last executing test programs: 8.778005112s ago: executing program 4 (id=2569): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x80805, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9e2ad65f6ffdbb6ffea6bec000000004b606", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000280)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xc, 0x400, 0x10001, 0xfff}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x40800) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x803, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x2dfd, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x9, 0x5}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r9, 0x0, 0x9, &(0x7f0000000300)=""/9, &(0x7f00000007c0)=0x24) 8.542102704s ago: executing program 4 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x34}}, 0x0) (fail_nth: 1) 8.399842148s ago: executing program 4 (id=2573): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e20, 0xca, 0x4e21, 0x5, 0xa, 0x20, 0x0, 0x2e, 0x0, 0xee01}, {0xaec, 0x2, 0x8001, 0x6, 0x6, 0x80, 0x82a, 0x6}, {0xe5, 0x0, 0x5, 0x4}, 0x6, 0x6e6bb0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0xd4}, 0x2, @in6=@empty, 0x0, 0x3, 0x3, 0x5, 0x3, 0x7, 0x4}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000f10000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001080008400000000114000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03e2"], 0x34}}, 0x0) 8.101948023s ago: executing program 1 (id=2576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0x8, 0x2, 0x8, 0x8000000000000001, 0xffffffffffff3974}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000080)=0x7) 8.007835912s ago: executing program 4 (id=2578): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e"], 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e1e, @remote}, 0x4, 0x1, 0x2, 0x2}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4, 0x4}}, 0x26) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9", 0x4}, {&(0x7f00000003c0)="e870", 0x2}], 0x2}], 0x1, 0x40800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYBLOB="0300000008"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/zoneinfo\x00', 0x0, 0x0) 7.656373238s ago: executing program 0 (id=2581): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x12, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x200) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000000)=0x4) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/135) 5.174777972s ago: executing program 0 (id=2585): socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.850065413s ago: executing program 4 (id=2586): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @private1, 0x401}}, 0x800, 0x5, 0x2, 0x1, 0x5, 0x3, 0x2}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000050000000500"}}}]}, 0x48}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0x90000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELRULE={0xfc, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xcd, 0x7, 0x1, 0x0, "bed13f18b3d6e8ea4d5b7679c7b095989f99c0f7582d2d39121ce23df5c825994bd47d1d517f16ded9e476208dd747cb3ffbb057966444a517fd5bb3d801e1203eef2930c784bb3fae9b061a2dcd67c386213846d8e0e6aa79f28c36cd22ed28f4bf27593a56a9613a2b1150b7024593a1eaeac8a2dbdf04d9ded82c09b025ac6a5fa4690340ab41671c2694dce009dc05a4fc3b715731b8a9670f592040226e4f74003b38b206d661372fc4ec237447ff009cd32b6c530df50676186d02c3200830238e4d45c15e18"}]}], {0x14}}, 0x124}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4800) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close_range(r6, r5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r4, @ANYRES32=r4, @ANYRES64=r4], 0x0) 4.753092261s ago: executing program 1 (id=2587): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x94, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80005e1100fcfc0000000000000000000000000000ff02000000000000000000000000000100004e22005e90"], 0x0) 4.703486123s ago: executing program 0 (id=2588): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x0, @vbi={0xfffffff7, 0x1, 0x7f, 0x30324c4a, [0xfffffffe, 0x7fff], [0xdb8, 0x2], 0x1}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f0000003bc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2004c040) sendto$unix(r5, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x10}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @loopback, 0x380000}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r2, 0x0, &(0x7f0000000280)="be89a3", 0x3, 0x7}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r12}, &(0x7f0000000300), &(0x7f0000000340)=r11}, 0x20) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r10, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r13, 0x26, &(0x7f0000002000)={0x1}) 4.562084273s ago: executing program 1 (id=2589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/16, 0x10}], 0x1, 0x0, 0x0, 0xf0ff}, 0x100) 4.437977935s ago: executing program 1 (id=2591): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af60, &(0x7f00000002c0)=0x200000000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000000000)=0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180d570becfb98c100b7075e17f3fc200000008004500002800000000000690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000180)={@any, 0x7}) prlimit64(r3, 0x0, &(0x7f0000000140)={0x7, 0x4}, 0x0) set_mempolicy(0x8000, &(0x7f0000000000)=0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x3fd, 0x0, 0x0, 0x0, 0x96, 0x6}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000008430b0300000000000001090224000100000000090400060103000104092100000001220b00090581030000000000c68611974dc88323e35fe19e7f095d7426d692ded8a3376911143d7be9eecb01af6a1d98714c0590f8d8bfa344e16208358ce447a0a0c8227ae25c314911a003ec3725f3ca021e94320c1d5cca8a5b37b475fe1dfc5827bdf5959c33df5837b8bae23a61893db053db540cf7aceb871d39d390eb6d8e8824720a3b5063ff91c3921c0be69adc005b47b41fe76ed678efc90a27a1fb6d0101000000888282c696751ea31cc76ec59e25bb5935"], 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$cgroup_ro(r4, &(0x7f0000000840)='rdma.current\x00', 0x0, 0x0) dup(r4) unshare(0x28000600) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) 4.046048372s ago: executing program 3 (id=2592): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0xffffffffffffff8d) epoll_create1(0x0) dup2(r0, r0) epoll_wait(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0xfffeffff) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfa}, 0x2) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) 2.852892618s ago: executing program 1 (id=2593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="bb5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x14, 0x10, 0xffffffffffffffff, @void, @value}, 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) 2.707236696s ago: executing program 3 (id=2594): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000500008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 2.469787711s ago: executing program 3 (id=2595): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x7ffff000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x260, 0x98, 0x68, 0x0, 0x0, 0x0, 0x1c8, 0x1f0, 0x1f0, 0x1c8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0xffffffff, 'veth0_to_team\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@addrtype={{0x30}, {0x215, 0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x4, 0x3, 0x3, 'pptp\x00', 'syz1\x00', {0x18}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000380)={0x2, 0x0, '\x00', {0x0, @bt={0x6, 0x80000001, 0x0, 0x2, 0xcff, 0x6, 0xe0000000, 0x1ff, 0x8, 0x40, 0x987, 0x4, 0x7, 0x8, 0x4, 0x18, {0x0, 0xb6e}, 0x9, 0xff}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) r11 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e00010000009a253f885d0af5"], 0x24}, 0x1, 0x0, 0x0, 0xcc801}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 2.407763318s ago: executing program 2 (id=2596): r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2042) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000440)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xa94}}, 0x10) io_setup(0x31, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0}]) (async) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x41}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040000000000000000000800000010adeea6808ae3274787000480090001"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x240, 0x0) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r7 = socket(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.828885746s ago: executing program 4 (id=2597): r0 = socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0xe}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32=r2], 0x0) io_setup(0xffff, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1086dd6000000000140600fe8000000000000000000000000000aafe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x60, 0xd5, 0xdc, 0x40, 0x403, 0x8372, 0x9ec6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x6, 0x50, 0x78, [{{0x9, 0x4, 0xbb, 0x0, 0x0, 0x9, 0x4a, 0xfd, 0xbb}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) fgetxattr(r4, &(0x7f0000000200)=@random={'osx.', '\'\x00'}, &(0x7f0000000280)=""/148, 0x94) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000004900)=[{{&(0x7f00000004c0)=@nl=@unspec, 0x18, 0x0}}], 0x1, 0x20004400) 1.356150676s ago: executing program 0 (id=2598): socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.338846869s ago: executing program 2 (id=2599): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) 1.140306496s ago: executing program 0 (id=2600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac0006031100000004000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000ddc094190879c89f000000000000000a6c000000060a0104100000000000000002000000400004803c0001800c0001007061796cef6164002c000280080004400003407c000000080006400000000208000240000000010900010073797a30000000000900020073797a32d052113150f510047cc658666b967f000000001400000011"], 0x94}}, 0x0) 1.030161326s ago: executing program 2 (id=2601): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) (fail_nth: 4) 887.411902ms ago: executing program 0 (id=2602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x102) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x99) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff110701030009"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0x814) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x569, 0x1}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000141200006000000001"], 0xfdef) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000006c0)={0x0, 0x6}, &(0x7f0000000680)=0xfffffffffffffed3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e21, 0xa, @private2={0xfc, 0x2, '\x00', 0xf4}, 0x1}}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x102, 0x1, 0xd5, r8}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x0) 487.627466ms ago: executing program 3 (id=2603): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) 338.125786ms ago: executing program 2 (id=2604): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80240, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x48001002, 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000048000), 0x0) (async) read$eventfd(r2, &(0x7f0000000000), 0x8) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000009f68f4d"], 0x0}, 0x0) 276.56721ms ago: executing program 2 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="782e00000d0a0102000000000000000003000003801f0380b0030080dc000b8064000180090001006d657461000000005400028008000240000000230800024000000016080002400000001d0800014000000003080002400000000508000140000000130800024000000016080002400000000d080001400000000e0800024000000016100001800a000100696e6e6572000000100001800b0001007470726f78790000140001800e000100636f6e6e6c696d6974000000140001800d00010073796e70726f7879000000000c000180080001006669620010000180090001007866726d0000000010000180090001006d657461000000000900090073797a30000000000900090073797a3000000000f4010180040001004000010083193aca5648a1e3593c2ddbe7afc98cb367e5427e05f46f6c960380390ffb2c2080c03d3aae4da3b6e55d65fae38291a332b0fb1a680061a3d4076e7b000100dafca70c0176f7d9737d1032822602bc04911a0c71edc3d474fd6ef1e7f82c786a953af545d21f02208410c405ac0caaa4b31e7d452baaa0d6edfd7f327dda40ec59fbc639b7c4981886f0dbbbb76d036169e5039268c8ebbdf9f85ecbb47a23f0593c592ed572fba6f459af1a7e8582069f767cc2132200280002800900020073797a32000000000900020073797a31000000000900020073797a3200000000300002800900020073797a32000000000900020073797a32000000000900020073797a300000000008000180fffffffcd5000100343b3c9f145dc9cbd7367ed7625062fd604a10d2fcde6c74ba19f6c65f57b079ddc6e687198c39b21bbab67fe53b972268ad4893c37f6026ac5fb143d268014058f1a8b95c8bf8024bbf1b230d8e3804cd9e26f4cf62e60ba2e5c434b1b0605803b0f37980007d358f31006e086ff9acd84bf29ab3d6114b0a4dc3cae5bd950af09829e3148d1acfd64e1a7161ecf5927632e5738af053d1cef687220d544bda407641e40ee08dc8de5e43f1a86d320fd840bfa5c0a4856f05ae244d399722c5d32fd5f16532df796ec8792a0dcfcfaf84000000100007800c000100636f756e74657200b4000a8010000100414ae76a5753a8e6489ff1329d000100e99ec018f629d4e0a629d59bda95e73cb4a13a59aff3d482fd1de0628691ca4ad2682c44c5fc338d1d15db58baca788326f3ce3a142101e39cd91f0883d316bee6f47040745130eb7a80c8c05580579e357de2e826e7eeb0f1105715a68c063df8f5f4919474a491e180e2587035ca9b225af8955cd93caa1077e0cafabcd6deee5751e60a1f6c15cb435dbef6063d56472b467600000040170080280202809e000100e6d42dc55b3fd8792e5094cc26d7e782435b05ba0046ef90c517aa2937a0f24d30928378fa6d73a00c46660f8d5a0e241bc4843400fe7e8c7fd7197a7463a209e3f862b3aa2e954165af9ab1a0824ee20062010b4f1efc1c069fd85ab412cb4c315afa2ee8d97ccf649d19e40950662e0e7b9cd041cfee97573226bd604e695045103fd2fb95ebe7e7ee7855d5a37d64131836b03998fb6c539f00003800028008000180fffffffe08000180fffffffc080003400000000408000340000000040900020073797a300000000008000180fffffffe5c0002800900020073797a310000000008000340000000010900020073797a320000000008000340000000030900020073797a30000000000900020073797a320000000008000180ffffffff08000180fffffffb08000180fffffffed4000100d6cb600243d83a4a32475d993510570283938d0006a4ce8248313d85c9dc71ff2584f139a8df540b4e19f0ee6bcdabf0a7481593d44c3382a0b6b74eb9fa75f216c332f1e1f0caeaad61edc573d1e733f4d1710cd5e06a3397fec909fcc0deb838255893415b163f0a4919a42602d541ecec360859e58069bec81da759a2a1a8f16a28a0864fcebd7ae2e3d7abf2ca7ba4ee3c2618d154d45296921b26ca32bfddb2c5788465444ba36cab7bfe918545605c6f3ad7a8764491304350e6aace869a1526ddccc8bb1c350f45950c28a5d51c0002800800034000000003080001800000000508000180fffffffd080003400000000410000780090001006d657461000000000c0005400000000000000004f00001802400028008000180fffffffe0800034000000001080003400000000408000340000000013c0002800900020073797a320000000008000340000000030900020073797a31000000000800034000000002080003400000000308000340000000010400028086000100260cc1411455a7133a3bc3dda1bcf1d3aeb1a28079aaa40b2f781831c83c7f7204ff283e147d015317a163e4b7a084f4209004ea6a850476d1aeea81b52f2522e582ad42c81c5286b7740276b3020b70ed30221ff93eb6152fb749cba5559a010baa2bb61bc74cf6f12f660c9e0f50ad180be2815168d8e812b8da17ea354a7b7d44000054000b801c0001800b0001007470726f787900000c000280080002400000000f1800018011000100666c6f775f6f66666c6f616400000000100001800900010068617368000000000c000180080001006475700094130b80100001800a00010072616e6765000000100001800900010068617368000000001800018008000100647570000c00028008000240000000121800018008000100636d70000c00028008000240000000021800018008000100636d70000c0002800800024000000004140001800d00010073796e70726f787900000000701201800e000100696d6d6564696174650000005c12028008000140000000000800014000000013ec1102803800028008000340000000010900020073797a3100000000080003400000000108000180fffffffd08000180ffffffff0800034000000003740002800900020073797a300000000008000180fffffffd0900020073797a300000000008000340000000010900020073797a30000000000900020073797a32000000000900020073797a32000000000900020073797a31000000000900020073797a30000000000900020073797a3000000000400002800900020073797a300000000008000340000000040800034000000003080003400000000308000180fffffffc08000340000000030800034000000004540002800900020073797a31000000000900020073797a300000000008000340000000020900020073797a30000000000900020073797a32000000000900020073797a31000000000900020073797a31000000001800028008000340000000040900020073797a30000000003400028008000340000000040900020073797a3200000000080003400000000108000180fffffffb0900020073797a3000000000041001009c75802bfb236a1b7c13ba38047de2466c9baa4161b85763e7a3595de00025376c6bc7e0dd9a6fccde87a1323be1c8a013d9a33bc061680a15deafaa0b031deb3e50b2e8071974e182b5bcb2f88da8f947e1a2d38f5f11807963b4808a3d4a744fc8099111e59e0f431b79994345f0b3266ddfe3cf32e8c7d37835ea921a0b288947400d8952910b7603c5e01b0f8f391fedcd91d58c63d3c29399e93a131eb964ec14756b05450b167c0fb3084000d39825f9a16c02d05803071a7432db5e358fc399270dc7b2e9e118797075050a9334afbc781e9c6f7bd1bf4e180d1c15f86b65dec518c5a201850fdf2a1294af9988391c027df7119e1f07bad7ccdbd76c43dfb8ce4fffe0ce773a5166c20dd4eefd7fb0fc61f59c79f2fe2fe21c6035fe022af6004ec58169aecf925c328bfb57df79d4bdd23f8970d316ce0dff984cc268835beb803268988089bae4c03c8c166a153334ef3edee616c699a990548ebf9f1172ac40719185b4b35e33f980e099e9a9ee2fff671024a504692a3ec55f8ba04cfe89020fa272dc7c788fdcc73d948d7b5d2a1b5d3637777ae346a6940508030a6a75c83f1c913dc7a1924ace5f8136c7e5ac3f631d8ee835164593c0709bd8ec1b58cb51a54a1635ab2ed4e2bfaa74b3d484725685e658c91c4f6363bdc67ba22d120395493c752eddaef4bed8a33cbdc8004e4ff03d05c55a6894fc3067118079704ca23caf2876b79cac5ceffb753987ca325218414a8ec72dab0ac5172f2a4fa5108173c48f6f5e93fb1f540e627717a178575a7e85cd39a76bc9770adf2f9a77ef887f1a2ccd22c42b6f763167d4ff0eabded63805756f9b1900ac298beb402e58595a5af9d1ff9d26729bfa5b4952d36498d479280d103e341fb74c05b189ccca6e33eeab4636a50b066673644388beea6b19b7518c278493fab37be53f6364438f3eb9ec342ddcd34f8e4ceaa5ddfad4d9bf95f5f1472ccf9442ae493f59f791de7360a961ce5a8b84749609b8cfeb8bb31879c24c1f3d49e00b49f2b4c05dd70362fbe91da9385ff39cddb34933029f66680ccf0e1818c113773d8f50333405935b07ba147963a894d0c88d0b21e5721cfb40b743ebe9770b927ebe0f609592e43cfa5ac4fe3c32b69efac7eca36e4280fc4483de876cb01117bf73403d30671b59e08e64f84c3b1a620043fc32186e00279f21e7a5eea002dbba101fa34f0d8cad4d7257db31a8eeeeaaa93ce7a124f4d34c5929b31bfe5b719d25514aa199e6018349ba6a43ca2f7697c6d96f5c0b53df07057a54363e58c9cef6c02f09f1520499410b71e8c01f101e90197352a32276558085ddbd31620f2d5e5c521e6b665e7449532440acb02e2c57376f585ea2021865138b0d1fea0f14e30741d2fb2d26f5f63bdbfc05867498c44fdedcba0e3bd976cd6350cc65fca0e71ebefb41bbf8a5d371a162e62094ae0475fc72982321433dd0590c231830a9b4a964ec37186611756271c0cc37b606329394d3eb17ca94c3771462a0f07c1a9df4ffa7038bbc7272618c7c2a88b4547d3c408b7f57595ea5e8cc8c486c827380bd6c7ebaaaaf4f16d983514b8ffe51f498ead5a126cdf8db3a85873c6e051ed5f9e1f82297b962bcb8bdae3a536ad3153df2c2f9f36486518262d50c413956c761505ee48b6e0cd4273f7fa5b48931a3f5cedae7c78b090eb0a78ad86d489c09d048cbacfd7d6f267f230430cc5d6a76b130b7b640df87815991585f64fd33dee10339c79291ae5e9bb89714865e73586bc62b3d14e577811dbf6ef7b8015ad828b4226cf9c8270ea4aa37a05ab1e645c51893d50151ed971b9d71f729cfdded5d6c8e500b83cba50c2be49097af39618495efa04f92295e94a0baa0d781a8baf3f16bd74d13b4b16daf73553dcd3063d0f79e0d6c988c818a794d90a2c543a4b070461fdb5f13721e4c752119340f7ea1a3de9ab5eb679301c3fa5cdd0dbd61542d7dbadd2027bcda77b73dda68cc0b786723781fdc3d4044246dbf5213dd14526d59de52d3f2eb4acf9ef06e417d52f979be5e0b2b90f37a16df82816f9a514644dc679415fe61eae24f78d718f2d8f1726cc07f4ad699d99a2260a16a82bcc053ca9db8c42841eb9d5b87d6fbc30c4d3d0f8da6999629b3d1f6efdd5554338774b87e41ae2783f206808d08d692734b7b5745e24e48adec62db99af88104398e484fa33759a40bc5b4921255627155cb5cb315323e8df30194acfa0ac9241a356901dc74488643991a541147046f799cfac7a1227898215be7cd851ddb54f22cc395a06126cfd22ed606e2550cab9a1230869411f9ce4cb2b708e51c2e9b9e38edaf701c760ca05c1903213e44051f52818958571e49ed03d17a8b9f405c10a1f6baf35914e9fccc04ef573a6901a55deedb138b079dbb7d7180a72e2c23abe7834690e5b416976cc626f81d363323b1ce602348cf038e6711ebd7ef5edebbae995047ae1068f5688d575ca757fc0af834cbd023e16aba4c1a99dc12cc3255dab229bfbb26ebe683377ab780ef84a02625b7f094bbdd72a7deeeed6a4e063bb172754c25274c7d1f092a8f61afec273509bc5d9bbf7f4d214bbad1f59340818967d5dc201828498c82dd12d1304fe08cf93a5033ec6a624a8885e436f486eabbc3ba54239352d2c4c5ed78a38237a67b6a13aabf3aa879b93e58a3d023d2726307414ed0dc4a90fb0bc073d8b236d4ed22f29892a26f56ac06167b3bb9e334361ff66a83a23524e44925475ea58d6b8a92dd847c113d9181a51f1bbb74b418a9cfdc8114b2298282cf8313e826164dd9d12ea5476ef422d7129407c3e34b85fb8d6c3235c49cbaf9eaef9264b006652dd62b5e0b7214ab3c3472789a889d22d09629e91f529607b42b118df3e7fbd9e1c0a2ec68ba5e8d548b5f91a135f3f8fdfc9f09407aca7ba79f6c506c87dd1d528d8a69f99eb4d62f351341279d7bf153ded538a02fde3912e9c91a9e3668146282423f7592a35568eb70a2682478c72c04dd5532ac1b8aca4359035d5e294ea02011ef38ae7218f08e60e5f9a7bbb5fecb0d5b0463466e2e5b50be164189addf161c737d5ecf5c25a805cb4d0cdc6c3def0f66d128f5f86100176d8fab23802efdc118d32bc3810cb1ce4322a397ba2f10334eab4bf35c7798876418570ed6493053ee8ae30eec498ba4af3273b44f2b79514b2b540f404bea43c24bd902ae0784d5b3508fb1908c74668ed2c0c0b86be8d97472f56ee0b02b9bbce19c2dfb11abb9a4f0bd0e137934c23faa1783d35d286198907f51cb538b737cc7e459b5b75e1fe7d85409319d83674bbf3b337bb6b2d5288a52841d537691ca99239864261fbf092a0aea1a43acc5ebe6d08c32d69c31fd665189368cd3a30191ecc4aeece4057201102eb369a930c3515389eac1157c4706852b81222b0dc295e5def0bfab28a90a73a077b9d93d564156c31315a4e24c8ba5984bdef2bae70b8cfd5955783f33433b8b4070e6e44e520685ef53e951e4bc35fe9856fa3a61d55a5a131442baf27943b5ac9ac04c5797fad971dd8a7f34cac573f9f80a0f8d51695891722e01e3fd8aaaab4652657f7c3f0d38be0def696585a4a5d9b1bbc534602c4b4b396d5585a096f085cf37473195b4d7bafe3cce672a3f90e2fc48ba65b0556db48bddb907949238ede7834750136a5543139055ac751ef32c8d25dbfbc5a06151d200e09aaf0dc051d5ff2c533656790a4008de5bc0129e45652ab9c3d2aa6df389789ab7c4eeddb1ec65543795e5c29b8bfd45fcdb8bc652c6099d5b3e70ec784b8f75d5bb6b5ab6356c256001d722cf94d3d8d8d8bcb35182f3cb8ca97b359557d467df2efb01375fa5230b8444195e32dd71ef6ec64593d9fa319c8b45261f75c89a932e4eff16b7e03419810058de219dcf55bfb1e3f7fb7e529911a8a887fa0dfc838a2199a1fdd54c9a2dd586807194e31ce3830bbb5dcfe51aafbf3c267f26c2852916b157a804de78cc1a5b5b8e78189188fd0e991d335fae407c0e081eecc7b16616791c97ab8b3e19ff80d705c6f90d06d4de1321a9cf1052b171ea28d6e0d55e059b77930bf89ccc7e0c4a2b5673d6098fcdebed82e0b881216824b3f5098b69d38bc317a4c4d157b5f7965522190a1980325935593d38915b9d10bb63d5a9f61d2959ba11c8d88eaa379f4d6409d869d8cec1480ff54908760d428e9e0dd3b2f2f060176eeaac08dc51c1d7554ab9585587d4da51471fd033310d53a4de820e123ffec4ad4b952666064b9bbccf1fcebf712a248a8619f881cff406caa842f6376bcd3541bfb96c34ce5d7a4689922bd6009c5ce4e0d987873b0ebfb4e82e982403f29fac11eba08f03158863d2f883c16dbb9219da38d2df2e9e1680f16c473597ced564cb5a87b259988743a79d25500e831c24fce486ab61bee8f9b473a7b22b3078a1160e2d9b7f7fd9823c668a03ef5d33583068b907c935b770ec146cfa159d2334b4767d58dc5651825c23cafac6881bc20a8536b57a83640e29adac427e19ec8cb95092f69eb0a111004ab8f939a67f961d8e78f00c09902e0ea8d62a2a94c064532b9f71705d5b5cf9cde64138658ad122cd4676dfdb4a620d0fa83617744a2e98dcf592cebd0aa9a1ba1dc465060851f87a0602de51cb01928a7b1965b68649fa97f12b4164d7df9380ffb988eeb100de6934a1ca1631d225b88d2d0d50417fe0652da0d56ddc219446f4edb7ddecd148ad30d69e78ee1307014782e8259bc6336b492bbd403bd5d6b11e2b3d834d380decf3303a439673d731becef20c6858bf2aca1d3be343dc06a7f6b36d88f05dcbb5bd59b1fe969c07658d3b6b975211d10c73045347bdc00265117b8322c082d304f27b60fb331933b23a44075e2397001484c79c704a5d1b20828a559fb3bb9d1c0204d0b78791e66e505460ccb27822d9fc754a376014040838a4160827a12cd45d0796344254d853a17214400a5fb27a834e1d34fd537c169fea9f5cdd87672a2882b38a10d05397c7371e2f17c12a87244da22bc5d4d9fc5349eabdb68b92f30dfe6dd002d5b34673e019a04dabace7358663a17b7c9b8e1e1501e7a1888fc0a85eae3912bab3a26924ec7c8b38667f1347222a35bd32c5b0b8ad0cb021d02bed091fc41ae418dce879e862d50ce17a11c18da49a10060307bf6b5ee1492236a2051beb983bfaaedbfaa5fd2512497c34c07f4a5279948b36faf6fda12c4aa3eba1a279c8bf2c599aa93a58879bdd5ab74c03e83eeaa6690238c71373208b86cff676757a0ed0b2d2adbade30d9b9baa78184aa39b3f870623fa19424e2d0dbd1b5baf1a84c2871024e31493cec279a3d396df7b69e78934e67fa301204e4e93ffdc17133170128690e047bd996d7fa10c733549b211b1c90f0dd8db5254fa37730573249c48db0268ddeab2219b732648e5bc92cfca3a997bc4594817068e36e1561be13787c33b435995c163a658563671bb8e2b464c166de2ae4de73b27c71e198fd3bc837bddf267f2356aab9d1473e7df793ae6508867168a963b366261bebd7bf76bfd89320151fbcded1be4fd78762f81d3c72ff8c83d892de7dbf7a52d3495d5d598adc0e1f1092b3d48783df98f1ee5faf603a74c83c87909578d08ae19f9a5c061c652804452f7c325b5593fbd9ca4180a6d7663036bb2c0c8f771469702b46412985bbddc6f3a5f5ff43e0350d78c1baa149ec8560f1cc1fe11a159e24a110ea40b2d745c62dc7122969a0c580002800900020073797a3000000000080003400000000408000340000000010900020073797a30000000000900020073797a3100000000080003400000000308000180fffffffc0800034000000003080003400000000154000280500002800900020073797a310000000008000340000000040900020073797a31000000000900020073797a30000000000900020073797a32000000000900020073797a31000000000800034000000001080001400000000b4c0001800b000100736f636b657400003c00028008000140000000030800024000000010080002400000000a080002400000000808000300000000dd080002400000000a080002400000000924000180090001007866726d00000000140002800500030001000000080002400000000634000180090001006d617371000000002400028008000340000000130800014000000001080001400000000008000240000000080c000780080001006f7366000c000540800000000000000090020080c4010180a60001002cf5c0dbb7785554b7b8c5d9452ed3cd612b277f5ac7217016667235fb5fb18d664f64f662c02461b7e3b7d60f09c954e44a316bdf3f8b10e3d90cba845f21c418e12fbaad3f5cdba3ea33a179235ba4f5deed77db16eb46a623947324dfe6203de827b6e6547a30ae6f0bb378102ca1d069ec4ea982b7679c81ce982f539393440220836fe4084cdb804ae793bac06aaaf1bc97cefcb9780d1013c2fb6da7f913570000100002800900020073797a3000000000eb000100e8e067a0589e5c3d269982c7b6730ddd57ba9a83cf539e19368b186776a6828b8db114845b3ebbee1f9a874addf72163be8722aa4160f4c84caa4b8bb64558751e2d39e0eb9624903537d498fd47343b3208e42ddf7580edadbcd966ac6a7eae6c2a0957676d406620ded0fb3defa66189a7741b5437ec8bcb500061a37bedcb1452d6a660d08b98c30bdb61c48919e38e7019a25740b6d4f306ab464459eb861806048ec1cbee6c7e986439acab78203e7d2547b82c1c9343f1bdd45b846398d7c192634fca18ba447a01079a2ebc35b9f6f9644ab03bcf42f2779ad7b35f585809a9d9cd645400180002800900020073797a32000000000800034000000001040001000900090073797a3200000000ba0006402f09da10c1e101f7e3462bc411eba675683e4a6f2fcdcbbd7ef9834589397b3e62e53e58fc967be43bcb608e5509aea362c924d1046c4d57472def0abd2425e24fb6d6be4283fb5c4caa6d0352e3dbc9205c977a2f539401989ece7c7d853867cb7f40b010a128c85510feeaad664ece8ef5e584399067ebc3b83ef0aafbd81bf353e58a80dff71e612d94c633234aff312043c74186088e341e862ce9704fab61cf7e5ae27883b445c3c738070dd7a0a0984546b8ce0000fc0100800900090073797a3000000000e0010b8010000180090001006d61737100000000bc0101800a00010072616e6765000000ac01028008000140000000129400048009000100b5714f88d7000000330001005d5f80214f41ba2de471def49dd5f641ddd588894bf1c5fc1af6af804bafa0cde161d98b91775e62cf90129abe585500100002800900020073797a32000000004000028008000180fffffffb0900020073797a32000000000900020073797a30000000000900020073797a3100000000080003400000000308000340000000020c01048071000100cb8db1064422ff11c619e0039ceecc8f4763dc5adce1ceca0d55b0a026e52d58b4960e43f4360270f7482c34d020a4702d5635c5910e675e7d07154d233dc174b54a0e853297671fbcd66a27e5c723dea49216bf0427ae6e604714b4997ea45a5ddfcaa0f3e94e8de91a65e1e20000001c0002800900020073797a30000000000900020073797a300000000053000100340d96f24a75ad9517950ad1a3ddce213c6027dc73186dda85c8d97c5d4e70d62eb35021388f199f67ebd816097f4094f8b71a796bd587d75a3dd542b32da4c107ad7172b7ad47d0a1b1f0b71040fb00240001001bcf433a2df502210860a45debf2603d8703d83f9927471ebfb4a4cfd785e442100001800c000100636f756e746572000c000540fffffffffffff422080004400000000208000440000000010900010073797a31000000000900020073797a3100000000b00e03803c0200802c020180c70001000d53198a03b8cfceea3c161b3887f0ec33b491016c6b767cfd562c99ed29e5901d151dba4aefc26a803cfff061c27f6f019e6f33e86b9f759327a2817c14cdba379cd561f60741f5d77c1371788354572392e8746835b313b8051fcc81a80eed17af269d1411f6001e53211eb1dfc3d9119418c31499f25975200ddfb303cdfcb76b13a00b610647c04d1aa6666106981823e8ab62adc47d7a50658a6eaf2f06793f99fbc1e9a21b5c8b618b8aec4339b664241b8625b2232b14a12e3f77722e26b703001400028008000180ffffffff0800034000000003fd00010058034ccaf1184733df06e734911f0f673669980667b82469a776044d4815153ef78b4be7af78361db438b8065e4be49c50be595dac03c995e8ca40b30a0417374f100f6de23a3683d2adf6527e1b829a262c5912f14d60b9b2ac70cf100632adc6376401424fc91c7da974c5bf3e888205452108f85e26fecb42a4f9399b61f9ea3951ed9c17a4135acdbab94a25026ccce2501987629fdf1a833403a6027e34b57e4960188afcf8b82f5c9aa3df064a4bec79a99255d7b3dcd8e325770a3ed4b954841087d5c53258ff193e06ccfe9fdca8f2e91cfa78bbbac47739a1946c84cdae1b3f94f2fb3afa85517771f3a417ef2e647453a38744b30000000c00028008000340000000043e0001009eb6ef3f2b2f9f4a0c1ea00f7cb0dfc40c06401eeba9825f7f443d1d5da7abb9a71a1fcef6cc4d608e8262c73bf8d6cf6060b5e9db4a413e404000000c0005400000000000000001d40400800900090073797a320000000020040a80040002806000028008000180000000000900020073797a30000000000900020073797a300000000008000180fffffffc08000180fffffffd080003400000000208000180000000010900020073797a320000000008000340000000020800034000000002b200010030f04a5ba8cc616166a1c9ec453ae97e3878cb9ae715b9164f024607fb13fa970fdce32819656d7e18e6722fd9864b705b0764047b3ef05b8203ce6fd559ea4892cd1518e6dd8d71a20356c8dcae4459c980da413180308c7a37b1b028ce4afcd56da92afbc0e995283021c7439dcdae7321737d94d0d6d270aafb0ba8f4af1a6223a248e1bea607cdd9b45bac842157e4cd900c4bc06f0ee697dd6cd79aa78a6a4180c1baf518d68b14b2ad124f00003c00028008000180fffffffe0900020073797a30000000000900020073797a3200000000080003400000000308000180fffffffc0800034000000001ce000100dd4bdbfc8ee869027fcc8dea849df8d338b63826f48295d47d399420711736f3a082082a46ced7d216f0d4ea83f60ac54c9bb88f6503e94e444bf23116bfe98186f89f1ccd6a9af2151b44df892b979a23fc62478bbad57f04a0b7a108e481893b47fcac60c5ad0cc72075f28d2224b247c62613de9ea1e09d59e2bee10d30200c356d20ceaaa18a05c04ca74abf6844b7444370b5ba3ed8c734c599e57039e7c501d51f4eae2f39638914a7793e3a3dc2b232079e228bfd3ca7b74fe2365dfb0dc4d5d7089b77e5b3a90000bd00010024dccc329d5795ae361fd4897d88a8f2121a9a9f68ec420ed8b8e3765e9013f08db2081958c769c99e55dfba7bdc987aacea207c3d90a4f3f1b17ffbbf9463874689913527dc1a896a5164740eb1a6e858c226b59d2003ddca9a73875c0119ccc9bf522deb0efbe80cf94db26aad7ea073c8d676e878978ab9cbb199144676090371953a251736b90f2f8edba5af9d176d47ae951343ba649f5e529150797ebe705d956c5d34105b3db86ad09a5a848619e98f135919871f18000000cb00010046700e7b741be1a53899e1a475c0af2de65d9eb673493c05af33cf99ca1524609569c8cf44f5a79977cc309f2c8d57ccace0c608fae44c67e4c7bc82f8816367ea7544758500d6e674ba2052354cbd5b2fe155fe94763b2543215893511e4d5e7a63bd15a5485c9b5d70fc5b2c571d371abd666764c6dde9c1ad6be5ec053b4ca66144c78c53d7382f5e333240b6b5ad3a135b3b3f477692f51fd5714571471da663293346aa4a6a395e78be0bc47d2d6b1ff93bce55766c10c4868fb594020e554630b2f36f78002000028008000180ffffffff08000180fffffffc0900020073797a300000000020000280080003400000000408000340000000010900020073797a32000000002c0002800900020073797a30000000000900020073797a300000000008000340000000030800034000000001a200064075300aa2b4619841232c4fb20a137306dae699862d053eaa7b6306b183731fe3654330a161ec3507c89df4b402137425c6b34eb513ec78e7f278c25735247c38dc63547796fee784a3d46a925bf9cdf06e068751db266864bbc7226337596a361bd028cbbdebd968832fb2506ed217e08ed997dd25c914f45fefce193a30c1fec99c33ed5843f142ef1d9cd86dbb1e28139495bf3f0a66a4410b922c7dba0000440100800900090073797a31000000000800034000000001f10006401028c41f86db98f55b0bc31a86e1d211bbdbc5c25237dd93a773ea361e132199c40d9b46459399f848606eaecd21961ca55c81b3997bbed44a505f156fe3eae2b967dd3e6fb7989155f985e8835b68a37cc11c2c551efa72d2d3651bfdf11a0212be86d43924fc031933ff20a6451b6327225acef8f3819a578025d6dafaced97c884d229b60b12b990ff0546547bc11b1079c23ed9eed4b7dd20aeeee622f86b1312c363f3bbfd5ea5252ef36a2e3eb5d3c2a8a4dac9ddfbc1ba70e3f770c2c9ed0ed0e80502815740514bc204722a7467d3c2c949dedd6a411f8ce4bc93f4c6e463ad3f32a21868dd9717e810000002c000a802800028008000180fffffffd08000180fffffffc08000180fffffffe0900020073797a32000000000c00054000000000000000027c0100800900090073797a31000000000c00044000000000000000071c010b80300001800e000100627974656f726465720000001c000280080003400000000108000540000000f90800034000000000680001800a0001006c696d6974000000580002800c00014000000000000000060c0001400000000000000002080003400000000008000440000000010800044000000001080005400000000008000440000000000c000140000000000000000d0800034000000006100001800b00010074617267657400004800018008000100647570003c000280080002400000000308000240000000080800024000000003080002400000000208000240000000110800024000000008080002400000000c2800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000003c0007800b0001007470726f787900002c0002800800014000000001080002400000000008000140000000010800024000000002080002400000000d0800034000000003dc0400800900090073797a3200000000500102809f000100c0292a3ff53843277f64e3c7c98c20a83a3f533fd666de4388832df6bf1f184b4dda0b4efd424ca5dc7b1192f7e55c514f0a107790f1afb108c759b0efcf8cf369ba3dd736e1a372b06a89b71139d51d5b46b55acdbca47ec50fd77581a932e6a27f07e78348c39803c84dfb5c17b52051d41f0efdb918207065aadf1bbd2cc2103e5c539c44e778f1fdb9ff144e0f18d08c9605e2de0361ef87d4000c00028008000180fffffffc4c00028008000180fffffffc0900020073797a320000000008000180fffffffe0800034000000003080001800000000008000340000000040900020073797a30000000000800018029afcba5440002800900020073797a30000000000900020073797a31000000000900020073797a300000000008000340000000040900020073797a30000000000800034000000004100002800900020073797a31000000003400018008000100bcdcbc181c0002800900020073797a30000000000900020073797a32000000000c00028008000340000000030900090073797a320000000030020a804700010024908f167375da337b4d1da52cea1eb94154c7dc5855183dae279f726b8cd52b6677d6a3935d3fb908ec8d16a1d8db100438ff96506c00f88559cb12275289ba5ef7d500f10001003a65bad840bff388257f7b8812640def7d904ec0ef2e032e24f3a793107b0c177c401dca978569f00b72c696b36f697e590b0b5f5e3c486c1a2867090dcbcb81f893817dbc013b88d42c416a4de637435fcce2dfedbb0400e8285a11b70fad45af9d5f0fe2deb3169a203621310824e2cd61a837f183fa09ef3891f2d114a4679b99266ec7afc4f362e5ea1460bcb96d9a011017c9fd68d3bbed7bebacc2158a811ec266223e6c5b0cc206e473ecbed21901b54032c32867cc4c9e7bf108b21d1bb9cc9292146a87ac14bd0c3294f27ec92829f4292d6a5f1ed0d96e503a758ffe32afe9fb7e84dd6e3e2f5483000000400002800900020073797a3000000000080001800000000008000180fffffffb0800018000000000080003400000000108000180fffffffc0800018000000000280002800900020073797a3100000000080003400000000108000180fffffffe08000180fffffffd0c00028008000340000000033800028008000180fffffffe0800034000000001080003400000000108000180000000030900020073797a320000000008000340000000014400028008000180fffffffe08000340000000040900020073797a300000000008000180ffffffff08000340000000020900020073797a310000000008000340000000010900090073797a31000000000c0004400000000000000004f2000640a43773e456d21807663e68ca04dfd586508e345c2ff83832bec93a7a228c9a48936035e658c015cbd7536746228f22d841ceb2bd3c32e90fbdfa431efbc668d6945d3e5c744b77e0a5e1785997c6a387d84d610df499fc9b377f99892029d439442a66a6f112a6c450c6ff108876003bbf646af2e37a2a225a521ffb29485675b61ca97992705a34276555e3653c1a98ee7bddfc920d9e7e146087d14075e055cd8f547c390d1a52b00143806f6a675fd1413c16eac9e79871705c25f39baa8d0fca60d27b0fdaa00068a006775fd571d935894336c5781b42ec03d733e63e32da0878870bbb4f345bda5b84335a00000900010073797a31000000000000000000"], 0x2e78}, 0x1, 0x0, 0x0, 0x81}, 0x4800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 214.006222ms ago: executing program 3 (id=2606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000200)=[@cr4={0x1, 0x2000}], 0x1) 89.580427ms ago: executing program 2 (id=2607): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 52.505072ms ago: executing program 1 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=@polexpire={0xd8, 0x1b, 0x1, 0x70bd29, 0x25dfdbff, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@empty, 0x4e20, 0xfff8, 0x4e24, 0x4, 0x2}, {0x1515, 0x0, 0x0, 0x1fc, 0xe0f9, 0xfffffffffd541c15, 0x3ff, 0x401}, {0x8, 0xffff, 0xb, 0x6}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7}, [@mark={0xc, 0x15, {0x35075d, 0x7fffffff}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r2, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 0s ago: executing program 3 (id=2609): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000084f2b1e670956a10f710513859f869461aabe65c60c0788b9aca678a35c19f3980656847745f5cb", @ANYRES16=r1, @ANYBLOB="00082dbd7000ffdbdf257b0000000c0099004e060000260000001400fe003f4fafc0145e34aa73938b3fb1f478e40a00060008021100000100001400fe005d8502bc368f0ee52bcc2a3bcde1ca9c1400fe00b96084352cacdd6dac424163a99e531c0a000600ffffffffffff0000"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40081) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x2c, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) ioctl$TUNSETIFF(r5, 0x5452, &(0x7f0000000040)={'rose0\x00', 0x10}) close(0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r11 = eventfd2(0x7, 0x80001) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000003c0)={0x85, 0x0, 0x0, r11, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): onfig 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 674.162823][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 674.176732][ T7836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.187974][ T7836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.197632][ T7836] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.209877][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 674.269957][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 674.329188][ T7836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.334949][ T9] usb 4-1: config 0 has no interfaces? [ 674.344797][ T7836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.349286][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 674.365297][ T7836] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.365334][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 674.365364][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 674.365393][ T7836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.367041][ T7836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.402029][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 674.419100][ T7836] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.435404][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.440547][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 674.466666][ T9] usb 4-1: config 0 descriptor?? [ 674.484769][T13664] usb 3-1: USB disconnect, device number 8 [ 674.491131][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 674.507537][ T7836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.519849][T13664] usblp0: removed [ 674.524860][ T7836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.539327][ T7836] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.552869][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 674.567175][ T7836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 674.579316][ T7836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.593093][ T7836] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 674.602672][ T7836] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 674.611072][ T7836] usb 2-1: Product: syz [ 674.626296][ T7836] usb 2-1: Manufacturer: syz [ 674.630975][ T7836] usb 2-1: SerialNumber: syz [ 674.640305][ T7836] usb 2-1: config 0 descriptor?? [ 674.647873][T13659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 674.663365][ T7836] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 674.686792][T13675] FAULT_INJECTION: forcing a failure. [ 674.686792][T13675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.700118][T13675] CPU: 1 UID: 0 PID: 13675 Comm: syz.3.2336 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 674.700147][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 674.700162][T13675] Call Trace: [ 674.700172][T13675] [ 674.700180][T13675] dump_stack_lvl+0x241/0x360 [ 674.700219][T13675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.700251][T13675] ? __pfx__printk+0x10/0x10 [ 674.700295][T13675] should_fail_ex+0x424/0x570 [ 674.700325][T13675] _copy_from_user+0x2d/0xb0 [ 674.700358][T13675] vmci_host_unlocked_ioctl+0x359/0x35c0 [ 674.700411][T13675] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 674.700461][T13675] ? kasan_quarantine_put+0xdc/0x230 [ 674.700483][T13675] ? lockdep_hardirqs_on+0x9d/0x150 [ 674.700518][T13675] ? tomoyo_path_number_perm+0x215/0x790 [ 674.700550][T13675] ? tomoyo_path_number_perm+0x684/0x790 [ 674.700580][T13675] ? tomoyo_path_number_perm+0x215/0x790 [ 674.700610][T13675] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 674.700644][T13675] ? ksys_write+0x24e/0x2d0 [ 674.700676][T13675] ? __lock_acquire+0xad5/0xd80 [ 674.700724][T13675] ? __fget_files+0x2a/0x420 [ 674.700744][T13675] ? __fget_files+0x2a/0x420 [ 674.700766][T13675] ? __fget_files+0x2a/0x420 [ 674.700789][T13675] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 674.700824][T13675] __se_sys_ioctl+0xf1/0x160 [ 674.700851][T13675] do_syscall_64+0xf3/0x230 [ 674.700879][T13675] ? clear_bhb_loop+0x45/0xa0 [ 674.700902][T13675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.700922][T13675] RIP: 0033:0x7f0ed158d169 [ 674.700941][T13675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.700959][T13675] RSP: 002b:00007f0ed235c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.700981][T13675] RAX: ffffffffffffffda RBX: 00007f0ed17a5fa0 RCX: 00007f0ed158d169 [ 674.700996][T13675] RDX: 0000200000000000 RSI: 00000000000007ab RDI: 0000000000000004 [ 674.701010][T13675] RBP: 00007f0ed235c090 R08: 0000000000000000 R09: 0000000000000000 [ 674.701024][T13675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.701036][T13675] R13: 0000000000000000 R14: 00007f0ed17a5fa0 R15: 00007f0ed18cfa28 [ 674.701068][T13675] [ 674.938248][ T7836] usb 4-1: USB disconnect, device number 14 [ 674.959453][ T9] usb 2-1: USB disconnect, device number 14 [ 674.972648][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 675.568454][ T5891] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 675.657045][ T5891] usb 1-1: USB disconnect, device number 122 [ 675.672265][ T7836] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 675.719851][T13696] program syz.3.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 675.853384][ T7836] usb 5-1: Using ep0 maxpacket: 8 [ 675.866056][ T7836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 675.888675][ T7836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 675.928651][ T7836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.943416][ T7836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.132391][ T7836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 676.252172][ T7836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.281914][T13664] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 676.319307][T13687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.492080][T13664] usb 1-1: Using ep0 maxpacket: 16 [ 676.522666][T13664] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 676.544500][ T7836] usb 5-1: GET_CAPABILITIES returned 0 [ 676.570340][ T7836] usbtmc 5-1:16.0: can't read capabilities [ 676.577623][T13664] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 676.680347][T13664] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 676.731096][ T5891] usb 5-1: USB disconnect, device number 18 [ 676.740313][T13664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 676.784595][T13664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 676.816220][T13664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.834287][T13664] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 676.877761][T13664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.921456][T13664] usb 1-1: Product: syz [ 676.956215][T13664] usb 1-1: Manufacturer: syz [ 676.991955][T13664] usb 1-1: SerialNumber: syz [ 677.010804][T13664] usb 1-1: config 0 descriptor?? [ 677.053643][T13664] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 677.123052][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 677.219806][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 677.293022][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.352156][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.367389][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 677.872258][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 677.942697][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 677.972170][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 677.996303][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 678.012136][ T5891] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 678.021645][T13664] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 678.061495][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 678.110070][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 678.141908][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 678.168679][T13664] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 678.197288][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 678.221437][T13664] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 678.278838][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.325460][ T5891] usb 5-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 678.338235][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.374776][ T5891] usb 5-1: config 0 descriptor?? [ 678.483058][T13500] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 678.662027][T13500] usb 4-1: Using ep0 maxpacket: 16 [ 678.680832][T13500] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 678.700845][T13500] usb 4-1: config 8 has no interface number 0 [ 678.738545][T13500] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 678.778347][T13500] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 678.912431][T13500] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 678.924243][T13500] usb 4-1: config 8 interface 39 has no altsetting 0 [ 678.946495][T13500] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 678.956360][ T5891] sony 0003:1430:474C.0020: unknown main item tag 0x0 [ 678.966790][T13500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.975298][ T5891] sony 0003:1430:474C.0020: unknown main item tag 0x0 [ 678.982537][T13500] usb 4-1: Product: syz [ 678.990299][T13500] usb 4-1: Manufacturer: syz [ 678.996865][ T5891] sony 0003:1430:474C.0020: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.4-1/input0 [ 679.012406][T13500] usb 4-1: SerialNumber: syz [ 679.020748][ T5891] sony 0003:1430:474C.0020: failed to claim input [ 679.138871][ T5891] usb 5-1: USB disconnect, device number 19 [ 679.217702][ T9] usb 1-1: USB disconnect, device number 123 [ 679.238931][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 679.293084][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 679.378816][ T9] keyspan 1-1:0.0: device disconnected [ 679.484525][T13500] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 679.523501][T13500] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 679.594862][T13500] usb 4-1: USB disconnect, device number 15 [ 679.782012][T13664] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 679.832917][T13741] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 680.041940][T13664] usb 2-1: Using ep0 maxpacket: 16 [ 680.050505][T13664] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 680.060884][T13664] usb 2-1: config 8 has no interface number 0 [ 680.071086][T13664] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 680.081929][T13500] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 680.112685][T13664] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 680.141199][T13664] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 680.182061][T13664] usb 2-1: config 8 interface 39 has no altsetting 0 [ 680.201241][T13664] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 680.222237][ T7836] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 680.237528][T13664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.251927][T13664] usb 2-1: Product: syz [ 680.256242][T13664] usb 2-1: Manufacturer: syz [ 680.263330][T13664] usb 2-1: SerialNumber: syz [ 680.275545][T13500] usb 5-1: Using ep0 maxpacket: 16 [ 680.289545][T13500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.299303][T13750] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 680.299331][T13750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 680.299587][T13750] bridge0: port 3(dummy0) entered blocking state [ 680.312143][T13500] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 680.319695][T13750] bridge0: port 3(dummy0) entered disabled state [ 680.340615][T13750] dummy0: entered allmulticast mode [ 680.348798][T13750] dummy0: entered promiscuous mode [ 680.355398][T13750] bridge0: port 3(dummy0) entered blocking state [ 680.358137][T13500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.361912][T13750] bridge0: port 3(dummy0) entered listening state [ 680.383981][T13500] usb 5-1: config 0 descriptor?? [ 680.414058][ T7836] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 680.430219][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.449878][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.499381][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 680.531275][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.542813][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.551401][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.568371][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.592539][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 680.604317][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.616464][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.625044][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.634245][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.650015][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 680.663257][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.682303][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.691353][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 680.719434][T13761] program syz.3.2359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 680.757181][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.801113][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.841595][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 680.853256][T13664] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 680.866212][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.898824][T13664] ipheth 2-1:8.39: probe with driver ipheth failed with error -71 [ 680.918989][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.966092][T13664] usb 2-1: USB disconnect, device number 15 [ 680.980902][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.027670][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 681.069657][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.154318][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 681.188651][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 681.200794][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.214958][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 681.225082][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.238077][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 681.250538][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 681.273090][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.281628][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 681.291449][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.304320][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 681.316217][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 681.322218][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 681.328340][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.349778][ T7836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 681.375234][T13753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.390244][ T7836] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 681.411450][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 681.427133][ T7836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 681.439366][ T7836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.460771][ T7836] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 681.474422][ T7836] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 681.485455][ T7836] usb 3-1: Product: syz [ 681.489662][ T7836] usb 3-1: Manufacturer: syz [ 681.500255][ T7836] usb 3-1: SerialNumber: syz [ 681.535610][ T7836] usb 3-1: config 0 descriptor?? [ 681.563157][T13744] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 681.581516][T13500] usbhid 5-1:0.0: can't add hid device: -71 [ 681.587905][ T7836] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 681.653122][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 681.677300][T13500] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 681.707003][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 681.837273][ T975] usb 3-1: USB disconnect, device number 9 [ 681.962095][ T975] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 682.017208][T13500] usb 5-1: USB disconnect, device number 20 [ 682.028368][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 682.032339][ T7836] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 682.132440][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 682.197165][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 682.213871][ T7836] usb 2-1: device descriptor read/64, error -71 [ 682.231727][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 682.272311][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 682.280477][ T9] usb 1-1: Product: syz [ 682.295293][ T9] usb 1-1: Manufacturer: syz [ 682.317672][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 682.323300][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 682.336549][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 682.344695][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 682.491918][ T7836] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 682.652190][ T7836] usb 2-1: device descriptor read/64, error -71 [ 682.776372][ T7836] usb usb2-port1: attempt power cycle [ 683.071905][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 683.251966][ T7836] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 683.333168][ T7836] usb 2-1: device descriptor read/8, error -71 [ 683.407790][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 683.407804][ T30] audit: type=1326 audit(1744611740.697:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.3.2368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ed158d169 code=0x0 [ 683.516787][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 683.527104][ T9] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 683.542158][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 683.551589][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.652827][ T7836] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 683.739272][ T5831] usb 1-1: USB disconnect, device number 124 [ 683.791944][ T975] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 684.422676][ T7836] usb 2-1: device descriptor read/8, error -71 [ 684.535256][ T7836] usb usb2-port1: unable to enumerate USB device [ 684.551929][ T975] usb 4-1: device descriptor read/64, error -71 [ 685.052747][ T975] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 685.232685][ T975] usb 4-1: device descriptor read/64, error -71 [ 685.352325][ T975] usb usb4-port1: attempt power cycle [ 685.392926][ T7836] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 685.501903][T13665] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 685.563978][ T7836] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 685.622912][ T7836] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 685.659901][ T7836] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 685.670919][T13660] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 685.695210][ T7836] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 685.722351][ T975] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 685.749044][ T7836] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 685.775588][ T975] usb 4-1: device descriptor read/8, error -71 [ 685.786164][ T7836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.816207][T13665] usb 1-1: config 0 has no interfaces? [ 685.832600][T13660] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 685.849919][T13665] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 685.916675][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 685.975671][T13665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.992015][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.036874][T13665] usb 1-1: Product: syz [ 686.063026][T13665] usb 1-1: Manufacturer: syz [ 686.100488][T13665] usb 1-1: SerialNumber: syz [ 686.108489][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 686.122004][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 686.134028][T13665] usb 1-1: config 0 descriptor?? [ 686.141455][ T7836] ath6kl: Failed to submit usb control message: -71 [ 686.149673][ T975] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 686.158738][ T7836] ath6kl: unable to send the bmi data to the device: -71 [ 686.166874][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 686.179466][ T7836] ath6kl: Unable to send get target info: -71 [ 686.189053][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.198169][ T7836] ath6kl: Failed to init ath6kl core: -71 [ 686.204873][ T975] usb 4-1: device descriptor read/8, error -71 [ 686.211183][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.224375][ T7836] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 686.233905][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 686.256023][ T7836] usb 2-1: USB disconnect, device number 20 [ 686.283838][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 686.303888][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 686.312544][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.331085][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.343947][ T975] usb usb4-port1: unable to enumerate USB device [ 686.379279][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 686.434786][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 686.454641][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 686.475148][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.524913][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.552036][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 686.581966][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 686.614277][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 686.641579][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.681242][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 686.705017][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 686.754507][T13813] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2373'. [ 686.774417][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 686.877095][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 686.903747][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.926505][ T975] usb 3-1: USB disconnect, device number 10 [ 686.963028][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.014114][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 687.058209][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 687.096927][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.109283][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.119170][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.155846][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 687.169879][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 687.195926][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.213244][T13660] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.240187][T13660] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.284153][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 687.319212][T13660] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 687.358329][T13660] usb 5-1: config 0 interface 0 has no altsetting 0 [ 687.378931][T13660] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 687.394664][T13660] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 687.424319][T13660] usb 5-1: Product: syz [ 687.430393][T13660] usb 5-1: Manufacturer: syz [ 687.440284][T13660] usb 5-1: SerialNumber: syz [ 687.447481][T13660] usb 5-1: config 0 descriptor?? [ 687.457077][T13808] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 687.470110][T13660] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 687.589945][T13831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.686926][ T7836] usb 5-1: USB disconnect, device number 21 [ 687.706650][ T7836] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 687.722250][T13500] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 687.732421][ T975] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 687.892027][T13500] usb 3-1: Using ep0 maxpacket: 8 [ 687.899480][ T975] usb 2-1: config index 0 descriptor too short (expected 51981, got 77) [ 687.909325][ T975] usb 2-1: config 81 has too many interfaces: 211, using maximum allowed: 32 [ 687.923423][T13500] usb 3-1: config index 0 descriptor too short (expected 25965, got 27) [ 687.934189][T13500] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.945743][T13500] usb 3-1: config 0 has no interfaces? [ 687.945904][ T975] usb 2-1: config 81 has an invalid descriptor of length 216, skipping remainder of the config [ 687.956393][T13500] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 687.975292][T13500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.988193][T13500] usb 3-1: Product: syz [ 687.988231][ T975] usb 2-1: config 81 has 0 interfaces, different from the descriptor's value: 211 [ 688.005857][T13500] usb 3-1: Manufacturer: syz [ 688.009076][ T975] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 688.010565][T13500] usb 3-1: SerialNumber: syz [ 688.027154][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.036237][ T975] usb 2-1: Product: syz [ 688.039660][T13500] usb 3-1: config 0 descriptor?? [ 688.040507][ T975] usb 2-1: Manufacturer: syz [ 688.050801][ T975] usb 2-1: SerialNumber: syz [ 688.297842][T13828] loop2: detected capacity change from 0 to 7 [ 688.306724][T13828] Dev loop2: unable to read RDB block 7 [ 688.313464][T13828] loop2: unable to read partition table [ 688.319649][T13828] loop2: partition table beyond EOD, truncated [ 688.342373][T13828] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 688.377152][T13500] usb 3-1: USB disconnect, device number 11 [ 689.088079][ T30] audit: type=1326 audit(1744611746.377:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ed158d169 code=0x0 [ 689.295484][ T7836] usb 1-1: USB disconnect, device number 125 [ 689.412201][T13660] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 689.482389][ T5831] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 689.613204][T13660] usb 3-1: device descriptor read/64, error -71 [ 689.674418][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.690628][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.701421][ T5831] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 689.714368][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 689.725662][ T5831] usb 4-1: SerialNumber: syz [ 689.872302][T13660] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 690.012099][T13660] usb 3-1: device descriptor read/64, error -71 [ 690.155911][T13660] usb usb3-port1: attempt power cycle [ 690.542015][T13660] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 690.593185][T13660] usb 3-1: device descriptor read/8, error -71 [ 690.752488][ T975] usb 2-1: USB disconnect, device number 21 [ 690.841968][T13660] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 690.893348][T13660] usb 3-1: device descriptor read/8, error -71 [ 691.004119][T13660] usb usb3-port1: unable to enumerate USB device [ 691.038539][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 691.053696][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.060091][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.392287][T13660] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 691.401543][T13878] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2391'. [ 691.562704][T13660] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 691.598899][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 691.611283][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.641076][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 691.660386][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 691.672597][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 691.686561][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 691.696401][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.712813][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 691.724457][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 691.739073][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 691.748031][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 691.758880][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.771710][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 691.784070][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 691.796211][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 691.810199][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 691.820496][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.844343][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 691.856481][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 691.885239][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 691.902505][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 691.911561][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.929032][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 691.976399][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 692.026424][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.036712][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.049496][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.066867][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 692.158570][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 692.171358][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.180320][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.190047][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.210302][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 692.222212][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 692.234617][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.243666][T13660] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.270572][T13660] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.308726][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 692.325259][T13660] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 692.332413][ T5831] usb 4-1: 0:2 : does not exist [ 692.337120][T13660] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.353600][T13660] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 692.362996][T13660] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 692.371432][T13660] usb 2-1: Product: syz [ 692.376044][T13660] usb 2-1: Manufacturer: syz [ 692.428019][T13660] usb 2-1: SerialNumber: syz [ 692.448894][T13660] usb 2-1: config 0 descriptor?? [ 692.463550][T13877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 692.534180][T13660] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 692.634295][ T5831] usb 4-1: USB disconnect, device number 20 [ 692.838004][ T975] usb 2-1: USB disconnect, device number 22 [ 692.892740][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.926529][ T975] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 693.162250][T13660] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 693.827064][T13909] netlink: 'syz.3.2401': attribute type 3 has an invalid length. [ 693.911013][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2401'. [ 693.921499][T13908] netlink: 'syz.1.2403': attribute type 6 has an invalid length. [ 693.943391][T13660] usb 1-1: config 0 has no interfaces? [ 694.003122][T13660] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 694.238476][T13660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.314025][T13922] netlink: 'syz.2.2409': attribute type 3 has an invalid length. [ 694.338919][T13922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 694.362532][T13660] usb 1-1: Product: syz [ 694.366763][T13660] usb 1-1: Manufacturer: syz [ 694.479491][T13660] usb 1-1: SerialNumber: syz [ 694.485463][ T7836] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 694.549527][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 694.593182][ T975] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 694.645519][T13660] usb 1-1: config 0 descriptor?? [ 694.762418][ T975] usb 2-1: device descriptor read/64, error -71 [ 694.928048][ T7836] usb 5-1: config 0 has no interfaces? [ 694.939843][ T7836] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 694.955002][ T7836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.967149][ T7836] usb 5-1: Product: syz [ 694.971534][ T7836] usb 5-1: Manufacturer: syz [ 694.981374][ T7836] usb 5-1: SerialNumber: syz [ 694.989755][ T7836] usb 5-1: config 0 descriptor?? [ 695.022302][ T975] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 695.074491][T13660] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 695.095979][T13665] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 695.162093][ T975] usb 2-1: device descriptor read/64, error -71 [ 695.226140][T13913] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 695.236321][T13660] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 695.248273][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.257433][T13665] usb 4-1: Using ep0 maxpacket: 16 [ 695.266327][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.279726][ T975] usb usb2-port1: attempt power cycle [ 695.285340][T13665] usb 4-1: config 3 has an invalid interface number: 156 but max is 0 [ 695.296664][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.310191][T13665] usb 4-1: config 3 has no interface number 0 [ 695.319240][T13665] usb 4-1: config 3 interface 156 has no altsetting 0 [ 695.326649][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.340782][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.350235][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.363113][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.378453][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.378597][T13665] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 695.403981][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.417820][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.428235][T13665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.436470][T13913] veth0_vlan: left promiscuous mode [ 695.439584][T13913] veth0_vlan: entered promiscuous mode [ 695.446898][T13665] usb 4-1: Product: syz [ 695.453360][T13665] usb 4-1: Manufacturer: syz [ 695.453494][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.464694][T13913] team0: Device veth0_vlan failed to register rx_handler [ 695.474188][T13665] usb 4-1: SerialNumber: syz [ 695.480239][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.500675][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.516272][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.527671][ C1] bridge0: port 3(dummy0) entered learning state [ 695.540659][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.549778][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.562127][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.577007][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.590080][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.605935][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.615211][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.628454][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.641264][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.652846][ T975] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 695.667011][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.680120][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.692276][ T975] usb 2-1: device descriptor read/8, error -71 [ 695.707772][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.719308][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.761312][T13665] gl620a 4-1:3.156: probe with driver gl620a failed with error -22 [ 695.784591][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.837809][T13665] usb 4-1: USB disconnect, device number 21 [ 695.847594][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.938046][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.945697][ T975] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 695.956919][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.966269][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.977998][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.990341][ T975] usb 2-1: device descriptor read/8, error -71 [ 695.997225][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.011594][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 696.020899][T13660] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 696.031452][T13660] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.043719][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 696.058674][T13660] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.070551][T13660] usb 3-1: config 0 interface 0 has no altsetting 0 [ 696.086777][T13660] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 696.099287][T13660] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 696.108215][ T975] usb usb2-port1: unable to enumerate USB device [ 696.119331][T13660] usb 3-1: Product: syz [ 696.124044][T13660] usb 3-1: Manufacturer: syz [ 696.128971][T13660] usb 3-1: SerialNumber: syz [ 696.139369][T13660] usb 3-1: config 0 descriptor?? [ 696.148303][T13931] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 696.160604][T13660] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 696.252498][T13660] usb 5-1: USB disconnect, device number 22 [ 696.410748][ T7836] usb 3-1: USB disconnect, device number 16 [ 696.419677][ T7836] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 696.429337][ T9] usb 1-1: USB disconnect, device number 126 [ 696.548482][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.567753][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.594605][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.611934][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.620801][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.641182][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.658448][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.676632][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.684758][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.702278][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.722965][T13939] x_tables: unsorted underflow at hook 3 [ 696.891916][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 697.085896][ T9] usb 1-1: config index 0 descriptor too short (expected 20498, got 18) [ 697.131762][ T9] usb 1-1: config 190 has too many interfaces: 57, using maximum allowed: 32 [ 697.151904][ T7836] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 697.184605][ T9] usb 1-1: config 190 has an invalid descriptor of length 29, skipping remainder of the config [ 697.228247][ T9] usb 1-1: config 190 has 0 interfaces, different from the descriptor's value: 57 [ 697.260780][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 697.310356][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.590787][ T9] usb 1-1: string descriptor 0 read error: -71 [ 697.632056][ T9] usb 1-1: USB disconnect, device number 127 [ 697.752092][T13951] fuse: Bad value for 'fd' [ 697.776706][ T30] audit: type=1326 audit(1744611755.067:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.2.2419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09d498d169 code=0x0 [ 698.732650][ T7836] usb 4-1: config 0 has no interfaces? [ 698.738389][ T975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 698.814081][ T7836] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 698.883786][ T7836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.932779][ T7836] usb 4-1: Product: syz [ 698.974658][ T7836] usb 4-1: Manufacturer: syz [ 698.987197][ T975] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 699.005823][ T7836] usb 4-1: SerialNumber: syz [ 699.020336][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.038586][ T7836] usb 4-1: config 0 descriptor?? [ 699.049716][ T975] usb 1-1: config 0 has no interface number 0 [ 699.078354][ T975] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 699.112754][ T975] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 699.205632][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.240311][ T975] usb 1-1: config 0 descriptor?? [ 699.324605][ T975] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 699.506710][T13978] xt_TCPMSS: Only works on TCP SYN packets [ 700.402147][T13500] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 700.409928][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 700.417885][ T7921] usb 1-1: Failed to submit usb control message: -110 [ 700.422089][ T5831] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 700.432827][ T7921] usb 1-1: unable to send the bmi data to the device: -110 [ 700.440264][ T7921] usb 1-1: unable to get target info from device [ 700.448250][ T7921] usb 1-1: could not get target info (-110) [ 700.454866][ T7921] usb 1-1: could not probe fw (-110) [ 700.592128][T13500] usb 5-1: Using ep0 maxpacket: 16 [ 700.597581][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 700.605351][T13500] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 700.613825][T13500] usb 5-1: config 8 has no interface number 0 [ 700.620042][T13500] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 700.631898][T13500] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 700.642382][T13500] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 700.653417][T13500] usb 5-1: config 8 interface 39 has no altsetting 0 [ 700.665181][T13500] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 700.674892][ T5831] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 700.684185][T13500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.692387][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.700486][T13500] usb 5-1: Product: syz [ 700.704796][ T5831] usb 3-1: Product: syz [ 700.708985][T13500] usb 5-1: Manufacturer: syz [ 700.716651][ T5831] usb 3-1: Manufacturer: syz [ 700.721540][T13500] usb 5-1: SerialNumber: syz [ 700.726755][ T5831] usb 3-1: SerialNumber: syz [ 700.737306][ T5831] usb 3-1: config 0 descriptor?? [ 700.746751][ T5831] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 700.756657][ T5831] usb 3-1: setting power ON [ 700.761690][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 700.775185][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 700.785271][ T5831] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 700.793882][ T5831] usb 3-1: media controller created [ 700.822501][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.843921][ T5831] usb 3-1: selecting invalid altsetting 6 [ 700.850105][ T5831] usb 3-1: digital interface selection failed (-22) [ 700.857063][ T5831] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 700.868209][ T5831] usb 3-1: setting power OFF [ 700.874262][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 700.881289][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 700.890739][ T5831] (NULL device *): no alternate interface [ 700.920629][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 701.029145][ T5831] usb 3-1: USB disconnect, device number 17 [ 701.058377][ T9] usb 2-1: config 0 has no interfaces? [ 701.066635][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 701.076322][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.092331][ T9] usb 2-1: Product: syz [ 701.098949][ T9] usb 2-1: Manufacturer: syz [ 701.104195][ T9] usb 2-1: SerialNumber: syz [ 701.119708][ T9] usb 2-1: config 0 descriptor?? [ 701.231057][T13500] ipheth 5-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 701.244838][T13500] ipheth 5-1:8.39: probe with driver ipheth failed with error -71 [ 701.272928][T13500] usb 5-1: USB disconnect, device number 23 [ 701.399443][ T975] usb 1-1: USB disconnect, device number 2 [ 701.819419][ T7836] usb 2-1: USB disconnect, device number 27 [ 702.022431][ T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 702.083853][ T5831] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 702.126431][T13500] usb 4-1: USB disconnect, device number 22 [ 702.182118][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 702.189670][ T975] usb 1-1: config 2 has an invalid interface number: 59 but max is 0 [ 702.208576][ T975] usb 1-1: config 2 has no interface number 0 [ 702.228022][ T975] usb 1-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fa.73 [ 702.242257][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 702.251850][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.259939][ T975] usb 1-1: Product: syz [ 702.263581][ T5831] usb 3-1: config 0 has no interfaces? [ 702.281951][ T975] usb 1-1: Manufacturer: syz [ 702.285143][ T5831] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.286632][ T975] usb 1-1: SerialNumber: syz [ 702.306202][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.322045][ T5831] usb 3-1: Product: syz [ 702.326272][ T5831] usb 3-1: Manufacturer: syz [ 702.341213][ T5831] usb 3-1: SerialNumber: syz [ 702.351498][ T975] belkin_sa 1-1:2.59: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 702.364153][ T5831] usb 3-1: config 0 descriptor?? [ 702.393547][ T975] usb 1-1: bcdDevice: fa73, bfc: 0 [ 702.407846][ T975] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 702.570111][ T975] usb 1-1: USB disconnect, device number 3 [ 702.576116][T13500] usb 3-1: USB disconnect, device number 18 [ 702.610900][T14023] FAULT_INJECTION: forcing a failure. [ 702.610900][T14023] name failslab, interval 1, probability 0, space 0, times 0 [ 702.635809][ T975] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 702.643402][T14023] CPU: 0 UID: 0 PID: 14023 Comm: syz.1.2441 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 702.643438][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 702.643465][T14023] Call Trace: [ 702.643475][T14023] [ 702.643484][T14023] dump_stack_lvl+0x241/0x360 [ 702.643545][T14023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.643578][T14023] ? __pfx__printk+0x10/0x10 [ 702.643615][T14023] ? __pfx___might_resched+0x10/0x10 [ 702.643649][T14023] should_fail_ex+0x424/0x570 [ 702.643679][T14023] should_failslab+0xac/0x100 [ 702.643713][T14023] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 702.643748][T14023] ? __alloc_skb+0x1c2/0x480 [ 702.643776][T14023] __alloc_skb+0x1c2/0x480 [ 702.643805][T14023] ? __pfx___alloc_skb+0x10/0x10 [ 702.643839][T14023] netlink_sendmsg+0x638/0xcd0 [ 702.643888][T14023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.643927][T14023] ? aa_sock_msg_perm+0x91/0x160 [ 702.643965][T14023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.643997][T14023] __sock_sendmsg+0x221/0x270 [ 702.644032][T14023] __sys_sendto+0x365/0x4c0 [ 702.644066][T14023] ? __pfx___sys_sendto+0x10/0x10 [ 702.644103][T14023] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 702.644156][T14023] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 702.644187][T14023] __x64_sys_sendto+0xde/0x100 [ 702.644214][T14023] do_syscall_64+0xf3/0x230 [ 702.644251][T14023] ? clear_bhb_loop+0x45/0xa0 [ 702.644279][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.644303][T14023] RIP: 0033:0x7fa734d8effc [ 702.644324][T14023] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 702.644344][T14023] RSP: 002b:00007fa732bd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 702.644370][T14023] RAX: ffffffffffffffda RBX: 00007fa732bd3fc0 RCX: 00007fa734d8effc [ 702.644387][T14023] RDX: 0000000000000020 RSI: 00007fa732bd4010 RDI: 0000000000000003 [ 702.644402][T14023] RBP: 0000000000000000 R08: 00007fa732bd3f14 R09: 000000000000000c [ 702.644417][T14023] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 702.644430][T14023] R13: 00007fa732bd3f68 R14: 00007fa732bd4010 R15: 0000000000000000 [ 702.644465][T14023] [ 702.880133][ T975] belkin_sa 1-1:2.59: device disconnected [ 703.212048][ T7836] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 703.231752][T14037] netlink: zone id is out of range [ 703.250765][T14037] netlink: zone id is out of range [ 703.280881][T14037] netlink: zone id is out of range [ 703.298218][T14037] netlink: zone id is out of range [ 703.306086][T14037] netlink: zone id is out of range [ 703.314270][T14037] netlink: zone id is out of range [ 703.321013][T14037] netlink: zone id is out of range [ 703.327760][T14037] netlink: zone id is out of range [ 703.335792][T14037] netlink: zone id is out of range [ 703.347484][T14037] netlink: zone id is out of range [ 703.394304][ T7836] usb 4-1: config 0 has no interfaces? [ 703.405456][ T7836] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 703.455818][ T7836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.486905][ T7836] usb 4-1: Product: syz [ 703.491144][ T7836] usb 4-1: Manufacturer: syz [ 703.500368][ T7836] usb 4-1: SerialNumber: syz [ 703.514285][ T7836] usb 4-1: config 0 descriptor?? [ 703.612299][T13665] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 703.773662][T13665] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 703.784837][T13665] usb 3-1: config 0 has no interface number 0 [ 703.793696][T13665] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 703.803053][T13665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.811104][T13665] usb 3-1: Product: syz [ 703.815364][T13665] usb 3-1: Manufacturer: syz [ 703.820023][T13665] usb 3-1: SerialNumber: syz [ 703.828729][T13665] usb 3-1: config 0 descriptor?? [ 703.846276][T14028] netlink: 'syz.3.2443': attribute type 10 has an invalid length. [ 703.859371][ T7836] usb 4-1: USB disconnect, device number 23 [ 703.951916][T13500] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 704.101814][ C1] hrtimer: interrupt took 60754 ns [ 704.113684][T13500] usb 2-1: Using ep0 maxpacket: 8 [ 704.133684][T13500] usb 2-1: unable to get BOS descriptor or descriptor too short [ 704.169378][T13500] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 704.196951][T13500] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 704.220877][T13500] usb 2-1: config 1 interface 0 has no altsetting 0 [ 704.231310][T13500] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 704.256097][T13500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.268312][T13500] usb 2-1: Product: syz [ 704.274017][T13500] usb 2-1: Manufacturer: syz [ 704.278873][T13500] usb 2-1: SerialNumber: syz [ 704.295023][T14048] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 704.531533][T13500] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input41 [ 704.556000][ T5195] bcm5974 2-1:1.0: could not read from device [ 704.576339][ T5195] bcm5974 2-1:1.0: could not read from device [ 704.585423][T13500] usb 2-1: USB disconnect, device number 28 [ 704.622118][ T5831] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 704.738532][T14055] loop2: detected capacity change from 0 to 7 [ 704.761668][T14055] Dev loop2: unable to read RDB block 7 [ 704.777287][T14055] loop2: AHDI p3 [ 704.787169][T14055] loop2: partition table partially beyond EOD, truncated [ 704.798086][ T5831] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 704.816843][ T5831] usb 1-1: config 0 has no interface number 0 [ 704.824670][ T5831] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 704.844119][T14056] Dev loop2: unable to read RDB block 7 [ 704.854627][T14056] loop2: AHDI p3 [ 704.860314][T14056] loop2: partition table partially beyond EOD, truncated [ 704.869170][ T5831] usb 1-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=ca.0a [ 704.887744][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.897468][ T5831] usb 1-1: Product: syz [ 704.905023][ T5831] usb 1-1: Manufacturer: syz [ 704.909899][ T5831] usb 1-1: SerialNumber: syz [ 704.926187][ T5831] usb 1-1: config 0 descriptor?? [ 704.943908][ T5831] gspca_main: sonixj-2.14.0 probing 0c45:60fe [ 705.028972][T14058] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2454'. [ 705.039992][T14058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'. [ 705.049549][T14058] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2454'. [ 705.401931][T13500] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 705.412440][ T7836] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 705.551914][T13500] usb 2-1: Using ep0 maxpacket: 32 [ 705.559919][T13500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 705.572055][ T7836] usb 4-1: Using ep0 maxpacket: 16 [ 705.575993][T13500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 705.584795][ T7836] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 705.588507][T13500] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 705.598932][ T7836] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 705.612772][T13500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.615954][ T7836] usb 4-1: Product: syz [ 705.628456][ T7836] usb 4-1: SerialNumber: syz [ 705.630650][T13500] usb 2-1: config 0 descriptor?? [ 705.646924][ T7836] usb 4-1: config 0 descriptor?? [ 705.650488][T13500] hub 2-1:0.0: USB hub found [ 705.668747][ T7836] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 705.676490][ T7836] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 705.687286][ T7836] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 705.694551][ T7836] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 705.847565][T13500] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 705.878005][ T7836] usb 4-1: USB disconnect, device number 24 [ 706.249766][T14062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.272321][T14062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.310153][T13500] hid-generic 0003:046D:C31C.0021: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 706.589518][T14071] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 706.643368][T13665] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 706.661709][T13665] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 706.670206][T13665] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 706.689668][T13665] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 706.708593][T13665] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 706.723785][T13500] usb 2-1: USB disconnect, device number 29 [ 706.760076][T13665] usb 3-1: USB disconnect, device number 19 [ 706.792192][ T975] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 706.802895][T13665] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 706.843528][T13665] keyspan 3-1:0.133: device disconnected [ 706.991978][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 707.001671][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.021963][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.031894][ T975] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 707.052331][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.079443][ T975] usb 4-1: config 0 descriptor?? [ 707.766844][ T975] usbhid 4-1:0.0: can't add hid device: -71 [ 707.778578][ T7836] usb 1-1: USB disconnect, device number 4 [ 707.796672][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 707.825795][ T975] usb 4-1: USB disconnect, device number 25 [ 708.178506][T14097] netlink: 'syz.4.2469': attribute type 2 has an invalid length. [ 708.187242][T14097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2469'. [ 708.198242][T14097] FAULT_INJECTION: forcing a failure. [ 708.198242][T14097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.212758][T14097] CPU: 1 UID: 0 PID: 14097 Comm: syz.4.2469 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 708.212788][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 708.212802][T14097] Call Trace: [ 708.212811][T14097] [ 708.212820][T14097] dump_stack_lvl+0x241/0x360 [ 708.212858][T14097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.212898][T14097] ? __pfx__printk+0x10/0x10 [ 708.212939][T14097] should_fail_ex+0x424/0x570 [ 708.212967][T14097] _copy_to_user+0x31/0xb0 [ 708.213001][T14097] simple_read_from_buffer+0xc4/0x170 [ 708.213036][T14097] proc_fail_nth_read+0x1ef/0x260 [ 708.213062][T14097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.213088][T14097] ? rw_verify_area+0x246/0x630 [ 708.213111][T14097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.213135][T14097] vfs_read+0x21f/0xb90 [ 708.213164][T14097] ? __pfx___mutex_lock+0x10/0x10 [ 708.213192][T14097] ? __pfx_vfs_read+0x10/0x10 [ 708.213219][T14097] ? __fget_files+0x2a/0x420 [ 708.213241][T14097] ? __fget_files+0x39d/0x420 [ 708.213259][T14097] ? __fget_files+0x2a/0x420 [ 708.213288][T14097] ksys_read+0x19d/0x2d0 [ 708.213315][T14097] ? __pfx_ksys_read+0x10/0x10 [ 708.213346][T14097] ? do_syscall_64+0xb6/0x230 [ 708.213376][T14097] do_syscall_64+0xf3/0x230 [ 708.213402][T14097] ? clear_bhb_loop+0x45/0xa0 [ 708.213428][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.213448][T14097] RIP: 0033:0x7fa6d3d8bb7c [ 708.213467][T14097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 708.213485][T14097] RSP: 002b:00007fa6d4bb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.213507][T14097] RAX: ffffffffffffffda RBX: 00007fa6d3fa5fa0 RCX: 00007fa6d3d8bb7c [ 708.213523][T14097] RDX: 000000000000000f RSI: 00007fa6d4bb60a0 RDI: 0000000000000005 [ 708.213536][T14097] RBP: 00007fa6d4bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 708.213548][T14097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.213561][T14097] R13: 0000000000000000 R14: 00007fa6d3fa5fa0 R15: 00007fa6d40cfa28 [ 708.213594][T14097] [ 708.453887][T13665] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 708.461642][ T7836] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 708.517100][T14101] FAULT_INJECTION: forcing a failure. [ 708.517100][T14101] name failslab, interval 1, probability 0, space 0, times 0 [ 708.530374][T14101] CPU: 1 UID: 0 PID: 14101 Comm: syz.4.2471 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 708.530401][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 708.530415][T14101] Call Trace: [ 708.530424][T14101] [ 708.530433][T14101] dump_stack_lvl+0x241/0x360 [ 708.530472][T14101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.530501][T14101] ? __pfx__printk+0x10/0x10 [ 708.530535][T14101] ? __pfx___might_resched+0x10/0x10 [ 708.530567][T14101] should_fail_ex+0x424/0x570 [ 708.530594][T14101] should_failslab+0xac/0x100 [ 708.530626][T14101] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 708.530655][T14101] ? __alloc_skb+0x1c2/0x480 [ 708.530679][T14101] __alloc_skb+0x1c2/0x480 [ 708.530705][T14101] ? __pfx___alloc_skb+0x10/0x10 [ 708.530728][T14101] ? netlink_autobind+0xd6/0x2f0 [ 708.530758][T14101] ? netlink_autobind+0x2b0/0x2f0 [ 708.530806][T14101] netlink_sendmsg+0x638/0xcd0 [ 708.530851][T14101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.530886][T14101] ? __pfx_aa_file_perm+0x10/0x10 [ 708.530916][T14101] ? aa_sock_msg_perm+0x91/0x160 [ 708.530950][T14101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.530979][T14101] __sock_sendmsg+0x221/0x270 [ 708.531012][T14101] sock_write_iter+0x2d9/0x3f0 [ 708.531042][T14101] ? __pfx_sock_write_iter+0x10/0x10 [ 708.531081][T14101] ? bpf_lsm_file_permission+0x9/0x10 [ 708.531114][T14101] vfs_write+0x70f/0xd10 [ 708.531146][T14101] ? __pfx_sock_write_iter+0x10/0x10 [ 708.531174][T14101] ? __pfx_vfs_write+0x10/0x10 [ 708.531202][T14101] ? __fget_files+0x2a/0x420 [ 708.531226][T14101] ? __fget_files+0x2a/0x420 [ 708.531255][T14101] ksys_write+0x19d/0x2d0 [ 708.531282][T14101] ? __pfx_ksys_write+0x10/0x10 [ 708.531311][T14101] ? do_syscall_64+0xb6/0x230 [ 708.531341][T14101] do_syscall_64+0xf3/0x230 [ 708.531367][T14101] ? clear_bhb_loop+0x45/0xa0 [ 708.531393][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.531413][T14101] RIP: 0033:0x7fa6d3d8d169 [ 708.531432][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.531449][T14101] RSP: 002b:00007fa6d4bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 708.531472][T14101] RAX: ffffffffffffffda RBX: 00007fa6d3fa5fa0 RCX: 00007fa6d3d8d169 [ 708.531487][T14101] RDX: 0000000000000140 RSI: 00002000000000c0 RDI: 0000000000000004 [ 708.531500][T14101] RBP: 00007fa6d4bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 708.531513][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.531526][T14101] R13: 0000000000000000 R14: 00007fa6d3fa5fa0 R15: 00007fa6d40cfa28 [ 708.531559][T14101] [ 708.848196][ T30] audit: type=1326 audit(1744611766.137:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.4.2472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3d8d169 code=0x0 [ 708.891885][T13665] usb 2-1: Using ep0 maxpacket: 16 [ 708.898374][ T7836] usb 1-1: Using ep0 maxpacket: 16 [ 708.905716][T13665] usb 2-1: config 0 interface 0 has no altsetting 0 [ 708.915513][T13665] usb 2-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 708.924877][T13665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.933280][T13665] usb 2-1: Product: syz [ 708.937469][T13665] usb 2-1: Manufacturer: syz [ 708.942198][T13665] usb 2-1: SerialNumber: syz [ 708.949967][ T7836] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 708.959567][ T7836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.968643][ T7836] usb 1-1: Product: syz [ 708.972930][ T7836] usb 1-1: Manufacturer: syz [ 708.973859][T13500] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 708.977538][ T7836] usb 1-1: SerialNumber: syz [ 708.992675][T13665] usb 2-1: config 0 descriptor?? [ 709.006806][ T7836] r8152-cfgselector 1-1: Unknown version 0x0000 [ 709.013297][ T7836] r8152-cfgselector 1-1: config 0 descriptor?? [ 709.019526][ T30] audit: type=1326 audit(1744611766.297:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.4.2472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d3d8d169 code=0x0 [ 709.192071][T13500] usb 4-1: device descriptor read/64, error -71 [ 709.223686][T14095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.242930][T14095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.345910][T14108] xt_CT: No such helper "snmp_trap" [ 709.432425][T13500] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 709.475456][ T7836] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 709.574210][T13500] usb 4-1: device descriptor read/64, error -71 [ 709.674912][T13665] ipheth 2-1:0.0: Unable to find endpoints [ 709.699652][T13500] usb usb4-port1: attempt power cycle [ 709.724605][T13665] usb 2-1: USB disconnect, device number 30 [ 709.829904][T14118] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2475'. [ 710.070971][T13500] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 710.103089][T13500] usb 4-1: device descriptor read/8, error -71 [ 710.332489][T13665] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 710.342085][T13500] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 710.372600][T13500] usb 4-1: device descriptor read/8, error -71 [ 710.391203][T14137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.497605][T13500] usb usb4-port1: unable to enumerate USB device [ 710.519667][T13665] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 710.560206][T13665] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 710.613919][T13665] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 710.654682][T13665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.663003][T14145] unknown channel width for channel at 909000KHz? [ 710.672236][T14145] unknown channel width for channel at 909000KHz? [ 710.689086][T14145] unknown channel width for channel at 909000KHz? [ 710.702310][T14124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 710.723079][T13665] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.881905][ C1] bridge0: port 3(dummy0) entered forwarding state [ 710.888506][ C1] bridge0: topology change detected, propagating [ 711.009605][T13665] usb 3-1: USB disconnect, device number 20 [ 711.032634][T14140] netlink: 'syz.0.2483': attribute type 7 has an invalid length. [ 711.114932][ T30] audit: type=1326 audit(1744611768.397:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.206567][ T30] audit: type=1326 audit(1744611768.397:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.246923][ T30] audit: type=1326 audit(1744611768.397:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.275853][ T30] audit: type=1326 audit(1744611768.397:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.299258][ T30] audit: type=1326 audit(1744611768.397:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.323077][ T30] audit: type=1326 audit(1744611768.397:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.346615][ T30] audit: type=1326 audit(1744611768.397:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.369225][T13500] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 711.370793][ T30] audit: type=1326 audit(1744611768.397:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f618d169 code=0x7ffc0000 [ 711.462410][ T7836] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 711.563503][T13500] usb 5-1: Using ep0 maxpacket: 8 [ 711.586774][T13500] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 711.602018][T13500] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.622362][ T7836] usb 2-1: Using ep0 maxpacket: 16 [ 711.631042][T13500] usb 5-1: config 1 interface 0 has no altsetting 0 [ 711.634688][ T7836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 711.650421][T13500] usb 5-1: New USB device found, idVendor=062a, idProduct=5110, bcdDevice= 0.40 [ 711.670617][T13500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.674400][ T7836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 711.719647][T13500] usb 5-1: Product: syz [ 711.723403][ T7836] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 711.739506][ T7836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.748786][T13500] usb 5-1: SerialNumber: syz [ 711.769413][ T7836] usb 2-1: config 0 descriptor?? [ 711.779801][T13500] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 711.806850][T13500] usb 5-1: no configuration chosen from 1 choice [ 711.959781][T14158] program syz.2.2491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.069138][T14158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2491'. [ 712.211123][T14151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.282386][T14151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.562437][ T7836] usbhid 2-1:0.0: can't add hid device: -32 [ 712.584341][ T7836] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 712.634563][T14154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.697302][ T975] usb 2-1: USB disconnect, device number 31 [ 713.022186][ T7836] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 713.207120][ T7836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.233802][ T7836] usb 4-1: config 0 has no interfaces? [ 713.255341][ T7836] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 713.296702][ T7836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.347674][ T7836] usb 4-1: config 0 descriptor?? [ 713.545522][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2497'. [ 713.570003][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2497'. [ 713.610049][T14178] gretap0: entered promiscuous mode [ 713.642642][T14178] batadv_slave_0: entered promiscuous mode [ 713.658372][T14178] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 713.681327][T14178] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 713.725051][T14171] FAULT_INJECTION: forcing a failure. [ 713.725051][T14171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 713.738978][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.3.2495 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 713.739007][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 713.739022][T14171] Call Trace: [ 713.739031][T14171] [ 713.739040][T14171] dump_stack_lvl+0x241/0x360 [ 713.739079][T14171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.739111][T14171] ? __pfx__printk+0x10/0x10 [ 713.739153][T14171] should_fail_ex+0x424/0x570 [ 713.739181][T14171] prepare_alloc_pages+0x220/0x610 [ 713.739214][T14171] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 713.739243][T14171] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 713.739290][T14171] alloc_pages_mpol+0x339/0x690 [ 713.739327][T14171] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 713.739368][T14171] vma_alloc_folio_noprof+0x12d/0x260 [ 713.739401][T14171] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 713.739450][T14171] folio_prealloc+0x2e/0x170 [ 713.739472][T14171] handle_pte_fault+0x2e45/0x61c0 [ 713.739518][T14171] ? __pfx_handle_pte_fault+0x10/0x10 [ 713.739553][T14171] ? rcu_is_watching+0x15/0xb0 [ 713.739585][T14171] ? __lock_acquire+0xad5/0xd80 [ 713.739624][T14171] ? __lock_acquire+0xad5/0xd80 [ 713.739651][T14171] ? do_raw_spin_lock+0x151/0x370 [ 713.739693][T14171] handle_mm_fault+0x1129/0x1bf0 [ 713.739755][T14171] ? __pfx_handle_mm_fault+0x10/0x10 [ 713.739786][T14171] ? follow_page_pte+0x9ff/0x15e0 [ 713.739823][T14171] ? do_raw_spin_unlock+0x13c/0x8b0 [ 713.739852][T14171] ? vma_is_secretmem+0xd/0x50 [ 713.739878][T14171] ? check_vma_flags+0x51b/0x590 [ 713.739915][T14171] __get_user_pages+0x1adc/0x4180 [ 713.739987][T14171] ? __pfx___get_user_pages+0x10/0x10 [ 713.740048][T14171] faultin_page_range+0x204/0x850 [ 713.740079][T14171] ? __asan_memset+0x23/0x50 [ 713.740101][T14171] ? blk_start_plug+0x70/0x1b0 [ 713.740132][T14171] madvise_do_behavior+0x23a/0x4640 [ 713.740161][T14171] ? is_bpf_text_address+0x288/0x2a0 [ 713.740185][T14171] ? is_bpf_text_address+0x26/0x2a0 [ 713.740214][T14171] ? kernel_text_address+0xa7/0xe0 [ 713.740248][T14171] ? kstrtoull+0x1d3/0x2f0 [ 713.740274][T14171] ? __pfx_kstrtoull+0x10/0x10 [ 713.740305][T14171] ? __pfx_madvise_do_behavior+0x10/0x10 [ 713.740341][T14171] ? kstrtouint+0xfc/0x190 [ 713.740373][T14171] ? __lock_acquire+0xad5/0xd80 [ 713.740421][T14171] ? __lock_acquire+0xad5/0xd80 [ 713.740479][T14171] ? down_read+0x813/0xa50 [ 713.740511][T14171] ? __mutex_unlock_slowpath+0x229/0x800 [ 713.740542][T14171] ? __pfx_down_read+0x10/0x10 [ 713.740575][T14171] ? __fget_files+0x2a/0x420 [ 713.740613][T14171] __x64_sys_madvise+0x185/0x220 [ 713.740647][T14171] ? __pfx___x64_sys_madvise+0x10/0x10 [ 713.740687][T14171] ? do_syscall_64+0xb6/0x230 [ 713.740717][T14171] do_syscall_64+0xf3/0x230 [ 713.740743][T14171] ? clear_bhb_loop+0x45/0xa0 [ 713.740768][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.740789][T14171] RIP: 0033:0x7f0ed158d169 [ 713.740808][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.740826][T14171] RSP: 002b:00007f0ed235c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 713.740849][T14171] RAX: ffffffffffffffda RBX: 00007f0ed17a5fa0 RCX: 00007f0ed158d169 [ 713.740865][T14171] RDX: 0000000000000017 RSI: 0000000000c00304 RDI: 0000200000000000 [ 713.740879][T14171] RBP: 00007f0ed235c090 R08: 0000000000000000 R09: 0000000000000000 [ 713.740892][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 713.740905][T14171] R13: 0000000000000000 R14: 00007f0ed17a5fa0 R15: 00007f0ed18cfa28 [ 713.740938][T14171] [ 714.042578][T13665] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 714.105040][ T7836] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 714.123288][T13500] usb 5-1: USB disconnect, device number 24 [ 714.125049][ T975] usb 4-1: USB disconnect, device number 30 [ 714.312050][ T7836] usb 1-1: Using ep0 maxpacket: 8 [ 714.326530][ T7836] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 714.343653][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.367799][T13665] usb 3-1: config 0 has an invalid interface number: 171 but max is 0 [ 714.380388][ T7836] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.397361][T13665] usb 3-1: config 0 has no interface number 0 [ 714.404220][T13665] usb 3-1: config 0 interface 171 has no altsetting 0 [ 714.411504][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.427111][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.444834][T13665] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 714.457515][T13665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.466196][T13665] usb 3-1: Product: syz [ 714.470738][T13665] usb 3-1: Manufacturer: syz [ 714.470881][ T7836] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 714.486693][T13665] usb 3-1: SerialNumber: syz [ 714.522339][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.539096][T13665] usb 3-1: config 0 descriptor?? [ 714.549046][T13665] usb-storage 3-1:0.171: USB Mass Storage device detected [ 714.562311][ T7836] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.580080][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.597210][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.611638][ T7836] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 714.619561][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.631221][ T7836] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.644033][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.711259][ T7836] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.750080][ T7836] usb 1-1: string descriptor 0 read error: -22 [ 714.757799][ T7836] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 714.768485][ T7836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.801032][ T7836] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 714.851402][T13500] usb 3-1: USB disconnect, device number 21 [ 715.048781][T14178] input: syz0 as /devices/virtual/input/input42 [ 715.180766][T14179] xt_CT: No such helper "snmp" [ 715.198397][ T7836] usb 1-1: USB disconnect, device number 6 [ 716.672256][ T975] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 716.992120][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 716.999317][ T975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.034977][T14228] program syz.0.2509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.044566][ T975] usb 2-1: config 0 has no interface number 0 [ 717.055212][ T975] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 717.117010][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.163175][ T975] usb 2-1: Product: syz [ 717.175815][ T975] usb 2-1: Manufacturer: syz [ 717.237786][T14228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'. [ 717.247190][ T975] usb 2-1: SerialNumber: syz [ 717.290152][ T975] usb 2-1: config 0 descriptor?? [ 717.392184][T14220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.414914][ T975] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 718.312246][ T7836] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 718.415978][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.468189][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.485403][ T7836] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 718.498981][ T7836] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 718.529309][ T7836] usb 4-1: config 0 has no interface number 1 [ 718.553692][ T7836] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 718.586615][ T7836] usb 4-1: too many endpoints for config 0 interface 6 altsetting 2: 255, using maximum allowed: 30 [ 718.598859][ T7836] usb 4-1: config 0 interface 6 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 718.620730][ T975] gspca_spca1528: reg_w err -71 [ 718.639982][ T975] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 718.649658][ T7836] usb 4-1: config 0 interface 6 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 718.669093][ T975] usb 2-1: USB disconnect, device number 32 [ 718.693273][ T7836] usb 4-1: config 0 interface 6 has no altsetting 0 [ 718.716529][ T7836] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 718.737008][ T7836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.764646][ T7836] usb 4-1: Product: syz [ 718.774410][T14242] net_ratelimit: 142 callbacks suppressed [ 718.774430][T14242] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 718.790055][ T7836] usb 4-1: Manufacturer: syz [ 718.806772][ T7836] usb 4-1: SerialNumber: syz [ 718.816780][ T7836] usb 4-1: config 0 descriptor?? [ 718.827279][ T7836] option 4-1:0.0: GSM modem (1-port) converter detected [ 718.875742][ T7836] usbhid 4-1:0.6: couldn't find an input interrupt endpoint [ 719.097840][T14259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.152774][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2512'. [ 719.292318][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 719.461921][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 719.489719][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 719.516537][ T9] usb 1-1: can't read configurations, error -61 [ 719.611993][ T7836] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 719.663799][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 719.824694][ T7836] usb 2-1: config 0 has no interfaces? [ 719.875652][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 719.877981][ T7836] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 719.890339][ T7836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.903227][ T7836] usb 2-1: Product: syz [ 719.907466][ T7836] usb 2-1: Manufacturer: syz [ 719.922595][ T7836] usb 2-1: SerialNumber: syz [ 719.929482][ T7836] usb 2-1: config 0 descriptor?? [ 719.945391][T14269] netlink: 'syz.2.2522': attribute type 10 has an invalid length. [ 719.971106][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 719.985236][T14269] veth0_vlan: left promiscuous mode [ 719.996556][ T9] usb 1-1: can't read configurations, error -61 [ 720.017529][T14269] veth0_vlan: entered promiscuous mode [ 720.027339][ T9] usb usb1-port1: attempt power cycle [ 720.041394][T14269] team0: Device veth0_vlan failed to register rx_handler [ 720.392050][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 720.422843][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 720.432734][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 720.443751][ T9] usb 1-1: can't read configurations, error -61 [ 720.599015][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 720.643141][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 720.661151][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 720.680176][ T9] usb 1-1: can't read configurations, error -61 [ 720.686974][ T9] usb usb1-port1: unable to enumerate USB device [ 720.830964][T14279] program syz.4.2524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.921528][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2524'. [ 721.539012][T14275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.085837][T14291] FAULT_INJECTION: forcing a failure. [ 722.085837][T14291] name failslab, interval 1, probability 0, space 0, times 0 [ 722.104152][T14291] CPU: 1 UID: 0 PID: 14291 Comm: syz.0.2528 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 722.104175][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 722.104185][T14291] Call Trace: [ 722.104193][T14291] [ 722.104200][T14291] dump_stack_lvl+0x241/0x360 [ 722.104229][T14291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.104252][T14291] ? __pfx__printk+0x10/0x10 [ 722.104277][T14291] ? __pfx___might_resched+0x10/0x10 [ 722.104301][T14291] should_fail_ex+0x424/0x570 [ 722.104321][T14291] should_failslab+0xac/0x100 [ 722.104344][T14291] __kmalloc_noprof+0xdf/0x4d0 [ 722.104365][T14291] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 722.104380][T14291] ? sock_kmalloc+0xd7/0x160 [ 722.104401][T14291] sock_kmalloc+0xd7/0x160 [ 722.104421][T14291] af_alg_sendmsg+0x1134/0x24d0 [ 722.104439][T14291] ? __pfx___might_resched+0x10/0x10 [ 722.104475][T14291] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 722.104495][T14291] ? __pfx_aa_sk_perm+0x10/0x10 [ 722.104517][T14291] ? aa_sock_msg_perm+0x91/0x160 [ 722.104539][T14291] ? skcipher_sendmsg+0x28/0xf0 [ 722.104560][T14291] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 722.104579][T14291] __sock_sendmsg+0x221/0x270 [ 722.104602][T14291] __sys_sendto+0x365/0x4c0 [ 722.104621][T14291] ? __pfx___sys_sendto+0x10/0x10 [ 722.104645][T14291] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 722.104685][T14291] __x64_sys_sendto+0xde/0x100 [ 722.104703][T14291] do_syscall_64+0xf3/0x230 [ 722.104723][T14291] ? clear_bhb_loop+0x45/0xa0 [ 722.104740][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.104762][T14291] RIP: 0033:0x7f72f618effc [ 722.104777][T14291] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 722.104789][T14291] RSP: 002b:00007f72f7066ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 722.104806][T14291] RAX: ffffffffffffffda RBX: 00007f72f7066fc0 RCX: 00007f72f618effc [ 722.104818][T14291] RDX: 000000000000001c RSI: 00007f72f7067010 RDI: 0000000000000004 [ 722.104827][T14291] RBP: 0000000000000000 R08: 00007f72f7066f14 R09: 000000000000000c [ 722.104837][T14291] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 722.104846][T14291] R13: 00007f72f7066f68 R14: 00007f72f7067010 R15: 0000000000000000 [ 722.104869][T14291] [ 722.336420][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.501436][T13665] usb 4-1: USB disconnect, device number 31 [ 722.523381][T13665] option 4-1:0.0: device disconnected [ 722.674690][T14295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.991940][ T5831] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 723.162239][ T5831] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 723.170494][ T5831] usb 4-1: config 0 has no interface number 0 [ 723.185711][ T5831] usb 4-1: config 0 interface 113 has no altsetting 0 [ 723.203345][ T5831] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 723.215182][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.223743][ T5831] usb 4-1: Product: syz [ 723.228174][ T5831] usb 4-1: Manufacturer: syz [ 723.237183][ T5831] usb 4-1: SerialNumber: syz [ 723.244499][ T5831] usb 4-1: config 0 descriptor?? [ 723.252691][ T5831] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 723.579362][ T5831] usb 4-1: USB disconnect, device number 32 [ 723.671751][ T7836] usb 2-1: USB disconnect, device number 33 [ 724.192343][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 724.202961][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 724.331900][ T9] usb 2-1: device descriptor read/64, error -32 [ 724.582545][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 724.621919][ T7836] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 724.642122][T13500] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 724.975503][T13500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.992204][ T7836] usb 5-1: Using ep0 maxpacket: 8 [ 725.006105][T13500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.032097][ T7836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 725.046802][T13500] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.078525][T13500] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 725.100792][T13500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.131693][ T7836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 725.177631][T13500] usb 4-1: config 0 descriptor?? [ 725.181368][ T7836] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 725.202042][ T9] usb 2-1: config 0 has no interfaces? [ 725.240963][ T7836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 725.262672][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.293704][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.323555][ T9] usb 2-1: Product: syz [ 725.327898][ T7836] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 725.338208][ T7836] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 725.342326][ T9] usb 2-1: Manufacturer: syz [ 725.370267][ T9] usb 2-1: SerialNumber: syz [ 725.392921][ T7836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.406829][ T9] usb 2-1: config 0 descriptor?? [ 725.525558][ T7836] usb 5-1: config 0 descriptor?? [ 725.566234][T14325] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 725.744872][T13500] dragonrise 0003:0079:0011.0022: unknown main item tag 0x1 [ 725.783583][T13500] dragonrise 0003:0079:0011.0022: reserved main item tag 0xe [ 725.830165][T13500] dragonrise 0003:0079:0011.0022: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 725.965312][T13500] usb 4-1: USB disconnect, device number 33 [ 726.066115][T13665] usb 5-1: USB disconnect, device number 25 [ 726.068907][ T5848] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 727.146680][T13500] usb 2-1: USB disconnect, device number 35 [ 727.181891][ T7836] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 727.781923][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 727.795246][ T7836] usb 5-1: config 0 has no interfaces? [ 727.814197][T14369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2551'. [ 727.824431][ T7836] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 727.833856][ T7836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.844234][ T7836] usb 5-1: Product: syz [ 727.848475][ T7836] usb 5-1: Manufacturer: syz [ 727.853903][ T7836] usb 5-1: SerialNumber: syz [ 727.860780][ T7836] usb 5-1: config 0 descriptor?? [ 728.234005][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 728.234027][ T30] audit: type=1800 audit(1744611785.517:607): pid=14355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2547" name="file0" dev="tmpfs" ino=2704 res=0 errno=0 [ 728.263336][T14373] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 729.077900][T14390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.143907][T14391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2560'. [ 729.191906][T13665] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 729.449807][T13665] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 729.460806][T13665] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 729.474906][T13665] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 729.494176][T13665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.690686][T13665] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 729.718117][T13665] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 729.775551][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.549212][T13500] usb 5-1: USB disconnect, device number 26 [ 730.586434][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'. [ 730.618739][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'. [ 731.010722][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.109207][ T30] audit: type=1326 audit(1744611788.387:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 731.127933][T14434] FAULT_INJECTION: forcing a failure. [ 731.127933][T14434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.159760][T14434] CPU: 0 UID: 0 PID: 14434 Comm: syz.4.2572 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 731.159792][T14434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 731.159806][T14434] Call Trace: [ 731.159815][T14434] [ 731.159825][T14434] dump_stack_lvl+0x241/0x360 [ 731.159865][T14434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.159897][T14434] ? __pfx__printk+0x10/0x10 [ 731.159941][T14434] should_fail_ex+0x424/0x570 [ 731.159969][T14434] _copy_from_user+0x2d/0xb0 [ 731.160002][T14434] copy_msghdr_from_user+0xb3/0x580 [ 731.160040][T14434] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 731.160068][T14434] ? __fget_files+0x2a/0x420 [ 731.160090][T14434] ? __fget_files+0x2a/0x420 [ 731.160120][T14434] __sys_sendmsg+0x20a/0x360 [ 731.160151][T14434] ? __pfx___sys_sendmsg+0x10/0x10 [ 731.160230][T14434] ? do_syscall_64+0xb6/0x230 [ 731.160263][T14434] do_syscall_64+0xf3/0x230 [ 731.160290][T14434] ? clear_bhb_loop+0x45/0xa0 [ 731.160316][T14434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.160345][T14434] RIP: 0033:0x7fa6d3d8d169 [ 731.160364][T14434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.160383][T14434] RSP: 002b:00007fa6d4bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.160411][T14434] RAX: ffffffffffffffda RBX: 00007fa6d3fa5fa0 RCX: 00007fa6d3d8d169 [ 731.160428][T14434] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 731.160442][T14434] RBP: 00007fa6d4bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 731.160456][T14434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.160469][T14434] R13: 0000000000000000 R14: 00007fa6d3fa5fa0 R15: 00007fa6d40cfa28 [ 731.160501][T14434] [ 731.181059][ T30] audit: type=1326 audit(1744611788.387:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 731.366315][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 731.519006][T14437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2573'. [ 731.662192][ T30] audit: type=1326 audit(1744611788.387:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 731.736674][T14450] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 731.745005][T14450] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.752795][ T30] audit: type=1326 audit(1744611788.387:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 731.753896][T14450] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.785289][T14450] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.826635][ T30] audit: type=1326 audit(1744611788.387:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 731.913482][T14454] tipc: Enabling of bearer rejected, already enabled [ 731.923581][ T30] audit: type=1326 audit(1744611788.387:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 731.952490][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 732.011979][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 732.066774][ T30] audit: type=1326 audit(1744611788.387:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 732.101931][ T975] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 732.126626][ T30] audit: type=1326 audit(1744611788.387:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 732.212290][ T30] audit: type=1326 audit(1744611788.387:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09d498d169 code=0x7ffc0000 [ 732.431440][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.557120][T13500] usb 4-1: USB disconnect, device number 34 [ 732.597574][ T975] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 732.611857][ T975] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.690646][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2583'. [ 732.700977][ T975] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 732.712208][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 732.714520][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.752430][T13665] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 732.785277][ T975] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.806445][ T975] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 732.832537][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.871893][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 732.881306][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 732.911197][T13665] usb 3-1: Using ep0 maxpacket: 16 [ 732.919336][T13665] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 732.928552][T13665] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 732.949734][T13665] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.971879][T13665] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 733.002533][T13665] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.012098][T13665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.027794][T13665] usb 3-1: Product: syz [ 733.038652][T13665] usb 3-1: Manufacturer: syz [ 733.048150][T13665] usb 3-1: SerialNumber: syz [ 733.181999][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 733.190290][ T9] usb 1-1: Product: syz [ 733.195285][ T9] usb 1-1: Manufacturer: syz [ 733.199950][ T9] usb 1-1: SerialNumber: syz [ 733.307172][T13665] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 733.337241][T13665] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 733.357355][T13500] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 733.359152][T13665] cdc_ncm 3-1:1.0: bind() failure [ 733.431680][T13665] usb 3-1: USB disconnect, device number 22 [ 733.522123][T13500] usb 4-1: Using ep0 maxpacket: 8 [ 733.623559][ T9] usb 1-1: config 0 descriptor?? [ 733.639339][T13500] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 733.678419][T13500] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 733.709705][T13500] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.728127][T13500] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.776384][T13500] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 733.848410][T13500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.867949][ T9] usb 1-1: USB disconnect, device number 11 [ 734.006358][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.132264][T13500] usb 4-1: GET_CAPABILITIES returned 0 [ 734.209646][T13500] usbtmc 4-1:16.0: can't read capabilities [ 734.356642][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.391755][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.496241][T13665] usb 4-1: USB disconnect, device number 35 [ 734.672003][T13500] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 734.734420][T13665] usb 5-1: USB disconnect, device number 27 [ 734.803910][T14474] netlink: 'syz.4.2586': attribute type 21 has an invalid length. [ 734.818920][T14474] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 734.842833][T13500] usb 3-1: Using ep0 maxpacket: 16 [ 734.923772][T13500] usb 3-1: unable to get BOS descriptor or descriptor too short [ 734.975043][T13500] usb 3-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 735.003669][T13500] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.041858][T13500] usb 3-1: config 1 interface 0 has no altsetting 0 [ 735.065436][T13500] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 735.091509][T13500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.117232][T13500] usb 3-1: Product: syz [ 735.139297][T13500] usb 3-1: Manufacturer: syz [ 735.152132][T13665] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 735.167522][T13500] usb 3-1: SerialNumber: syz [ 735.246228][T14485] FAULT_INJECTION: forcing a failure. [ 735.246228][T14485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.274973][T14485] CPU: 0 UID: 0 PID: 14485 Comm: syz.3.2590 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 735.274997][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 735.275007][T14485] Call Trace: [ 735.275014][T14485] [ 735.275022][T14485] dump_stack_lvl+0x241/0x360 [ 735.275057][T14485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.275082][T14485] ? __pfx__printk+0x10/0x10 [ 735.275112][T14485] should_fail_ex+0x424/0x570 [ 735.275132][T14485] _copy_to_user+0x31/0xb0 [ 735.275157][T14485] simple_read_from_buffer+0xc4/0x170 [ 735.275182][T14485] proc_fail_nth_read+0x1ef/0x260 [ 735.275201][T14485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.275219][T14485] ? rw_verify_area+0x246/0x630 [ 735.275235][T14485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.275252][T14485] vfs_read+0x21f/0xb90 [ 735.275273][T14485] ? __pfx___mutex_lock+0x10/0x10 [ 735.275293][T14485] ? __pfx_vfs_read+0x10/0x10 [ 735.275312][T14485] ? __fget_files+0x2a/0x420 [ 735.275327][T14485] ? __fget_files+0x39d/0x420 [ 735.275340][T14485] ? __fget_files+0x2a/0x420 [ 735.275360][T14485] ksys_read+0x19d/0x2d0 [ 735.275379][T14485] ? __pfx_ksys_read+0x10/0x10 [ 735.275395][T14485] ? __secure_computing+0xef/0x2f0 [ 735.275423][T14485] do_syscall_64+0xf3/0x230 [ 735.275442][T14485] ? clear_bhb_loop+0x45/0xa0 [ 735.275460][T14485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.275475][T14485] RIP: 0033:0x7f0ed158bb7c [ 735.275489][T14485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 735.275502][T14485] RSP: 002b:00007f0ed235c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 735.275518][T14485] RAX: ffffffffffffffda RBX: 00007f0ed17a5fa0 RCX: 00007f0ed158bb7c [ 735.275530][T14485] RDX: 000000000000000f RSI: 00007f0ed235c0a0 RDI: 0000000000000005 [ 735.275539][T14485] RBP: 00007f0ed235c090 R08: 0000000000000000 R09: 0000000000000000 [ 735.275549][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.275558][T14485] R13: 0000000000000000 R14: 00007f0ed17a5fa0 R15: 00007f0ed18cfa28 [ 735.275581][T14485] [ 735.491732][T13665] usb 5-1: device descriptor read/64, error -71 [ 735.561907][ T975] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 735.627098][T14491] misc userio: The device must be registered before sending interrupts [ 735.722933][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 735.731882][T13665] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 735.744188][ T975] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 735.753766][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.767980][ T975] usb 1-1: Product: syz [ 735.776711][ T975] usb 1-1: Manufacturer: syz [ 735.782244][T13664] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 735.795426][ T975] usb 1-1: SerialNumber: syz [ 735.815380][ T975] usb 1-1: config 0 descriptor?? [ 735.862078][T13665] usb 5-1: device descriptor read/64, error -71 [ 735.891884][ T7836] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 735.932163][T13664] usb 2-1: Using ep0 maxpacket: 8 [ 735.940036][T13664] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.959256][T13664] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.970101][T13664] usb 2-1: config 0 interface 0 has no altsetting 0 [ 735.977174][T13665] usb usb5-port1: attempt power cycle [ 735.982979][T13664] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 735.993724][T13664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.005573][T13664] usb 2-1: config 0 descriptor?? [ 736.044624][ T7836] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 736.060038][ T7836] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 736.073324][ T7836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 736.085704][ T7836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 736.095737][ T7836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.118576][ T7836] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 736.127814][ T7836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.140067][ T7836] usb 4-1: Product: syz [ 736.145388][ T7836] usb 4-1: Manufacturer: syz [ 736.150051][ T7836] usb 4-1: SerialNumber: syz [ 736.165776][ T7836] usb 4-1: config 0 descriptor?? [ 736.183662][T14492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.186955][ T7836] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 736.206665][ T7836] imon 4-1:0.0: unable to initialize intf0, err -90 [ 736.214927][ T7836] imon:imon_probe: failed to initialize context! [ 736.225874][ T7836] imon 4-1:0.0: unable to register, err -19 [ 736.341993][T13665] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 736.362490][T13665] usb 5-1: device descriptor read/8, error -71 [ 736.387007][ T9] usb 4-1: USB disconnect, device number 36 [ 736.602137][T13665] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 736.633370][T13665] usb 5-1: device descriptor read/8, error -71 [ 736.743886][T13665] usb usb5-port1: unable to enumerate USB device [ 736.779321][T13664] usb 2-1: string descriptor 0 read error: -71 [ 736.806317][T13664] usbhid 2-1:0.0: can't add hid device: -71 [ 736.817441][T13664] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 736.834756][T13664] usb 2-1: USB disconnect, device number 36 [ 736.990956][T14499] openvswitch: netlink: IPv6 tunnel dst address is zero [ 737.174957][T13500] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 737.199503][T13500] usb 3-1: USB disconnect, device number 23 [ 737.405339][T14508] xt_TCPMSS: Only works on TCP SYN packets [ 737.868708][T14513] netlink: 'syz.4.2597': attribute type 1 has an invalid length. [ 737.951945][T13664] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 738.112098][T13664] usb 2-1: Using ep0 maxpacket: 32 [ 738.122125][T13664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.150043][T13664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.216436][T13664] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 738.236644][T13664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.252148][ T975] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 738.277544][ T975] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 738.287262][ T7836] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 738.313310][T13664] usb 2-1: config 0 descriptor?? [ 738.447390][ T975] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 738.522863][ T975] usb 1-1: USB disconnect, device number 12 [ 738.582069][ T7836] usb 5-1: device descriptor read/64, error -71 [ 738.685679][T14494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2593'. [ 738.852957][ T7836] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 738.957976][T13664] usbhid 2-1:0.0: can't add hid device: -71 [ 738.979894][T14524] FAULT_INJECTION: forcing a failure. [ 738.979894][T14524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.003370][T13664] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 739.007665][T14524] CPU: 0 UID: 0 PID: 14524 Comm: syz.2.2601 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 739.007700][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 739.007716][T14524] Call Trace: [ 739.007727][T14524] [ 739.007737][T14524] dump_stack_lvl+0x241/0x360 [ 739.007780][T14524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.007814][T14524] ? __pfx__printk+0x10/0x10 [ 739.007859][T14524] should_fail_ex+0x424/0x570 [ 739.007890][T14524] _copy_to_user+0x31/0xb0 [ 739.007931][T14524] simple_read_from_buffer+0xc4/0x170 [ 739.007970][T14524] proc_fail_nth_read+0x1ef/0x260 [ 739.007998][T14524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.008027][T14524] ? rw_verify_area+0x246/0x630 [ 739.008051][T14524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.008077][T14524] vfs_read+0x21f/0xb90 [ 739.008109][T14524] ? __pfx___mutex_lock+0x10/0x10 [ 739.008140][T14524] ? __pfx_vfs_read+0x10/0x10 [ 739.008169][T14524] ? __fget_files+0x2a/0x420 [ 739.008193][T14524] ? __fget_files+0x39d/0x420 [ 739.008212][T14524] ? __fget_files+0x2a/0x420 [ 739.008243][T14524] ksys_read+0x19d/0x2d0 [ 739.008272][T14524] ? __pfx_ksys_read+0x10/0x10 [ 739.008306][T14524] ? do_syscall_64+0xb6/0x230 [ 739.008338][T14524] do_syscall_64+0xf3/0x230 [ 739.008368][T14524] ? clear_bhb_loop+0x45/0xa0 [ 739.008395][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.008417][T14524] RIP: 0033:0x7f09d498bb7c [ 739.008438][T14524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 739.008458][T14524] RSP: 002b:00007f09d571d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.008483][T14524] RAX: ffffffffffffffda RBX: 00007f09d4ba6160 RCX: 00007f09d498bb7c [ 739.008507][T14524] RDX: 000000000000000f RSI: 00007f09d571d0a0 RDI: 0000000000000004 [ 739.008522][T14524] RBP: 00007f09d571d090 R08: 0000000000000000 R09: 0000000000000000 [ 739.008537][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.008551][T14524] R13: 0000000000000001 R14: 00007f09d4ba6160 R15: 00007f09d4ccfa28 [ 739.008586][T14524] [ 739.313937][T13664] usb 2-1: USB disconnect, device number 37 [ 739.412316][ T975] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 739.422209][ T7836] usb 5-1: device descriptor read/64, error -71 [ 739.452585][T14535] netlink: 254 bytes leftover after parsing attributes in process `syz.2.2605'. [ 739.462220][T14535] netlink: 3812 bytes leftover after parsing attributes in process `syz.2.2605'. [ 739.547049][ T7836] usb usb5-port1: attempt power cycle [ 739.574834][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 739.600773][ T975] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 739.621084][ T975] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 739.629919][ T975] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 739.645384][ T975] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 739.656849][ T975] usb 1-1: config 250 has no interface number 0 [ 739.665709][ T975] usb 1-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 739.696679][ T31] INFO: task kworker/0:2:978 blocked for more than 143 seconds. [ 739.698672][ T975] usb 1-1: config 250 interface 228 has no altsetting 0 [ 739.705667][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 739.715283][ T975] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 739.723318][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 739.734141][ T975] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 739.743538][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 739.743557][ T30] audit: type=1326 audit(1744611797.017:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.3.2609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ed158d169 code=0x0 [ 739.748783][ T975] usb 1-1: Product: syz [ 739.772654][ T31] task:kworker/0:2 state:D stack:19064 pid:978 tgid:978 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 739.794029][ T31] Workqueue: usb_hub_wq hub_event [ 739.799459][ T31] Call Trace: [ 739.802268][ T975] usb 1-1: SerialNumber: syz [ 739.805080][ T31] [ 739.810681][ T31] __schedule+0x1b88/0x5240 [ 739.820814][ T31] ? do_raw_spin_lock+0xc1/0x370 [ 739.821401][ T975] hub 1-1:250.228: bad descriptor, ignoring hub [ 739.832938][ T975] hub 1-1:250.228: probe with driver hub failed with error -5 [ 739.838099][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 739.847818][ T31] ? schedule+0x163/0x360 [ 739.856634][ T31] ? __pfx___schedule+0x10/0x10 [ 739.861683][ T31] ? schedule+0x90/0x360 [ 739.861929][T13664] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 739.867051][ T31] ? schedule+0x90/0x360 [ 739.883736][ T31] schedule+0x163/0x360 [ 739.888683][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 739.897219][ T31] schedule_preempt_disabled+0x13/0x30 [ 739.904430][ T31] __mutex_lock+0x805/0x10c0 [ 739.909178][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 739.920025][ T31] ? hub_event+0x24cd/0x50f0 [ 739.925137][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 739.930242][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 739.936763][ T7836] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 739.944394][ T31] hub_event+0x24cd/0x50f0 [ 739.948887][ T31] ? __pfx_hub_event+0x10/0x10 [ 739.955986][ T31] ? __lock_acquire+0xad5/0xd80 [ 739.960902][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 739.967544][ T31] process_scheduled_works+0xac3/0x18e0 [ 739.973442][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 739.979746][ T31] ? assign_work+0x367/0x3d0 [ 739.984561][ T7836] usb 5-1: device descriptor read/8, error -71 [ 739.990805][ T31] worker_thread+0x870/0xd50 [ 739.995905][ T31] ? __kthread_parkme+0x1a8/0x200 [ 740.000984][ T31] ? __pfx_worker_thread+0x10/0x10 [ 740.006707][ T31] kthread+0x7b7/0x940 [ 740.010825][ T31] ? __pfx_worker_thread+0x10/0x10 [ 740.016032][ T31] ? __pfx_kthread+0x10/0x10 [ 740.020671][ T31] ? __pfx_kthread+0x10/0x10 [ 740.025849][ T31] ? __pfx_kthread+0x10/0x10 [ 740.030552][T13500] usb 1-1: USB disconnect, device number 13 [ 740.030639][ T31] ? __pfx_kthread+0x10/0x10 [ 740.041125][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.046520][T13664] usb 3-1: Using ep0 maxpacket: 8 [ 740.052277][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 740.061511][T13664] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 740.071835][ T31] ? __pfx_kthread+0x10/0x10 [ 740.076500][ T31] ret_from_fork+0x4b/0x80 [ 740.082247][T13664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.090313][T13664] usb 3-1: Product: syz [ 740.094592][ T31] ? __pfx_kthread+0x10/0x10 [ 740.099224][ T31] ret_from_fork_asm+0x1a/0x30 [ 740.104892][ T31] [ 740.107964][T13664] usb 3-1: Manufacturer: syz [ 740.113323][ T31] [ 740.113323][ T31] Showing all locks held in the system: [ 740.121089][ T31] 5 locks held by kworker/u8:0/12: [ 740.126673][T13664] usb 3-1: SerialNumber: syz [ 740.134282][T13664] usb 3-1: config 0 descriptor?? [ 740.139494][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 740.153234][T13664] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 740.159876][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 740.171609][ T31] #2: ffff8880b8625558 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x977/0x10f0 [ 740.182020][ T31] #3: ffffffff9a932db8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x190/0x5c0 [ 740.192629][ T31] #4: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 740.203023][ T31] 1 lock held by khungtaskd/31: [ 740.207932][ T31] #0: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 740.217927][ T31] 5 locks held by kworker/0:2/978: [ 740.223136][ T31] #0: ffff888021aba548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 740.234969][ T7836] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 740.242662][ T31] #1: ffffc900038c7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 740.254849][ T31] #2: ffff888029736198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 740.264442][ T31] #3: ffff8880297e8510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 740.274671][ T31] #4: ffff888029360568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 740.284713][ T7836] usb 5-1: device descriptor read/8, error -71 [ 740.290954][ T31] 2 locks held by getty/5592: [ 740.296055][ T31] #0: ffff88814e5460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 740.305979][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 740.316187][ T31] 4 locks held by udevd/5847: [ 740.320905][ T31] #0: ffff8880339f2668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 740.330316][ T31] #1: ffff8880281b0888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 740.339917][ T31] #2: ffff8880507d25a8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 740.349511][ T31] #3: ffff88807c5c0198 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 740.358994][ T31] 5 locks held by kworker/1:9/7836: [ 740.364506][ T31] #0: ffff888021aba548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 740.375995][ T31] #1: ffffc9001c89fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 740.388216][ T31] #2: ffff888145f99198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 740.397262][ T31] #3: ffff8880289c3510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 740.408654][ T7836] usb usb5-port1: unable to enumerate USB device [ 740.415352][ T31] #4: ffffffff8ec19730 (console_srcu){....}-{0:0}, at: console_flush_all+0x1a5/0xec0 [ 740.425797][ T31] 5 locks held by kworker/1:11/7838: [ 740.431113][ T31] #0: ffff888021aba548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 740.442834][ T31] #1: ffffc9001c87fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 740.454851][ T31] #2: ffff888146799198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 740.463907][ T31] #3: ffff88814679c510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0 [ 740.474365][ T31] #4: ffff888029360568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0 [ 740.484173][ T31] 5 locks held by kworker/1:14/13664: [ 740.489592][ T31] #0: ffff888021aba548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 740.501023][ T31] #1: ffffc9001cb57c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 740.513340][ T31] #2: ffff888145f49198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 740.522452][ T31] #3: ffff88807c5c0198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 740.531856][ T31] #4: ffff888024fb7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 740.541273][ T31] [ 740.547854][ T31] ============================================= [ 740.547854][ T31] [ 740.556437][ T31] NMI backtrace for cpu 1 [ 740.556455][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 740.556481][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 740.556494][ T31] Call Trace: [ 740.556502][ T31] [ 740.556511][ T31] dump_stack_lvl+0x241/0x360 [ 740.556549][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.556578][ T31] ? __pfx__printk+0x10/0x10 [ 740.556617][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 740.556651][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 740.556670][ T31] ? _printk+0xd5/0x120 [ 740.556697][ T31] ? __wake_up_klogd+0xcc/0x110 [ 740.556726][ T31] ? __pfx__printk+0x10/0x10 [ 740.556776][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 740.556800][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 740.556826][ T31] watchdog+0x1058/0x10a0 [ 740.556851][ T31] ? watchdog+0x1ea/0x10a0 [ 740.556878][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.556900][ T31] kthread+0x7b7/0x940 [ 740.556932][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.556954][ T31] ? __pfx_kthread+0x10/0x10 [ 740.556981][ T31] ? __pfx_kthread+0x10/0x10 [ 740.557010][ T31] ? __pfx_kthread+0x10/0x10 [ 740.557038][ T31] ? __pfx_kthread+0x10/0x10 [ 740.557068][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.557088][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 740.557114][ T31] ? __pfx_kthread+0x10/0x10 [ 740.557144][ T31] ret_from_fork+0x4b/0x80 [ 740.557166][ T31] ? __pfx_kthread+0x10/0x10 [ 740.557196][ T31] ret_from_fork_asm+0x1a/0x30 [ 740.557233][ T31] [ 740.557265][ T31] Sending NMI from CPU 1 to CPUs 0: [ 740.724993][ C0] NMI backtrace for cpu 0 [ 740.725013][ C0] CPU: 0 UID: 0 PID: 13500 Comm: kworker/0:1 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 740.725034][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 740.725046][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 740.725073][ C0] RIP: 0010:preempt_count_sub+0x32/0x170 [ 740.725095][ C0] Code: fb 48 c7 c0 80 f6 73 9a 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 d0 00 00 00 83 3d 0e 6c e3 18 00 <75> 22 65 8b 05 b5 45 d8 11 89 c1 81 e1 ff ff ff 7f 39 d9 7c 27 81 [ 740.725110][ C0] RSP: 0018:ffffc9000b807aa0 EFLAGS: 00000246 [ 740.725124][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a73f603 [ 740.725136][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 740.725147][ C0] RBP: ffffc9000b807d20 R08: ffffffff8f86a7a3 R09: 1ffffffff1f0d4f4 [ 740.725160][ C0] R10: dffffc0000000000 R11: fffffbfff1f0d4f5 R12: 0000000000000000 [ 740.725172][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffff8f86a8c0 [ 740.725189][ C0] FS: 0000000000000000(0000) GS:ffff888124f93000(0000) knlGS:0000000000000000 [ 740.725203][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.725215][ C0] CR2: 0000001b3065ffff CR3: 000000007ad1c000 CR4: 00000000003526f0 [ 740.725230][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 740.725240][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 740.725250][ C0] Call Trace: [ 740.725257][ C0] [ 740.725265][ C0] _raw_spin_unlock+0x28/0x50 [ 740.725283][ C0] wg_ratelimiter_gc_entries+0x3ab/0x470 [ 740.725306][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 740.725324][ C0] process_scheduled_works+0xac3/0x18e0 [ 740.725362][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 740.725404][ C0] ? assign_work+0x367/0x3d0 [ 740.725425][ C0] worker_thread+0x870/0xd50 [ 740.725454][ C0] ? __kthread_parkme+0x1a8/0x200 [ 740.725477][ C0] ? __pfx_worker_thread+0x10/0x10 [ 740.725498][ C0] kthread+0x7b7/0x940 [ 740.725523][ C0] ? __pfx_worker_thread+0x10/0x10 [ 740.725545][ C0] ? __pfx_kthread+0x10/0x10 [ 740.725568][ C0] ? __pfx_kthread+0x10/0x10 [ 740.725592][ C0] ? __pfx_kthread+0x10/0x10 [ 740.725616][ C0] ? __pfx_kthread+0x10/0x10 [ 740.725639][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.725656][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 740.725677][ C0] ? __pfx_kthread+0x10/0x10 [ 740.725700][ C0] ret_from_fork+0x4b/0x80 [ 740.725719][ C0] ? __pfx_kthread+0x10/0x10 [ 740.725742][ C0] ret_from_fork_asm+0x1a/0x30 [ 740.725767][ C0] [ 740.729492][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 740.729519][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 740.729548][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 740.729563][ T31] Call Trace: [ 740.729575][ T31] [ 740.729593][ T31] dump_stack_lvl+0x241/0x360 [ 740.729643][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.729678][ T31] ? __pfx__printk+0x10/0x10 [ 740.729719][ T31] ? vscnprintf+0x5d/0x90 [ 740.729745][ T31] panic+0x349/0x880 [ 740.729776][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 740.729803][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 740.729831][ T31] ? __pfx_panic+0x10/0x10 [ 740.729867][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 740.729896][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 740.729920][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 740.729946][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 740.729975][ T31] watchdog+0x1097/0x10a0 [ 740.730003][ T31] ? watchdog+0x1ea/0x10a0 [ 740.730034][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.730058][ T31] kthread+0x7b7/0x940 [ 740.730094][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.730120][ T31] ? __pfx_kthread+0x10/0x10 [ 740.730151][ T31] ? __pfx_kthread+0x10/0x10 [ 740.730183][ T31] ? __pfx_kthread+0x10/0x10 [ 740.730215][ T31] ? __pfx_kthread+0x10/0x10 [ 740.730248][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.730272][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 740.730300][ T31] ? __pfx_kthread+0x10/0x10 [ 740.730334][ T31] ret_from_fork+0x4b/0x80 [ 740.730358][ T31] ? __pfx_kthread+0x10/0x10 [ 740.730392][ T31] ret_from_fork_asm+0x1a/0x30 [ 740.730431][ T31] [ 741.148274][ T31] Kernel Offset: disabled [ 741.152598][ T31] Rebooting in 86400 seconds..