usb 5-1: config 0 descriptor?? [ 583.552374][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1762'. [ 583.781801][ T6054] usb 5-1: USB disconnect, device number 82 [ 583.818804][T11380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1764'. [ 583.830139][ T5871] r8152-cfgselector 1-1: USB disconnect, device number 58 [ 583.920127][ T31] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 583.960676][T11382] smc: net device bond0 applied user defined pnetid SYZ2 [ 583.982253][T11382] input: syz1 as /devices/virtual/input/input43 [ 584.084439][ T31] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 584.084471][ T31] usb 4-1: config 0 has no interface number 0 [ 584.084541][ T31] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 584.084571][ T31] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 584.090904][ T31] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 584.090986][ T31] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 584.091045][ T31] usb 4-1: Manufacturer: syz [ 584.091086][ T31] usb 4-1: SerialNumber: syz [ 584.161472][ T31] usb 4-1: config 0 descriptor?? [ 585.489353][ T31] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 585.489647][ T31] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 585.528568][ T31] usb 4-1: USB disconnect, device number 74 [ 585.765319][T11391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1768'. [ 585.767749][T11391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.883872][ T5871] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 586.030410][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 586.033052][ T5871] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 586.033084][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.038932][ T5871] usb 5-1: config 0 descrip[ 586.038932][ T5871] usb 5-1: config 0 descriptor?? [ 586.081002][ T31] ================================================================== [ 586.081015][ T31] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 586.081047][ T31] Read of size 8 at addr ffffc9000f1d1008 by task kworker/1:0/31 [ 586.081061][ T31] [ 586.081073][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.081095][ T31] Tainted: [L]=SOFTLOCKUP [ 586.081101][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.081112][ T31] Workqueue: usb_hub_wq hub_event [ 586.081237][ T31] Call Trace: [ 586.081244][ T31] [ 586.081251][ T31] dump_stack_lvl+0xe8/0x150 [ 586.081276][ T31] print_report+0xba/0x230 [ 586.081305][ T31] ? __list_add_valid_or_report+0x4e/0x130 [ 586.081329][ T31] kasan_report+0x117/0x150 [ 586.081376][ T31] ? __list_add_valid_or_report+0x4e/0x130 [ 586.081403][ T31] __list_add_valid_or_report+0x4e/0x130 [ 586.081428][ T31] kcov_remote_stop+0x457/0x680 [ 586.081449][ T31] hub_event+0x49d8/0x4f60 [ 586.081491][ T31] ? __pfx_hub_event+0x10/0x10 [ 586.081523][ T31] ? process_scheduled_works+0xa25/0x1830 [ 586.081549][ T31] ? process_scheduled_works+0xa25/0x1830 [ 586.081571][ T31] process_scheduled_works+0xb02/0x1830 [ 586.081603][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 586.081627][ T31] ? assign_work+0x3d5/0x5e0 [ 586.081648][ T31] worker_thread+0xa50/0xfc0 [ 586.081681][ T31] kthread+0x388/0x470 [ 586.081696][ T31] ? __pfx_worker_thread+0x10/0x10 [ 586.081717][ T31] ? __pfx_kthread+0x10/0x10 [ 586.081733][ T31] ret_from_fork+0x51e/0xb90 [ 586.081767][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 586.081788][ T31] ? __switch_to+0xc7d/0x1450 [ 586.081815][ T31] ? __pfx_kthread+0x10/0x10 [ 586.081830][ T31] ret_from_fork_asm+0x1a/0x30 [ 586.081852][ T31] [ 586.081857][ T31] [ 586.081861][ T31] The buggy address belongs to a vmalloc virtual mapping [ 586.081875][ T31] Memory state around the buggy address: [ 586.081884][ T31] ffffc9000f1d0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 586.081895][ T31] ffffc9000f1d0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 586.081906][ T31] >ffffc9000f1d1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 586.081914][ T31] ^ [ 586.081922][ T31] ffffc9000f1d1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 586.081933][ T31] ffffc9000f1d1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 586.081941][ T31] ================================================================== [ 586.081956][ T31] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 586.081969][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.081990][ T31] Tainted: [L]=SOFTLOCKUP [ 586.081996][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.082006][ T31] Workqueue: usb_hub_wq hub_event [ 586.082027][ T31] Call Trace: [ 586.082032][ T31] [ 586.082038][ T31] vpanic+0x56c/0xa60 [ 586.082062][ T31] ? __pfx_vpanic+0x10/0x10 [ 586.082088][ T31] panic+0xc5/0xd0 [ 586.082110][ T31] ? __pfx_panic+0x10/0x10 [ 586.082133][ T31] ? __list_add_valid_or_report+0x4e/0x130 [ 586.082157][ T31] ? rcu_is_watching+0x15/0xb0 [ 586.082181][ T31] ? __list_add_valid_or_report+0x4e/0x130 [ 586.082204][ T31] check_panic_on_warn+0x89/0xb0 [ 586.082226][ T31] ? __list_add_valid_or_report+0x4e/0x130 [ 586.082249][ T31] end_report+0x73/0x180 [ 586.082272][ T31] ? __list_add_valid_or_report+0x4e/0x130 [ 586.082295][ T31] kasan_report+0x128/0x150 [ 586.082319][ T31] ? __list_add_valid_or_report+0x4e/0x130 [ 586.082346][ T31] __list_add_valid_or_report+0x4e/0x130 [ 586.082371][ T31] kcov_remote_stop+0x457/0x680 [ 586.082392][ T31] hub_event+0x49d8/0x4f60 [ 586.082432][ T31] ? __pfx_hub_event+0x10/0x10 [ 586.082458][ T31] ? process_scheduled_works+0xa25/0x1830 [ 586.082479][ T31] ? process_scheduled_works+0xa25/0x1830 [ 586.082501][ T31] process_scheduled_works+0xb02/0x1830 [ 586.082538][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 586.082562][ T31] ? assign_work+0x3d5/0x5e0 [ 586.082584][ T31] worker_thread+0xa50/0xfc0 [ 586.082616][ T31] kthread+0x388/0x470 [ 586.082632][ T31] ? __pfx_worker_thread+0x10/0x10 [ 586.082653][ T31] ? __pfx_kthread+0x10/0x10 [ 586.082669][ T31] ret_from_fork+0x51e/0xb90 [ 586.082691][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 586.082712][ T31] ? __switch_to+0xc7d/0x1450 [ 586.082731][ T31] ? __pfx_kthread+0x10/0x10 [ 586.082747][ T31] ret_from_fork_asm+0x1a/0x30 [ 586.082767][ T31] [ 586.083402][ T31] Kernel Offset: disabled