last executing test programs: 5.528960473s ago: executing program 0 (id=1244): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x400a, 0x3, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x2000, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500", 0x3c, 0x40080, 0x0, 0x0) landlock_restrict_self(r0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) truncate(&(0x7f0000000000)='./file1\x00', 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dvmrp1\x00'}]}, 0x30}}, 0x0) 4.678583972s ago: executing program 1 (id=1249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0x400, 0x70bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 4.390635937s ago: executing program 1 (id=1250): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="e10500000000b100000007121522300000000109021b000100000001faf40d80090582239f00000f0016931fd9cbe3e6a0d66b7c7e16b4222ff635be15df7b123e2025d222cfed8fc5e56846f44f83309d2aa737e4886659b238d3b9515441d06b7593c995f19ad26861d3880ca7c3b23abe08fc1139462a40b22425848f5562503f0d956c17475571831ab8b9d761d56500e65e9bbe6b39b312c0b9094c270d69b63e578d65228f7b63f70de0e70eb0291beb38d0fd20f747f1ac0f2087208ae4c4e3944783fed6437c"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x1, 0x5, 0x3c, 0x8, 0x6, 0x8001, 0x2, 0x8120}}}}]}, 0x58}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x460d0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400080c4}, 0x0) syz_usb_disconnect(r0) socket$nl_rdma(0x10, 0x3, 0x14) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x80000001, 0x3) 4.297089419s ago: executing program 4 (id=1251): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x3000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000002ac0)=[0x0], 0x1}) 4.094970852s ago: executing program 2 (id=1252): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xff}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x105003, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) 4.012532216s ago: executing program 4 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.779608742s ago: executing program 2 (id=1255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x210200) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x802, 0x0, 0x24}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000004c0)={[{0x122e, 0x3, 0x0, 0x5e, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x3, 0x1f}, {0x0, 0x40, 0x1, 0xfd, 0x0, 0xe, 0xa9, 0x6, 0x0, 0x9, 0x0, 0x8}, {0x4, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x40, 0x1, 0x3, 0x1, 0x0, 0xe}], 0x291f}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000440)="0f01d167640f0fdbb60f01c066b9800000c00f326635002000000f3067660f38108f00000080652e0fc734baf80c66b8803ce28566efbafc0c66b8b0b1000066ef66b8000000000f23d80f21f86635000000a00f23f8440f20c0663505000000440f22c00f5d4500", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_io_uring_setup(0x234, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x207a98, 0x0, 0x0, 0x0, 0x0) r10 = open$dir(&(0x7f0000000300)='./file0\x00', 0x149802, 0x0) r11 = epoll_create1(0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 3.760769916s ago: executing program 0 (id=1256): syz_open_dev$hidraw(&(0x7f0000000080), 0xcac6, 0x418080) (async) r0 = socket$key(0xf, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) (async) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000b40)={0x1, 0x27, 0x1, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x37, 0x3, 0x0, 0x0, "874bfe1004a585c0326e6a99b80ca84979850d8e9d0f2dae6bae732179fca3e34e03741ddf891e3252bceeb6c88306b4232d151d9ebbfabf2776d2777811da42"}}, 0x80}}, 0x8010) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000a00), &(0x7f0000000a40)=0x8) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="593e9c3956643c09b22007c0d985f46c4be759060427820e3c12cbd1fb7d96ab32c6de340d7375036b11d889983dd0d53e2fa917ef8b5e7656c9a62fc245b6b082f1b0dc907f896d15610bb110d9cce22ba8091775750122307233f889461ce6bb2cc6abccc36106b91d5225d94d874b9666210c08aea8d5057a61a08289b6f41f861b37f85bb7e3c30e70485d41c81ed5", 0x91}, {&(0x7f0000000180)="c292df3ff1112561e138670124bc472c88c3e5cd0d2e72b756a61366b6b159fc91b2fd0f9b48c215120f4e28c560c9d0debcdad4ae563ae7b7c4cbb4130533149d75af28bdabdd5ab2720640dfe8aaab32e4ad2e2f2ec3cefe606c1eb55e335aab54638ed7700473af3c1fe24b1eb8908eae4cbd4a21f86cd720ab1670db59ae93a9a2d73c8d473952364253", 0x8c}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000002c0)="e2668602e482d3a9a0", 0x9}, {&(0x7f0000000300)="930de714dd", 0x5}, {&(0x7f0000000340)="beafcdac69d2eb797e3d21c1176c135b1ad2b0bfd7bd", 0x16}, {&(0x7f0000000380)="bafe781c11b8342f7904e219917aa60f256321335ea149e499e6814c", 0x1c}, {&(0x7f00000003c0)="2464cb5fa9524147df97bed1d54739a1bb5eb5d11bda2d26e8df591af3a9c9f6bdff3b0c4da8a8040959eecfc3490507ecebf043490f773df2fdba9eae0850c6e3c6a888b65d7f3db19a635bf3d46361565515cc14a7f071a731b4c0647582e69161820929eeec5b5946bf5cdd24ec559f17f6fe3265e901d55b5b8d8a2139cc393484f077368498b17660c96ed0", 0x8e}, {&(0x7f0000000480)="019453096873091cbb0168b8a6438b640dea42411e20178f235001e813e61f58131e689dd360cbfe6d3daabe2e363c3a141176e904b49f437835dff9b0d37ce31f0909544b196dbb50090b48a3284fb588ef42c9d7459850861e9818ddc2c1722bf61044ee0d35cbdbaccac14e9fee1b139075f9bcf6df1ab9d7162a6352ecec9abb9505d81587fd8f19b082b2d8b82a287316dccdea06f3ca0a02240a1f3ef7df2fad3f4531ef21f0151b956e16c968f2a50e966fe9c4c43e93", 0xba}, {&(0x7f0000000540)="11ff6fb8cb23e957df08f4a6bae9762bcdbf183919243d5d05313ac607b3aef03715c5d152942f8bd024c25a6b7ca30aadaf3a6d242571eabc8f153b110de687b2ebca48cfcdb28d4893e7da3bc1923eaf5ad78fb0eb8df12037d5d1cf079bcc44b93a8cca96209cd1931ecf0339ac9346cacd87424c2c6cd1c0371c229cdd19d98ba0c9eb817a5cb4f1bf26c453988a3f81c8a16a2b01c1223919d2c1e465f636d2f28dc47d89022a7cdaa4a653dfa7b1450ea5b362091d8993", 0xba}, {&(0x7f0000000600)="3412a58714041c1d73db7fbfdb61ed62776a7a69e6f9d4ae9819a8eed336ca3b83826d2b56f64bea8b82f02905d9a389e1c0bdfb3cf8f5584cbff77a616825d22ead101426eecc13d86c37b8cd5eabbfe083214935643a", 0x57}], 0x8, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x42, [@broadcast]}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x0, [{@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@remote, 0x38e55996}, {@multicast2, 0x3}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xc7, 0x3, 0xf, [{@loopback, 0xff}, {@empty, 0x6909eb43}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xc}, {@empty, 0x10000}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x8e, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x8000}, {@local, 0x8}, {@multicast1, 0x1}, {@multicast2, 0x6}]}, @timestamp={0x44, 0x14, 0x67, 0x0, 0x3, [0x5, 0x2, 0xfffffffa, 0xff]}, @cipso={0x86, 0x54, 0x0, [{0x7, 0x11, "17d38635c1ea43d50e36cf1fcf1d4d"}, {0x1, 0xe, "420968f6b090e5e802e97176"}, {0x2, 0xb, "dfd444ae1de56fc7b0"}, {0x6, 0x2}, {0x7, 0xd, "9a7b2736bd4e7d95bbdd0b"}, {0x2, 0x3, '!'}, {0x0, 0x12, "25b33478a76d51c57f5430ba84455bcf"}]}, @ssrr={0x89, 0x7, 0xb4, [@dev={0xac, 0x14, 0x14, 0x39}]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@cipso={0x86, 0x26, 0x3, [{0x6, 0x3, "91"}, {0x0, 0x10, "aca010c522d646d062bc27aa73f0"}, {0x2, 0x3, 'S'}, {0x5, 0xa, "3abd062a1fa4235e"}]}, @lsrr={0x83, 0x13, 0xf6, [@local, @loopback, @multicast2, @multicast2]}, @lsrr={0x83, 0x1b, 0x8b, [@remote, @rand_addr=0x64010102, @private=0xa010101, @multicast2, @multicast1, @local]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x230}}], 0x2, 0x20004080) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) 3.623351141s ago: executing program 0 (id=1258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_io_uring_setup(0x5c26, &(0x7f0000000340)={0x0, 0x86f7, 0x10100, 0x0, 0xf5}, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff83000040"]) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) r6 = syz_io_uring_setup(0x9a, &(0x7f00000000c0)={0x0, 0xde4, 0x100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async, rerun: 64) r9 = semget$private(0x0, 0x4000000009, 0x42a) socket$inet6_udplite(0xa, 0x2, 0x88) semop(r9, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r9, &(0x7f00000001c0)=[{0x3, 0x204}, {0x3, 0x0, 0x1000}], 0x2) (async, rerun: 32) r10 = socket(0x10, 0x3, 0x0) (rerun: 32) write(r10, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 32) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async, rerun: 32) semctl$GETZCNT(r9, 0x0, 0xf, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async, rerun: 64) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (rerun: 64) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) (rerun: 32) 3.597155305s ago: executing program 4 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 3.211120081s ago: executing program 4 (id=1260): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) (async) ftruncate(r1, 0x51a9497) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000005000/0x3000)=nil, 0x3000, 0xb) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x58}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.141400888s ago: executing program 0 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x5, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000040)) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x20, 0x5, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) keyctl$get_security(0x11, r5, 0x0, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x400) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT2(r6, &(0x7f0000000140)={0xc, {0x1b, "7365b25f7945ca8659bda64e964d2dc55b4174a5629abaa7e6fda1"}}, 0x21) 3.108063887s ago: executing program 4 (id=1262): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x31}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r1) 2.832485053s ago: executing program 4 (id=1263): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402503a1a440000102030109023b000101570000090400000002060000052406000005240000000d240f0100000000000000000009"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b04, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaa34fb472aaaaaaaaa0008020000000000001414bb440c0c01ac"], 0x0) io_uring_enter(0xffffffffffffffff, 0x52de, 0xf62e, 0x8, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="000000001a000000", 0x8) 2.665445235s ago: executing program 2 (id=1264): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRES8=r2]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x6200c0, 0x0) 2.526721298s ago: executing program 2 (id=1265): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = memfd_secret(0x0) read(r2, &(0x7f0000000100)=""/117, 0x75) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) 2.297937615s ago: executing program 2 (id=1266): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f00005c6000/0x2000)=nil, 0x2000, 0x9}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x8, r2, 0x0, 0x0, 0x832f0, 0x0, 0x0, 0x10000}) (async) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x4, 0x400900) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 64) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x338, 0x3e, 0x400, 0x70bd2c, 0x25dfdbfb, {0x15}, [@typed={0x4, 0x7f}, @generic="cda5b0e62278399be002f2de8ac8d3311c0f55eedcbf5fc2fe6c42e43ebf2fdb9d9cbe356c61600d6e36de0014fe3b93528ed491e14d05e89655a1d2c4a8787c71057bbe3bf6ebf9a6a4027a54f2ef1e684e50219934b3c0887d7009684e899c3eff682615d70d3892c8ba97213d16243988a42d9d6e39d8897e39edd2816a26b19c990c1c15bed9b4a7d3c230d2fa72819233efab016262ce7135f8d034f3c3474c0f84669863dea19db529567caf906cffd39fb41865262f72443b1e5a4426d4", @generic="49106b302af335930f1f938de2aec726beeb31b961024af0af96a21a15a3899a6bac98283e3f6e1c13e8c591cb0058e40557f30cf582086ae7c00a2c947b46586ebf84c78cd927501569d431b62de486dd3fec0d417bf70fb30c9eb5695de2e233c707e5c5a7c8f8736f3ff7fa99c2c8cbde35f4dde0bc5d3b7e00e84b7c457e6832e727698fb37d7c17af752a77e1b8df08c98c87a71a72db559f6debc457264750f8e122f40d8c83b46d3539c7022d2ce4", @generic="792ac14fe3b0aa4fddbdaeca00488e6a5bad33f8dbdf03a89d70e4503163c5268f31eccc824d4064ea768ffefa4f17e03fdadc5c87d9c75147ffdc991d28a93e106922cecf77c0c8fa08ffd5c6ad5b564ce9e4c959535822830aefa5b48483abe2e3c3cd3eb0c197", @typed={0x8, 0x3a, 0x0, 0x0, @fd}, @generic="6804c755c553e83929bdf68496096a2a75f734e6497778783e4e753fca54360607c7c9ea261afb453f715f5a3a306bc7ce5041f4189c119810503fb1a31f4d92bad18953f2831e76634217e581ea819a61c9c54b1289fc2dbb64aa9bcffe78a927e56a49f1e4af39b799e8d87d1bda5e043019a4a98e7a85a43aae86bb7d41b234e6a712f64d64d8", @generic="900ad1f7fd6e8f8df275fb46793ebf8a760338236f9ffccfe8dfe30b2e71db70575108245babda3c2b0a6a290a85dfbca0b68eb50b0fc3b2bbd8945049422ae62417c7b96d15b3a755ba71f9a78a5fe4f3b1496c28a66e0e9e37d98f3abc66347f05f4bb902605638d392a7ea41496c7b13254cb3c87b58f9f465eee471a6ef3efc9d13e45ee0168a6f76208128fa56c87f195dd0adf8d5d5b15bcbcb39799939c138b27e9501732f91419508e555f04ed3c"]}, 0x338}, 0x1, 0x0, 0x0, 0x44000}, 0x40800) (async, rerun: 32) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000600)={0xa0000013}) (async, rerun: 64) epoll_wait(r9, &(0x7f0000000000)=[{}], 0x1, 0x400) (rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x20c102, 0x0) readahead(r10, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) r11 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x0) (async) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000400)}, 0x10) (async) getsockopt$sock_buf(r12, 0x1, 0x1a, &(0x7f0000002340)=""/4085, &(0x7f0000000340)=0x1015) (async, rerun: 32) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000100f00000000002a000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.073469551s ago: executing program 2 (id=1268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) unshare(0x2040600) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0x4, 0x0) (async, rerun: 32) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x97f8cce876204eb7, r3, 0x1, 0x1}, 0x14) (rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000540)={0x40, 0x0, 0x1, "a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000006c0)=@userptr={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7b964305"}, 0x0, 0x2, {0x0}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.007151612s ago: executing program 3 (id=1269): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x8000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x81, 0x2, 0x8, 0xff, 0x81, 0x3b, 0x7, 0x0, 0xff, 0x1, 0x80, 0xbe, 0xfe, 0x8, 0xa8}}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.683509842s ago: executing program 3 (id=1270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}}, 0x0, 0x0, 0x300, 0x0, 0x26}, 0x9c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05000000040000000020000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbfffffc, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000030900010073797a300000000060000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c0003800800024000000000080001400000000018000380140001006e657464657673696d30"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.58138564s ago: executing program 3 (id=1271): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x0, {0x4, 0x4, 0x47}}, 0x0}) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000980e8a100"/24], 0x18}}, 0x4) 1.464952768s ago: executing program 3 (id=1272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0xe56, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3ff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x268, 0x0, 0x80000000}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r9, 0x1, 0x28, &(0x7f0000000140)=0x3, 0x4) (async) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ioprio_get$pid(0x1, r10) ptrace(0x10, r10) (async) rt_sigqueueinfo(r10, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) (async) ptrace$peeksig(0x4209, r10, &(0x7f0000000140)={0x3, 0x1, 0x1}, &(0x7f0000000640)=[{}]) (async) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvmmsg(r9, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x22, 0x0) (async, rerun: 64) connect$inet(r7, &(0x7f0000000280)={0x1e, 0x4e24, @empty}, 0x10) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000394000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 1.196687678s ago: executing program 3 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 6) 1.13356694s ago: executing program 1 (id=1274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0xfff5, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xa0}}, 0x0) 1.072048237s ago: executing program 1 (id=1275): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3fb, 0x0, 0x8}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x10000, 0x1, 0x6, 0x40008, 0x1, 0xb73, '\x00', 0x0, r1, 0x3, 0x5, 0x4, 0xd, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f00000011c0)="d6a65d45f145e45e5bb9db68d8a3c8de1e8905d8e02736e6ebf11a6786046fc3d6dc98786f8f8a345656be5619470e388382a9386eb51b73433022a6e3ea52f43d85898fcd26aa769d5ed4a053ff9efcc21ef12dd503f6c73458a90d40ecf8eba31c3a49f2efd7075f9177c27caa2e17f1dca311807470f3a6b8679d9cc6170e130a97fc2d14a4b44830778fc5c961487b62ac8b4f9965295417d8d6920ba4817d4cc64427c8c6f862c0b25de1d415a513af1033401106d676fe44aa56aa308784a481ec047ea0d6ed4fcec5ef02162750f8d2143a7179a876a4794920d616eb2af826a45515f32063a19e12d1602a20c28377f28458bb1e3e2dbc6eee1d8358756111fc585adccc9e359fa26dfbe1db9e415ee23819cb210e86528289b30f6a74cf9c46dfe650866dc0f75d83910f66825e95d36d49fb577ed9a139a5c319e185aaa87a0dfb668e553e36ab2093ab4cd05d3283289378beb5a394402cf1fb4c099a213f9712ee124b8d6633c3ad484c778f0f4e9b25b121db11bb5d68b1a68f3ee955860d38267779338946ea421ccf0d0b4236d14c79043afcdebedcdd3e431a917ec7ba682b638b0aa4abe8b6adbb70c2b8bdaeda603b26d83328530276531e2d4ac0b6ddef7522f00f7c964292d5f4dc190dee3a22f74da100c65acffe893e50ae155be68298637f0e60a631b3a47c5308664db15c9a7c79d9d90136adad34d6cd0d432c583217687da212580d5092f8644c7f0966f822dedfb256a1b8acfaf9a4c18192c51aeb3a6734e570f510e568984f42d558fd3c0fc0e875375a1c83384d84970391cadcfc57860dec668fbad48afddaea242076cf5c7dc950ee82f32da223c80df1d377910c6ce4f5cf1ad50f730266cdf9da0465f4ed3833711f290f077edd265908779a68d5a477ea2a11e721c33c29ab6aa79cd96c303c375a54969b105d7bc316630f9d32bd7bda00620cbf54cab13060bc3518e598e0a250d7aa0baaad86e2bfcc9d9bb0d38219682fc13ecb3526d0962e8a8dac42ad51a5e08cd8472292ef6b27c430c58fbc1779eceadbfeaec110d7b03c56a06b4bb330f04398302f13aabe5b2ed7baad17dbc15d44090d1f4a03ce315b13d34d42df92f514e468ca20e05448f1a4cfb46cc808a5cd0dde32fb3b3cbe6484880afb5c20080b0dee6435f6bb9fda2191489f581ca0fb2ad2dc5221cff8986a45a39145dcf1ccd0e257b6b7c2561671c978ab2b8dc3510fda3d942e005aca139520f35f44ea715552e8b753669afbc3787e4799f37dbee375c8d87dd8e118d30d98be586fd4b9622ebea2b701a9dd47fa00dc8907b88619c4a3d53a79baf74fc923b9c7e49b844b5667b9c47bed2368db92e12d19dfe6f9a7cf5fa7bdd188fa03627911585184484c045c9d4ac9b7d078ef5f7c5fb122c2a9939b96296706820da3ceff310b6bb29667da249ce155e83e57180723f3a900460a8f4ed0978f572bbc246afaefa805bfea0ebf25bf41d7a916df18d46e0e21d3a3ec182df548b8fe9eb3f6065954e269c5b4939ebccdc42ababe9fd87311715a9fc0d0723578b423c8f64d8cf26d096eff35853838753b7c9db1e1d7d5551850ecbdafdaa135c8c86a305726866712916d03ae1a3bc2fef905160344ac82c1972841b590755be438afd9631c2bcb437a7859a359d4399ee1faff4e13435fb63c19e3c32ed0055b114aef5e7c355aaae2d195a9b10bc66433bff3d49df30e86b1236093c8e1e210a00e03005629e764d6cd29671e583a5d9e7a4da4223f72488475b0c744e6a32401b426b9d1f64d321f2557b2fa39043840887dce613dcac07d47973be1d1fa3a801ef968deceff54aeccec4f1b6d32402badd68c9abc2d743ae5bba4eeaf4ded1a566885f86047554365925740f2260d48bab52ce3f13553912ad58c43db126e30766eef901b0b41a06e4a7f2ca10c33613aa4b8abd1fb7b28b80204b6944b4988bf7d43d6ecbabee371cc11f7cb45047d353339fdf39446458da8406d7fbf4b09f562360c50ba7026cd1ffd546a96ed2dd808f50318569d1fcd9a289bf23e7e42723fdc3fdf14410df3d0a5194441cfd3bc757d21ce4435e7760095037c1e5c85261e37be0f49616f6977c62ec4a45a8fe7a8f67d150c5d2caf4a0149372c48f65cd3bc78dca2a107272db170222e9e25dd3e2d72570f11d5f55fd06cf188ce5cfa4f6169e5892027360b12290439d5cc624c1248c4c7a6230d74aa21a46836a3a5bf2fdd1f0479789683066ea680c5dc79d3c7371a22f1e9defcbcbf467533b016bae7384ea4cbba6c4f716e98c350c5497d91e33a1c524b30bd1a16bcf937f085a59ea754d6bb65367828c3f76cf46068d851b2e40d8d61cf89fa073f8444a3312c3a9252d6fe0bfa2047fc3b44ea05c8943ba91dc21510e69e9232cd1ebab5232694e77121c49c5453d261112dbb1cf35317b195f8652ecba2aa474e0d0a3a04149c0389e1d6a3eb251ad1c67b18629b2a63e440d0e18ab01e073c89a8dd0a684bc422495887d58653a4d582d60d42f5abe600d792debaeaea5c81767d3fe8143bba62cc02f2e36a9f11dc3356bc8d4fceed55786c3a4488c9d3f40b14dae4d062a23b2f299e744d7593025b0106b0f049e26e506889ef285ec8ec12ca81790233a4bd844d42164091f6f5c47fb5bc2ee41b25020f211252a7304268d2446fbfb25c60e28eca1f387fd88849fc24e5c712405bd5c811a021db66d810e5864bc8edd0b2f93a51f2f327c9ec2d4dccfe585e0f2cc7a56829e08664230ea9746173b72557b55e63835a66cb343f0080f45adcd166e3ec497d9f580a67ac5ab57b99372a036b53dbd6fadd99768d528b3f6e3d119098cf26634c2b93999011850dc4d136b39fb0f6aea9ad7272d376d5b6125d4fdd79e6785470aeee961401188082d2eac61519a0d18b9003a0c34651fb5e925d89a702e969e300a38efa8fdbe2ac878cfc9ed9dba3bc4ef7979866a3c28cc7e0b7478c564ebf4ebfca2ea3f86384adc1be10f26fb11cdaceea1bb0f05fb730a5fbcd9622387611fde87e93dcb00c904e01ae2336581d65d0347c3e9fa6bbd1fb202889b2d893e2a07cf07fa0c9a4f6ef5f604e41a824274a0d58d5c2ff1e8f24ebd4eb2330efb0e6106161fee3b840965ed09260d47851f4fde75e6fbedf059a5f7308aa9341757d872d77f00699f883253d9e5280f5c71c02d3a1ba1d53ebe90f11f8b5ab60f5e4d9fad1f6bc6ba9d0646796da20849327cedd7b174da2ff7b5375b4c1dd4d3be03f918d2cf9dca745c0fe3d83cca84310ffc4d01e0cd4998380be7a476c7336d752aecd805610fa95e66b7da6d48efed2690913f2760c106bcdcd7f638bc2c48b813f76710c0d51e92910cf62dca1632441a03ce6ee0e6aae9951efad599c785b45685b99059a729372fdbf798dd787ed313e3a202c7ef9e5c66de967be22f059dc4956226f095d0d2a49c7fdff4d26e5fc7ef7309112876540c8e93d6a06ec145cd8d94fc432c34ca938170264c1e5a6ab8f171d2dc8d465986df2a4b27ca9945cd02bcd2e713b667dee3e27e21219fec684525db718da5459ee4f3f745c5c9f2ce759ed820b239de34962eba9d229e11227c7d04f1a7ad59709cfc0baa7e9b7357852dc8a05c75631b2d8381b441870203f118286d5ae0e29ad47bb2225b2aabc5a794bb843fe9defd49951424a0dac65a53a0dee94228b2eb591e1f2ff2198627a8f20b64843c40b7dc42e0d3934365ef7142c836a5c2e630f8824d28b90fa3943b9bc68c0f930c3b3f2c038e99f191f8bba57f797f7fc3a74e7285d8e7a15e8c1191dcdb30bf583a0498d240d1a87f242ed18af37e91555b7a015bc4d0cf114a0765bb43ed4467632379b5a44d5d6300dc83807f5d7bf1a3f5b507875bfcd253e6cc729bd16d614bba34ac2174dde109a70d288006c5b8e06a016bbc5b396ef46241b02ad083ab4a730f8639ba669f702a9590b12300f72cf6c92da59b93a437326aa898fb0d9a62a69a4380c9be69e94e711bb90a027ca395d6c7991c29f9d9730171c7f59d44bc800c8b0e941b47d5e15979ea32d0daee78944b1372ee7a7369bf678976486f2c58fb2658627f076dd92dcc3b6c49739bf3fa17b491a74c7eb230e092baf1d2da09255cc159b90be0962c59001437aef3efb5f346fc1f2c7ed0c1067f22dde67b81bbcb75c60e41ffbb3902add1fd8c30303d44fe8989bc768b3f9250120122524197cb720724e925186656a1eec6e9765df9137d2a01b3f8ba6cdd37a8849bdd9b9e927ff63f00c5f5f984622a3dd43fd23626cb2702a2766bde0dce60d97a555049f64e2abaf15e776b62e891348029ee59afe4fb00241d1516e8ccf5fd9478ad1d053c00064ca5a9053735df5494698cf1b21e1a1f8b7ca611583f6f61d1509603f7f93908824eff4e830f6d3b2c29a0774240d896e9cd74b98a2c241115610d33217db19410e6f07ea11f36dfc90c1854a594e3d5c68c8ba1ce28a0df54912f85ae693b93ab4d96daae3b73ad9ca745cb57a7fc058ea38551a088f9e324f898f3ea9411b269701fafba5897d5c93f9990dbcd8f4c35fae1c6ad96ea22a568731110e841ef692db94376382308322ae48ec07481aab924b0dee25634fb0228a26187bd7ebbfa6f9e29d65cb76c3bea4021677a2154bb2257d2d4b5118277d8d8a4870863a626d157f6d17c6fc624e456bc1ed70d3bf4f8c422af502cf897a393940dfd426e00f0a0a5964648e7918a2da4946138d25a33622b9118a330905eae391336ebfb193279dea16ef528524b61f1b05322a7fcf490bf6963830875af3926b0fca768170463157aad2d1b4e0c3a2ad8cd1155cb4341a9079c2cd1327fa66be57f535dbf04fda76ad83b2d72ea77f71eca83357d1e5f189293d8b85a1ca3d0c9ebc343eb6ffcff4be369c4d1ad8ce4176d828c35d32f87393090f6f2123acff93e3c86aa1f18bdf209d05dbea9528ad5a28f8e6e2b6ea9d63139f5d24b5031402a3d8d9b4f4109ef068de3eee1de95a873cc9b3acb30a499092a9dd7bd961b972d887354765b6a80b6b2adb2a8161da30082201cb200ea56e38d9228668c223e260bf6510d6f1ac48e27167ee5acb70127fef666bb6d7ded3ecad4b53d18c0249a9039a8502ce68dcb4677707284c4f44a399e718500779d02387f8db295683feb0e23f6645ff3980a9813225408d91bbc0cdb852c2b4bd2609ac193eb294f66d8c36dfb744888ded6f0b13abf71587a0f8edeca552655d6ca4a1c8e08ee6fe047c315746c6cd2180fcef4e20a83e6219272ad015029872b6ff47f35ded0be51c8f193733641c096700069f31a76e054ed13f31335b0e6d6a2e924feee2f00f401362acc05060cd559eed6ad2806a7e93c2fbc311090e182e8f9b2dc77e5b929ca36361b5a7aeafd30dee3dd715e71d92669ce6e363d08f16ad9580625c92705e4fffb5dd605872279fbcfbd0cf55c96bfd0b51b01ec41610989293f114724648fe3f96604e533da949b06cf055e804a55ff4b6bf022f19baf4dbe4049170bcd67f0606fc97be1e3fcd86d63d46ea44f4d17032cca96ff43c4f32fb6c5e806d66e2a0ddc25d1b1821b483c4bb18fcda09fbb1d915d9fe9917217810fd8e8849f660aa8013433c7b4dbf29c57e00aaec312ffc00a152bd635ab0834a41b3144e2c90a89b164759424588b428b6009b98b732eccd6c4df496cb34132d999765c6fb83ad30800dd1bcf01c06c0f66d53dcb7746a3491b1da8a0ae0248e35", &(0x7f0000000000)=""/9}, 0x20) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 593.198981ms ago: executing program 3 (id=1276): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0xb0d8, {0x1, 0xa}, {0x1, 0xfffd}, @rumble={0x914f, 0x800}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r6, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) openat$vmci(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000100)={0x1d, r8}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x7, 0x0, 0x5, 0x3, 0x3, 0x5, 0x3c5b, 0x1, 0x1000, 0x9, 0x3, 0x15bb, 0x3ca, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x9, 0x0, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x100, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x0, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x0, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x0, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x6, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x2, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x9, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x7, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20000, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x2bf, 0x0, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x54, r10, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e1e, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xf0374cf1f690cc68, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r11, 0x4) 464.75571ms ago: executing program 1 (id=1277): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') write$cgroup_int(r0, &(0x7f0000000340)=0xfffffffffffffffc, 0x12) (async) r1 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r2, 0x1, 0x5, &(0x7f0000000140)=""/29, &(0x7f00000001c0)=0x1d) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, @dev={0xfe, 0x80, '\x00', 0x37}, @empty, 0x0, 0x0, 0xffffffff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x237, 0x0, @remote, @empty, 0x7800, 0x0, 0x0, 0x4007}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000019000100000000000302000080"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000c80)=ANY=[], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000c80)="eb65ff000fa53c1e54410184b198104ab0d04c694102d2e0a5de601f268a7e4b144b363c05adad5f0be2147e2edf91fee1afefea2204470650aa95f0c59d7fd7722a50fea962262bbd6ea53c5c677418cfcd1d84601bad7391f515477db91a3e34c26aac6a1a1b6dc2641e7acc60b15157ff0faa7dbdd4c96bd45bbd09e61893a4edf2ac8f23a72b7d0e5d2483f00424571c948b420b186d28feca5fe05dde5f91d57972", 0xa4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async, rerun: 64) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) getsockopt$inet6_tcp_buf(r10, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000700)=""/221, &(0x7f0000000000)=0xdd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 337.466556ms ago: executing program 1 (id=1278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x85) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r3, 0x83) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0xffffffffffffff90, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000c40)={0x20, r7, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) keyctl$session_to_parent(0x12) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) unshare(0x2c020400) 137.012825ms ago: executing program 0 (id=1279): syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2c000000, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 0s ago: executing program 0 (id=1280): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f0000000180)=@canfd={{0x3, 0x1, 0x1}, 0x12, 0x2, 0x0, 0x0, "933062961bae40f6e78094caf49a1f5740fda0241ebe37d0bc5d703a1a6643a2fca4551b41f8cc8970ff2dfb8aabdbd46624808c87a2d6bfcfa3be28c02c457e"}, 0x48}, 0x1, 0x0, 0x0, 0x20010090}, 0x84) pipe(&(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r6, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="27031c00160014000000", 0xa}, {&(0x7f0000000040)="b184b4bf397f3681c93301a5e199074835a85145cd1491434aa1809f", 0x1c}], 0x2}, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x1, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10) socket$inet(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 48 bytes leftover after parsing attributes in process `syz.4.819'. [ 288.050092][ T5905] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 288.143190][ T5905] usb 3-1: USB disconnect, device number 48 [ 288.867305][ T8726] batman_adv: batadv0: Adding interface: dummy0 [ 288.893765][ T8726] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.929196][ T8726] batman_adv: batadv0: Interface activated: dummy0 [ 288.946387][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 288.989163][ T8733] batadv0: mtu less than device minimum [ 288.997720][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.003655][ T8736] FAULT_INJECTION: forcing a failure. [ 289.003655][ T8736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.009952][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.033274][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.035051][ T8736] CPU: 1 UID: 0 PID: 8736 Comm: syz.4.828 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 289.035077][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 289.035090][ T8736] Call Trace: [ 289.035098][ T8736] [ 289.035107][ T8736] dump_stack_lvl+0x189/0x250 [ 289.035147][ T8736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.035177][ T8736] ? __pfx__printk+0x10/0x10 [ 289.035211][ T8736] should_fail_ex+0x414/0x560 [ 289.035249][ T8736] _copy_to_user+0x31/0xb0 [ 289.035279][ T8736] simple_read_from_buffer+0xe1/0x170 [ 289.035310][ T8736] proc_fail_nth_read+0x1df/0x250 [ 289.035343][ T8736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.035374][ T8736] ? rw_verify_area+0x258/0x650 [ 289.035396][ T8736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.035425][ T8736] vfs_read+0x1fd/0x980 [ 289.035454][ T8736] ? __pfx___mutex_lock+0x10/0x10 [ 289.035480][ T8736] ? __pfx_vfs_read+0x10/0x10 [ 289.035504][ T8736] ? __fget_files+0x2a/0x420 [ 289.035534][ T8736] ? __fget_files+0x3a0/0x420 [ 289.035560][ T8736] ? __fget_files+0x2a/0x420 [ 289.035594][ T8736] ksys_read+0x145/0x250 [ 289.035620][ T8736] ? __pfx_ksys_read+0x10/0x10 [ 289.035646][ T8736] ? do_syscall_64+0xba/0x210 [ 289.035676][ T8736] do_syscall_64+0xf6/0x210 [ 289.035701][ T8736] ? clear_bhb_loop+0x45/0xa0 [ 289.035725][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.035745][ T8736] RIP: 0033:0x7f24bed8d37c [ 289.035764][ T8736] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 289.035783][ T8736] RSP: 002b:00007f24bfb23030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.035804][ T8736] RAX: ffffffffffffffda RBX: 00007f24befb5fa0 RCX: 00007f24bed8d37c [ 289.035819][ T8736] RDX: 000000000000000f RSI: 00007f24bfb230a0 RDI: 0000000000000004 [ 289.035833][ T8736] RBP: 00007f24bfb23090 R08: 0000000000000000 R09: 0000000000000000 [ 289.035845][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.035857][ T8736] R13: 0000000000000000 R14: 00007f24befb5fa0 R15: 00007f24bf0dfa28 [ 289.035889][ T8736] [ 289.254542][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.266519][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.278449][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.290363][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.302236][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.314201][ T8733] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 289.348651][ T5905] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 289.371996][ T5895] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 289.460115][ T8746] syzkaller1: entered promiscuous mode [ 289.466859][ T8746] syzkaller1: entered allmulticast mode [ 289.511160][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 289.518423][ T5905] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 289.529872][ T5905] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.540794][ T5905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.551467][ T977] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 289.556781][ T5905] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.573010][ T5895] usb 5-1: config 0 has an invalid interface number: 201 but max is 0 [ 289.573626][ T5905] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.596230][ T5905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.606905][ T5895] usb 5-1: config 0 has no interface number 0 [ 289.612703][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.615092][ T5895] usb 5-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 289.631971][ T5895] usb 5-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 289.645613][ T5895] usb 5-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 289.656099][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.661322][ T5893] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 289.664267][ T5895] usb 5-1: Product: syz [ 289.676525][ T5895] usb 5-1: Manufacturer: syz [ 289.681901][ T5895] usb 5-1: SerialNumber: syz [ 289.690050][ T5895] usb 5-1: config 0 descriptor?? [ 289.695379][ T977] usb 1-1: device descriptor read/64, error -71 [ 289.709316][ T5895] spcp8x5 5-1:0.201: SPCP8x5 converter detected [ 289.720401][ T5895] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 289.821360][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 289.830171][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 289.846673][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 289.858229][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.868058][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.876547][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.887128][ T5893] usb 3-1: config 0 descriptor?? [ 289.894738][ T5905] usb 2-1: GET_CAPABILITIES returned 0 [ 289.905216][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 289.914470][ T5905] usbtmc 2-1:16.0: can't read capabilities [ 289.928923][ T10] usb 5-1: USB disconnect, device number 54 [ 289.939880][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 289.951432][ T977] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 289.962204][ T10] spcp8x5 5-1:0.201: device disconnected [ 290.098076][ T8744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.110893][ T8744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.122587][ T977] usb 1-1: device descriptor read/64, error -71 [ 290.130501][ T5188] bcm5974 3-1:0.0: could not read from device [ 290.139263][ T5188] bcm5974 3-1:0.0: could not read from device [ 290.146770][ T5188] bcm5974 3-1:0.0: could not read from device [ 290.164939][ T5188] bcm5974 3-1:0.0: could not read from device [ 290.167169][ T5893] usb 3-1: USB disconnect, device number 49 [ 290.179131][ T5188] bcm5974 3-1:0.0: could not read from device [ 290.189074][ T5888] bcm5974 3-1:0.0: could not read from device [ 290.214964][ T5888] udevd[5888]: Error opening device "/dev/input/event4": No such file or directory [ 290.226758][ T5888] udevd[5888]: Unable to EVIOCGABS device "/dev/input/event4" [ 290.236733][ T977] usb usb1-port1: attempt power cycle [ 290.245406][ T5888] udevd[5888]: Unable to EVIOCGABS device "/dev/input/event4" [ 290.255788][ T5888] udevd[5888]: Unable to EVIOCGABS device "/dev/input/event4" [ 290.266032][ T5888] udevd[5888]: Unable to EVIOCGABS device "/dev/input/event4" [ 290.358762][ T8722] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 290.366702][ T10] usb 2-1: USB disconnect, device number 46 [ 290.486093][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 290.614542][ T977] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 290.641925][ T977] usb 1-1: device descriptor read/8, error -71 [ 290.762521][ T47] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 290.893819][ T977] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 290.922138][ T977] usb 1-1: device descriptor read/8, error -71 [ 290.941411][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 290.956075][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.966413][ T47] usb 5-1: config 0 has no interfaces? [ 290.973031][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.993458][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.031580][ T977] usb usb1-port1: unable to enumerate USB device [ 291.042883][ T47] usb 5-1: config 0 descriptor?? [ 291.219487][ T8779] usb usb8: usbfs: process 8779 (syz.1.841) did not claim interface 0 before use [ 291.235534][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 291.377046][ T47] usb 5-1: USB disconnect, device number 55 [ 291.624306][ T8787] syzkaller1: entered promiscuous mode [ 291.630506][ T8787] syzkaller1: entered allmulticast mode [ 291.740202][ T8793] vlan3: entered allmulticast mode [ 293.051766][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 293.227191][ T8815] FAULT_INJECTION: forcing a failure. [ 293.227191][ T8815] name failslab, interval 1, probability 0, space 0, times 0 [ 293.240245][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 293.250416][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 293.259904][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.271063][ T10] usb 2-1: Product: syz [ 293.275568][ T10] usb 2-1: Manufacturer: syz [ 293.278772][ T47] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 293.280328][ T10] usb 2-1: SerialNumber: syz [ 293.317249][ T10] usb 2-1: config 0 descriptor?? [ 293.322698][ T8815] CPU: 1 UID: 0 PID: 8815 Comm: syz.0.852 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 293.322723][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 293.322742][ T8815] Call Trace: [ 293.322752][ T8815] [ 293.322761][ T8815] dump_stack_lvl+0x189/0x250 [ 293.322799][ T8815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.322829][ T8815] ? __pfx__printk+0x10/0x10 [ 293.322856][ T8815] ? __pfx___might_resched+0x10/0x10 [ 293.322874][ T8815] ? fs_reclaim_acquire+0x7d/0x100 [ 293.322909][ T8815] should_fail_ex+0x414/0x560 [ 293.322947][ T8815] ? nf_hook_entries_grow+0x27c/0x6d0 [ 293.322965][ T8815] should_failslab+0xa8/0x100 [ 293.322993][ T8815] __kvmalloc_node_noprof+0x168/0x5e0 [ 293.323019][ T8815] ? nf_hook_entries_grow+0x27c/0x6d0 [ 293.323043][ T8815] nf_hook_entries_grow+0x27c/0x6d0 [ 293.323078][ T8815] __nf_register_net_hook+0x2c9/0x930 [ 293.323110][ T8815] nf_register_net_hook+0xb2/0x190 [ 293.323132][ T8815] nf_register_net_hooks+0x44/0x1b0 [ 293.323156][ T8815] nf_ct_netns_do_get+0x3bf/0x5a0 [ 293.323181][ T8815] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 293.323222][ T8815] nf_ct_netns_inet_get+0x1f/0x150 [ 293.323246][ T8815] nft_connlimit_do_init+0x1de/0x2e0 [ 293.323271][ T8815] nf_tables_newrule+0x178c/0x2890 [ 293.323313][ T8815] ? __pfx_nf_tables_newrule+0x10/0x10 [ 293.323338][ T8815] ? nfnl_pernet+0x23/0x240 [ 293.323386][ T8815] ? __nla_parse+0x40/0x60 [ 293.323413][ T8815] nfnetlink_rcv+0x113f/0x2530 [ 293.323473][ T8815] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 293.323553][ T8815] ? skb_clone+0x246/0x3a0 [ 293.323597][ T8815] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.323618][ T8815] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.323645][ T8815] netlink_unicast+0x758/0x8d0 [ 293.323688][ T8815] netlink_sendmsg+0x805/0xb30 [ 293.323720][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.323751][ T8815] ? aa_sock_msg_perm+0x94/0x160 [ 293.323773][ T8815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.323794][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.323817][ T8815] __sock_sendmsg+0x219/0x270 [ 293.323852][ T8815] ____sys_sendmsg+0x505/0x830 [ 293.323883][ T8815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.323918][ T8815] ? import_iovec+0x74/0xa0 [ 293.323949][ T8815] ___sys_sendmsg+0x21f/0x2a0 [ 293.323977][ T8815] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.324042][ T8815] ? __fget_files+0x2a/0x420 [ 293.324066][ T8815] ? __fget_files+0x3a0/0x420 [ 293.324102][ T8815] __x64_sys_sendmsg+0x19b/0x260 [ 293.324131][ T8815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.324175][ T8815] ? do_syscall_64+0xba/0x210 [ 293.324203][ T8815] do_syscall_64+0xf6/0x210 [ 293.324226][ T8815] ? clear_bhb_loop+0x45/0xa0 [ 293.324250][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.324268][ T8815] RIP: 0033:0x7f742898e969 [ 293.324304][ T8815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.324321][ T8815] RSP: 002b:00007f7429844038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.324343][ T8815] RAX: ffffffffffffffda RBX: 00007f7428bb5fa0 RCX: 00007f742898e969 [ 293.324357][ T8815] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 293.324384][ T8815] RBP: 00007f7429844090 R08: 0000000000000000 R09: 0000000000000000 [ 293.324396][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.324407][ T8815] R13: 0000000000000000 R14: 00007f7428bb5fa0 R15: 00007f7428cdfa28 [ 293.324438][ T8815] [ 293.333050][ T10] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 293.763436][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 293.795001][ T47] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 293.817989][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.865376][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.890664][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.925546][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.012281][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.061678][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.296010][ T10] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 294.325261][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 294.332952][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.364236][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.378918][ T10] usb 2-1: USB disconnect, device number 47 [ 294.499634][ T47] usb 5-1: GET_CAPABILITIES returned 0 [ 294.511303][ T47] usbtmc 5-1:16.0: can't read capabilities [ 294.894118][ T8813] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 294.894737][ T47] usb 5-1: USB disconnect, device number 56 [ 294.916790][ T8829] FAULT_INJECTION: forcing a failure. [ 294.916790][ T8829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.952990][ T8829] CPU: 0 UID: 0 PID: 8829 Comm: syz.3.855 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 294.953017][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 294.953029][ T8829] Call Trace: [ 294.953037][ T8829] [ 294.953046][ T8829] dump_stack_lvl+0x189/0x250 [ 294.953082][ T8829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.953111][ T8829] ? __pfx__printk+0x10/0x10 [ 294.953144][ T8829] should_fail_ex+0x414/0x560 [ 294.953182][ T8829] _copy_to_user+0x31/0xb0 [ 294.953212][ T8829] simple_read_from_buffer+0xe1/0x170 [ 294.953241][ T8829] proc_fail_nth_read+0x1df/0x250 [ 294.953272][ T8829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.953303][ T8829] ? rw_verify_area+0x258/0x650 [ 294.953323][ T8829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.953353][ T8829] vfs_read+0x1fd/0x980 [ 294.953380][ T8829] ? __pfx___mutex_lock+0x10/0x10 [ 294.953404][ T8829] ? __pfx_vfs_read+0x10/0x10 [ 294.953427][ T8829] ? __fget_files+0x2a/0x420 [ 294.953456][ T8829] ? __fget_files+0x3a0/0x420 [ 294.953480][ T8829] ? __fget_files+0x2a/0x420 [ 294.953514][ T8829] ksys_read+0x145/0x250 [ 294.953533][ T8829] ? rcu_is_watching+0x15/0xb0 [ 294.953565][ T8829] ? __pfx_ksys_read+0x10/0x10 [ 294.953589][ T8829] ? do_syscall_64+0xba/0x210 [ 294.953619][ T8829] do_syscall_64+0xf6/0x210 [ 294.953643][ T8829] ? clear_bhb_loop+0x45/0xa0 [ 294.953667][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.953686][ T8829] RIP: 0033:0x7f89e998d37c [ 294.953704][ T8829] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 294.953721][ T8829] RSP: 002b:00007f89ea749030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.953741][ T8829] RAX: ffffffffffffffda RBX: 00007f89e9bb5fa0 RCX: 00007f89e998d37c [ 294.953755][ T8829] RDX: 000000000000000f RSI: 00007f89ea7490a0 RDI: 0000000000000004 [ 294.953768][ T8829] RBP: 00007f89ea749090 R08: 0000000000000000 R09: 0000000000000000 [ 294.953780][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.953791][ T8829] R13: 0000000000000000 R14: 00007f89e9bb5fa0 R15: 00007f89e9cdfa28 [ 294.953835][ T8829] [ 295.173751][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.399886][ T8839] syzkaller1: entered promiscuous mode [ 295.405808][ T8839] syzkaller1: entered allmulticast mode [ 295.439268][ T8835] binder: BINDER_SET_CONTEXT_MGR already set [ 295.480519][ T8835] binder: 8834:8835 ioctl 4018620d 200000000040 returned -16 [ 295.539542][ T8838] binder: 8834:8838 ioctl c0306201 2000000003c0 returned -22 [ 296.501158][ T5893] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 296.743697][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 296.979073][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.010658][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.023365][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 297.037865][ T5893] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 297.054150][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.081400][ T8873] FAULT_INJECTION: forcing a failure. [ 297.081400][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.094977][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.4.867 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 297.094996][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 297.095004][ T8873] Call Trace: [ 297.095012][ T8873] [ 297.095018][ T8873] dump_stack_lvl+0x189/0x250 [ 297.095042][ T8873] ? __lock_acquire+0xaac/0xd20 [ 297.095064][ T8873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.095085][ T8873] ? __pfx__printk+0x10/0x10 [ 297.095099][ T8873] ? __might_fault+0xb0/0x130 [ 297.095126][ T8873] should_fail_ex+0x414/0x560 [ 297.095154][ T8873] _copy_to_iter+0x1db/0x15a0 [ 297.095190][ T8873] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 297.095206][ T8873] ? __pfx__copy_to_iter+0x10/0x10 [ 297.095222][ T8873] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 297.095236][ T8873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.095253][ T8873] ? finish_wait+0xcd/0x1f0 [ 297.095272][ T8873] vhost_chr_read_iter+0x4f4/0x6e0 [ 297.095285][ T8873] ? arch_stack_walk+0xfc/0x150 [ 297.095311][ T8873] ? __pfx_vhost_chr_read_iter+0x10/0x10 [ 297.095324][ T8873] ? __pfx_autoremove_wake_function+0x10/0x10 [ 297.095342][ T8873] ? bpf_lsm_file_permission+0x9/0x20 [ 297.095360][ T8873] ? security_file_permission+0x75/0x290 [ 297.095381][ T8873] ? rw_verify_area+0x258/0x650 [ 297.095397][ T8873] ? __pfx_vhost_vsock_chr_read_iter+0x10/0x10 [ 297.095413][ T8873] __io_read+0x6f6/0x14f0 [ 297.095437][ T8873] ? __lock_acquire+0xaac/0xd20 [ 297.095457][ T8873] ? __pfx___io_read+0x10/0x10 [ 297.095470][ T8873] ? __mutex_trylock_common+0x153/0x260 [ 297.095488][ T8873] io_read+0x1c/0x60 [ 297.095500][ T8873] __io_issue_sqe+0x1d3/0x3b0 [ 297.095524][ T8873] io_issue_sqe+0x165/0x1040 [ 297.095551][ T8873] io_req_task_submit+0x10b/0x1c0 [ 297.095572][ T8873] io_poll_task_func+0xbdf/0x10d0 [ 297.095595][ T8873] ? __pfx_io_poll_task_func+0x10/0x10 [ 297.095611][ T8873] ? percpu_ref_get_many+0x21/0x1e0 [ 297.095633][ T8873] ? percpu_ref_get_many+0x18c/0x1e0 [ 297.095652][ T8873] ? __pfx_io_poll_task_func+0x10/0x10 [ 297.095669][ T8873] io_handle_tw_list+0x1f5/0x4c0 [ 297.095692][ T8873] tctx_task_work_run+0x99/0x370 [ 297.095719][ T8873] tctx_task_work+0x3f/0x90 [ 297.095738][ T8873] task_work_run+0x1d1/0x260 [ 297.095759][ T8873] ? __pfx_task_work_run+0x10/0x10 [ 297.095780][ T8873] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 297.095800][ T8873] get_signal+0x11c5/0x1310 [ 297.095825][ T8873] ? vhost_update_used_flags+0x1a6/0x290 [ 297.095842][ T8873] ? vhost_vq_init_access+0x116/0x400 [ 297.095862][ T8873] arch_do_signal_or_restart+0x95/0x780 [ 297.095878][ T8873] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.095901][ T8873] ? local_irq_enable_exit_to_user+0x5/0x10 [ 297.095924][ T8873] syscall_exit_to_user_mode+0x8b/0x120 [ 297.095942][ T8873] do_syscall_64+0x103/0x210 [ 297.095959][ T8873] ? clear_bhb_loop+0x45/0xa0 [ 297.095976][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.095989][ T8873] RIP: 0033:0x7f24bed8e969 [ 297.096002][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.096014][ T8873] RSP: 002b:00007f24bfb23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.096029][ T8873] RAX: fffffffffffffff2 RBX: 00007f24befb5fa0 RCX: 00007f24bed8e969 [ 297.096039][ T8873] RDX: 0000200000000000 RSI: 000000004004af61 RDI: 0000000000000004 [ 297.096048][ T8873] RBP: 00007f24bfb23090 R08: 0000000000000000 R09: 0000000000000000 [ 297.096056][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.096063][ T8873] R13: 0000000000000000 R14: 00007f24befb5fa0 R15: 00007f24bf0dfa28 [ 297.096084][ T8873] [ 297.496734][ T5893] usb 4-1: config 0 descriptor?? [ 298.002102][ T5893] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 298.009136][ T5893] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 298.020000][ T5893] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 298.028122][ T5893] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 298.038298][ T5893] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 298.115261][ T5893] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 298.200005][ T8859] random: crng reseeded on system resumption [ 298.211195][ T47] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 298.299203][ T5893] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 298.379877][ T5893] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 298.383970][ T47] usb 5-1: config 0 has no interfaces? [ 298.403654][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 298.413605][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.429392][ T47] usb 5-1: Product: syz [ 298.443807][ T47] usb 5-1: Manufacturer: syz [ 298.458714][ T47] usb 5-1: SerialNumber: syz [ 298.476635][ T47] usb 5-1: config 0 descriptor?? [ 298.676846][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.695134][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.742574][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.820898][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.941624][ T977] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 299.041273][ T47] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 299.104166][ T977] usb 3-1: not running at top speed; connect to a high speed hub [ 299.114653][ T977] usb 3-1: config 3 has an invalid interface number: 229 but max is 1 [ 299.123550][ T977] usb 3-1: config 3 has an invalid interface number: 212 but max is 1 [ 299.146005][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.152792][ T977] usb 3-1: config 3 has no interface number 0 [ 299.162918][ T977] usb 3-1: config 3 has no interface number 1 [ 299.174825][ T977] usb 3-1: config 3 interface 229 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 299.187945][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.195863][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 299.207542][ T47] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 299.220053][ T47] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.235851][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.247223][ T977] usb 3-1: config 3 interface 229 altsetting 8 has an endpoint descriptor with address 0x1B, changing to 0xB [ 299.283846][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.296185][ T977] usb 3-1: config 3 interface 229 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 299.350944][ T47] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.376681][ T977] usb 3-1: config 3 interface 229 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 299.402974][ T977] usb 3-1: config 3 interface 229 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 299.471683][ T47] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 299.489829][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.499628][ T977] usb 3-1: config 3 interface 212 altsetting 1 endpoint 0x7 has an invalid bInterval 108, changing to 4 [ 299.520750][ T977] usb 3-1: config 3 interface 229 has no altsetting 0 [ 299.528157][ T977] usb 3-1: config 3 interface 212 has no altsetting 0 [ 299.579317][ T977] usb 3-1: New USB device found, idVendor=13d3, idProduct=3201, bcdDevice=a5.e7 [ 299.596947][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.623905][ T977] usb 3-1: Product: 㛼癜쩁䓾ၻ⵿ᔖ䩎Ｓ劜加͋欈ट秝ᗦ⭝㲜⡫煻⼉칁 [ 299.638154][ T977] usb 3-1: Manufacturer: 䘼 [ 299.643750][ T5887] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 299.655358][ T10] usb 4-1: USB disconnect, device number 43 [ 299.656102][ T977] usb 3-1: SerialNumber: 㰊 [ 299.672617][ T5887] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 299.754694][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.779696][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.795816][ T47] usb 1-1: GET_CAPABILITIES returned 0 [ 299.804519][ T47] usbtmc 1-1:16.0: can't read capabilities [ 299.824112][ T5887] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 299.937746][ T5887] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 299.943900][ T977] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in cold state, will try to load a firmware [ 299.987573][ T977] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 300.020587][ T977] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 300.252815][ T8891] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 300.259396][ T24] usb 1-1: USB disconnect, device number 62 [ 300.857017][ T24] usb 5-1: USB disconnect, device number 57 [ 300.949821][ T8909] netlink: 'syz.4.875': attribute type 11 has an invalid length. [ 301.149161][ T8911] syzkaller1: entered promiscuous mode [ 301.158933][ T8911] syzkaller1: entered allmulticast mode [ 302.290049][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 303.011288][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 303.533683][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.555155][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.571368][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 303.582116][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.655631][ T10] usb 5-1: config 0 descriptor?? [ 304.131660][ T5895] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 304.143054][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 304.174313][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 304.341182][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 304.361580][ T5895] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 304.389187][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.420300][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.447131][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.472849][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.490671][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.502177][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.686539][ T30] audit: type=1326 audit(1746485494.046:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.3.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89e998e969 code=0x0 [ 304.798928][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.813432][ T8966] input: syz1 as /devices/virtual/input/input25 [ 304.861730][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.879239][ T5895] usb 2-1: GET_CAPABILITIES returned 0 [ 304.914313][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 304.920451][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 304.933584][ T5895] usbtmc 2-1:16.0: can't read capabilities [ 304.945319][ T10] usb 5-1: USB disconnect, device number 58 [ 305.566803][ T5891] usb 2-1: USB disconnect, device number 48 [ 305.572925][ T8948] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 305.579522][ T5895] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 305.792221][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 305.807679][ T5895] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 305.830854][ T5895] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 305.838957][ T5895] usb 1-1: can't read configurations, error -61 [ 306.007585][ T5895] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 306.038811][ T8984] binder: BINDER_SET_CONTEXT_MGR already set [ 306.046032][ T8984] binder: 8983:8984 ioctl 4018620d 200000000040 returned -16 [ 306.171471][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 306.177646][ T5895] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 306.197060][ T5895] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 306.211106][ T5895] usb 1-1: can't read configurations, error -61 [ 306.222436][ T5895] usb usb1-port1: attempt power cycle [ 306.258879][ T8991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.571710][ T5895] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 306.602256][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 306.608087][ T5895] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 306.619982][ T5895] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 306.627692][ T5895] usb 1-1: can't read configurations, error -61 [ 306.761228][ T5895] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 306.784894][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 306.790813][ T5895] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 306.801148][ T5895] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 306.808757][ T5895] usb 1-1: can't read configurations, error -61 [ 306.816295][ T5895] usb usb1-port1: unable to enumerate USB device [ 307.088147][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 307.497369][ T9027] syzkaller1: entered promiscuous mode [ 307.511699][ T9027] syzkaller1: entered allmulticast mode [ 307.544576][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.554779][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.701321][ T5895] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 307.781937][ T5893] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 307.871137][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 307.879182][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 307.888118][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.898576][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.908429][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.921191][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 307.922342][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.942014][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.951415][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.958797][ T5893] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 307.969329][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.985568][ T5893] usb 2-1: config 0 descriptor?? [ 307.997995][ T5893] cp210x 2-1:0.0: cp210x converter detected [ 308.071204][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 308.083088][ T10] usb 4-1: no configurations [ 308.087785][ T10] usb 4-1: can't read configurations, error -22 [ 308.176252][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.195316][ T5893] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 308.203911][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.211936][ T5893] cp210x 2-1:0.0: querying part number failed [ 308.220612][ T5895] usb 5-1: GET_CAPABILITIES returned 0 [ 308.221488][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 308.228224][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 308.240527][ T5893] usb 2-1: cp210x converter now attached to ttyUSB0 [ 308.249241][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 308.263155][ T9039] vlan0: entered promiscuous mode [ 308.271437][ T5893] usb 2-1: USB disconnect, device number 49 [ 308.295827][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.315882][ T5893] cp210x 2-1:0.0: device disconnected [ 308.411157][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 308.417278][ T10] usb 4-1: no configurations [ 308.428583][ T10] usb 4-1: can't read configurations, error -22 [ 308.437560][ T10] usb usb4-port1: attempt power cycle [ 308.554446][ T9051] fuse: Unknown parameter 'grou_kd' [ 308.663338][ T9028] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 308.671523][ T5893] usb 5-1: USB disconnect, device number 59 [ 308.782842][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 308.814570][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 308.823775][ T10] usb 4-1: no configurations [ 308.828924][ T10] usb 4-1: can't read configurations, error -22 [ 308.961381][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 309.011843][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 309.019478][ T10] usb 4-1: no configurations [ 309.027094][ T10] usb 4-1: can't read configurations, error -22 [ 309.035964][ T10] usb usb4-port1: unable to enumerate USB device [ 310.244605][ T30] audit: type=1326 audit(1746485499.606:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 310.318280][ T30] audit: type=1326 audit(1746485499.606:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 310.410068][ T9093] bond0: (slave bond_slave_0): Releasing backup interface [ 310.453210][ T5895] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 310.577658][ T30] audit: type=1326 audit(1746485499.606:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 310.665058][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 310.685576][ T5895] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 310.699999][ T5895] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.774782][ T30] audit: type=1326 audit(1746485499.606:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 310.810785][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.910433][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.928796][ T30] audit: type=1326 audit(1746485499.606:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 310.969973][ T5895] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.970024][ T30] audit: type=1326 audit(1746485499.626:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 311.011304][ T30] audit: type=1326 audit(1746485499.626:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 311.043080][ T30] audit: type=1326 audit(1746485499.626:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 311.051599][ T5895] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.086166][ T30] audit: type=1326 audit(1746485499.626:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 311.114951][ T30] audit: type=1326 audit(1746485499.636:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 311.183030][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'. [ 311.202073][ T9109] loop8: detected capacity change from 0 to 1 [ 311.223020][ T9109] Dev loop8: unable to read RDB block 1 [ 311.228918][ T9109] loop8: unable to read partition table [ 311.236304][ T9109] loop8: partition table beyond EOD, truncated [ 311.263505][ T9109] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 311.275450][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.348290][ T9113] futex_wake_op: syz.1.930 tries to shift op by -33; fix this program [ 311.479507][ T9109] netdevsim netdevsim1: Direct firmware load for . [ 311.479507][ T9109] failed with error -2 [ 312.798100][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.820447][ T9109] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 312.820447][ T9109] [ 312.908963][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.087483][ T5895] usb 1-1: GET_CAPABILITIES returned 0 [ 313.093803][ T5895] usbtmc 1-1:16.0: can't read capabilities [ 313.365969][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.938'. [ 313.532164][ T47] usb 1-1: USB disconnect, device number 67 [ 313.543351][ T9091] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 313.776330][ T9133] fuse: Unknown parameter '' [ 314.003781][ T9142] vlan2: entered allmulticast mode [ 314.009274][ T9142] bond0: entered allmulticast mode [ 314.016241][ T9142] bond_slave_0: entered allmulticast mode [ 314.053152][ T9142] bond_slave_1: entered allmulticast mode [ 314.866456][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.947'. [ 315.071466][ T5905] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 315.237120][ T5905] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 315.246444][ T5905] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 315.261835][ T5905] usb 2-1: config 220 has no interface number 2 [ 315.268725][ T5905] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 315.285113][ T5905] usb 2-1: config 220 interface 0 has no altsetting 0 [ 315.292255][ T5905] usb 2-1: config 220 interface 76 has no altsetting 0 [ 315.353101][ T5905] usb 2-1: config 220 interface 1 has no altsetting 0 [ 315.368663][ T5905] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 315.385941][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.394310][ T5905] usb 2-1: Product: syz [ 315.400978][ T5905] usb 2-1: Manufacturer: syz [ 315.401262][ T47] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 315.413794][ T5905] usb 2-1: SerialNumber: syz [ 315.630896][ T47] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.652403][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.686425][ T47] usb 5-1: Product: syz [ 315.690650][ T47] usb 5-1: Manufacturer: syz [ 315.726485][ T47] usb 5-1: SerialNumber: syz [ 315.753951][ T47] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.778903][ T5895] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 316.285908][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.949'. [ 316.296616][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 316.337067][ T9162] net_ratelimit: 10 callbacks suppressed [ 316.337090][ T9162] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 316.822947][ T5905] usb 2-1: selecting invalid altsetting 0 [ 316.830136][ T5905] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 316.840329][ T5905] usb 2-1: No valid video chain found. [ 316.905478][ T5895] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 316.905750][ T5905] usb 2-1: selecting invalid altsetting 0 [ 316.931395][ T5905] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 316.948996][ T5895] ath9k_htc: Failed to initialize the device [ 316.970530][ T5905] usb 2-1: USB disconnect, device number 50 [ 317.105240][ T5895] usb 5-1: ath9k_htc: USB layer deinitialized [ 317.153009][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.159901][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.162118][ T9180] vlan2: entered allmulticast mode [ 317.224381][ T9180] batadv0: entered allmulticast mode [ 317.244131][ T9183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.711249][ T5905] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 317.881117][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 317.934266][ T5905] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 317.961634][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 318.084615][ T5905] usb 2-1: Product: syz [ 318.115814][ T47] usb 5-1: USB disconnect, device number 60 [ 318.170913][ T5905] usb 2-1: Manufacturer: syz [ 318.217538][ T5905] usb 2-1: SerialNumber: syz [ 318.270403][ T5905] usb 2-1: config 0 descriptor?? [ 318.337878][ T5905] usbtest 2-1:0.0: FX2 device [ 318.361026][ T5905] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 318.536260][ T5905] usb 2-1: USB disconnect, device number 51 [ 318.578487][ T9198] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 318.819168][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'. [ 319.291514][ T5905] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 319.379879][ T9194] FAULT_INJECTION: forcing a failure. [ 319.379879][ T9194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.419095][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.4.957 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 319.419122][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 319.419138][ T9194] Call Trace: [ 319.419150][ T9194] [ 319.419158][ T9194] dump_stack_lvl+0x189/0x250 [ 319.419189][ T9194] ? __lock_acquire+0xaac/0xd20 [ 319.419218][ T9194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.419245][ T9194] ? __pfx__printk+0x10/0x10 [ 319.419265][ T9194] ? __might_fault+0xb0/0x130 [ 319.419301][ T9194] should_fail_ex+0x414/0x560 [ 319.419336][ T9194] _copy_from_iter+0x1db/0x15a0 [ 319.419367][ T9194] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 319.419388][ T9194] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 319.419414][ T9194] ? __pfx__copy_from_iter+0x10/0x10 [ 319.419442][ T9194] ? __build_skb_around+0x257/0x3e0 [ 319.419487][ T9194] ? netlink_sendmsg+0x642/0xb30 [ 319.419507][ T9194] ? skb_put+0x11b/0x210 [ 319.419534][ T9194] netlink_sendmsg+0x6b2/0xb30 [ 319.419565][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.419591][ T9194] ? aa_sock_msg_perm+0x94/0x160 [ 319.419614][ T9194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.419636][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.419659][ T9194] __sock_sendmsg+0x219/0x270 [ 319.419693][ T9194] ____sys_sendmsg+0x505/0x830 [ 319.419725][ T9194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.419760][ T9194] ? import_iovec+0x74/0xa0 [ 319.419790][ T9194] ___sys_sendmsg+0x21f/0x2a0 [ 319.419818][ T9194] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.419880][ T9194] ? __fget_files+0x2a/0x420 [ 319.419910][ T9194] ? __fget_files+0x3a0/0x420 [ 319.419946][ T9194] __x64_sys_sendmsg+0x19b/0x260 [ 319.419975][ T9194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.420019][ T9194] ? do_syscall_64+0xba/0x210 [ 319.420050][ T9194] do_syscall_64+0xf6/0x210 [ 319.420075][ T9194] ? clear_bhb_loop+0x45/0xa0 [ 319.420100][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.420118][ T9194] RIP: 0033:0x7f24bed8e969 [ 319.420137][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.420154][ T9194] RSP: 002b:00007f24bfb23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.420175][ T9194] RAX: ffffffffffffffda RBX: 00007f24befb5fa0 RCX: 00007f24bed8e969 [ 319.420189][ T9194] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 319.420201][ T9194] RBP: 00007f24bfb23090 R08: 0000000000000000 R09: 0000000000000000 [ 319.420213][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.420225][ T9194] R13: 0000000000000000 R14: 00007f24befb5fa0 R15: 00007f24bf0dfa28 [ 319.420256][ T9194] [ 319.726824][ T9214] input: syz0 as /devices/virtual/input/input26 [ 319.892419][ T5905] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 319.900887][ T5905] usb 4-1: config 150 has no interface number 0 [ 319.911334][ T5905] usb 4-1: config 150 interface 204 has no altsetting 0 [ 319.918580][ T5905] usb 4-1: config 150 interface 1 has no altsetting 0 [ 319.944309][ T5905] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 319.953432][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.962197][ T5905] usb 4-1: Product: syz [ 319.966359][ T5905] usb 4-1: Manufacturer: syz [ 319.970949][ T5905] usb 4-1: SerialNumber: syz [ 320.106566][ T9218] binder: BINDER_SET_CONTEXT_MGR already set [ 320.116656][ T9218] binder: 9216:9218 ioctl 4018620d 200000000040 returned -16 [ 320.212473][ T5905] xr_serial 4-1:150.204: xr_serial converter detected [ 322.187043][ T9251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.971'. [ 322.537868][ T5905] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 322.548439][ T5905] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 322.608003][ T5905] usb 4-1: USB disconnect, device number 48 [ 322.633364][ T5905] xr_serial 4-1:150.204: device disconnected [ 323.742603][ T9289] loop8: detected capacity change from 0 to 1 [ 323.763598][ T9289] Dev loop8: unable to read RDB block 1 [ 323.769257][ T9289] loop8: unable to read partition table [ 323.776408][ T9289] loop8: partition table beyond EOD, truncated [ 323.782788][ T9289] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 323.799701][ T9290] futex_wake_op: syz.1.976 tries to shift op by -33; fix this program [ 323.817826][ T9289] netdevsim netdevsim1: Direct firmware load for . [ 323.817826][ T9289] failed with error -2 [ 323.828858][ T9289] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 323.828858][ T9289] [ 324.174713][ T9292] netlink: 80 bytes leftover after parsing attributes in process `syz.3.983'. [ 324.204745][ T9292] 8021q: VLANs not supported on wg1 [ 324.556295][ T9295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'. [ 324.771497][ T5905] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 324.941442][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 324.957034][ T5905] usb 1-1: config 5 has an invalid interface number: 35 but max is 1 [ 324.976220][ T5905] usb 1-1: config 5 has an invalid interface number: 4 but max is 1 [ 324.996609][ T5905] usb 1-1: config 5 has an invalid interface number: 4 but max is 1 [ 325.083513][ T5905] usb 1-1: config 5 has no interface number 0 [ 325.099969][ T5905] usb 1-1: config 5 has no interface number 1 [ 325.118257][ T5905] usb 1-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.167170][ T5905] usb 1-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 325.167206][ T5905] usb 1-1: config 5 interface 35 has no altsetting 0 [ 325.167226][ T5905] usb 1-1: config 5 interface 4 has no altsetting 0 [ 325.167245][ T5905] usb 1-1: config 5 interface 4 has no altsetting 1 [ 325.169958][ T5905] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 325.169988][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.170010][ T5905] usb 1-1: Product: syz [ 325.170025][ T5905] usb 1-1: Manufacturer: syz [ 325.170041][ T5905] usb 1-1: SerialNumber: syz [ 325.410373][ T5905] ttusbir 1-1:5.35: cannot find expected altsetting [ 325.415706][ T5905] ttusbir 1-1:5.4: cannot find expected altsetting [ 325.424984][ T5905] usb 1-1: USB disconnect, device number 68 [ 325.431244][ T5891] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 325.561679][ T5891] usb 5-1: device descriptor read/64, error -71 [ 325.682219][ T47] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 325.804457][ T5891] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 325.841490][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 325.860673][ T47] usb 2-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 325.883916][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.898817][ T47] usb 2-1: New USB device found, idVendor=261d, idProduct=c120, bcdDevice=e3.67 [ 325.919220][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 325.937711][ T47] usb 2-1: SerialNumber: syz [ 325.942483][ T5891] usb 5-1: device descriptor read/64, error -71 [ 325.969646][ T47] usb 2-1: config 0 descriptor?? [ 326.051842][ T5891] usb usb5-port1: attempt power cycle [ 326.248145][ T5895] usb 2-1: USB disconnect, device number 52 [ 326.405608][ T5891] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 326.444566][ T5891] usb 5-1: device descriptor read/8, error -71 [ 326.625475][ T47] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 326.681479][ T5891] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 326.712743][ T5891] usb 5-1: device descriptor read/8, error -71 [ 326.791107][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 326.798503][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.810720][ T47] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 326.822870][ T5891] usb usb5-port1: unable to enumerate USB device [ 326.829861][ T47] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 326.850162][ T47] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.864520][ T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.874102][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.884009][ T47] usb 1-1: Product: syz [ 326.888210][ T47] usb 1-1: Manufacturer: syz [ 326.901463][ T47] usb 1-1: SerialNumber: syz [ 326.962471][ T9324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.994'. [ 326.974605][ T9324] sctp: [Deprecated]: syz.1.994 (pid 9324) Use of int in maxseg socket option. [ 326.974605][ T9324] Use struct sctp_assoc_value instead [ 327.056485][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 327.118673][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.143027][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.165664][ T47] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 327.240175][ T47] usb 1-1: USB disconnect, device number 69 [ 327.289085][ T6840] udevd[6840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.419380][ T5895] IPVS: starting estimator thread 0... [ 327.522418][ T9336] IPVS: using max 25 ests per chain, 60000 per kthread [ 327.651141][ T5891] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 327.803197][ T5891] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 327.823379][ T5891] usb 2-1: config 6 has no interface number 0 [ 327.829556][ T5891] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 327.864893][ T5891] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 327.865791][ T9351] xt_connbytes: Forcing CT accounting to be enabled [ 327.886096][ T5887] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 327.895858][ T9351] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 327.907990][ T5891] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 327.913453][ T9351] xt_bpf: check failed: parse error [ 327.933371][ T5891] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 327.952170][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.973154][ T5891] usb 2-1: Product: syz [ 327.977348][ T5891] usb 2-1: Manufacturer: syz [ 328.004448][ T5891] usb 2-1: SerialNumber: syz [ 328.028268][ T5891] hso 2-1:6.2: Failed to find INT IN ep [ 328.045727][ T5887] usb 4-1: config 0 has no interfaces? [ 328.075938][ T5887] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 328.119287][ T9351] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 328.130464][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.143250][ T5887] usb 4-1: Product: syz [ 328.147848][ T5887] usb 4-1: Manufacturer: syz [ 328.170533][ T5887] usb 4-1: SerialNumber: syz [ 328.194991][ T5887] usb 4-1: config 0 descriptor?? [ 328.236175][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.244963][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.269448][ T47] usb 2-1: USB disconnect, device number 53 [ 328.361697][ T5891] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 328.683313][ T5891] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 328.699233][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.730183][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.768321][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 328.795239][ T5891] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 328.805346][ T5891] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 328.818780][ T5891] usb 1-1: Manufacturer: syz [ 328.834231][ T5891] usb 1-1: config 0 descriptor?? [ 329.262198][ C1] raw-gadget.4 gadget.0: ignoring, device is not running [ 329.270065][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 329.282642][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 329.327179][ T5891] usb 1-1: USB disconnect, device number 70 [ 329.490740][ T9364] syzkaller1: entered promiscuous mode [ 329.500423][ T9364] syzkaller1: entered allmulticast mode [ 329.817847][ T9369] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 329.862038][ T9369] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 329.908308][ T9369] ALSA: mixer_oss: invalid OSS volume 'lg' [ 329.919920][ T9369] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 329.929910][ T9369] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 329.938915][ T9369] ALSA: mixer_oss: invalid OSS volume '' [ 329.989456][ T9369] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 330.027089][ T9369] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 330.396921][ T9383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1013'. [ 330.482252][ T9389] fuse: Bad value for 'fd' [ 331.149841][ T5893] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 331.707035][ T5893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.717226][ T5893] usb 2-1: config 0 has no interface number 0 [ 331.724579][ T5893] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 331.740469][ T5893] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 331.798328][ T5893] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.813290][ T5887] usb 4-1: USB disconnect, device number 49 [ 331.857540][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.876473][ T5893] usb 2-1: config 0 descriptor?? [ 331.888930][ T9393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 331.920431][ T5893] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 332.229716][ T24] usb 2-1: USB disconnect, device number 54 [ 332.235993][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 332.407494][ T9413] netlink: 'syz.3.1020': attribute type 11 has an invalid length. [ 332.436201][ T9416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1022'. [ 333.290960][ T5887] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 333.464569][ T5887] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 333.477760][ T5887] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 333.508740][ T5887] usb 2-1: config 220 has no interface number 2 [ 333.525821][ T5887] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 333.556172][ T5887] usb 2-1: config 220 interface 0 has no altsetting 0 [ 333.585911][ T5887] usb 2-1: config 220 interface 76 has no altsetting 0 [ 333.619293][ T5887] usb 2-1: config 220 interface 1 has no altsetting 0 [ 333.640686][ T5887] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 333.654776][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.664016][ T5887] usb 2-1: Product: syz [ 333.668214][ T5887] usb 2-1: Manufacturer: syz [ 333.676948][ T5887] usb 2-1: SerialNumber: syz [ 333.861737][ T5893] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 333.879089][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 333.917230][ T5887] usb 2-1: selecting invalid altsetting 0 [ 333.946171][ T5887] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 333.974643][ T5887] usb 2-1: No valid video chain found. [ 333.996142][ T5887] usb 2-1: selecting invalid altsetting 0 [ 334.002372][ T5893] usb 1-1: device descriptor read/64, error -71 [ 334.014089][ T5887] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 334.029464][ T5887] usb 2-1: USB disconnect, device number 55 [ 334.241236][ T5893] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 334.371200][ T5893] usb 1-1: device descriptor read/64, error -71 [ 334.485568][ T5893] usb usb1-port1: attempt power cycle [ 334.841300][ T5893] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 334.908909][ T5893] usb 1-1: device descriptor read/8, error -71 [ 334.938503][ T9459] syzkaller1: entered promiscuous mode [ 334.947041][ T9459] syzkaller1: entered allmulticast mode [ 335.261231][ T5893] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 335.292263][ T5893] usb 1-1: device descriptor read/8, error -71 [ 335.401857][ T5893] usb usb1-port1: unable to enumerate USB device [ 336.671445][ T5891] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 336.721753][ T47] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 336.759137][ T9497] syzkaller1: entered promiscuous mode [ 336.768581][ T9497] syzkaller1: entered allmulticast mode [ 336.831149][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 336.846642][ T5891] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 336.856846][ T5891] usb 4-1: config 0 has no interface number 0 [ 336.864631][ T5891] usb 4-1: config 0 interface 12 has no altsetting 0 [ 336.874824][ T5891] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 336.886241][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.896914][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.907640][ T5891] usb 4-1: Product: syz [ 336.912578][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.921901][ T5891] usb 4-1: Manufacturer: syz [ 336.926628][ T5891] usb 4-1: SerialNumber: syz [ 336.932893][ T47] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.944247][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.953599][ T5891] usb 4-1: config 0 descriptor?? [ 336.964504][ T47] usb 2-1: SerialNumber: syz [ 337.221012][ T5891] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 337.246947][ T9505] netlink: 'syz.4.1048': attribute type 4 has an invalid length. [ 337.253871][ T5891] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 337.271898][ T5891] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 337.300123][ T5891] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 337.340335][ T5891] usb 4-1: USB disconnect, device number 50 [ 337.455972][ T47] usb 2-1: 0:2 : does not exist [ 337.489410][ T47] usb 2-1: USB disconnect, device number 56 [ 337.524599][ T6840] udevd[6840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.671553][ T5893] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 337.811207][ T5893] usb 5-1: device descriptor read/64, error -71 [ 337.892716][ T9518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1052'. [ 337.911521][ T5891] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 337.960863][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1052'. [ 338.061222][ T5893] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 338.078946][ T5891] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.090530][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.108946][ T5891] usb 4-1: Product: syz [ 338.113445][ T5891] usb 4-1: Manufacturer: syz [ 338.118167][ T5891] usb 4-1: SerialNumber: syz [ 338.134584][ T5891] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 338.159277][ T47] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 338.201355][ T5893] usb 5-1: device descriptor read/64, error -71 [ 338.316057][ T5893] usb usb5-port1: attempt power cycle [ 338.377918][ T9529] Unknown options in mask 5 [ 338.659262][ T10] usb 4-1: USB disconnect, device number 51 [ 338.711388][ T5893] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 338.752361][ T5893] usb 5-1: device descriptor read/8, error -71 [ 338.991204][ T5893] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 339.013577][ T5893] usb 5-1: device descriptor read/8, error -71 [ 339.142265][ T5893] usb usb5-port1: unable to enumerate USB device [ 339.214638][ T47] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 339.228287][ T47] ath9k_htc: Failed to initialize the device [ 339.243865][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 339.685301][ T9541] netlink: 'syz.3.1060': attribute type 4 has an invalid length. [ 339.785378][ T9545] syzkaller1: entered promiscuous mode [ 339.794693][ T9545] syzkaller1: entered allmulticast mode [ 341.778868][ T9574] input: syz0 as /devices/virtual/input/input29 [ 341.948292][ T9578] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1074'. [ 341.991633][ T5893] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 342.006064][ T5887] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 342.151367][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 342.164453][ T5893] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 342.177456][ T5887] usb 2-1: config 0 has no interfaces? [ 342.215410][ T5887] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.224596][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.245951][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.254612][ T5893] usb 1-1: Product: syz [ 342.263643][ T5893] usb 1-1: Manufacturer: syz [ 342.268281][ T5893] usb 1-1: SerialNumber: syz [ 342.288014][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.297108][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.305093][ T5887] usb 2-1: Product: syz [ 342.305666][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.309292][ T5887] usb 2-1: Manufacturer: syz [ 342.309317][ T5887] usb 2-1: SerialNumber: syz [ 342.318128][ T5887] usb 2-1: config 0 descriptor?? [ 342.333247][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.334184][ T5893] usb 1-1: config 0 descriptor?? [ 342.344882][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.359868][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.367607][ T5893] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 342.390690][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.399289][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.408073][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.417607][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.426807][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.435328][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.443880][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.452270][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.460338][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.468888][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.478035][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.487302][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.495639][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.508637][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.516997][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.525117][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.533371][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.541695][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.549682][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.557814][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.572405][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.623147][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.631289][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.639251][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.648275][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.658236][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.666565][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.674424][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.686777][ T9586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.722591][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.730641][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.747320][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.756473][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.764514][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.772991][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.781434][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.789468][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.798163][ T47] hid-generic 0000:007F:FFFFFFFE.000B: unknown main item tag 0x0 [ 342.819418][ T47] hid-generic 0000:007F:FFFFFFFE.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.877033][ T10] usb 2-1: USB disconnect, device number 57 [ 343.042498][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 343.057909][ T9594] syzkaller1: entered promiscuous mode [ 343.064582][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 343.079862][ T9594] syzkaller1: entered allmulticast mode [ 343.461220][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 343.637052][ T10] usb 4-1: config 0 has no interfaces? [ 343.655582][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 343.665875][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.679615][ T10] usb 4-1: Product: syz [ 343.684316][ T10] usb 4-1: Manufacturer: syz [ 343.725435][ T10] usb 4-1: SerialNumber: syz [ 343.753701][ T10] usb 4-1: config 0 descriptor?? [ 343.864154][ T5895] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 344.171543][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 344.186100][ T5895] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 344.196004][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.208006][ T5895] usb 2-1: Product: syz [ 344.212356][ T5895] usb 2-1: Manufacturer: syz [ 344.217328][ T5895] usb 2-1: SerialNumber: syz [ 344.255378][ T5895] usb 2-1: config 0 descriptor?? [ 344.468986][ T5895] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.711204][ T5891] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 344.846001][ T5893] gspca_m5602: Failed to find a sensor [ 344.861187][ T5893] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 344.890969][ T5893] usb 1-1: USB disconnect, device number 75 [ 344.911323][ T5891] usb 5-1: device descriptor read/64, error -71 [ 345.187105][ T5891] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 345.331564][ T5891] usb 5-1: device descriptor read/64, error -71 [ 345.461633][ T5891] usb usb5-port1: attempt power cycle [ 345.754780][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.822960][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.861774][ T5891] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 345.914245][ T5891] usb 5-1: device descriptor read/8, error -71 [ 345.953040][ T5895] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 346.001874][ T5895] usb 2-1: USB disconnect, device number 58 [ 346.161814][ T5891] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 346.190101][ T9637] syzkaller1: entered promiscuous mode [ 346.202727][ T5891] usb 5-1: device descriptor read/8, error -71 [ 346.204509][ T9637] syzkaller1: entered allmulticast mode [ 346.321539][ T5891] usb usb5-port1: unable to enumerate USB device [ 346.591149][ T5905] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 346.662917][ T5893] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 346.781190][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 346.817730][ T5905] usb 1-1: config 0 has no interfaces? [ 346.833405][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 346.849041][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.857218][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 346.873418][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.894193][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.908572][ T10] usb 4-1: USB disconnect, device number 52 [ 346.924346][ T5893] usb 2-1: config 0 has no interfaces? [ 346.941144][ T5905] usb 1-1: config 0 descriptor?? [ 346.976566][ T5893] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 346.988047][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.021186][ T5893] usb 2-1: Product: syz [ 347.059549][ T5893] usb 2-1: Manufacturer: syz [ 347.108984][ T5893] usb 2-1: SerialNumber: syz [ 347.134224][ T5893] usb 2-1: config 0 descriptor?? [ 347.420216][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.432010][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.721213][ T5891] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 347.882394][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 347.908594][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.944054][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.974081][ T5891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.001848][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.029772][ T5891] usb 4-1: Product: syz [ 348.044934][ T5891] usb 4-1: Manufacturer: syz [ 348.095096][ T5891] usb 4-1: SerialNumber: syz [ 348.259349][ T9664] loop8: detected capacity change from 0 to 1 [ 348.270298][ T5889] Dev loop8: unable to read RDB block 1 [ 348.283721][ T5889] loop8: unable to read partition table [ 348.295033][ T5889] loop8: partition table beyond EOD, truncated [ 348.308102][ T9664] Dev loop8: unable to read RDB block 1 [ 348.330945][ T9664] loop8: unable to read partition table [ 348.356664][ T9665] futex_wake_op: syz.4.1101 tries to shift op by -33; fix this program [ 348.365700][ T9664] loop8: partition table beyond EOD, truncated [ 348.380648][ T9664] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 348.405250][ T9665] netdevsim netdevsim4: Direct firmware load for . [ 348.405250][ T9665] failed with error -2 [ 348.417002][ T9665] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 348.417002][ T9665] [ 349.208657][ T9674] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 349.378469][ T10] usb 1-1: USB disconnect, device number 76 [ 349.467669][ T5893] usb 2-1: USB disconnect, device number 59 [ 349.564829][ T9680] IPv6: Can't replace route, no match found [ 349.736904][ T9691] syzkaller1: entered promiscuous mode [ 349.743275][ T9691] syzkaller1: entered allmulticast mode [ 349.861711][ T5895] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 349.942136][ T47] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 350.031335][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 350.041945][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 350.054598][ T5895] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 350.066129][ T5895] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 350.079198][ T5895] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 350.088607][ T5895] usb 5-1: config 128 has no interface number 0 [ 350.096123][ T5895] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 350.107809][ T5895] usb 5-1: config 128 interface 127 has no altsetting 0 [ 350.117682][ T47] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 350.128483][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 350.137757][ T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.149233][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.157565][ T47] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.171254][ T5895] usb 5-1: Product: syz [ 350.175462][ T5895] usb 5-1: Manufacturer: syz [ 350.181469][ T5895] usb 5-1: SerialNumber: syz [ 350.186169][ T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.199453][ T9687] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 350.206247][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.418716][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.427779][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.499724][ T9667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.512957][ T5891] usb 4-1: cannot find UAC_HEADER [ 350.545840][ T5891] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 350.547667][ T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.575768][ T5891] usb 4-1: USB disconnect, device number 53 [ 350.603479][ T47] usb 1-1: invalid MIDI out EP 0 [ 350.605580][ T6840] udevd[6840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.745048][ T9694] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1111'. [ 350.779063][ T47] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 350.839078][ T47] usb 1-1: USB disconnect, device number 77 [ 350.876756][ T5895] usb 5-1: USB disconnect, device number 73 [ 350.999846][ T6840] udevd[6840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.211306][ T47] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 351.377466][ T47] usb 1-1: config 0 has no interfaces? [ 351.383199][ T5891] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 351.607790][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 351.655732][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.790698][ T47] usb 1-1: Product: syz [ 351.795610][ T47] usb 1-1: Manufacturer: syz [ 351.800250][ T47] usb 1-1: SerialNumber: syz [ 351.809764][ T47] usb 1-1: config 0 descriptor?? [ 352.566523][ T5891] usb 2-1: config 0 has no interfaces? [ 352.589995][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 352.605945][ T47] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 352.726690][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.745759][ T5891] usb 2-1: Product: syz [ 352.756532][ T5891] usb 2-1: Manufacturer: syz [ 352.765792][ T5891] usb 2-1: SerialNumber: syz [ 352.782958][ T9727] vlan3: entered promiscuous mode [ 352.788139][ T9727] vlan2: entered promiscuous mode [ 352.793276][ T9727] ip6gretap0: entered promiscuous mode [ 352.801411][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 352.810514][ T5893] usb 1-1: USB disconnect, device number 78 [ 352.826032][ T47] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 352.838660][ T5891] usb 2-1: config 0 descriptor?? [ 352.860963][ T47] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 352.943038][ T47] usb 4-1: Product: syz [ 352.950512][ T47] usb 4-1: Manufacturer: syz [ 352.959562][ T47] usb 4-1: SerialNumber: syz [ 352.977121][ T47] usb 4-1: config 0 descriptor?? [ 353.434263][ T9732] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1119'. [ 353.480666][ T9730] netlink: 'syz.4.1121': attribute type 2 has an invalid length. [ 353.673210][ T9730] lm;-: entered promiscuous mode [ 353.720852][ T9736] syzkaller1: entered promiscuous mode [ 353.729854][ T9736] syzkaller1: entered allmulticast mode [ 354.558276][ T5887] usb 2-1: USB disconnect, device number 60 [ 354.586964][ T5891] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 354.756347][ T5891] usb 5-1: config 0 has no interfaces? [ 354.778837][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 354.788348][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.797138][ T5891] usb 5-1: Product: syz [ 354.802093][ T5891] usb 5-1: Manufacturer: syz [ 354.937929][ T5891] usb 5-1: SerialNumber: syz [ 354.988769][ T5891] usb 5-1: config 0 descriptor?? [ 355.041215][ T5893] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 355.181154][ T47] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 355.198855][ T9741] fuse: Unknown parameter '184467440737095516150x00000000000000090177777777777777777777700000000000000000000000' [ 355.211633][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 355.220130][ T5893] usb 1-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.235255][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 355.311519][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 355.331400][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 355.333383][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.347566][ T47] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 355.349158][ T5893] usb 1-1: config 0 descriptor?? [ 355.375985][ T47] usb 2-1: config 0 has no interface number 0 [ 355.391746][ T47] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 355.411373][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.419431][ T47] usb 2-1: Product: syz [ 355.563594][ T47] usb 2-1: Manufacturer: syz [ 355.568271][ T47] usb 2-1: SerialNumber: syz [ 355.655075][ T9752] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 355.697429][ T5891] usb 4-1: USB disconnect, device number 54 [ 355.724995][ T9752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 355.772720][ T47] usb 2-1: config 0 descriptor?? [ 355.802091][ T47] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 355.927204][ T5893] logitech 0003:046D:C219.000C: unknown main item tag 0x2 [ 355.964625][ T5893] logitech 0003:046D:C219.000C: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.0-1/input0 [ 355.988169][ T5893] logitech 0003:046D:C219.000C: no inputs found [ 356.166417][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.180176][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.311440][ T5891] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 356.461175][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 356.468858][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 356.480579][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.490784][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.500596][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 356.510467][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 356.521682][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 356.530793][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.545271][ T5891] usb 4-1: config 0 descriptor?? [ 356.572980][ T55] Bluetooth: hci5: urb ffff888028248800 submission failed (90) [ 356.777533][ T5891] usb 4-1: USB disconnect, device number 55 [ 356.933155][ T47] gspca_topro: reg_w err -110 [ 356.961632][ T47] gspca_topro: Sensor soi763a [ 357.153614][ T5887] usb 5-1: USB disconnect, device number 74 [ 357.611327][ T5887] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 357.771310][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 357.780052][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.815228][ T5887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.844546][ T5887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.848653][ T5891] usb 2-1: USB disconnect, device number 61 [ 357.898112][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.925402][ T47] usb 1-1: USB disconnect, device number 79 [ 357.944850][ T5887] usb 5-1: Product: 뺍ᜅ槌탰Ω⌈⨌榧ꂄ䖝돝螰ꪩ쥭ᐂ쳏魒뮖︡ጥ⇹ꩺ亏懰谁퍨ᦉ蛸퉶ꃈ⼳ࣾ艡枢굡녰赝뤰᪒ਈ状俚ᾟꡔ㻔ჷ쾵ҹ䫧琊渏熗㜁骍瑤獧盞묞᪂턹∖ὠ巣ᩮ⢚⽐⯌䭳ῠ䙏勦試㨠㑦ⷱꗣ倝雒㋤䳽傮ꢉ [ 358.048062][ T9774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1133'. [ 358.059967][ T5887] usb 5-1: Manufacturer: 愯뚝ꔧꪖ貣濟惒骐ޭㅝ￸놆㱴韵愴髇ꔹ䮱ْ琓軦㽮ꋠ銅널邖詾憂⬣眷ꑇ좘찇쑚ю耔 [ 358.112161][ T5887] usb 5-1: SerialNumber: ꎁꜱ堑陮邨㤦ᨬᐲ屵峩鱺鴘塰ꐷチ䉢洒꘠杖戴聂㪖ⅾ엊☴뭷趣䚽䶧ᇴ嚓㞮뫥湳屈㴟ffl亝ᦳᴅ癭烁⚮짓둜뾦姶ꗓງ逸走㫡ꄒ楎∜㶁ᑪ뎯꘼霗鎕껡ᄻ缿嬽똯뛗䶨ﭵ㴁ꎽ懷柎န㲵쥤⪴닿䳽⧱동蜐䀫段ⷶ术 [ 358.404700][ T5887] usb 5-1: 0:2 : does not exist [ 358.456650][ T5887] usb 5-1: USB disconnect, device number 75 [ 358.456799][ T9780] syzkaller1: entered promiscuous mode [ 358.475580][ T9780] syzkaller1: entered allmulticast mode [ 358.511579][ T6840] udevd[6840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.611492][ T47] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 358.851337][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 358.858009][ T47] usb 2-1: config 0 has no interfaces? [ 358.866097][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.876341][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.886712][ T47] usb 2-1: Product: syz [ 358.899753][ T47] usb 2-1: Manufacturer: syz [ 358.907222][ T47] usb 2-1: SerialNumber: syz [ 358.922142][ T47] usb 2-1: config 0 descriptor?? [ 359.519054][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 359.519070][ T30] audit: type=1326 audit(1746485548.876:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 359.628498][ T30] audit: type=1326 audit(1746485548.886:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 359.693791][ T30] audit: type=1326 audit(1746485548.906:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 359.717559][ T30] audit: type=1326 audit(1746485548.906:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 359.740112][ T30] audit: type=1326 audit(1746485548.906:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 359.762634][ T30] audit: type=1326 audit(1746485548.926:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24bed8d41f code=0x7ffc0000 [ 359.804426][ T30] audit: type=1326 audit(1746485548.936:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 359.902765][ T30] audit: type=1326 audit(1746485548.936:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.4.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 360.151334][ T5895] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 360.204794][ T5887] usb 2-1: USB disconnect, device number 62 [ 360.302275][ T5895] usb 1-1: device descriptor read/64, error -71 [ 360.561198][ T5895] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 360.597006][ T9815] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.691222][ T5895] usb 1-1: device descriptor read/64, error -71 [ 360.812608][ T5895] usb usb1-port1: attempt power cycle [ 361.005625][ T9830] syzkaller1: entered promiscuous mode [ 361.012534][ T9830] syzkaller1: entered allmulticast mode [ 361.171423][ T5895] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 361.202377][ T5895] usb 1-1: device descriptor read/8, error -71 [ 361.461369][ T5895] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 361.483442][ T5895] usb 1-1: device descriptor read/8, error -71 [ 361.601369][ T5895] usb usb1-port1: unable to enumerate USB device [ 362.231130][ T5895] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 362.381395][ T47] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 362.394446][ T5895] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 362.407093][ T5895] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 362.416730][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.424941][ T5895] usb 2-1: Product: syz [ 362.429125][ T5895] usb 2-1: Manufacturer: syz [ 362.434175][ T5895] usb 2-1: SerialNumber: syz [ 362.543901][ T47] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.552873][ T47] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 362.565563][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.575479][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 362.586686][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 362.599797][ T47] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.609373][ T47] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.617507][ T47] usb 4-1: Product: syz [ 362.621757][ T47] usb 4-1: Manufacturer: syz [ 362.634398][ T47] cdc_wdm 4-1:1.0: skipping garbage [ 362.639650][ T47] cdc_wdm 4-1:1.0: skipping garbage [ 362.648707][ T47] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 362.655487][ T47] cdc_wdm 4-1:1.0: Unknown control protocol [ 362.656225][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.668686][ T9841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.676274][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.683499][ T9841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.697266][ T9841] bridge0: entered allmulticast mode [ 362.712971][ T5895] usb 2-1: selecting invalid altsetting 1 [ 362.730421][ T5895] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 362.730508][ T5895] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 362.751435][ T5895] usb 2-1: USB disconnect, device number 63 [ 362.841739][ T47] usb 4-1: USB disconnect, device number 56 [ 363.241786][ T977] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 363.269278][ T977] dvb_usb_dibusb_mb 3-1:3.229: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 363.332148][ T977] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in cold state, will try to load a firmware [ 363.353369][ T977] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 363.423765][ T977] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 363.441177][ T5895] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 363.602932][ T5895] usb 1-1: config 0 has no interfaces? [ 363.638148][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 363.684351][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.735162][ T5895] usb 1-1: Product: syz [ 363.744843][ T5895] usb 1-1: Manufacturer: syz [ 363.780516][ T5895] usb 1-1: SerialNumber: syz [ 363.837259][ T5895] usb 1-1: config 0 descriptor?? [ 363.996824][ T9873] syzkaller1: entered promiscuous mode [ 364.005872][ T9873] syzkaller1: entered allmulticast mode [ 364.543202][ T5887] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 364.713323][ T5887] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 364.727626][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.744065][ T5887] usb 4-1: Product: syz [ 364.767215][ T5887] usb 4-1: Manufacturer: syz [ 364.788248][ T5887] usb 4-1: SerialNumber: syz [ 364.832033][ T5887] usb 4-1: config 0 descriptor?? [ 364.848928][ T5887] ch341 4-1:0.0: ch341-uart converter detected [ 365.964057][ T5887] usb 4-1: failed to send control message: -71 [ 365.971910][ T5887] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 366.010037][ T5887] usb 4-1: USB disconnect, device number 57 [ 366.044287][ T5887] ch341 4-1:0.0: device disconnected [ 366.104201][ T24] usb 1-1: USB disconnect, device number 84 [ 366.211357][ T5893] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 366.526301][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 366.809486][ T9921] kvm: kvm [9915]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x307a7973000100f8 [ 366.895509][ T9916] bridge0: port 3(hsr0) entered blocking state [ 366.914199][ T9916] bridge0: port 3(hsr0) entered disabled state [ 366.957516][ T9916] hsr0: entered allmulticast mode [ 366.982887][ T9916] hsr_slave_0: entered allmulticast mode [ 367.041112][ T9916] hsr_slave_1: entered allmulticast mode [ 367.048404][ T9916] hsr0: entered promiscuous mode [ 367.054161][ T9916] bridge0: port 3(hsr0) entered blocking state [ 367.061414][ T9916] bridge0: port 3(hsr0) entered forwarding state [ 367.140546][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1181'. [ 367.233929][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 367.649129][ T9933] netlink: 'syz.0.1180': attribute type 20 has an invalid length. [ 368.153486][ T47] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 368.387811][ T47] usb 2-1: config 0 has no interfaces? [ 368.435082][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 368.492810][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.534836][ T47] usb 2-1: Product: syz [ 368.555379][ T47] usb 2-1: Manufacturer: syz [ 368.578410][ T47] usb 2-1: SerialNumber: syz [ 368.625842][ T47] usb 2-1: config 0 descriptor?? [ 368.918150][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.931849][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.018022][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 369.021877][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 369.318830][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 369.379029][ T9956] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.411174][ T47] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 369.433279][ T5893] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 369.488845][ T5893] usb 5-1: can't read configurations, error -71 [ 370.121130][ T47] usb 1-1: device descriptor read/64, error -71 [ 370.386431][ T47] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 370.625945][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 370.664013][ T47] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 370.676899][ T47] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 370.687750][ T47] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 370.706294][ T47] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 370.715133][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 370.725212][ T47] usb 1-1: config 0 has no interface number 0 [ 370.731579][ T47] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 370.743135][ T47] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 370.753985][ T47] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.764186][ T47] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.777704][ T47] usb 1-1: config 0 interface 125 has no altsetting 0 [ 370.784829][ T47] usb 1-1: config 0 interface 125 has no altsetting 2 [ 370.799650][ T47] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 370.813000][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.821461][ T47] usb 1-1: Product: syz [ 370.825685][ T47] usb 1-1: Manufacturer: syz [ 370.830284][ T47] usb 1-1: SerialNumber: syz [ 370.838005][ T47] usb 1-1: config 0 descriptor?? [ 370.956610][ T47] usb 1-1: selecting invalid altsetting 2 [ 371.308733][ T5887] usb 2-1: USB disconnect, device number 64 [ 371.351268][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 371.421314][ T5893] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 371.531387][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 371.549354][ T10] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 371.558590][ T10] usb 5-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 371.573813][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 371.583491][ T9995] kvm: pic: single mode not supported [ 371.583513][ T9995] kvm: pic: level sensitive irq not supported [ 371.592779][ T10] usb 5-1: config 0 has no interface number 0 [ 371.607082][ T9995] kvm: pic: level sensitive irq not supported [ 371.609116][ T9995] kvm: pic: single mode not supported [ 371.615646][ T9995] kvm: pic: level sensitive irq not supported [ 371.622038][ T5893] usb 4-1: config 0 has no interfaces? [ 371.636907][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.646180][ T10] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 371.660499][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.680683][ T9995] kvm: pic: single mode not supported [ 371.680706][ T9995] kvm: pic: level sensitive irq not supported [ 371.689444][ T10] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x4 has invalid maxpacket 43784, setting to 1024 [ 371.713566][ T9995] kvm: pic: single mode not supported [ 371.713588][ T9995] kvm: pic: level sensitive irq not supported [ 371.719925][ T9995] kvm: pic: single mode not supported [ 371.724913][ T5893] usb 4-1: config 0 descriptor?? [ 371.726836][ T9995] kvm: pic: level sensitive irq not supported [ 371.732510][ T10] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 371.760122][ T10] usb 5-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.781717][ T10] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 371.794593][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.805624][ T10] usb 5-1: Product: syz [ 371.808171][ T9995] kvm: pic: single mode not supported [ 371.809859][ T9995] kvm: pic: level sensitive irq not supported [ 371.816727][ T10] usb 5-1: Manufacturer: syz [ 371.833740][ T9995] kvm: pic: single mode not supported [ 371.833762][ T9995] kvm: pic: level sensitive irq not supported [ 371.839707][ T9995] kvm: pic: single mode not supported [ 371.865881][ T10] usb 5-1: SerialNumber: syz [ 371.877016][ T9995] kvm: pic: level sensitive irq not supported [ 371.878323][ T9995] kvm: pic: single mode not supported [ 371.884836][ T9995] kvm: pic: level sensitive irq not supported [ 371.888394][ T10] usb 5-1: config 0 descriptor?? [ 371.901860][ T5905] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 371.915568][ T9986] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 371.964997][ T9995] kvm: pic: single mode not supported [ 372.017768][ T47] get_1284_register timeout [ 372.048175][ C1] usb 1-1: async_complete: urb error -104 [ 372.073858][ T47] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 372.126617][ T5905] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 372.153488][ T10] ath6kl: Failed to submit usb control message: -71 [ 372.169360][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 372.197040][ T10] ath6kl: Unable to send get target info: -71 [ 372.207520][ T5905] usb 2-1: config 0 has no interface number 0 [ 372.240267][ T10] ath6kl: Failed to init ath6kl core: -71 [ 372.246864][ T5905] usb 2-1: config 0 interface 29 has no altsetting 0 [ 372.306892][ T10] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 372.323557][ T5905] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 372.356286][ T10] usb 5-1: USB disconnect, device number 78 [ 372.365140][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.395722][ T5905] usb 2-1: Product: syz [ 372.419630][ T5905] usb 2-1: Manufacturer: syz [ 372.424707][ T5905] usb 2-1: SerialNumber: syz [ 372.440624][T10001] fuse: Bad value for 'group_id' [ 372.447554][ T5905] usb 2-1: config 0 descriptor?? [ 372.458514][T10001] fuse: Bad value for 'group_id' [ 373.051520][ T47] usb 1-1: USB disconnect, device number 86 [ 373.457929][T10015] syzkaller1: entered promiscuous mode [ 373.472267][T10015] syzkaller1: entered allmulticast mode [ 373.798431][T10017] netlink: 'syz.0.1206': attribute type 10 has an invalid length. [ 373.824193][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.832009][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.933662][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.940988][T10017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.948708][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.955962][T10017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.019719][T10017] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 374.338354][ T47] usb 4-1: USB disconnect, device number 58 [ 374.556140][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1208'. [ 374.568523][T10028] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1208'. [ 374.586053][ T5905] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 374.611161][ T5905] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 374.623046][ T30] audit: type=1326 audit(1746485563.986:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.4.1209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x0 [ 374.644872][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.726447][T10029] netlink: 'syz.4.1209': attribute type 10 has an invalid length. [ 374.735837][ T5905] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 374.756165][ T5905] usb 2-1: USB disconnect, device number 65 [ 374.803603][T10029] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.818542][T10029] bond0: (slave team0): Enslaving as an active interface with an up link [ 375.521188][ T5948] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 375.794165][T10049] xt_hashlimit: size too large, truncated to 1048576 [ 375.811244][ T5948] usb 4-1: device descriptor read/64, error -71 [ 376.051232][ T5948] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 376.331230][ T5948] usb 4-1: device descriptor read/64, error -71 [ 376.441883][ T5948] usb usb4-port1: attempt power cycle [ 376.781143][ T5948] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 376.871774][ T5948] usb 4-1: device descriptor read/8, error -71 [ 377.114052][ T5948] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 377.145653][ T5948] usb 4-1: device descriptor read/8, error -71 [ 377.261582][ T5948] usb usb4-port1: unable to enumerate USB device [ 377.936561][ T10] IPVS: starting estimator thread 0... [ 377.945059][T10079] IPVS: sed: UDP 224.0.0.2:20004 - no destination available [ 378.041133][T10081] IPVS: using max 39 ests per chain, 93600 per kthread [ 378.551162][ T5895] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 378.577610][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.584091][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.804486][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 378.838416][ T5895] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 378.868797][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.898143][ T5895] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 378.953437][ T5895] usb 1-1: config 1 has no interface number 1 [ 378.972759][ T5895] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 379.009489][ T5895] usb 1-1: config 1 interface 2 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.041632][ T5895] usb 1-1: config 1 interface 2 has no altsetting 1 [ 379.065671][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.075096][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.091698][ T5895] usb 1-1: Product: syz [ 379.097838][ T5895] usb 1-1: Manufacturer: syz [ 379.102979][ T5895] usb 1-1: SerialNumber: syz [ 379.171844][ T5905] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 379.269649][T10109] syzkaller1: entered promiscuous mode [ 379.275525][T10109] syzkaller1: entered allmulticast mode [ 379.321563][ T5948] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 379.357988][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 379.386856][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 379.411110][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.445141][ T5905] usb 5-1: config 0 descriptor?? [ 379.486430][ T5948] usb 2-1: config 0 has no interfaces? [ 379.512881][ T5948] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 379.543420][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.562233][ T5948] usb 2-1: Product: syz [ 379.566588][ T5948] usb 2-1: Manufacturer: syz [ 379.572523][ T5948] usb 2-1: SerialNumber: syz [ 379.595606][ T5948] usb 2-1: config 0 descriptor?? [ 379.669688][T10115] team0: Port device gtp0 added [ 379.681606][ T5895] usb 1-1: USB disconnect, device number 87 [ 379.791351][ T5887] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 379.879228][T10105] vlan3: entered promiscuous mode [ 379.885915][T10101] fuse: Unknown parameter 'root' [ 379.892508][T10105] vlan2: entered promiscuous mode [ 379.897582][T10105] syz_tun: entered promiscuous mode [ 379.969061][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 379.988389][ T5895] usb 2-1: USB disconnect, device number 66 [ 379.995503][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.009745][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 380.026037][ T5887] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 380.037535][ T5887] usb 4-1: Manufacturer: syz [ 380.050114][ T5887] usb 4-1: config 0 descriptor?? [ 380.064836][ T5887] hub 4-1:0.0: USB hub found [ 380.103404][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 380.118679][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 380.135077][ T5905] usb 5-1: USB disconnect, device number 79 [ 380.264344][ T5887] hub 4-1:0.0: 1 port detected [ 380.647365][T10131] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[10131] [ 380.758161][T10133] loop8: detected capacity change from 0 to 1 [ 380.770366][T10133] Dev loop8: unable to read RDB block 1 [ 380.776283][T10133] loop8: unable to read partition table [ 380.782265][T10133] loop8: partition table beyond EOD, truncated [ 380.789238][T10133] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 380.804771][T10133] futex_wake_op: syz.2.1239 tries to shift op by -33; fix this program [ 380.821403][T10133] netdevsim netdevsim2: Direct firmware load for . [ 380.821403][T10133] failed with error -2 [ 380.832224][T10133] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 380.832224][T10133] [ 380.867966][ T5887] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 380.960702][ T30] audit: type=1326 audit(1746485570.316:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 380.998941][ T30] audit: type=1326 audit(1746485570.356:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.058531][ T30] audit: type=1326 audit(1746485570.356:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.080809][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.115024][ T30] audit: type=1326 audit(1746485570.356:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.150992][ T30] audit: type=1326 audit(1746485570.356:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.234074][ T30] audit: type=1326 audit(1746485570.356:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.260669][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.306151][ T30] audit: type=1326 audit(1746485570.356:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.379856][ T30] audit: type=1326 audit(1746485570.356:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.406579][ T30] audit: type=1326 audit(1746485570.356:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.411442][ T5887] usb 4-1: USB disconnect, device number 63 [ 381.433481][ T30] audit: type=1326 audit(1746485570.356:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.4.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bed8e969 code=0x7ffc0000 [ 381.904499][T10146] syzkaller1: entered promiscuous mode [ 381.910912][T10146] syzkaller1: entered allmulticast mode [ 383.057356][T10172] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 383.075851][T10172] macsec1: entered promiscuous mode [ 383.090165][T10172] macsec1: entered allmulticast mode [ 383.098909][T10172] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 383.106189][ T5891] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 383.265547][ T5891] usb 2-1: device descriptor read/64, error -71 [ 383.497367][T10196] syzkaller1: entered promiscuous mode [ 383.526632][ T5891] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 383.536200][T10196] syzkaller1: entered allmulticast mode [ 383.711258][ T5891] usb 2-1: device descriptor read/64, error -71 [ 383.822718][ T5891] usb usb2-port1: attempt power cycle [ 384.121141][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 384.220130][ T5891] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 384.253257][ T5891] usb 2-1: device descriptor read/8, error -71 [ 384.301159][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 384.309236][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 384.319202][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.340422][ T10] usb 1-1: config 0 descriptor?? [ 384.412452][T10218] program syz.2.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.491255][ T5891] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 384.512208][ T5891] usb 2-1: device descriptor read/8, error -71 [ 384.521219][ T5905] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 384.564362][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 384.623548][ T5891] usb usb2-port1: unable to enumerate USB device [ 384.677884][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.693749][ T5905] usb 5-1: New USB device found, idVendor=0325, idProduct=a4a1, bcdDevice= 0.40 [ 384.721152][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.760017][ T5905] usb 5-1: Product: syz [ 384.770721][ T5905] usb 5-1: Manufacturer: syz [ 384.790415][ T5905] usb 5-1: SerialNumber: syz [ 384.935320][T10228] batadv_slave_1: entered promiscuous mode [ 385.019787][ T5905] cdc_ether 5-1:1.0: skipping garbage [ 385.036505][ T5905] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 385.052620][ T5905] usb 5-1: USB disconnect, device number 80 [ 385.541227][ T5905] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 385.711221][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 385.723010][ T5905] usb 5-1: config index 0 descriptor too short (expected 301, got 59) [ 385.735411][ T5905] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 385.746211][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.756995][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.767115][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2304, setting to 1024 [ 385.779600][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 385.790736][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.806158][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.815999][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.886732][T10250] FAULT_INJECTION: forcing a failure. [ 385.886732][T10250] name failslab, interval 1, probability 0, space 0, times 0 [ 385.905825][T10250] CPU: 1 UID: 0 PID: 10250 Comm: syz.3.1273 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 385.905853][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 385.905867][T10250] Call Trace: [ 385.905875][T10250] [ 385.905884][T10250] dump_stack_lvl+0x189/0x250 [ 385.905921][T10250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.905949][T10250] ? __pfx__printk+0x10/0x10 [ 385.905974][T10250] ? __pfx___might_resched+0x10/0x10 [ 385.905993][T10250] ? fs_reclaim_acquire+0x7d/0x100 [ 385.906027][T10250] should_fail_ex+0x414/0x560 [ 385.906063][T10250] should_failslab+0xa8/0x100 [ 385.906090][T10250] __kmalloc_cache_noprof+0x70/0x3d0 [ 385.906115][T10250] ? tcf_chain_create+0xb0/0x310 [ 385.906142][T10250] tcf_chain_create+0xb0/0x310 [ 385.906169][T10250] __tcf_chain_get+0x111/0x3c0 [ 385.906191][T10250] tc_new_tfilter+0x753/0x15b0 [ 385.906226][T10250] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.906297][T10250] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.906336][T10250] ? __pfx_tc_new_tfilter+0x10/0x10 [ 385.906398][T10250] ? __pfx_tc_new_tfilter+0x10/0x10 [ 385.906423][T10250] rtnetlink_rcv_msg+0x7cc/0xb70 [ 385.906448][T10250] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 385.906468][T10250] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.906494][T10250] ? ref_tracker_free+0x63a/0x7d0 [ 385.906514][T10250] ? __copy_skb_header+0xa7/0x550 [ 385.906559][T10250] netlink_rcv_skb+0x219/0x490 [ 385.906584][T10250] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.906607][T10250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.906651][T10250] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.906673][T10250] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.906702][T10250] netlink_unicast+0x758/0x8d0 [ 385.906746][T10250] netlink_sendmsg+0x805/0xb30 [ 385.906779][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.906806][T10250] ? aa_sock_msg_perm+0x94/0x160 [ 385.906830][T10250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.906852][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.906876][T10250] __sock_sendmsg+0x219/0x270 [ 385.906911][T10250] ____sys_sendmsg+0x505/0x830 [ 385.906945][T10250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.906983][T10250] ? import_iovec+0x74/0xa0 [ 385.907015][T10250] ___sys_sendmsg+0x21f/0x2a0 [ 385.907044][T10250] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.907111][T10250] ? __fget_files+0x2a/0x420 [ 385.907137][T10250] ? __fget_files+0x3a0/0x420 [ 385.907174][T10250] __x64_sys_sendmsg+0x19b/0x260 [ 385.907205][T10250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.907251][T10250] ? do_syscall_64+0xba/0x210 [ 385.907281][T10250] do_syscall_64+0xf6/0x210 [ 385.907307][T10250] ? clear_bhb_loop+0x45/0xa0 [ 385.907333][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.907352][T10250] RIP: 0033:0x7f89e998e969 [ 385.907371][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.907389][T10250] RSP: 002b:00007f89ea749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.907411][T10250] RAX: ffffffffffffffda RBX: 00007f89e9bb5fa0 RCX: 00007f89e998e969 [ 385.907426][T10250] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 385.907440][T10250] RBP: 00007f89ea749090 R08: 0000000000000000 R09: 0000000000000000 [ 385.907453][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.907465][T10250] R13: 0000000000000000 R14: 00007f89e9bb5fa0 R15: 00007f89e9cdfa28 [ 385.907507][T10250] [ 386.001839][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1275'. [ 386.228247][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.232359][ T5905] usb 5-1: usb_control_msg returned -32 [ 386.246571][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.254495][ T5905] usbtmc 5-1:16.0: can't read capabilities [ 386.297155][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 386.301155][T10254] netlink: 'syz.1.1275': attribute type 7 has an invalid length. [ 386.307352][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 386.320915][T10254] netlink: 'syz.1.1275': attribute type 8 has an invalid length. [ 386.329386][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 386.371196][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 386.383994][ T10] usb 1-1: USB disconnect, device number 88 [ 386.417874][T10254] bridge0: entered promiscuous mode [ 386.435524][T10254] ip6gretap0: entered promiscuous mode [ 386.447877][T10254] gretap0: entered promiscuous mode [ 386.454107][T10254] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 386.501452][T10258] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.1276'. [ 386.514725][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1276'. [ 386.567096][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1276'. [ 386.586144][T10260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1277'. [ 386.713030][T10257] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 386.719880][ T47] usb 5-1: USB disconnect, device number 81 [ 387.061809][ T5891] [ 387.064186][ T5891] ============================================ [ 387.070353][ T5891] WARNING: possible recursive locking detected [ 387.076532][ T5891] 6.15.0-rc5-syzkaller #0 Not tainted [ 387.081910][ T5891] -------------------------------------------- [ 387.088068][ T5891] kworker/1:3/5891 is trying to acquire lock: [ 387.094153][ T5891] ffff88805c3e8f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 387.103337][ T5891] [ 387.103337][ T5891] but task is already holding lock: [ 387.110737][ T5891] ffff888026e46f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 387.119832][ T5891] [ 387.119832][ T5891] other info that might help us debug this: [ 387.127903][ T5891] Possible unsafe locking scenario: [ 387.127903][ T5891] [ 387.135365][ T5891] CPU0 [ 387.138653][ T5891] ---- [ 387.141949][ T5891] lock(&hsr->seqnr_lock); [ 387.146479][ T5891] lock(&hsr->seqnr_lock); [ 387.151004][ T5891] [ 387.151004][ T5891] *** DEADLOCK *** [ 387.151004][ T5891] [ 387.159158][ T5891] May be due to missing lock nesting notation [ 387.159158][ T5891] [ 387.167495][ T5891] 11 locks held by kworker/1:3/5891: [ 387.172790][ T5891] #0: ffff88814bccf148 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 387.183551][ T5891] #1: ffffc900040efc60 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 387.196740][ T5891] #2: ffff888058ebf538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0 [ 387.206020][ T5891] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 387.215287][ T5891] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 387.225158][ T5891] #5: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 387.235114][ T5891] #6: ffff888026e46f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 387.244651][ T5891] #7: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 387.254178][ T5891] #8: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 387.264137][ T5891] #9: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 387.273409][ T5891] #10: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 387.283477][ T5891] [ 387.283477][ T5891] stack backtrace: [ 387.289380][ T5891] CPU: 1 UID: 0 PID: 5891 Comm: kworker/1:3 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 387.289404][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 387.289419][ T5891] Workqueue: mld mld_ifc_work [ 387.289441][ T5891] Call Trace: [ 387.289449][ T5891] [ 387.289466][ T5891] dump_stack_lvl+0x189/0x250 [ 387.289493][ T5891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.289516][ T5891] ? __pfx__printk+0x10/0x10 [ 387.289550][ T5891] ? __lock_acquire+0xaac/0xd20 [ 387.289583][ T5891] print_deadlock_bug+0x28b/0x2a0 [ 387.289604][ T5891] validate_chain+0x1a3f/0x2140 [ 387.289623][ T5891] ? __lock_acquire+0xaac/0xd20 [ 387.289652][ T5891] ? unwind_next_frame+0xa5/0x2390 [ 387.289675][ T5891] ? rcu_is_watching+0x15/0xb0 [ 387.289703][ T5891] ? __kasan_check_byte+0x12/0x40 [ 387.289727][ T5891] ? unwind_next_frame+0xa5/0x2390 [ 387.289753][ T5891] __lock_acquire+0xaac/0xd20 [ 387.289782][ T5891] ? hsr_dev_xmit+0x19a/0x220 [ 387.289811][ T5891] lock_acquire+0x120/0x360 [ 387.289836][ T5891] ? hsr_dev_xmit+0x19a/0x220 [ 387.289870][ T5891] ? hsr_dev_xmit+0x19a/0x220 [ 387.289899][ T5891] _raw_spin_lock_bh+0x36/0x50 [ 387.289918][ T5891] ? hsr_dev_xmit+0x19a/0x220 [ 387.289948][ T5891] hsr_dev_xmit+0x19a/0x220 [ 387.289978][ T5891] dev_hard_start_xmit+0x2ff/0x880 [ 387.290012][ T5891] __dev_queue_xmit+0x1adf/0x3a70 [ 387.290045][ T5891] ? __dev_queue_xmit+0x27e/0x3a70 [ 387.290075][ T5891] ? __local_bh_enable_ip+0x12d/0x1c0 [ 387.290105][ T5891] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.290129][ T5891] ? __pfx___dev_queue_xmit+0x10/0x10 [ 387.290159][ T5891] ? do_raw_read_unlock+0x3d/0x80 [ 387.290182][ T5891] ? ebt_do_table+0x265b/0x2820 [ 387.290217][ T5891] br_dev_queue_push_xmit+0x6c5/0x890 [ 387.290249][ T5891] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 387.290279][ T5891] ? NF_HOOK+0x9e/0x3c0 [ 387.290306][ T5891] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 387.290334][ T5891] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 387.290362][ T5891] NF_HOOK+0x31d/0x3c0 [ 387.290390][ T5891] ? NF_HOOK+0x9e/0x3c0 [ 387.290415][ T5891] ? __pfx_NF_HOOK+0x10/0x10 [ 387.290442][ T5891] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 387.290482][ T5891] br_forward_finish+0xd3/0x130 [ 387.290508][ T5891] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 387.290537][ T5891] ? __pfx_br_forward_finish+0x10/0x10 [ 387.290564][ T5891] ? __pfx_br_forward_finish+0x10/0x10 [ 387.290589][ T5891] NF_HOOK+0x31d/0x3c0 [ 387.290617][ T5891] ? NF_HOOK+0x9e/0x3c0 [ 387.290641][ T5891] ? __pfx_NF_HOOK+0x10/0x10 [ 387.290667][ T5891] ? __pfx_br_forward_finish+0x10/0x10 [ 387.290698][ T5891] __br_forward+0x41e/0x600 [ 387.290724][ T5891] ? __pfx_br_forward_finish+0x10/0x10 [ 387.290753][ T5891] ? __pfx___br_forward+0x10/0x10 [ 387.290781][ T5891] ? skb_clone+0x246/0x3a0 [ 387.290810][ T5891] maybe_deliver+0xb5/0x160 [ 387.290839][ T5891] br_flood+0x31a/0x6a0 [ 387.290869][ T5891] ? br_dev_xmit+0x185/0x1840 [ 387.290890][ T5891] br_dev_xmit+0x11b3/0x1840 [ 387.290909][ T5891] ? arch_stack_walk+0x11c/0x150 [ 387.290940][ T5891] ? br_dev_xmit+0x185/0x1840 [ 387.290964][ T5891] ? __pfx_br_dev_xmit+0x10/0x10 [ 387.290984][ T5891] ? __pfx_skb_network_protocol+0x10/0x10 [ 387.291011][ T5891] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 387.291039][ T5891] ? __pfx_passthru_features_check+0x10/0x10 [ 387.291072][ T5891] dev_hard_start_xmit+0x2ff/0x880 [ 387.291106][ T5891] __dev_queue_xmit+0x1adf/0x3a70 [ 387.291135][ T5891] ? __dev_queue_xmit+0x27e/0x3a70 [ 387.291163][ T5891] ? rcu_is_watching+0x15/0xb0 [ 387.291191][ T5891] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 387.291214][ T5891] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 387.291239][ T5891] ? __pfx___dev_queue_xmit+0x10/0x10 [ 387.291267][ T5891] ? __copy_skb_header+0xa7/0x550 [ 387.291293][ T5891] ? __asan_memcpy+0x40/0x70 [ 387.291312][ T5891] ? __pskb_copy_fclone+0x960/0xf90 [ 387.291339][ T5891] ? __asan_memcpy+0x40/0x70 [ 387.291358][ T5891] ? __pskb_copy_fclone+0x960/0xf90 [ 387.291388][ T5891] ? hsr_create_tagged_frame+0x449/0xc30 [ 387.291410][ T5891] ? __asan_memmove+0x40/0x70 [ 387.291429][ T5891] ? hsr_addr_subst_dest+0x307/0xac0 [ 387.291471][ T5891] hsr_forward_skb+0x158b/0x2860 [ 387.291497][ T5891] ? hsr_forward_skb+0x9e/0x2860 [ 387.291519][ T5891] ? __pfx_hsr_forward_skb+0x10/0x10 [ 387.291539][ T5891] ? do_raw_spin_lock+0x121/0x290 [ 387.291562][ T5891] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 387.291587][ T5891] ? hsr_dev_xmit+0x19a/0x220 [ 387.291617][ T5891] hsr_dev_xmit+0x1a5/0x220 [ 387.291648][ T5891] dev_hard_start_xmit+0x2ff/0x880 [ 387.291682][ T5891] __dev_queue_xmit+0x1adf/0x3a70 [ 387.291713][ T5891] ? __dev_queue_xmit+0x27e/0x3a70 [ 387.291746][ T5891] ? __pfx___dev_queue_xmit+0x10/0x10 [ 387.291772][ T5891] ? read_seqbegin+0x122/0x250 [ 387.291787][ T5891] ? neigh_connected_output+0x1ea/0x460 [ 387.291802][ T5891] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.291820][ T5891] ? read_seqbegin+0x1ac/0x250 [ 387.291835][ T5891] ? __pfx_read_seqbegin+0x10/0x10 [ 387.291849][ T5891] ? eth_header+0x11b/0x200 [ 387.291869][ T5891] ? __asan_memcpy+0x40/0x70 [ 387.291884][ T5891] ? eth_header+0x11b/0x200 [ 387.291901][ T5891] ? __pfx_eth_header+0x10/0x10 [ 387.291920][ T5891] ? neigh_connected_output+0x3b6/0x460 [ 387.291942][ T5891] ip6_finish_output2+0x11fb/0x16a0 [ 387.291971][ T5891] ? ip6_finish_output2+0x701/0x16a0 [ 387.291992][ T5891] ? __pfx_ip6_finish_output2+0x10/0x10 [ 387.292011][ T5891] ? ip6_mtu+0x7d/0x3f0 [ 387.292028][ T5891] ? ip6_mtu+0x7d/0x3f0 [ 387.292043][ T5891] ip6_finish_output+0x234/0x7d0 [ 387.292061][ T5891] NF_HOOK+0x9e/0x380 [ 387.292078][ T5891] ? NF_HOOK+0x101/0x380 [ 387.292093][ T5891] ? __pfx_NF_HOOK+0x10/0x10 [ 387.292110][ T5891] ? __pfx_dst_output+0x10/0x10 [ 387.292126][ T5891] ? icmp6_dst_alloc+0x3a5/0x420 [ 387.292143][ T5891] ? icmp6_dst_alloc+0x3a5/0x420 [ 387.292160][ T5891] mld_sendpack+0x800/0xd80 [ 387.292183][ T5891] ? mld_sendpack+0x1de/0xd80 [ 387.292200][ T5891] ? __pfx_mld_sendpack+0x10/0x10 [ 387.292225][ T5891] mld_ifc_work+0x835/0xde0 [ 387.292241][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.292258][ T5891] ? process_scheduled_works+0x9ec/0x17a0 [ 387.292284][ T5891] process_scheduled_works+0xadb/0x17a0 [ 387.292318][ T5891] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.292348][ T5891] worker_thread+0x8a0/0xda0 [ 387.292364][ T5891] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.292383][ T5891] ? __kthread_parkme+0x7b/0x200 [ 387.292403][ T5891] kthread+0x70e/0x8a0 [ 387.292421][ T5891] ? __pfx_worker_thread+0x10/0x10 [ 387.292436][ T5891] ? __pfx_kthread+0x10/0x10 [ 387.292459][ T5891] ? __pfx_kthread+0x10/0x10 [ 387.292476][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.292492][ T5891] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.292509][ T5891] ? __pfx_kthread+0x10/0x10 [ 387.292526][ T5891] ret_from_fork+0x4b/0x80 [ 387.292542][ T5891] ? __pfx_kthread+0x10/0x10 [ 387.292559][ T5891] ret_from_fork_asm+0x1a/0x30 [ 387.292580][ T5891] [ 388.028803][T10273] dvmrp5: entered allmulticast mode [ 391.113669][ T5203] udevd[5203]: worker [5888] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time