last executing test programs: 8.572255765s ago: executing program 0 (id=2553): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') socket(0x15, 0x5, 0x0) socket$isdn(0x22, 0x2, 0x26) epoll_create1(0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000002940)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000080}}, {{&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x2, 0x4008895) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r6 = socket(0x10, 0x3, 0x0) renameat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1220d4b0c18b010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002000000"], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 8.144304173s ago: executing program 4 (id=2556): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x40}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x29, 0x0, 0xffffffffa1200258, 0xa, 0x7, 0x2, 0x7, 0x0, 0x0, 0x1ab, 0xfffffffe}}, 0x50) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="70010000", @ANYRES16=r5, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe32, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = syz_open_dev$usbmon(&(0x7f0000003600), 0x5, 0x80) ioctl$MON_IOCQ_RING_SIZE(r11, 0x9205) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20002840) io_setup(0x80000000, &(0x7f0000000e80)=0x0) r14 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r13, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r14, &(0x7f0000000080)='d', 0x2}]) 7.599265072s ago: executing program 4 (id=2559): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000880)={0x1, 0x0, {0x3c, 0x400010, 0x1, 0x3, 0x0, 0x800, 0x0, 0x129, 0x1}}) (async) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) sendfile(r2, r2, 0x0, 0x200000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000008020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000030800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10) r7 = syz_open_dev$rtc(&(0x7f0000000040), 0x7fffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0xb, 0x3, 0x200, 0x9}) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r6, 0x4000000, 0x5}, 0x10) (rerun: 32) 7.462101545s ago: executing program 3 (id=2560): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xde, 0x34, 0x43, 0x40, 0x403, 0xfc0a, 0x9510, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd1, 0x0, 0x2, 0xb5, 0x8b, 0xee, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100001600830900bd7000fbdbdf2500000000000000000000000000000001200100000000000000000000000000004e2100044e2200030a00203033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000004d632000000ac1414aa00000000000000000000000009000000000000006ceb000000000000050000000000000004000000000000000d0000000000000085000000000000009d000000000000000a00000000000000ce000000000000008affffffffffffff0600000000000000850200000000000009000000c0ffffff0400000028bd7080000000000a0000af1000000000000000040000001105000008000c00feffffff0c000f000000000000000000"], 0x10c}}, 0x4000880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 7.216391614s ago: executing program 4 (id=2561): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="8e2741a9747bf542bcf52f177f206c8a884899e151c84ff4ce784d5098fac1587b17136ab22469758a0573d89ca104ac6163a36fb807aa0d8c73cedf8d0c75752f24a573b0b5d089333fd1dde0a21add6bb8cbf79bd6c18b6f28", @ANYRES16=r3, @ANYBLOB="010000000000004d1fc20200000008000300", @ANYRES32=r1, @ANYBLOB="08002600b409000008009f0006000000"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000002700)=""/4090, 0xffa}, {&(0x7f0000000000)=""/237, 0xed}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000380)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) preadv(r6, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/16, 0x10}], 0x1, 0x1000000, 0x0) 6.250485388s ago: executing program 4 (id=2566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{&(0x7f0000000100), 0x80, 0x0, 0x0, &(0x7f0000000dc0)=""/224, 0xe0}, 0x7fffffff}, {{&(0x7f0000000ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000001140), 0x0, &(0x7f00000011c0)=""/212, 0xd4}, 0x5}, {{0x0, 0x0, &(0x7f0000005a00)}, 0x3}, {{&(0x7f0000001740)=@generic, 0x80, 0x0, 0x0, &(0x7f0000005b80)=""/222, 0xde}, 0x10}, {{&(0x7f0000005c80)=@x25={0x9, @remote}, 0x80, &(0x7f00000062c0)=[{&(0x7f0000005d00)=""/122, 0x7a}, {&(0x7f0000005d80)=""/214, 0xd6}, {&(0x7f0000005e80)=""/220, 0xdc}, {&(0x7f0000005f80)=""/131, 0x83}, {&(0x7f0000006040)=""/103, 0x67}, {&(0x7f00000060c0)=""/16, 0x10}, {&(0x7f0000006100)=""/49, 0x31}, {&(0x7f0000006140)=""/134, 0x86}, {&(0x7f0000006200)=""/182, 0xb6}], 0x9, &(0x7f0000006380)=""/157, 0x9d}, 0x7}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x0, 0x2, 0xbfdfeffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0xe, 0x2007, @fd=r1, 0x8, 0x0, 0x0, 0x17}) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) fcntl$setlease(r6, 0x400, 0x1) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./bus\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00c1"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8908040400", 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {0x0, 0x1}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40) lseek(r5, 0x2004, 0x0) 5.925246139s ago: executing program 3 (id=2567): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x5d7440, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000003380)) (async) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYBLOB="9797f0cbf8f3d0761cf615bebcf1f54d52b21bead229aacdbdb0dac0d68ebb89a4d833e9d0e59bc323faba6099249727cebb2b981f5635140ed6a1ea25005b1a155126ab05086397e0820371c79cb84b980de5b452f6a673ef99a0721c08f8c87a", @ANYRESHEX=r0, @ANYRES64=r3, @ANYRES8=r5, @ANYRES8=r4, @ANYRES8=0x0, @ANYRES32=r2, @ANYRES32=r0, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32=r8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYRES64], 0x50}}, 0x20008000) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="cf0402000000000000f81200000008000300", @ANYRES32=r12, @ANYBLOB="040013000a000600080211000001000006001a01010000000600120000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) 5.37199557s ago: executing program 0 (id=2569): pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 4.721405278s ago: executing program 0 (id=2571): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lseek(r0, 0x4, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) capget(0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000008fc0)={0x0, 0x0, &(0x7f0000008f80)={&(0x7f0000008f00)=ANY=[@ANYBLOB="1c0000000203011cc32d57ba16005500000000000800010001000000"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x4c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000303010200000000278f17c11a84c060"], 0x14}}, 0x0) 4.40216792s ago: executing program 1 (id=2572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e09740014000480080001400000000108000240"], 0xa4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5425, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x40) syz_io_uring_setup(0x20a2, &(0x7f0000000140)={0x0, 0xaee2, 0x1, 0x2, 0xbfdffffb, 0x0, r4}, &(0x7f0000000000), &(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) io_uring_enter(r8, 0x47ba, 0x1595, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc0c1) 4.214222935s ago: executing program 3 (id=2573): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (fail_nth: 2) 3.789415477s ago: executing program 1 (id=2574): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0xb, 0x0, [@dev, @empty]}, @cipso={0x86, 0x2f, 0x0, [{0x0, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}]}}}}}}}, 0x0) 3.638452677s ago: executing program 3 (id=2576): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="8e2741a9747bf542bcf52f177f206c8a884899e151c84ff4ce784d5098fac1587b17136ab22469758a0573d89ca104ac6163a36fb807aa0d8c73cedf8d0c75752f24a573b0b5d089333fd1dde0a21add6bb8cbf79bd6c18b6f28", @ANYRES16=r3, @ANYBLOB="010000000000004d1fc20200000008000300", @ANYRES32=r1, @ANYBLOB="08002600b409000008009f0006000000"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000002700)=""/4090, 0xffa}, {&(0x7f0000000000)=""/237, 0xed}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000380)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) preadv(r6, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/16, 0x10}], 0x1, 0x1000000, 0x0) 3.530727171s ago: executing program 2 (id=2577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) r2 = dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffd, 0x80000, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe}, {0x0, 0x0, 0x10000, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x3500, 0x3, 0x3, 0x4, 0x0, 0x57e}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x39c33f082c641d23}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r6, 0x0, 0x578410eb) 3.523671593s ago: executing program 1 (id=2578): r0 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) close(r0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc'], 0x600}, 0x0) 2.99729862s ago: executing program 0 (id=2579): pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 2.986684475s ago: executing program 1 (id=2580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r2, 0x5423, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCSETSW2(r5, 0x5434, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x81, 0xfffffffb}) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, &(0x7f0000000140)=""/58, 0x3a, &(0x7f0000000100)={&(0x7f0000000080)={'sha1-ssse3\x00'}}) 2.619153251s ago: executing program 3 (id=2581): pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600) 2.124779859s ago: executing program 4 (id=2582): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$KVM_NMI(r1, 0xae9a) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x10000000010000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0xff, 0xfffffffd, 0x8, 0xfe2, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "3319f0bf"}, @global=@item_4={0x3, 0x1, 0x9, "467f0b83"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) ioctl$KVM_NMI(r1, 0xae9a) (async) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) (async) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x10000000010000}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0xff, 0xfffffffd, 0x8, 0xfe2, 0x2}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "3319f0bf"}, @global=@item_4={0x3, 0x1, 0x9, "467f0b83"}]}}, 0x0}, 0x0) (async) 1.993314101s ago: executing program 3 (id=2583): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xfe, 0xec, 0x48, 0x8, 0x61d, 0xc120, 0xe367, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0x1f, 0xe3}}]}}]}}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) (rerun: 64) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x1, &(0x7f000023d000/0x4000)=nil, &(0x7f00007fe000/0x2000)=nil, 0x7, &(0x7f0000000000)=[{0xcc2, 0x1c, 0xd}, {0xfc9c, 0x10000, 0x7fff}, {0x4, 0x1, 0x7fffffff}], 0x43, 0x3, 0x2, 0x0, 0x0, 0x20}) 1.993079714s ago: executing program 0 (id=2584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x26, 0xa, 0x2, "3258c546dacccfae1e008faa0202000000000000000000000000000000b28d00", 0x32314d59}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r2, @ANYBLOB="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"], 0x8c8}}, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.72263293s ago: executing program 0 (id=2585): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x32cc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) lstat(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x100, 0x70, 0x8, 0x1ff, 0x7, 0x100, 0xfeba, 0x2000000, 0x8000, 0x8, 0x100, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)) syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0b89ce880e028cc1ae74ac4a6c224fc5bb2a8e85b64a6dab7ef8bdd89a5afd53fa062b11cfb1afab7d3919dd03a4ad56866b2646dc8aec09ff494024a9c4e31cec60324a0fb961de51aee6cac80334ef8f21c3846c2dabc7cf21f6d353fdfdf52727e9fa8c77f88acaad49f8fb514d48e4b9d3975e8310418a49c47e993f62a26b71764e0981be719e477dad7a25cb989aeed64e6b0a3d95596ec20d287c4f2287e8138160b8a2", @ANYRESOCT=r1, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x0) 1.494551866s ago: executing program 2 (id=2586): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (fail_nth: 3) 1.089537085s ago: executing program 2 (id=2587): pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00'], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0xfffe, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 891.496961ms ago: executing program 2 (id=2588): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0xb, 0x0, [@dev, @empty]}, @cipso={0x86, 0x2f, 0x0, [{0x0, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0294e2a3bdb4aa40b24"}]}]}}}}}}}, 0x0) 692.51292ms ago: executing program 2 (id=2589): r0 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x1e, 0x4, 0x0) (rerun: 64) r2 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x10001, 0x0, 0x73e77d15, 0x8, 0x5, 0x927}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async, rerun: 32) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) dup3(r2, r1, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/15, 0xf}], 0x2}, 0x7fff}], 0x1, 0x40000001, 0x0) (rerun: 64) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x8, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) (async, rerun: 32) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x10000000000002c7}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'ipvlan1\x00', {}, 0x6}) (async, rerun: 64) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r10, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) (async) socket(0x840000000002, 0x3, 0xfa) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r10, 0x8871b000) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x937, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) 613.503458ms ago: executing program 1 (id=2590): r0 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) close(r0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc'], 0x604}, 0x0) 311.350145ms ago: executing program 4 (id=2591): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3], 0x44}}, 0x0) 137.718381ms ago: executing program 1 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x5e2, 0x3, 0x0, 0x0, 0x4], [0x2000002, 0x2, 0xc, 0xfffffff0]], '\x00', [{}, {0x0, 0x800}, {0xffffffff, 0x4}, {0xffffffff}, {0x0, 0xe}, {}, {0x0, 0xffffffff}, {0x0, 0xffeffffc}, {0x1}, {0x1ff}, {0x0, 0xc70}, {0x0, 0x80a2}], '\x00', 0x0, 0x0, 0x0, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004"], 0x188}}, 0x0) 0s ago: executing program 2 (id=2593): pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_init(0x200, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7ffd) kernel console output (not intermixed with test programs): 8438][T10844] usb 4-1: SerialNumber: syz [ 696.257505][T10844] usb 4-1: config 0 descriptor?? [ 696.294060][T14023] truncated [ 696.297334][T14023] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 696.364408][ T5887] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 696.381303][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 696.391638][ T5887] usb 2-1: can't read configurations, error -61 [ 696.414011][T14006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.427362][T14006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.447617][T10791] usbhid 3-1:0.0: can't add hid device: -71 [ 696.460452][T10791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 696.471613][T10791] usb 3-1: USB disconnect, device number 54 [ 696.524072][ T5887] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 696.710701][ T5887] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 696.720939][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 696.736070][ T5887] usb 2-1: can't read configurations, error -61 [ 696.743945][ T5887] usb usb2-port1: attempt power cycle [ 696.927389][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 697.072774][ T24] usb 5-1: device descriptor read/64, error -71 [ 697.215890][ T5887] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 697.276307][ T5887] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 697.299731][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 697.326697][ T5887] usb 2-1: can't read configurations, error -61 [ 697.329630][T14030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2316'. [ 697.352961][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 697.360905][T14030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2316'. [ 697.408255][T14030] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2316'. [ 697.582794][ T24] usb 5-1: device descriptor read/64, error -71 [ 697.589341][ T5887] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 697.648985][ T5887] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 697.661921][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 697.683782][ T5887] usb 2-1: can't read configurations, error -61 [ 697.703805][ T24] usb usb5-port1: attempt power cycle [ 697.711835][ T5887] usb usb2-port1: unable to enumerate USB device [ 697.763114][ T5889] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 697.933021][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 697.941609][ T5889] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 697.971410][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 697.981852][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 698.001464][ T5889] usb 3-1: Product: syz [ 698.015532][ T5889] usb 3-1: Manufacturer: syz [ 698.028243][ T5889] usb 3-1: SerialNumber: syz [ 698.060907][ T5889] usb 3-1: config 0 descriptor?? [ 698.072849][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 698.090599][ T5889] pwc: Philips SPC 880NC USB webcam detected. [ 698.174355][ T24] usb 5-1: device descriptor read/8, error -71 [ 698.290455][T14030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.303378][T14030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.344603][T14030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.378641][T14030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.522918][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 699.034564][T14036] loop8: detected capacity change from 0 to 7 [ 699.064982][T14036] Dev loop8: unable to read RDB block 7 [ 699.070681][T14036] loop8: AHDI p1 p3 p4 [ 699.112037][T14036] loop8: partition table partially beyond EOD, truncated [ 699.155841][T14036] loop8: p1 start 975770946 is beyond EOD, truncated [ 699.532804][T14036] loop8: p3 start 6514546 is beyond EOD, truncated [ 699.816886][T10844] usb 4-1: USB disconnect, device number 76 [ 700.786529][ T24] usb 5-1: device descriptor read/8, error -71 [ 700.788146][T14031] syz.2.2316 (14031): drop_caches: 2 [ 700.871239][ T5889] pwc: Warning: more than 1 configuration available. [ 700.907424][ T5889] pwc: Failed to set LED on/off time (-71) [ 700.933818][ T24] usb usb5-port1: unable to enumerate USB device [ 700.958230][ T5889] pwc: send_video_command error -71 [ 700.978948][ T5889] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 701.007524][ T5889] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 701.016356][T14052] IPVS: set_ctl: invalid protocol: 4 172.30.0.3:64 [ 701.066300][ T5889] usb 3-1: USB disconnect, device number 55 [ 701.125441][T14058] loop8: detected capacity change from 0 to 8 [ 701.135923][T14058] Dev loop8: unable to read RDB block 8 [ 701.147302][T14058] loop8: unable to read partition table [ 701.202858][T14058] loop8: partition table beyond EOD, truncated [ 701.298571][T14058] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 701.354376][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2327'. [ 701.372988][ T5887] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 701.388359][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'. [ 701.558256][ T5887] usb 2-1: no configurations [ 701.571307][ T5887] usb 2-1: can't read configurations, error -22 [ 701.672921][ T5918] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 701.777021][ T5887] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 702.039811][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 702.049911][ T5918] usb 3-1: not running at top speed; connect to a high speed hub [ 702.103193][ T5918] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 702.115305][ T5887] usb 2-1: no configurations [ 702.120091][ T5887] usb 2-1: can't read configurations, error -22 [ 702.136177][ T5887] usb usb2-port1: attempt power cycle [ 702.141829][ T5918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 702.168391][ T5918] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.178398][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.188344][ T5918] usb 3-1: Product: syz [ 702.196346][ T5918] usb 3-1: Manufacturer: syz [ 702.215439][ T5918] usb 3-1: SerialNumber: syz [ 702.353464][ T5889] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 702.487181][ T5918] usb 3-1: 0:2 : does not exist [ 702.492576][ T5918] usb 3-1: unit 4 not found! [ 702.503084][ T5887] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 702.511027][ T5918] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 702.512854][T10844] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 702.526797][ T5918] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 702.530228][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.553700][ T5887] usb 2-1: no configurations [ 702.558733][ T5887] usb 2-1: can't read configurations, error -22 [ 702.592940][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.620759][ T5918] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 702.651809][ T5918] usb 3-1: USB disconnect, device number 56 [ 702.689305][ T5889] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 702.705640][ T5887] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 702.724891][T10844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.752084][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.761589][ T5887] usb 2-1: no configurations [ 702.768204][T10844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.772770][ T5887] usb 2-1: can't read configurations, error -22 [ 702.788728][T10844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.796406][ T5887] usb usb2-port1: unable to enumerate USB device [ 702.803448][ T5889] usb 5-1: config 0 descriptor?? [ 702.875917][ T5889] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 702.889658][T10844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.904564][T10844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.919298][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.954436][T10844] usb 4-1: config 0 descriptor?? [ 703.378744][T10844] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 703.403529][T10844] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 703.439567][T10844] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 703.956074][T10844] usb 5-1: USB disconnect, device number 53 [ 704.447509][T10844] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 704.641998][T10844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.696943][T10844] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 704.733047][T10844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.770750][T10844] usb 5-1: config 0 descriptor?? [ 704.802938][ T9] usb 4-1: reset high-speed USB device number 77 using dummy_hcd [ 705.367076][T14101] netlink: 'syz.0.2339': attribute type 4 has an invalid length. [ 705.392837][ T5890] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 705.703153][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 705.839970][ T5890] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.860681][ T5889] usb 4-1: USB disconnect, device number 77 [ 705.871199][ T5890] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.913842][ T5887] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 706.087562][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 706.089564][ T5887] usb 2-1: device descriptor read/64, error -71 [ 706.163263][ T5890] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 706.172613][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.194456][ T5890] usb 3-1: config 0 descriptor?? [ 706.355929][ T5887] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 706.572799][ T5887] usb 2-1: device descriptor read/64, error -71 [ 706.704839][ T5887] usb usb2-port1: attempt power cycle [ 706.745518][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 706.777389][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 706.821603][ T5890] usb 3-1: USB disconnect, device number 57 [ 707.109029][T10844] usbhid 5-1:0.0: can't add hid device: -71 [ 707.135286][ T5887] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 707.165036][T10844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 707.183805][ T5887] usb 2-1: device descriptor read/8, error -71 [ 707.233281][T10844] usb 5-1: USB disconnect, device number 54 [ 707.242851][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 707.483085][ T5887] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 707.544636][ T9] usb 4-1: config 0 has no interfaces? [ 707.553210][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 707.566190][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.586510][ T9] usb 4-1: Product: syz [ 707.595675][ T9] usb 4-1: Manufacturer: syz [ 707.600319][ T9] usb 4-1: SerialNumber: syz [ 707.618374][ T5887] usb 2-1: device descriptor read/8, error -71 [ 707.643655][ T9] usb 4-1: config 0 descriptor?? [ 707.699223][T10844] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 707.803055][ T5887] usb usb2-port1: unable to enumerate USB device [ 707.889374][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.899753][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.935537][T10844] usb 5-1: no configurations [ 707.940573][T10844] usb 5-1: can't read configurations, error -22 [ 707.965237][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.978827][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.073344][T10844] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 708.566776][T10844] usb 5-1: no configurations [ 708.571507][T10844] usb 5-1: can't read configurations, error -22 [ 708.579031][T10844] usb usb5-port1: attempt power cycle [ 708.925126][T10844] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 708.964525][T10844] usb 5-1: no configurations [ 708.986041][T10844] usb 5-1: can't read configurations, error -22 [ 709.133593][T10844] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 709.247824][T10844] usb 5-1: no configurations [ 709.256459][T10844] usb 5-1: can't read configurations, error -22 [ 709.283074][T10844] usb usb5-port1: unable to enumerate USB device [ 709.489307][ T30] audit: type=1326 audit(1743759895.984:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.511876][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.549692][ T30] audit: type=1326 audit(1743759896.024:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.659176][ T30] audit: type=1326 audit(1743759896.024:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.689972][ T30] audit: type=1326 audit(1743759896.024:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.712367][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.738829][ T30] audit: type=1326 audit(1743759896.024:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.761340][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.783456][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 709.842103][T10844] usb 4-1: USB disconnect, device number 78 [ 709.890884][ T30] audit: type=1326 audit(1743759896.024:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.913265][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.922157][ T30] audit: type=1326 audit(1743759896.024:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.944657][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.953178][ T30] audit: type=1326 audit(1743759896.024:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 709.975626][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.983743][ T30] audit: type=1326 audit(1743759896.024:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb9b8d169 code=0x7ffc0000 [ 710.010608][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 710.020327][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.031459][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 710.041347][ T30] audit: type=1326 audit(1743759896.024:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.2.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbb9b29359 code=0x7ffc0000 [ 710.086939][ T9] usb 3-1: config 1 has no interface number 1 [ 710.104816][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 710.159720][ T9] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.203739][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.216572][T14172] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2354'. [ 710.236722][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.245724][ T9] usb 3-1: Product: syz [ 710.250090][ T9] usb 3-1: Manufacturer: syz [ 710.261870][ T9] usb 3-1: SerialNumber: syz [ 710.327849][T14175] netlink: 'syz.0.2354': attribute type 10 has an invalid length. [ 710.351054][T14175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'. [ 710.374469][T14175] batadv0: entered promiscuous mode [ 710.387055][T14175] batadv0: entered allmulticast mode [ 710.394220][T14175] bridge0: port 1(batadv0) entered blocking state [ 710.401015][T14175] bridge0: port 1(batadv0) entered disabled state [ 710.519157][T14180] warn_alloc: 1 callbacks suppressed [ 710.519179][T14180] syz.3.2356: vmalloc error: size 7569408, failed to allocated page array size 14784, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 710.548746][T14180] CPU: 1 UID: 0 PID: 14180 Comm: syz.3.2356 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 710.548780][T14180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 710.548795][T14180] Call Trace: [ 710.548804][T14180] [ 710.548814][T14180] dump_stack_lvl+0x241/0x360 [ 710.548852][T14180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.548883][T14180] ? __pfx__printk+0x10/0x10 [ 710.548912][T14180] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 710.548946][T14180] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 710.548975][T14180] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 710.549008][T14180] warn_alloc+0x27c/0x410 [ 710.549036][T14180] ? __pfx_warn_alloc+0x10/0x10 [ 710.549063][T14180] ? translate_table+0x1a1/0x22e0 [ 710.549090][T14180] ? __get_vm_area_node+0x1c8/0x2d0 [ 710.549120][T14180] ? __get_vm_area_node+0x25c/0x2d0 [ 710.549156][T14180] __vmalloc_node_range_noprof+0x634/0x1390 [ 710.549207][T14180] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 710.549227][T14180] ? __kasan_kmalloc_large+0x1a/0xa0 [ 710.549259][T14180] ? translate_table+0x1a1/0x22e0 [ 710.549289][T14180] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 710.549321][T14180] ? translate_table+0x1a1/0x22e0 [ 710.549348][T14180] ? xt_alloc_table_info+0x3d/0xa0 [ 710.549377][T14180] ? translate_table+0x1a1/0x22e0 [ 710.549413][T14180] translate_table+0x1a1/0x22e0 [ 710.549481][T14180] ? __pfx_translate_table+0x10/0x10 [ 710.549533][T14180] ? copy_from_sockptr_offset+0x60/0xb0 [ 710.549567][T14180] do_arpt_set_ctl+0x101b/0x1650 [ 710.549605][T14180] ? __mutex_trylock_common+0x184/0x2e0 [ 710.549634][T14180] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 710.549668][T14180] ? __pfx___mutex_trylock_common+0x10/0x10 [ 710.549716][T14180] ? __mutex_unlock_slowpath+0x229/0x800 [ 710.549750][T14180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 710.549774][T14180] ? aa_sk_perm+0x96f/0xac0 [ 710.549807][T14180] ? __lock_acquire+0xad5/0xd80 [ 710.549828][T14180] ? __pfx_aa_sk_perm+0x10/0x10 [ 710.549859][T14180] nf_setsockopt+0x295/0x2c0 [ 710.549894][T14180] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 710.549921][T14180] do_sock_setsockopt+0x3b1/0x710 [ 710.549953][T14180] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 710.549976][T14180] ? __fget_files+0x2a/0x420 [ 710.549995][T14180] ? __fget_files+0x39d/0x420 [ 710.550009][T14180] ? __fget_files+0x2a/0x420 [ 710.550030][T14180] __x64_sys_setsockopt+0x1ee/0x280 [ 710.550054][T14180] do_syscall_64+0xf3/0x230 [ 710.550073][T14180] ? clear_bhb_loop+0x45/0xa0 [ 710.550093][T14180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.550109][T14180] RIP: 0033:0x7f6698f8d169 [ 710.550126][T14180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.550141][T14180] RSP: 002b:00007f6696dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 710.550160][T14180] RAX: ffffffffffffffda RBX: 00007f66991a6080 RCX: 00007f6698f8d169 [ 710.550173][T14180] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 710.550183][T14180] RBP: 00007f669900e2a0 R08: 0000000000000068 R09: 0000000000000000 [ 710.550194][T14180] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 710.550205][T14180] R13: 0000000000000000 R14: 00007f66991a6080 R15: 00007f66992cfa28 [ 710.550232][T14180] [ 710.551827][T14180] Mem-Info: [ 710.565436][ T9] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 710.604282][T14180] active_anon:23570 inactive_anon:0 isolated_anon:0 [ 710.604282][T14180] active_file:20408 inactive_file:38587 isolated_file:0 [ 710.604282][T14180] unevictable:768 dirty:99 writeback:0 [ 710.604282][T14180] slab_reclaimable:10547 slab_unreclaimable:98457 [ 710.604282][T14180] mapped:31868 shmem:17739 pagetables:1209 [ 710.604282][T14180] sec_pagetables:5 bounce:0 [ 710.604282][T14180] kernel_misc_reclaimable:0 [ 710.604282][T14180] free:1281272 free_pcp:3086 free_cma:0 [ 710.937283][T10791] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 710.967297][T14180] Node 0 active_anon:94296kB inactive_anon:0kB active_file:81520kB inactive_file:154288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127448kB dirty:400kB writeback:0kB shmem:69428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11780kB pagetables:4828kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB [ 711.000863][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.012280][T14180] Node 1 active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 711.024804][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 711.056274][T14175] bridge0: port 1(batadv0) entered blocking state [ 711.063004][T14175] bridge0: port 1(batadv0) entered forwarding state [ 711.077466][T14180] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.122907][T10791] usb 1-1: Using ep0 maxpacket: 16 [ 711.129952][T14180] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 711.138896][T10791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.156475][T10791] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 711.175753][T14180] Node 0 DMA32 free:1196900kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:94524kB inactive_anon:0kB active_file:81520kB inactive_file:154196kB unevictable:1536kB writepending:412kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:13044kB local_pcp:11760kB free_cma:0kB [ 711.214124][ T9] usb 3-1: USB disconnect, device number 58 [ 711.220267][T10791] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 711.240272][T10791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.293086][T14180] lowmem_reserve[]: 0 0 0 0 0 [ 711.300179][T14180] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 711.326919][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.453802][T10791] usb 1-1: config 0 descriptor?? [ 711.459345][ T3480] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 711.468786][ T3480] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 711.496085][T14180] lowmem_reserve[]: 0 0 0 0 0 [ 711.512272][T10791] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 711.520904][T14180] Node 1 Normal free:3911384kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:468kB local_pcp:464kB free_cma:0kB [ 711.677630][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.685285][T14180] lowmem_reserve[]: 0 0 0 0 0 [ 711.714046][T14180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 711.806406][T14180] Node 0 DMA32: 41*4kB (UE) 711*8kB (UME) 552*16kB (UME) 687*32kB (UME) 376*64kB (UME) 246*128kB (UME) 178*256kB (UME) 111*512kB (UME) 91*1024kB (UME) 15*2048kB (UME) 214*4096kB (UM) = 1195068kB [ 711.882153][T14180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 711.915677][T14180] Node 1 Normal: 222*4kB (UME) 32*8kB (UME) 38*16kB (UME) 198*32kB (UME) 87*64kB (UME) 33*128kB (UME) 13*256kB (UME) 6*512kB (UME) 2*1024kB (U) 1*2048kB (M) 948*4096kB (UM) = 3911384kB [ 711.980896][T14180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.012870][T14180] Node 0 hugepages_total=7 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 712.022488][T14180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.068063][T14180] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 712.092949][T14180] 77828 total pagecache pages [ 712.199143][T14180] 8 pages in swap cache [ 712.281205][T14180] Free swap = 118852kB [ 712.327339][T14180] Total swap = 124996kB [ 712.362174][T14180] 2097051 pages RAM [ 712.386082][T14180] 0 pages HighMem/MovableOnly [ 712.433754][T14180] 428577 pages reserved [ 712.468447][T14180] 0 pages cma reserved [ 712.749984][T14192] fuse: Bad value for 'rootmode' [ 712.893125][ T5887] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 713.062843][ T5887] usb 3-1: device descriptor read/64, error -71 [ 713.167469][ T5918] usb 1-1: USB disconnect, device number 38 [ 713.282796][T10791] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 713.302803][ T5887] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 713.582873][ T5887] usb 3-1: device descriptor read/64, error -71 [ 713.589388][T10791] usb 4-1: device descriptor read/64, error -71 [ 713.703322][ T5887] usb usb3-port1: attempt power cycle [ 713.823955][ T5918] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 713.833979][T10791] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 713.989461][T10791] usb 4-1: device descriptor read/64, error -71 [ 714.032925][ T5918] usb 1-1: config 0 has no interfaces? [ 714.069533][ T5918] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 714.098795][ T5887] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 714.142100][T10791] usb usb4-port1: attempt power cycle [ 714.147731][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.158864][ T5918] usb 1-1: Product: syz [ 714.169403][ T5918] usb 1-1: Manufacturer: syz [ 714.174688][ T5918] usb 1-1: SerialNumber: syz [ 714.182551][ T5887] usb 3-1: device descriptor read/8, error -71 [ 714.202826][ T5918] usb 1-1: config 0 descriptor?? [ 714.418691][T14210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.427773][T14210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.444854][T14210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.456995][T14210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.464862][ T5887] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 714.529574][T10791] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 714.539753][ T5918] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 714.561222][ T5887] usb 3-1: device descriptor read/8, error -71 [ 714.569013][T10791] usb 4-1: device descriptor read/8, error -71 [ 714.716179][ T5918] usb 2-1: no configurations [ 714.728219][ T5918] usb 2-1: can't read configurations, error -22 [ 714.736106][ T5887] usb usb3-port1: unable to enumerate USB device [ 714.872913][T10791] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 714.881979][ T5918] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 714.924895][T10791] usb 4-1: device descriptor read/8, error -71 [ 715.004353][T14224] loop8: detected capacity change from 0 to 7 [ 715.020463][T14224] Dev loop8: unable to read RDB block 7 [ 715.026672][T14224] loop8: AHDI p1 p3 p4 [ 715.031434][T14224] loop8: partition table partially beyond EOD, truncated [ 715.048118][T14224] loop8: p1 start 975770946 is beyond EOD, truncated [ 715.055922][T10791] usb usb4-port1: unable to enumerate USB device [ 715.064931][T14224] loop8: p3 start 2103666546 is beyond EOD, truncated [ 715.106003][ T5918] usb 2-1: no configurations [ 715.110663][ T5918] usb 2-1: can't read configurations, error -22 [ 715.127723][ T5918] usb usb2-port1: attempt power cycle [ 715.285496][T14226] loop8: detected capacity change from 0 to 8 [ 715.294537][T14226] Dev loop8: unable to read RDB block 8 [ 715.353092][T14226] loop8: unable to read partition table [ 715.366106][T14226] loop8: partition table beyond EOD, truncated [ 715.373260][T14226] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 715.496450][ T5918] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 715.530171][ T5918] usb 2-1: no configurations [ 715.535411][ T5918] usb 2-1: can't read configurations, error -22 [ 715.697631][ T5918] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 715.756871][ T5918] usb 2-1: no configurations [ 715.761605][ T5918] usb 2-1: can't read configurations, error -22 [ 715.769456][ T5918] usb usb2-port1: unable to enumerate USB device [ 715.787348][T14231] input: syz0 as /devices/virtual/input/input53 [ 716.184856][T14238] loop8: detected capacity change from 0 to 7 [ 716.223880][T14238] Dev loop8: unable to read RDB block 7 [ 716.245939][T14238] loop8: AHDI p1 p3 p4 [ 716.272410][T14238] loop8: partition table partially beyond EOD, truncated [ 716.286392][T14238] loop8: p1 start 975770946 is beyond EOD, truncated [ 716.303353][T14238] loop8: p3 start 2103666546 is beyond EOD, truncated [ 716.692079][ T9] usb 1-1: USB disconnect, device number 39 [ 716.902889][ T5887] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 717.102911][ T5887] usb 3-1: device descriptor read/64, error -71 [ 717.352897][ T5887] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 717.534754][ T5887] usb 3-1: device descriptor read/64, error -71 [ 717.553608][T14263] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 717.674246][ T5887] usb usb3-port1: attempt power cycle [ 717.674787][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 717.674807][ T30] audit: type=1326 audit(1743759904.174:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14267 comm="syz.0.2382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4ea58d169 code=0x0 [ 717.774384][T14266] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 717.846877][T10861] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 717.855931][T14263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.088881][T10863] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 718.105020][T14266] veth7: entered promiscuous mode [ 718.114787][T14266] bond0: (slave veth7): Enslaving as a backup interface with a down link [ 718.123695][ T5887] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 718.185806][ T5887] usb 3-1: device descriptor read/8, error -71 [ 718.292805][T10791] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 718.462782][ T5887] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 719.157563][ T5887] usb 3-1: device descriptor read/8, error -71 [ 719.207273][ T30] audit: type=1326 audit(1743759905.704:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b9cb8d169 code=0x0 [ 719.313058][ T5887] usb usb3-port1: unable to enumerate USB device [ 719.382876][T10844] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 719.430233][T10791] usb 1-1: config index 0 descriptor too short (expected 65535, got 77) [ 719.440157][T10791] usb 1-1: config 2 has too many interfaces: 127, using maximum allowed: 32 [ 719.449012][T10791] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 719.470266][T10791] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 127 [ 719.533013][T10844] usb 2-1: device descriptor read/64, error -71 [ 719.562184][T10791] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 719.574183][T10791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.585664][T10791] usb 1-1: Product: syz [ 719.589981][T10791] usb 1-1: Manufacturer: syz [ 719.597573][T10791] usb 1-1: SerialNumber: syz [ 719.735399][T14282] netlink: 'syz.4.2384': attribute type 12 has an invalid length. [ 719.773070][T10844] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 719.912790][T10844] usb 2-1: device descriptor read/64, error -71 [ 720.003013][ T5890] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 720.039471][T10844] usb usb2-port1: attempt power cycle [ 720.152853][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 720.179878][ T5890] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 720.272563][ T5890] usb 5-1: config 0 has no interface number 0 [ 720.313250][ T5890] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 720.357453][ T5890] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 720.411704][ T5890] usb 5-1: config 0 interface 41 has no altsetting 0 [ 720.419799][T10844] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 720.448584][T10844] usb 2-1: device descriptor read/8, error -71 [ 720.458846][ T5890] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 720.487297][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.504438][ T5890] usb 5-1: Product: syz [ 720.512522][ T5890] usb 5-1: Manufacturer: syz [ 720.520898][ T5890] usb 5-1: SerialNumber: syz [ 720.534496][ T5890] usb 5-1: config 0 descriptor?? [ 720.545090][T14282] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 720.559663][T14282] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 720.597187][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2392'. [ 720.722876][T10844] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 720.786515][T14282] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 720.834149][T14282] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 720.890159][T10844] usb 2-1: device descriptor read/8, error -71 [ 720.904318][T14308] cgroup: fork rejected by pids controller in /syz2 [ 721.073852][T10844] usb usb2-port1: unable to enumerate USB device [ 721.334600][T14282] loop8: detected capacity change from 0 to 8 [ 721.375414][T14282] Dev loop8: unable to read RDB block 8 [ 721.381427][T14282] loop8: unable to read partition table [ 721.430039][T14282] loop8: partition table beyond EOD, truncated [ 721.487871][T14282] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 721.655362][ T5890] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 721.784294][T10791] usb 1-1: USB disconnect, device number 40 [ 721.885629][ T5890] usb 5-1: USB disconnect, device number 59 [ 722.752490][ T5850] syz-executor (5850) used greatest stack depth: 18328 bytes left [ 722.949720][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.211231][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.583932][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.926398][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.694889][T14360] netlink: 'syz.3.2407': attribute type 119 has an invalid length. [ 724.764977][T14363] loop8: detected capacity change from 0 to 8 [ 724.783328][T14363] Dev loop8: unable to read RDB block 8 [ 724.792304][T14363] loop8: unable to read partition table [ 724.834965][T14363] loop8: partition table beyond EOD, truncated [ 724.842064][T14363] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 724.858070][ T53] team0: left allmulticast mode [ 724.876496][ T53] team_slave_0: left allmulticast mode [ 724.891597][ T53] team_slave_1: left allmulticast mode [ 724.904127][ T53] batadv1: left allmulticast mode [ 724.915093][ T53] team0: left promiscuous mode [ 724.947204][ T53] team_slave_0: left promiscuous mode [ 724.967848][ T53] team_slave_1: left promiscuous mode [ 724.979593][ T53] batadv1: left promiscuous mode [ 724.998378][ T53] bridge0: port 3(team0) entered disabled state [ 725.052799][ T5918] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 725.079967][ T53] bridge_slave_1: left allmulticast mode [ 725.127068][ T53] bridge_slave_1: left promiscuous mode [ 725.157765][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.193099][ T5918] usb 5-1: device descriptor read/64, error -71 [ 725.253855][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.267056][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.279865][ T53] bridge_slave_0: left allmulticast mode [ 725.283840][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.299706][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.307798][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.407230][ T53] bridge_slave_0: left promiscuous mode [ 725.423093][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.502982][ T5918] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 726.275536][ T5918] usb 5-1: device descriptor read/64, error -71 [ 726.623386][ T5918] usb usb5-port1: attempt power cycle [ 726.825472][ T53] dvmrp0 (unregistering): left allmulticast mode [ 726.942958][ T5890] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 727.173793][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 727.204402][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.225274][ T5918] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 727.252511][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.316787][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 727.364607][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 727.392850][T13710] Bluetooth: hci1: command tx timeout [ 727.401420][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.417854][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 727.427955][ T5890] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 727.436228][ T5890] usb 2-1: Manufacturer: syz [ 727.459044][ T5890] usb 2-1: config 0 descriptor?? [ 728.277391][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.379738][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.454758][ T53] bond0 (unregistering): Released all slaves [ 728.671144][ T5918] usb 5-1: device descriptor read/8, error -71 [ 729.141348][ T53] bond1 (unregistering): Released all slaves [ 729.257869][T14336] syz.0.2399 (14336): drop_caches: 1 [ 729.398515][ T53] bond2 (unregistering): Released all slaves [ 729.480150][T13710] Bluetooth: hci1: command tx timeout [ 729.559063][T14411] sctp: [Deprecated]: syz.0.2415 (pid 14411) Use of int in max_burst socket option. [ 729.559063][T14411] Use struct sctp_assoc_value instead [ 729.575149][ T53] tipc: Disabling bearer [ 729.604387][ T53] tipc: Left network mode [ 729.710322][ T53] IPVS: stopping backup sync thread 11762 ... [ 730.044294][ T5890] rc_core: IR keymap rc-hauppauge not found [ 730.082978][ T5890] Registered IR keymap rc-empty [ 730.088734][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2419'. [ 730.096089][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.161416][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.197387][T14426] loop8: detected capacity change from 0 to 8 [ 730.204078][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 730.222181][T14426] Dev loop8: unable to read RDB block 8 [ 730.237913][T14426] loop8: unable to read partition table [ 730.240839][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54 [ 730.265616][T14426] loop8: partition table beyond EOD, truncated [ 730.312987][T14426] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 730.368618][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.446046][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.497265][ T53] hsr_slave_0: left promiscuous mode [ 730.503503][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.549074][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.558914][ T53] hsr_slave_1: left promiscuous mode [ 730.568231][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.593011][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.614827][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.642855][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.655735][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.703248][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.735284][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.750434][ T53] veth1_macvtap: left promiscuous mode [ 730.757196][ T53] veth0_macvtap: left promiscuous mode [ 730.764132][ T53] veth1_vlan: left promiscuous mode [ 730.769695][ T53] veth0_vlan: left promiscuous mode [ 730.775138][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.810402][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 730.855416][ T5890] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 730.882835][ T5918] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 730.896542][ T5890] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 730.957154][ T5890] usb 2-1: USB disconnect, device number 91 [ 731.063228][ T5918] usb 5-1: device descriptor read/64, error -71 [ 731.369604][ T53] team0 (unregistering): Port device batadv1 removed [ 731.412850][ T5886] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 731.422059][ T5918] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 731.503064][ T5890] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 731.552790][T13710] Bluetooth: hci1: command tx timeout [ 731.625872][ T5918] usb 5-1: device descriptor read/64, error -71 [ 731.713009][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 731.788445][ T5890] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 731.796823][ T5890] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.806100][ T5918] usb usb5-port1: attempt power cycle [ 731.815843][ T5890] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 731.841582][ T5890] usb 2-1: config 0 has no interface number 0 [ 731.849292][ T5890] usb 2-1: too many endpoints for config 0 interface 1 altsetting 1: 148, using maximum allowed: 30 [ 731.868281][ T5890] usb 2-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 731.886480][ T5890] usb 2-1: config 0 interface 1 has no altsetting 0 [ 731.913428][ T5886] usb 4-1: device descriptor read/64, error -71 [ 731.915213][ T5890] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=33.2c [ 731.931848][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.932870][T10791] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 731.948315][ T5890] usb 2-1: Product: syz [ 731.952950][ T5890] usb 2-1: Manufacturer: syz [ 731.957560][ T5890] usb 2-1: SerialNumber: syz [ 731.970636][ T5890] usb 2-1: config 0 descriptor?? [ 732.114500][T10791] usb 1-1: device descriptor read/64, error -71 [ 732.192987][ T5918] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 732.207125][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 732.221225][ T5886] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 732.293682][ T5918] usb 5-1: device descriptor read/8, error -71 [ 732.382820][T10791] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 732.627332][ T5886] usb 4-1: device descriptor read/64, error -71 [ 732.637252][ T5918] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 732.645201][T10791] usb 1-1: device descriptor read/64, error -71 [ 732.673514][ T5918] usb 5-1: device descriptor read/8, error -71 [ 732.763937][T10791] usb usb1-port1: attempt power cycle [ 732.769551][ T5886] usb usb4-port1: attempt power cycle [ 732.814832][ T5918] usb usb5-port1: unable to enumerate USB device [ 733.084805][ T53] team0 (unregistering): Port device team_slave_1 removed [ 733.132935][ T5886] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 733.153168][T10791] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 733.177039][ T5886] usb 4-1: device descriptor read/8, error -71 [ 733.217533][T10791] usb 1-1: device descriptor read/8, error -71 [ 733.398224][ T53] team0 (unregistering): Port device team_slave_0 removed [ 733.492822][ T5886] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 733.612936][T10791] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 733.623417][T13710] Bluetooth: hci1: command tx timeout [ 733.677771][ T5886] usb 4-1: device descriptor read/8, error -71 [ 733.713428][T10791] usb 1-1: device descriptor read/8, error -71 [ 733.822435][ T5886] usb usb4-port1: unable to enumerate USB device [ 733.916694][T10791] usb usb1-port1: unable to enumerate USB device [ 735.490564][T14374] chnl_net:caif_netlink_parms(): no params data found [ 735.602838][ T5890] dvb_ttusb_budget: ttusb_init_controller: error [ 735.626362][ T5890] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 735.765113][ T5890] DVB: Unable to find symbol ves1820_attach() [ 735.779774][ T5886] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 735.807830][T14504] loop8: detected capacity change from 0 to 8 [ 735.835557][T14504] Dev loop8: unable to read RDB block 8 [ 735.841219][T14504] loop8: unable to read partition table [ 735.929241][ T5890] DVB: Unable to find symbol stv0297_attach() [ 735.929254][T14504] loop8: partition table beyond EOD, truncated [ 735.940529][ T5890] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 735.942433][T14504] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 735.965859][ T5886] usb 5-1: device descriptor read/64, error -71 [ 735.988289][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.005477][ T5890] usb 2-1: USB disconnect, device number 92 [ 736.012025][T14374] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.066971][T14374] bridge_slave_0: entered allmulticast mode [ 736.100920][T14374] bridge_slave_0: entered promiscuous mode [ 736.150483][T14374] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.173058][T14374] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.190663][T14374] bridge_slave_1: entered allmulticast mode [ 736.208557][T14374] bridge_slave_1: entered promiscuous mode [ 736.233456][ T5886] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 736.236861][T14513] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2436'. [ 736.412827][ T5886] usb 5-1: device descriptor read/64, error -71 [ 736.523269][ T5886] usb usb5-port1: attempt power cycle [ 736.676382][T14374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.719614][T14374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.003056][ T5886] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 737.046824][ T5886] usb 5-1: device descriptor read/8, error -71 [ 737.293051][ T5886] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 737.327450][ T5886] usb 5-1: device descriptor read/8, error -71 [ 737.352930][ T5918] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 737.406962][T14374] team0: Port device team_slave_0 added [ 737.439810][T14374] team0: Port device team_slave_1 added [ 737.446495][ T5886] usb usb5-port1: unable to enumerate USB device [ 737.492835][ T5918] usb 2-1: device descriptor read/64, error -71 [ 737.746085][T14374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.759781][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.785763][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.792786][ T5890] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 737.793061][ T5918] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 737.813014][T14374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.877609][T14374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.892728][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.918918][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.972962][T14374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.983747][ T5918] usb 2-1: device descriptor read/64, error -71 [ 738.092489][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.105303][ T5918] usb usb2-port1: attempt power cycle [ 738.162153][T14374] hsr_slave_0: entered promiscuous mode [ 738.200405][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.200895][T14374] hsr_slave_1: entered promiscuous mode [ 738.292451][ T5890] usb 4-1: Product: syz [ 738.369455][ T5890] usb 4-1: Manufacturer: syz [ 738.410014][ T5890] usb 4-1: SerialNumber: syz [ 738.463229][ T5918] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 738.526034][ T5918] usb 2-1: device descriptor read/8, error -71 [ 738.814794][ T5918] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 738.864013][ T5918] usb 2-1: device descriptor read/8, error -71 [ 738.974408][ T5918] usb usb2-port1: unable to enumerate USB device [ 738.995515][T10791] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 739.173361][T10791] usb 1-1: Using ep0 maxpacket: 16 [ 739.183376][T10791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.218881][T10791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.268821][T10791] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 739.326033][T10791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.571632][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 739.595116][ T5890] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 739.601613][ T5890] cdc_ncm 4-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 739.618263][T10791] usb 1-1: config 0 descriptor?? [ 739.661169][ T5890] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 739.891561][T14560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.900704][T14560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.060201][T10791] corsair 0003:1B1C:1B02.0024: item fetching failed at offset 3/5 [ 740.191387][T10791] corsair 0003:1B1C:1B02.0024: parse failed [ 740.237129][T10791] corsair 0003:1B1C:1B02.0024: probe with driver corsair failed with error -22 [ 740.351014][T10791] usb 1-1: USB disconnect, device number 45 [ 740.951906][T14575] loop8: detected capacity change from 0 to 8 [ 740.964258][T14575] Dev loop8: unable to read RDB block 8 [ 740.971420][T14575] loop8: unable to read partition table [ 740.993238][T14575] loop8: partition table beyond EOD, truncated [ 741.007003][T14575] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 741.021493][T14578] FAULT_INJECTION: forcing a failure. [ 741.021493][T14578] name failslab, interval 1, probability 0, space 0, times 0 [ 741.055458][T14578] CPU: 1 UID: 0 PID: 14578 Comm: syz.0.2448 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 741.055494][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 741.055508][T14578] Call Trace: [ 741.055517][T14578] [ 741.055527][T14578] dump_stack_lvl+0x241/0x360 [ 741.055568][T14578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.055599][T14578] ? __pfx__printk+0x10/0x10 [ 741.055634][T14578] ? ref_tracker_alloc+0x316/0x4c0 [ 741.055664][T14578] should_fail_ex+0x424/0x570 [ 741.055692][T14578] should_failslab+0xac/0x100 [ 741.055724][T14578] kmem_cache_alloc_noprof+0x78/0x390 [ 741.055753][T14578] ? skb_clone+0x20c/0x390 [ 741.055782][T14578] skb_clone+0x20c/0x390 [ 741.055811][T14578] __netlink_deliver_tap+0x3c4/0x7f0 [ 741.055850][T14578] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.055875][T14578] netlink_deliver_tap+0x19d/0x1b0 [ 741.055903][T14578] netlink_sendskb+0x68/0x140 [ 741.055929][T14578] netlink_unicast+0x39f/0x9a0 [ 741.055951][T14578] ? __asan_memcpy+0x40/0x70 [ 741.055983][T14578] ? __pfx_netlink_unicast+0x10/0x10 [ 741.056020][T14578] netlink_rcv_skb+0x296/0x480 [ 741.056050][T14578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 741.056081][T14578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.056130][T14578] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.056161][T14578] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.056192][T14578] netlink_unicast+0x7f8/0x9a0 [ 741.056228][T14578] ? __pfx_netlink_unicast+0x10/0x10 [ 741.056257][T14578] ? skb_put+0x114/0x1f0 [ 741.056282][T14578] netlink_sendmsg+0x8c3/0xcd0 [ 741.056329][T14578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.056363][T14578] ? aa_sock_msg_perm+0x91/0x160 [ 741.056399][T14578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.056433][T14578] __sock_sendmsg+0x221/0x270 [ 741.056465][T14578] ____sys_sendmsg+0x523/0x860 [ 741.056497][T14578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.056517][T14578] ? __fget_files+0x2a/0x420 [ 741.056541][T14578] ? __fget_files+0x2a/0x420 [ 741.056571][T14578] __sys_sendmsg+0x271/0x360 [ 741.056599][T14578] ? __pfx___sys_sendmsg+0x10/0x10 [ 741.056682][T14578] ? do_syscall_64+0xb6/0x230 [ 741.056710][T14578] do_syscall_64+0xf3/0x230 [ 741.056735][T14578] ? clear_bhb_loop+0x45/0xa0 [ 741.056761][T14578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.056783][T14578] RIP: 0033:0x7fa4ea58d169 [ 741.056804][T14578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.056823][T14578] RSP: 002b:00007fa4eb3c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.056846][T14578] RAX: ffffffffffffffda RBX: 00007fa4ea7a6080 RCX: 00007fa4ea58d169 [ 741.056862][T14578] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 741.056877][T14578] RBP: 00007fa4eb3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 741.056891][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.056904][T14578] R13: 0000000000000000 R14: 00007fa4ea7a6080 R15: 00007fa4ea8cfa28 [ 741.056937][T14578] [ 741.429865][T14583] input: syz0 as /devices/virtual/input/input55 [ 741.548908][ T5890] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 741.583918][T14579] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2447'. [ 741.650705][T14583] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2447'. [ 741.662854][T10791] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 741.681719][ T5890] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 741.757308][ T5890] usb 4-1: USB disconnect, device number 87 [ 741.794214][ T5890] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 741.822847][T10791] usb 1-1: Using ep0 maxpacket: 8 [ 741.849699][T10791] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 741.868621][T10791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.887299][T10791] usb 1-1: Product: syz [ 741.891511][T10791] usb 1-1: Manufacturer: syz [ 741.928648][T10791] usb 1-1: SerialNumber: syz [ 741.945443][T14374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 741.953919][T10791] usb 1-1: config 0 descriptor?? [ 742.003693][T14374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 742.035193][T14374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 742.062471][T14374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 742.177466][T10791] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 742.244694][T14607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.273023][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 742.292987][ T5891] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 742.335253][T14607] loop8: detected capacity change from 0 to 8 [ 742.344568][T14374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.358434][T14607] Dev loop8: unable to read RDB block 8 [ 742.370806][T14607] loop8: unable to read partition table [ 742.382290][T14374] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.391612][T14607] loop8: partition table beyond EOD, truncated [ 742.411854][T14607] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 742.414494][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.428693][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.445570][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.452877][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.463035][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 742.476159][T10791] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 742.477389][ T5891] usb 5-1: config 13 has an invalid interface number: 176 but max is 1 [ 742.495497][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.527980][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.528062][T10791] usb 1-1: USB disconnect, device number 46 [ 742.542597][ T5891] usb 5-1: config 13 has an invalid interface number: 157 but max is 1 [ 742.553041][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 742.580847][ T5891] usb 5-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 742.620953][ T5891] usb 5-1: config 13 has no interface number 0 [ 742.631486][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 742.652491][ T5891] usb 5-1: config 13 has no interface number 1 [ 742.673914][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.693971][ T5891] usb 5-1: config 13 interface 176 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 742.716983][ T9] usb 2-1: config 0 descriptor?? [ 742.736995][ T5891] usb 5-1: config 13 interface 176 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 742.805043][ T5891] usb 5-1: config 13 interface 176 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 742.851635][ T5891] usb 5-1: config 13 interface 157 altsetting 4 has an endpoint descriptor with address 0x67, changing to 0x7 [ 742.869809][T14374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.889576][ T5891] usb 5-1: config 13 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 55507, setting to 1024 [ 742.923275][ T5891] usb 5-1: config 13 interface 157 altsetting 4 bulk endpoint 0x7 has invalid maxpacket 1024 [ 742.946590][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 742.994290][ T5891] usb 5-1: config 13 interface 157 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 743.005843][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 743.030834][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 743.038471][ T5891] usb 5-1: config 13 interface 157 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 743.065890][T14374] veth0_vlan: entered promiscuous mode [ 743.075967][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 743.089866][ T5891] usb 5-1: config 13 interface 176 has no altsetting 0 [ 743.099494][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 743.113806][T14374] veth1_vlan: entered promiscuous mode [ 743.131149][ T5891] usb 5-1: config 13 interface 157 has no altsetting 0 [ 743.138401][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 743.173152][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice=e2.d4 [ 743.187811][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 743.207941][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.218015][ T9] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 743.243015][ T5891] usb 5-1: Product: å‰æ¨­å„¦è®ˆá¡”ᠷ㸷䜦é«ç¾¡ [ 743.250677][ T9] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 743.263653][ T5891] usb 5-1: Manufacturer:   [ 743.268337][ T5891] usb 5-1: SerialNumber: 訹벩ï¡ã‘Œå£¤ì¾–繙☨豵쉛᳽ç¼ï¨›é‹ì½™ìªºé§€å­¥é¯…汃帟ⷑࣜ㛇쟀뒓閙閞由躹鶇帟袕茘傅⩇éºî‚ªãŽ” [ 743.286683][T14374] veth0_macvtap: entered promiscuous mode [ 743.308426][ T9] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 743.344920][T14374] veth1_macvtap: entered promiscuous mode [ 743.383986][ T5891] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 743.384017][ T5891] usb 5-1: no configuration chosen from 1 choice [ 743.394163][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.394185][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.394196][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.394207][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.395289][T14374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.409878][T14636] syz.3.2459: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 743.410043][T14636] CPU: 0 UID: 0 PID: 14636 Comm: syz.3.2459 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 743.410071][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 743.410085][T14636] Call Trace: [ 743.410094][T14636] [ 743.410104][T14636] dump_stack_lvl+0x241/0x360 [ 743.410143][T14636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.410175][T14636] ? __pfx__printk+0x10/0x10 [ 743.410205][T14636] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 743.410241][T14636] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 743.410272][T14636] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 743.410308][T14636] warn_alloc+0x27c/0x410 [ 743.410333][T14636] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 743.410356][T14636] ? __pfx_warn_alloc+0x10/0x10 [ 743.410380][T14636] ? kasan_save_track+0x3f/0x80 [ 743.410403][T14636] ? __kasan_kmalloc+0x9d/0xb0 [ 743.410436][T14636] ? xsk_setsockopt+0x449/0x840 [ 743.410468][T14636] ? do_sock_setsockopt+0x3b1/0x710 [ 743.410499][T14636] ? __x64_sys_setsockopt+0x1ee/0x280 [ 743.410518][T14636] ? do_syscall_64+0xf3/0x230 [ 743.410541][T14636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.410574][T14636] __vmalloc_node_range_noprof+0x128/0x1390 [ 743.410629][T14636] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 743.410658][T14636] ? __kasan_kmalloc+0x9d/0xb0 [ 743.410691][T14636] vmalloc_user_noprof+0x74/0x80 [ 743.410712][T14636] ? xskq_create+0xb6/0x170 [ 743.410731][T14636] xskq_create+0xb6/0x170 [ 743.410754][T14636] xsk_init_queue+0xa1/0x100 [ 743.410778][T14636] xsk_setsockopt+0x449/0x840 [ 743.410814][T14636] ? __pfx_xsk_setsockopt+0x10/0x10 [ 743.410844][T14636] ? __lock_acquire+0xad5/0xd80 [ 743.410867][T14636] ? __pfx_aa_sk_perm+0x10/0x10 [ 743.410899][T14636] ? aa_sock_opt_perm+0x79/0x120 [ 743.410934][T14636] ? __pfx_xsk_setsockopt+0x10/0x10 [ 743.410965][T14636] do_sock_setsockopt+0x3b1/0x710 [ 743.411006][T14636] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 743.411038][T14636] ? __fget_files+0x2a/0x420 [ 743.411063][T14636] ? __fget_files+0x39d/0x420 [ 743.411082][T14636] ? __fget_files+0x2a/0x420 [ 743.411111][T14636] __x64_sys_setsockopt+0x1ee/0x280 [ 743.411141][T14636] do_syscall_64+0xf3/0x230 [ 743.411166][T14636] ? clear_bhb_loop+0x45/0xa0 [ 743.411193][T14636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.411214][T14636] RIP: 0033:0x7f6698f8d169 [ 743.411235][T14636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.411254][T14636] RSP: 002b:00007f6696db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 743.411276][T14636] RAX: ffffffffffffffda RBX: 00007f66991a6160 RCX: 00007f6698f8d169 [ 743.411293][T14636] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 743.411308][T14636] RBP: 00007f669900e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 743.411322][T14636] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.411336][T14636] R13: 0000000000000000 R14: 00007f66991a6160 R15: 00007f66992cfa28 [ 743.411370][T14636] [ 743.411379][T14636] Mem-Info: [ 743.411393][T14636] active_anon:23733 inactive_anon:0 isolated_anon:0 [ 743.411393][T14636] active_file:2179 inactive_file:3349 isolated_file:0 [ 743.411393][T14636] unevictable:2232 dirty:228 writeback:0 [ 743.411393][T14636] slab_reclaimable:6466 slab_unreclaimable:101832 [ 743.411393][T14636] mapped:32365 shmem:19252 pagetables:1163 [ 743.411393][T14636] sec_pagetables:0 bounce:0 [ 743.411393][T14636] kernel_misc_reclaimable:0 [ 743.411393][T14636] free:1337549 free_pcp:654 free_cma:0 [ 743.411459][T14636] Node 0 active_anon:94932kB inactive_anon:0kB active_file:8684kB inactive_file:13392kB unevictable:7392kB isolated(anon):0kB isolated(file):0kB mapped:129460kB dirty:912kB writeback:0kB shmem:75472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11840kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 743.411518][T14636] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 743.411573][T14636] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 743.411633][T14636] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 743.411686][T14636] Node 0 DMA32 free:1422808kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:94924kB inactive_anon:0kB active_file:8684kB inactive_file:13312kB unevictable:7392kB writepending:912kB present:3129332kB managed:2547264kB mlocked:5976kB bounce:0kB free_pcp:2596kB local_pcp:1160kB free_cma:0kB [ 743.411750][T14636] lowmem_reserve[]: 0 0 0 0 0 [ 743.411799][T14636] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 743.411858][T14636] lowmem_reserve[]: 0 0 0 0 0 [ 743.411904][T14636] Node 1 Normal free:3912028kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 743.411962][T14636] lowmem_reserve[]: 0 0 0 0 0 [ 743.412009][T14636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 743.412184][T14636] Node 0 DMA32: 6*4kB (UME) 1136*8kB (ME) 1231*16kB (UME) 914*32kB (UME) 657*64kB (UME) 247*128kB (UME) 241*256kB (UME) 151*512kB (UME) 115*1024kB (UME) 29*2048kB (UME) 238*4096kB (UM) = 1422728kB [ 743.430660][T14636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 743.430753][T14636] Node 1 Normal: 240*4kB (UME) 68*8kB (UME) 38*16kB (UME) 197*32kB (UME) 86*64kB (UME) 32*128kB (UME) 11*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 1*2048kB (M) 948*4096kB (UM) = 3912032kB [ 743.430899][T14636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 743.430914][T14636] Node 0 hugepages_total=5 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 743.430927][T14636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 743.430941][T14636] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 743.430954][T14636] 24788 total pagecache pages [ 743.430961][T14636] 8 pages in swap cache [ 743.430969][T14636] Free swap = 118852kB [ 743.430976][T14636] Total swap = 124996kB [ 743.430984][T14636] 2097051 pages RAM [ 743.430991][T14636] 0 pages HighMem/MovableOnly [ 743.430998][T14636] 428577 pages reserved [ 743.431005][T14636] 0 pages cma reserved [ 743.604674][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.604704][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.604719][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.604735][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.606161][T14374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.625911][T14374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.462866][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 744.510271][T14374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.531543][T14374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.540685][T14374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.561365][T14645] loop8: detected capacity change from 0 to 8 [ 744.572801][T14645] Dev loop8: unable to read RDB block 8 [ 744.578550][T14645] loop8: unable to read partition table [ 744.584873][T14645] loop8: partition table beyond EOD, truncated [ 744.591195][T14645] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 744.612818][ T24] usb 1-1: device descriptor read/64, error -71 [ 744.632123][T14645] FAULT_INJECTION: forcing a failure. [ 744.632123][T14645] name failslab, interval 1, probability 0, space 0, times 0 [ 744.645914][T14645] CPU: 0 UID: 0 PID: 14645 Comm: syz.3.2460 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 744.645944][T14645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 744.645957][T14645] Call Trace: [ 744.645966][T14645] [ 744.645976][T14645] dump_stack_lvl+0x241/0x360 [ 744.646016][T14645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.646046][T14645] ? __pfx__printk+0x10/0x10 [ 744.646091][T14645] should_fail_ex+0x424/0x570 [ 744.646119][T14645] should_failslab+0xac/0x100 [ 744.646150][T14645] kmem_cache_alloc_noprof+0x78/0x390 [ 744.646179][T14645] ? skb_clone+0x20c/0x390 [ 744.646208][T14645] skb_clone+0x20c/0x390 [ 744.646228][T14645] ? dev_queue_xmit_nit+0x28c/0xcf0 [ 744.646263][T14645] dev_queue_xmit_nit+0x361/0xcf0 [ 744.646297][T14645] ? dev_queue_xmit_nit+0x2b/0xcf0 [ 744.646338][T14645] dev_hard_start_xmit+0x1b5/0x840 [ 744.646384][T14645] __dev_queue_xmit+0x1b80/0x3f60 [ 744.646407][T14645] ? kasan_save_track+0x51/0x80 [ 744.646437][T14645] ? netlink_unicast+0x7f8/0x9a0 [ 744.646465][T14645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.646488][T14645] ? __dev_queue_xmit+0x2f9/0x3f60 [ 744.646516][T14645] ? __pfx___dev_queue_xmit+0x10/0x10 [ 744.646560][T14645] ? __copy_skb_header+0xa7/0x5a0 [ 744.646596][T14645] ? __skb_clone+0x457/0x6d0 [ 744.646624][T14645] ? skb_clone+0x240/0x390 [ 744.646648][T14645] __netlink_deliver_tap+0x561/0x7f0 [ 744.646688][T14645] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.646715][T14645] netlink_deliver_tap+0x19d/0x1b0 [ 744.646745][T14645] netlink_sendskb+0x68/0x140 [ 744.646772][T14645] netlink_unicast+0x39f/0x9a0 [ 744.646795][T14645] ? __asan_memcpy+0x40/0x70 [ 744.646827][T14645] ? __pfx_netlink_unicast+0x10/0x10 [ 744.646861][T14645] netlink_rcv_skb+0x296/0x480 [ 744.646888][T14645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.646917][T14645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.646960][T14645] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.646991][T14645] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.647022][T14645] netlink_unicast+0x7f8/0x9a0 [ 744.647056][T14645] ? __pfx_netlink_unicast+0x10/0x10 [ 744.647082][T14645] ? skb_put+0x114/0x1f0 [ 744.647107][T14645] netlink_sendmsg+0x8c3/0xcd0 [ 744.647149][T14645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.647183][T14645] ? aa_sock_msg_perm+0x91/0x160 [ 744.647220][T14645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.647247][T14645] __sock_sendmsg+0x221/0x270 [ 744.647278][T14645] ____sys_sendmsg+0x523/0x860 [ 744.647311][T14645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.647331][T14645] ? __fget_files+0x2a/0x420 [ 744.647355][T14645] ? __fget_files+0x2a/0x420 [ 744.647393][T14645] __sys_sendmsg+0x271/0x360 [ 744.647422][T14645] ? __pfx___sys_sendmsg+0x10/0x10 [ 744.647504][T14645] ? do_syscall_64+0xb6/0x230 [ 744.647532][T14645] do_syscall_64+0xf3/0x230 [ 744.647557][T14645] ? clear_bhb_loop+0x45/0xa0 [ 744.647583][T14645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.647605][T14645] RIP: 0033:0x7f6698f8d169 [ 744.647625][T14645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.647643][T14645] RSP: 002b:00007f6696df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.647667][T14645] RAX: ffffffffffffffda RBX: 00007f66991a5fa0 RCX: 00007f6698f8d169 [ 744.647684][T14645] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 744.647698][T14645] RBP: 00007f6696df6090 R08: 0000000000000000 R09: 0000000000000000 [ 744.647712][T14645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.647726][T14645] R13: 0000000000000000 R14: 00007f66991a5fa0 R15: 00007f66992cfa28 [ 744.647760][T14645] [ 745.096967][ T9] usb 2-1: USB disconnect, device number 97 [ 745.132774][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 745.187983][ T5886] usb 5-1: USB disconnect, device number 72 [ 745.274816][ T24] usb 1-1: device descriptor read/64, error -71 [ 745.388282][ T24] usb usb1-port1: attempt power cycle [ 745.728655][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.749662][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.833449][ T5886] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 745.844223][T10863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.892826][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 745.917512][T10863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.953316][ T24] usb 1-1: device descriptor read/8, error -71 [ 746.090460][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.129820][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.172803][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 746.225050][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 746.245082][ T5886] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 746.269463][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.288503][ T5886] usb 5-1: config 0 descriptor?? [ 746.432051][ T30] audit: type=1326 audit(1743759932.924:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 746.493785][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 746.543529][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 746.551366][ T30] audit: type=1326 audit(1743759932.934:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 746.558306][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 746.627737][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.659143][ T24] usb 1-1: Product: syz [ 746.697059][ T30] audit: type=1326 audit(1743759932.934:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 746.729052][ T24] usb 1-1: Manufacturer: syz [ 746.736843][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: unknown main item tag 0x0 [ 746.745822][ T24] usb 1-1: SerialNumber: syz [ 746.755273][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: unknown main item tag 0x0 [ 746.766751][ T24] usb 1-1: config 0 descriptor?? [ 746.774766][ T30] audit: type=1326 audit(1743759932.934:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 746.800009][ T24] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 746.807390][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: unknown main item tag 0x0 [ 746.819350][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: unknown main item tag 0x0 [ 746.836546][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: unknown main item tag 0x0 [ 746.844912][ T30] audit: type=1326 audit(1743759932.934:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 746.879034][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 746.969167][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: U2F Zero LED initialised [ 746.977560][ T30] audit: type=1326 audit(1743759932.934:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96e098bad0 code=0x7ffc0000 [ 747.041289][ T5886] hid-u2fzero 0003:10C4:8ACF.0026: U2F Zero RNG initialised [ 747.112085][ T5886] usb 5-1: USB disconnect, device number 73 [ 747.128466][ T30] audit: type=1326 audit(1743759932.934:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96e098bad0 code=0x7ffc0000 [ 747.263232][ T24] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 747.311484][ T24] visor 1-1:0.0: probe with driver visor failed with error -32 [ 747.319358][ T30] audit: type=1326 audit(1743759932.944:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 747.457890][ T30] audit: type=1326 audit(1743759932.944:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 747.607417][ T30] audit: type=1326 audit(1743759932.944:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 747.678351][T14691] dvmrp0: entered allmulticast mode [ 747.709640][T14694] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 747.727693][T14691] loop8: detected capacity change from 0 to 8 [ 747.762293][T14691] Dev loop8: unable to read RDB block 8 [ 747.786567][T14691] loop8: unable to read partition table [ 747.809287][T14691] loop8: partition table beyond EOD, truncated [ 747.862882][T14691] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 748.149668][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2471'. [ 748.415592][T14717] loop8: detected capacity change from 0 to 8 [ 748.448852][T14717] Dev loop8: unable to read RDB block 8 [ 748.488411][T14717] loop8: unable to read partition table [ 748.503879][T14717] loop8: partition table beyond EOD, truncated [ 748.523785][T14717] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 748.812902][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 749.074469][ T24] usb 4-1: config 0 has no interfaces? [ 749.083925][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 749.122715][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.413036][ T24] usb 4-1: Product: syz [ 749.417302][ T24] usb 4-1: Manufacturer: syz [ 749.422022][ T24] usb 4-1: SerialNumber: syz [ 749.454543][ T5886] usb 1-1: USB disconnect, device number 50 [ 749.716428][ T24] usb 4-1: config 0 descriptor?? [ 750.063135][T10791] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 750.228593][T10791] usb 2-1: device descriptor read/64, error -71 [ 750.238803][T14723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.292929][T14723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.330884][T14723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.382471][T14723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.522886][T10791] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 750.697340][T10791] usb 2-1: device descriptor read/64, error -71 [ 750.824209][T10791] usb usb2-port1: attempt power cycle [ 751.412961][ T5886] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 751.592819][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 751.603955][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 751.618527][ T5886] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 751.632036][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.655627][ T5886] usb 5-1: Product: syz [ 751.667354][ T5886] usb 5-1: Manufacturer: syz [ 751.672390][ T5886] usb 5-1: SerialNumber: syz [ 751.683247][ T5886] usb 5-1: config 0 descriptor?? [ 751.692838][T10791] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 751.707268][ T5886] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 751.727716][ T5886] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 752.009449][T10791] usb 2-1: device descriptor read/8, error -71 [ 752.313490][ T5886] em28xx 5-1:0.0: unknown em28xx chip ID (252) [ 752.329076][T14770] tipc: Started in network mode [ 752.329206][ T5891] usb 4-1: USB disconnect, device number 88 [ 752.335185][T14770] tipc: Node identity 7, cluster identity 4711 [ 752.379433][T14770] tipc: Node number set to 7 [ 752.404078][T14773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2484'. [ 752.413523][T14770] tipc: Cannot configure node identity twice [ 752.438533][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.445336][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.531019][T14781] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 752.636004][T14781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 753.138395][ T5886] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 753.199427][ T5886] em28xx 5-1:0.0: board has no eeprom [ 753.342875][ T5886] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 753.379193][ T5886] em28xx 5-1:0.0: dvb set to bulk mode. [ 753.390338][T10791] em28xx 5-1:0.0: Binding DVB extension [ 753.404514][ T5891] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 753.422804][ T5886] usb 5-1: USB disconnect, device number 74 [ 753.452155][ T5886] em28xx 5-1:0.0: Disconnecting em28xx [ 753.563014][T10791] em28xx 5-1:0.0: Registering input extension [ 753.584387][ T5886] em28xx 5-1:0.0: Closing input extension [ 753.591297][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 753.611810][ T5886] em28xx 5-1:0.0: Freeing device [ 753.619005][ T5891] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.659722][ T5891] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 753.685055][ T5891] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 753.735265][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 753.742079][ T5891] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 753.751660][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.828921][ T5891] usb 4-1: config 0 descriptor?? [ 754.283081][ T5886] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 754.467390][ T5886] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 754.510555][ T5886] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 754.574720][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.591570][ T5891] corsair-cpro 0003:1B1C:0C10.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 754.592228][ T5886] usb 5-1: Product: syz [ 754.632887][T14793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.668695][T14793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.680734][ T5886] usb 5-1: Manufacturer: syz [ 754.704565][ T5886] usb 5-1: SerialNumber: syz [ 754.730970][ T5891] corsair-cpro 0003:1B1C:0C10.0027: probe with driver corsair-cpro failed with error -71 [ 754.738687][ T5886] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 754.804431][ T5891] usb 4-1: USB disconnect, device number 89 [ 754.840967][ T5887] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 755.134579][T14827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.173920][T14827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.193713][T14836] bond0: entered promiscuous mode [ 755.209195][T14836] bond_slave_0: entered promiscuous mode [ 755.229997][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.243147][T14836] bond_slave_1: entered promiscuous mode [ 755.251258][T14836] bond0: entered allmulticast mode [ 755.267569][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.294560][T14836] bond_slave_0: entered allmulticast mode [ 755.300377][T14836] bond_slave_1: entered allmulticast mode [ 755.374303][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.423287][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.470331][ T5891] usb 5-1: USB disconnect, device number 75 [ 755.942942][ T5887] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 755.960589][ T5887] ath9k_htc: Failed to initialize the device [ 756.001920][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 756.024254][ T5891] usb 5-1: ath9k_htc: USB layer deinitialized [ 756.052927][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 756.253281][ T9] usb 1-1: device descriptor read/64, error -71 [ 756.374320][ T5891] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 756.503034][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 756.552951][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 756.571450][ T5891] usb 5-1: config index 0 descriptor too short (expected 241, got 72) [ 756.595500][ T5891] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 756.618412][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 756.637078][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 756.651194][ T9] usb 1-1: device descriptor read/64, error -71 [ 756.659183][ T5891] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 756.670152][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.723693][ T5891] usb 5-1: config 0 descriptor?? [ 756.871337][ T9] usb usb1-port1: attempt power cycle [ 757.226514][ T5891] mos7840 5-1:0.0: missing endpoints [ 757.336221][ T5887] usb 5-1: USB disconnect, device number 76 [ 757.571280][T14874] loop8: detected capacity change from 0 to 8 [ 757.600748][T14874] Dev loop8: unable to read RDB block 8 [ 757.607111][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 757.623146][T14874] loop8: unable to read partition table [ 757.629107][T14874] loop8: partition table beyond EOD, truncated [ 757.653667][ T9] usb 1-1: device descriptor read/8, error -71 [ 757.687764][T14874] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 757.822789][T10791] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 757.904211][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 757.985053][T10791] usb 3-1: device descriptor read/64, error -71 [ 758.263447][T10791] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 758.408729][T10791] usb 3-1: device descriptor read/64, error -71 [ 758.563259][T10791] usb usb3-port1: attempt power cycle [ 758.651139][ T9] usb 1-1: device descriptor read/8, error -71 [ 758.783322][ T9] usb usb1-port1: unable to enumerate USB device [ 758.916514][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 758.916535][ T30] audit: type=1326 audit(1743759945.414:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.1.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 758.957905][T10791] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 759.003570][T10791] usb 3-1: device descriptor read/8, error -71 [ 759.045413][ T30] audit: type=1326 audit(1743759945.414:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.1.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 759.104588][ T30] audit: type=1326 audit(1743759945.414:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.1.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 759.183000][ T30] audit: type=1326 audit(1743759945.414:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.1.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 759.250041][ T30] audit: type=1326 audit(1743759945.414:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.1.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f96e098d169 code=0x7ffc0000 [ 759.272856][T10791] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 759.272876][ T5890] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 759.324335][T10791] usb 3-1: device descriptor read/8, error -71 [ 759.435283][T10791] usb usb3-port1: unable to enumerate USB device [ 759.533867][ T5890] usb 4-1: device descriptor read/64, error -71 [ 759.772876][ T5890] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 759.819781][T14920] FAULT_INJECTION: forcing a failure. [ 759.819781][T14920] name failslab, interval 1, probability 0, space 0, times 0 [ 759.838710][T14920] CPU: 0 UID: 0 PID: 14920 Comm: syz.0.2519 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 759.838743][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 759.838757][T14920] Call Trace: [ 759.838766][T14920] [ 759.838775][T14920] dump_stack_lvl+0x241/0x360 [ 759.838814][T14920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.838845][T14920] ? __pfx__printk+0x10/0x10 [ 759.838880][T14920] ? __pfx___might_resched+0x10/0x10 [ 759.838911][T14920] should_fail_ex+0x424/0x570 [ 759.838938][T14920] should_failslab+0xac/0x100 [ 759.838978][T14920] __kmalloc_noprof+0xdf/0x4d0 [ 759.839006][T14920] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 759.839037][T14920] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 759.839075][T14920] tomoyo_realpath_from_path+0xcf/0x5e0 [ 759.839121][T14920] tomoyo_path_number_perm+0x245/0x790 [ 759.839152][T14920] ? tomoyo_path_number_perm+0x215/0x790 [ 759.839182][T14920] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 759.839217][T14920] ? ksys_write+0x24e/0x2d0 [ 759.839250][T14920] ? __lock_acquire+0xad5/0xd80 [ 759.839294][T14920] ? __fget_files+0x2a/0x420 [ 759.839312][T14920] ? __fget_files+0x2a/0x420 [ 759.839340][T14920] ? __fget_files+0x2a/0x420 [ 759.839365][T14920] security_file_ioctl+0xc6/0x2a0 [ 759.839399][T14920] __se_sys_ioctl+0x46/0x160 [ 759.839427][T14920] do_syscall_64+0xf3/0x230 [ 759.839452][T14920] ? clear_bhb_loop+0x45/0xa0 [ 759.839477][T14920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.839498][T14920] RIP: 0033:0x7fa4ea58d169 [ 759.839518][T14920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.839536][T14920] RSP: 002b:00007fa4eb3e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.839559][T14920] RAX: ffffffffffffffda RBX: 00007fa4ea7a5fa0 RCX: 00007fa4ea58d169 [ 759.839574][T14920] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 759.839587][T14920] RBP: 00007fa4eb3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 759.839599][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.839612][T14920] R13: 0000000000000000 R14: 00007fa4ea7a5fa0 R15: 00007fa4ea8cfa28 [ 759.839643][T14920] [ 759.839652][T14920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 759.903155][T14923] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2520'. [ 759.982878][ T5890] usb 4-1: device descriptor read/64, error -71 [ 760.136214][T14923] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2520'. [ 760.148556][T14923] netlink: 'syz.1.2520': attribute type 3 has an invalid length. [ 760.163206][T14923] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 760.199781][T14923] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2520'. [ 760.210221][ T5890] usb usb4-port1: attempt power cycle [ 760.251557][T14925] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 760.582387][ T5890] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 760.676573][ T5890] usb 4-1: device descriptor read/8, error -71 [ 760.923161][ T5890] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 761.003212][ T5890] usb 4-1: device descriptor read/8, error -71 [ 761.134798][ T5890] usb usb4-port1: unable to enumerate USB device [ 761.472976][ T5890] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 761.693009][ T5891] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 761.713337][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 761.728141][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.962879][ T5890] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 762.005930][ T5891] usb 3-1: device descriptor read/64, error -71 [ 762.017573][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.037399][ T5890] usb 5-1: config 0 descriptor?? [ 762.289667][ T5891] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 762.343392][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'. [ 762.514228][ T5891] usb 3-1: device descriptor read/64, error -71 [ 762.701666][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 762.732403][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 762.772858][T10844] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 762.803065][ T5890] usb 5-1: USB disconnect, device number 77 [ 762.840849][ T5891] usb usb3-port1: attempt power cycle [ 763.060991][T10844] usb 1-1: Using ep0 maxpacket: 16 [ 763.139988][T10844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 763.242821][ T5891] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 763.260809][T10844] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 763.372383][ T5891] usb 3-1: device descriptor read/8, error -71 [ 763.415967][T10844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.495715][T10844] usb 1-1: Product: syz [ 763.583985][T10844] usb 1-1: Manufacturer: syz [ 763.672860][T10844] usb 1-1: SerialNumber: syz [ 763.782880][ T5891] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 763.840215][T10844] usb 1-1: config 0 descriptor?? [ 763.884401][T10844] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 763.913442][T10844] usb 1-1: Detected FT232R [ 763.944734][ T5891] usb 3-1: device descriptor read/8, error -71 [ 764.056856][ T5891] usb usb3-port1: unable to enumerate USB device [ 764.087477][T10844] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 764.582355][T10844] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 764.591691][T14979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.649563][T14979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.686663][T10791] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 764.814144][T14985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2541'. [ 764.839470][ T24] usb 1-1: USB disconnect, device number 55 [ 764.891802][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 764.925331][T10791] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 764.950327][ T24] ftdi_sio 1-1:0.0: device disconnected [ 764.967818][T10791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.015513][T10791] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 765.050546][T10791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 765.071792][T10791] usb 4-1: SerialNumber: syz [ 765.367542][T10791] usb 4-1: 0:2 : does not exist [ 765.397149][T10791] usb 4-1: unit 5 not found! [ 765.463750][T10791] usb 4-1: USB disconnect, device number 94 [ 765.522778][ T5886] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 765.562892][T10844] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 765.732765][ T5886] usb 2-1: device descriptor read/64, error -71 [ 765.794014][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.834654][T15014] syz.0.2547: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 765.886064][T10844] usb 5-1: device descriptor read/64, error -71 [ 765.923048][T15014] CPU: 0 UID: 0 PID: 15014 Comm: syz.0.2547 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 765.923088][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 765.923101][T15014] Call Trace: [ 765.923111][T15014] [ 765.923121][T15014] dump_stack_lvl+0x241/0x360 [ 765.923160][T15014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.923191][T15014] ? __pfx__printk+0x10/0x10 [ 765.923219][T15014] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 765.923253][T15014] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 765.923286][T15014] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 765.923320][T15014] warn_alloc+0x27c/0x410 [ 765.923346][T15014] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 765.923370][T15014] ? __pfx_warn_alloc+0x10/0x10 [ 765.923393][T15014] ? kasan_save_track+0x3f/0x80 [ 765.923424][T15014] ? __kasan_kmalloc+0x9d/0xb0 [ 765.923452][T15014] ? xsk_setsockopt+0x449/0x840 [ 765.923483][T15014] ? do_sock_setsockopt+0x3b1/0x710 [ 765.923514][T15014] ? __x64_sys_setsockopt+0x1ee/0x280 [ 765.923533][T15014] ? do_syscall_64+0xf3/0x230 [ 765.923555][T15014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.923586][T15014] __vmalloc_node_range_noprof+0x128/0x1390 [ 765.923637][T15014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 765.923664][T15014] ? __kasan_kmalloc+0x9d/0xb0 [ 765.923695][T15014] vmalloc_user_noprof+0x74/0x80 [ 765.923716][T15014] ? xskq_create+0xb6/0x170 [ 765.923736][T15014] xskq_create+0xb6/0x170 [ 765.923759][T15014] xsk_init_queue+0xa1/0x100 [ 765.923782][T15014] xsk_setsockopt+0x449/0x840 [ 765.923818][T15014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 765.923849][T15014] ? __lock_acquire+0xad5/0xd80 [ 765.923873][T15014] ? __pfx_aa_sk_perm+0x10/0x10 [ 765.923906][T15014] ? aa_sock_opt_perm+0x79/0x120 [ 765.923940][T15014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 765.923969][T15014] do_sock_setsockopt+0x3b1/0x710 [ 765.924008][T15014] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 765.924038][T15014] ? __fget_files+0x2a/0x420 [ 765.924061][T15014] ? __fget_files+0x39d/0x420 [ 765.924080][T15014] ? __fget_files+0x2a/0x420 [ 765.924108][T15014] __x64_sys_setsockopt+0x1ee/0x280 [ 765.924135][T15014] do_syscall_64+0xf3/0x230 [ 765.924159][T15014] ? clear_bhb_loop+0x45/0xa0 [ 765.924182][T15014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.924203][T15014] RIP: 0033:0x7fa4ea58d169 [ 765.924222][T15014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.924239][T15014] RSP: 002b:00007fa4eb3c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 765.924262][T15014] RAX: ffffffffffffffda RBX: 00007fa4ea7a6080 RCX: 00007fa4ea58d169 [ 765.924279][T15014] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 765.924293][T15014] RBP: 00007fa4ea60e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 765.924306][T15014] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.924319][T15014] R13: 0000000000000000 R14: 00007fa4ea7a6080 R15: 00007fa4ea8cfa28 [ 765.924352][T15014] [ 765.924741][T15014] Mem-Info: [ 766.143072][ T5886] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 766.302811][T15014] active_anon:31004 inactive_anon:0 isolated_anon:0 [ 766.302811][T15014] active_file:12092 inactive_file:3380 isolated_file:0 [ 766.302811][T15014] unevictable:1111 dirty:152 writeback:0 [ 766.302811][T15014] slab_reclaimable:6573 slab_unreclaimable:103511 [ 766.302811][T15014] mapped:33608 shmem:24817 pagetables:1197 [ 766.302811][T15014] sec_pagetables:3 bounce:0 [ 766.302811][T15014] kernel_misc_reclaimable:0 [ 766.302811][T15014] free:1314681 free_pcp:5042 free_cma:0 [ 766.392966][T15014] Node 0 active_anon:120916kB inactive_anon:0kB active_file:48336kB inactive_file:13516kB unevictable:2908kB isolated(anon):0kB isolated(file):0kB mapped:134400kB dirty:608kB writeback:0kB shmem:94732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11876kB pagetables:4788kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 766.442809][T10844] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 766.501729][T15014] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 766.542803][ T5886] usb 2-1: device descriptor read/64, error -71 [ 766.635615][T15014] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.673893][T15014] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 766.679924][T15014] Node 0 DMA32 free:1334388kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:114708kB inactive_anon:0kB active_file:48336kB inactive_file:13436kB unevictable:7508kB writepending:608kB present:3129332kB managed:2547264kB mlocked:5972kB bounce:0kB free_pcp:21148kB local_pcp:840kB free_cma:0kB [ 766.711704][ T5886] usb usb2-port1: attempt power cycle [ 766.727960][T10844] usb 5-1: device descriptor read/64, error -71 [ 766.745740][T15014] lowmem_reserve[]: 0 0 0 0 0 [ 766.750507][T15014] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 766.886745][T15014] lowmem_reserve[]: 0 0 0 0 0 [ 766.891635][T15014] Node 1 Normal free:3912028kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.933649][T10844] usb usb5-port1: attempt power cycle [ 766.950488][T15014] lowmem_reserve[]: 0 0 0 0 0 [ 766.998662][T15014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 767.033205][T15014] Node 0 DMA32: 646*4kB (UME) 874*8kB (UME) 716*16kB (UME) 460*32kB (UME) 202*64kB (UME) 63*128kB (UME) 223*256kB (UME) 149*512kB (UME) 115*1024kB (UME) 29*2048kB (UME) 238*4096kB (UM) = 1342120kB [ 767.057389][T15014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 767.082942][ T5890] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 767.092755][ T5886] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 767.106155][T15014] Node 1 Normal: 239*4kB (UME) 68*8kB (UME) 38*16kB (UME) 197*32kB (UME) 86*64kB (UME) 32*128kB (UME) 11*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 1*2048kB (M) 948*4096kB (UM) = 3912028kB [ 767.128666][ T5891] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 767.153516][ T5886] usb 2-1: device descriptor read/8, error -71 [ 767.213092][T15014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.223501][T15014] Node 0 hugepages_total=5 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 767.238421][T15014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.248227][ T5890] usb 3-1: device descriptor read/64, error -71 [ 767.259244][T15014] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 767.270268][T15014] 35159 total pagecache pages [ 767.299626][T10844] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 767.322323][T15014] 8 pages in swap cache [ 767.332383][T15014] Free swap = 118852kB [ 767.349608][T15014] Total swap = 124996kB [ 767.373846][T15014] 2097051 pages RAM [ 767.379371][T10844] usb 5-1: device descriptor read/8, error -71 [ 767.386152][T15014] 0 pages HighMem/MovableOnly [ 767.392805][ T5886] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 767.428149][ T5886] usb 2-1: device descriptor read/8, error -71 [ 767.436782][T15014] 428577 pages reserved [ 767.459531][T15014] 0 pages cma reserved [ 767.505897][ T5890] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 767.565216][ T5886] usb usb2-port1: unable to enumerate USB device [ 767.592727][ T5891] usb 4-1: not running at top speed; connect to a high speed hub [ 767.621566][T15023] loop8: detected capacity change from 0 to 8 [ 767.629485][ T5891] usb 4-1: config 1 interface 0 has no altsetting 0 [ 767.630466][T15023] Dev loop8: unable to read RDB block 8 [ 767.636348][T10844] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 767.677884][T15023] loop8: unable to read partition table [ 767.685643][T10844] usb 5-1: device descriptor read/8, error -71 [ 767.693641][T15023] loop8: partition table beyond EOD, truncated [ 767.700023][T15023] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 767.713692][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 767.723794][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.731833][ T5891] usb 4-1: Product: syz [ 767.752810][ T5890] usb 3-1: device descriptor read/64, error -71 [ 767.772434][ T5891] usb 4-1: Manufacturer: syz [ 767.800690][ T5891] usb 4-1: SerialNumber: syz [ 767.806585][T10844] usb usb5-port1: unable to enumerate USB device [ 767.906152][ T5890] usb usb3-port1: attempt power cycle [ 768.052091][T15021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.139683][T15021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.263101][ T5890] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 768.290401][T15029] fuse: Invalid uid '00000000000000000004' [ 768.296586][ T5889] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 768.305702][ T5890] usb 3-1: device descriptor read/8, error -71 [ 768.336714][T15029] veth0_to_team: entered promiscuous mode [ 768.342565][T15029] veth0_to_team: entered allmulticast mode [ 768.442830][ T5889] usb 1-1: device descriptor read/64, error -71 [ 768.464133][T15021] x_tables: duplicate underflow at hook 2 [ 768.487768][ T5891] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 768.537144][ T5891] usb 4-1: USB disconnect, device number 95 [ 768.544367][ T5890] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 768.587781][ T5891] usblp0: removed [ 768.620545][T15034] batman_adv: batadv0: Adding interface: dummy0 [ 768.651773][T15034] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.687724][ T5889] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 768.745833][T15034] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 768.781232][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2556'. [ 768.852888][ T5889] usb 1-1: device descriptor read/64, error -71 [ 768.996073][ T5889] usb usb1-port1: attempt power cycle [ 769.175668][ T5890] usb 3-1: device descriptor read/8, error -71 [ 769.306156][ T5890] usb usb3-port1: unable to enumerate USB device [ 769.352917][ T5889] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 769.373514][ T5889] usb 1-1: device descriptor read/8, error -71 [ 769.461568][T15055] loop8: detected capacity change from 0 to 8 [ 769.471158][T15055] Dev loop8: unable to read RDB block 8 [ 769.481113][T15055] loop8: unable to read partition table [ 769.481374][T15055] loop8: partition table beyond EOD, truncated [ 769.481398][T15055] loop_reread_partitions: partition scan of loop8 (þ被xü^>à–& 2té) failed (rc=-5) [ 769.499950][ T5891] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 769.622907][ T5889] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 769.644694][ T5889] usb 1-1: device descriptor read/8, error -71 [ 769.651508][ T5891] usb 4-1: config 0 has an invalid interface number: 209 but max is 0 [ 769.660210][ T5891] usb 4-1: config 0 has no interface number 0 [ 769.675035][ T5891] usb 4-1: config 0 interface 209 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 769.686235][ T5891] usb 4-1: config 0 interface 209 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 769.699265][ T5891] usb 4-1: New USB device found, idVendor=0403, idProduct=fc0a, bcdDevice=95.10 [ 769.709742][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.722733][ T5891] usb 4-1: Product: syz [ 769.727492][ T5891] usb 4-1: Manufacturer: syz [ 769.732161][ T5891] usb 4-1: SerialNumber: syz [ 769.757782][ T5891] usb 4-1: config 0 descriptor?? [ 769.771624][ T5891] ftdi_sio 4-1:0.209: FTDI USB Serial Device converter detected [ 769.780168][ T5889] usb usb1-port1: unable to enumerate USB device [ 769.788097][ T5891] ftdi_sio ttyUSB0: unknown device type: 0x9510 [ 769.975943][ T5891] usb 4-1: USB disconnect, device number 96 [ 770.011187][ T5891] ftdi_sio 4-1:0.209: device disconnected [ 770.252783][ T5890] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 770.393182][ T5890] usb 3-1: device descriptor read/64, error -71 [ 770.649527][ T5890] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 770.842827][ T5890] usb 3-1: device descriptor read/64, error -71 [ 770.992036][ T5890] usb usb3-port1: attempt power cycle [ 771.096886][T15027] delete_channel: no stack [ 771.134322][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 771.285171][T15084] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2570'. [ 771.418138][ T5890] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 771.503511][ T5890] usb 3-1: device descriptor read/8, error -71 [ 771.752833][ T5890] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 771.782409][T15072] team0 (unregistering): Port device team_slave_0 removed [ 771.794826][ T5890] usb 3-1: device descriptor read/8, error -71 [ 771.809295][T15072] team0 (unregistering): Port device team_slave_1 removed [ 771.834816][T15072] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 771.853042][T15072] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 771.873297][T15072] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 771.886111][T15072] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 771.910270][T15072] team0 (unregistering): Port device geneve0 removed [ 771.968235][ T5890] usb usb3-port1: unable to enumerate USB device [ 772.426044][T15100] FAULT_INJECTION: forcing a failure. [ 772.426044][T15100] name failslab, interval 1, probability 0, space 0, times 0 [ 772.439205][T15100] CPU: 1 UID: 0 PID: 15100 Comm: syz.3.2573 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 772.439235][T15100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 772.439249][T15100] Call Trace: [ 772.439259][T15100] [ 772.439269][T15100] dump_stack_lvl+0x241/0x360 [ 772.439307][T15100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.439342][T15100] ? __pfx__printk+0x10/0x10 [ 772.439378][T15100] ? __pfx___might_resched+0x10/0x10 [ 772.439412][T15100] should_fail_ex+0x424/0x570 [ 772.439441][T15100] should_failslab+0xac/0x100 [ 772.439474][T15100] __kmalloc_cache_noprof+0x73/0x370 [ 772.439504][T15100] ? xskq_create+0x54/0x170 [ 772.439530][T15100] xskq_create+0x54/0x170 [ 772.439553][T15100] xsk_init_queue+0xa1/0x100 [ 772.439577][T15100] xsk_setsockopt+0x449/0x840 [ 772.439614][T15100] ? __pfx_xsk_setsockopt+0x10/0x10 [ 772.439647][T15100] ? __pfx_aa_sk_perm+0x10/0x10 [ 772.439678][T15100] ? aa_sock_opt_perm+0x79/0x120 [ 772.439711][T15100] ? __pfx_xsk_setsockopt+0x10/0x10 [ 772.439742][T15100] do_sock_setsockopt+0x3b1/0x710 [ 772.439783][T15100] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 772.439821][T15100] ? __fget_files+0x2a/0x420 [ 772.439846][T15100] ? __fget_files+0x39d/0x420 [ 772.439864][T15100] ? __fget_files+0x2a/0x420 [ 772.439893][T15100] __x64_sys_setsockopt+0x1ee/0x280 [ 772.439923][T15100] do_syscall_64+0xf3/0x230 [ 772.439948][T15100] ? clear_bhb_loop+0x45/0xa0 [ 772.439974][T15100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.439996][T15100] RIP: 0033:0x7f6698f8d169 [ 772.440015][T15100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.440035][T15100] RSP: 002b:00007f6696df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 772.440058][T15100] RAX: ffffffffffffffda RBX: 00007f66991a5fa0 RCX: 00007f6698f8d169 [ 772.440074][T15100] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 772.440087][T15100] RBP: 00007f6696df6090 R08: 0000000000000004 R09: 0000000000000000 [ 772.440101][T15100] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.440118][T15100] R13: 0000000000000000 R14: 00007f66991a5fa0 R15: 00007f66992cfa28 [ 772.440152][T15100] [ 772.927349][T15093] lo: entered promiscuous mode [ 772.971574][T15093] tunl0: entered promiscuous mode [ 773.000551][T15093] gre0: entered promiscuous mode [ 773.044044][T15093] gretap0: entered promiscuous mode [ 773.080367][T15093] erspan0: entered promiscuous mode [ 773.097200][T15093] ip_vti0: entered promiscuous mode [ 773.146017][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2571'. [ 773.948885][T15120] FAULT_INJECTION: forcing a failure. [ 773.948885][T15120] name failslab, interval 1, probability 0, space 0, times 0 [ 773.993240][T15120] CPU: 1 UID: 0 PID: 15120 Comm: syz.0.2579 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 773.993273][T15120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 773.993287][T15120] Call Trace: [ 773.993296][T15120] [ 773.993305][T15120] dump_stack_lvl+0x241/0x360 [ 773.993344][T15120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.993375][T15120] ? __pfx__printk+0x10/0x10 [ 773.993409][T15120] ? __pfx___might_resched+0x10/0x10 [ 773.993439][T15120] should_fail_ex+0x424/0x570 [ 773.993469][T15120] should_failslab+0xac/0x100 [ 773.993502][T15120] __kmalloc_noprof+0xdf/0x4d0 [ 773.993532][T15120] ? tomoyo_encode+0x26f/0x540 [ 773.993569][T15120] tomoyo_encode+0x26f/0x540 [ 773.993602][T15120] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 773.993639][T15120] tomoyo_realpath_from_path+0x59e/0x5e0 [ 773.993682][T15120] tomoyo_path_number_perm+0x245/0x790 [ 773.993719][T15120] ? tomoyo_path_number_perm+0x215/0x790 [ 773.993748][T15120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 773.993782][T15120] ? ksys_write+0x24e/0x2d0 [ 773.993816][T15120] ? __lock_acquire+0xad5/0xd80 [ 773.993858][T15120] ? __fget_files+0x2a/0x420 [ 773.993878][T15120] ? __fget_files+0x2a/0x420 [ 773.993900][T15120] ? __fget_files+0x2a/0x420 [ 773.993925][T15120] security_file_ioctl+0xc6/0x2a0 [ 773.993952][T15120] __se_sys_ioctl+0x46/0x160 [ 773.993981][T15120] do_syscall_64+0xf3/0x230 [ 773.994006][T15120] ? clear_bhb_loop+0x45/0xa0 [ 773.994030][T15120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.994051][T15120] RIP: 0033:0x7fa4ea58d169 [ 773.994071][T15120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.994089][T15120] RSP: 002b:00007fa4eb3e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.994113][T15120] RAX: ffffffffffffffda RBX: 00007fa4ea7a5fa0 RCX: 00007fa4ea58d169 [ 773.994129][T15120] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 773.994142][T15120] RBP: 00007fa4eb3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 773.994156][T15120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.994169][T15120] R13: 0000000000000000 R14: 00007fa4ea7a5fa0 R15: 00007fa4ea8cfa28 [ 773.994202][T15120] [ 773.997427][T15120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 774.752908][ T5887] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 774.954727][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.980833][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.051402][ T5887] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 775.287955][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.320471][ T5887] usb 5-1: config 0 descriptor?? [ 775.417123][ T5886] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 775.592977][ T5889] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 775.621479][ T5886] usb 1-1: no configurations [ 775.626234][ T5886] usb 1-1: can't read configurations, error -22 [ 775.772989][ T5886] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 775.802740][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 775.821307][ T5889] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 775.861291][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.866804][ T5887] arvo 0003:1E7D:30D4.0028: item fetching failed at offset 5/7 [ 775.888801][ T5889] usb 4-1: config 0 descriptor?? [ 775.905571][ T5889] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 775.919714][ T5887] arvo 0003:1E7D:30D4.0028: parse failed [ 775.960936][ T5887] arvo 0003:1E7D:30D4.0028: probe with driver arvo failed with error -22 [ 775.994196][ T5886] usb 1-1: no configurations [ 775.998873][ T5886] usb 1-1: can't read configurations, error -22 [ 776.018105][ T5886] usb usb1-port1: attempt power cycle [ 776.065012][T15148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.108024][T15148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.127175][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.195126][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.219515][ T5887] usb 5-1: USB disconnect, device number 82 [ 776.372783][ T5886] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 776.412261][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.440310][ T5886] usb 1-1: no configurations [ 776.447346][ T5886] usb 1-1: can't read configurations, error -22 [ 776.491249][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.615664][ T5886] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 776.632946][ T5887] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 776.674103][T15163] Oops: general protection fault, probably for non-canonical address 0xdffffc00000009c0: 0000 [#1] SMP KASAN PTI [ 776.686066][T15163] KASAN: probably user-memory-access in range [0x0000000000004e00-0x0000000000004e07] [ 776.695880][T15163] CPU: 1 UID: 0 PID: 15163 Comm: syz.3.2583 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 776.707637][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 776.717799][T15163] RIP: 0010:workingset_refault+0x48f/0x1b80 [ 776.723734][T15163] Code: c7 c7 48 fa 5f 90 e8 f0 06 1e 00 4c 8b 35 31 85 50 0e 49 8d 9f 00 4e 00 00 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df <42> 0f b6 04 20 84 c0 0f 85 bb 0a 00 00 48 63 03 49 8d 1c c6 48 81 [ 776.745415][T15163] RSP: 0018:ffffc9000d507600 EFLAGS: 00010206 [ 776.751545][T15163] RAX: 00000000000009c0 RBX: 0000000000004e00 RCX: dffffc0000000000 [ 776.759631][T15163] RDX: 0000000000000000 RSI: ffffffff8e4fc666 RDI: ffffffff8ca1b140 [ 776.767626][T15163] RBP: ffffc9000d507890 R08: ffffffff8c2e746c R09: ffffffff8c2e742a [ 776.775606][T15163] R10: 0000000000000002 R11: ffff88805d951e00 R12: dffffc0000000000 [ 776.783616][T15163] R13: 0000000000000000 R14: ffff88814049c000 R15: 0000000000000000 [ 776.791639][T15163] FS: 00007f6696db46c0(0000) GS:ffff888125099000(0000) knlGS:0000000000000000 [ 776.800596][T15163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.807291][T15163] CR2: 0000001b2c11fffc CR3: 0000000057cd6000 CR4: 00000000003526f0 [ 776.815334][T15163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.823333][T15163] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 776.831344][T15163] Call Trace: [ 776.834653][T15163] [ 776.837633][T15163] ? workingset_refault+0x34a/0x1b80 [ 776.843073][T15163] ? __pfx_workingset_refault+0x10/0x10 [ 776.848670][T15163] ? rcu_is_watching+0x15/0xb0 [ 776.853463][T15163] ? __filemap_add_folio+0x1205/0x16c0 [ 776.859058][T15163] ? __pfx___filemap_add_folio+0x10/0x10 [ 776.864854][T15163] ? percpu_ref_put+0x19/0x180 [ 776.869775][T15163] filemap_add_folio+0x23a/0x380 [ 776.874758][T15163] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 776.881131][T15163] ? __pfx_filemap_add_folio+0x10/0x10 [ 776.886646][T15163] ? __filemap_get_folio+0x9d2/0xb40 [ 776.892211][T15163] do_read_cache_folio+0x349/0x5b0 [ 776.897456][T15163] freader_get_folio+0x54d/0x880 [ 776.902436][T15163] freader_fetch+0x9d/0x5b0 [ 776.907008][T15163] ? mt_find+0x699/0x8f0 [ 776.911305][T15163] __build_id_parse+0x185/0x8e0 [ 776.916187][T15163] ? __pfx___build_id_parse+0x10/0x10 [ 776.921608][T15163] procfs_procmap_ioctl+0xcf6/0x1670 [ 776.926948][T15163] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 776.932705][T15163] ? __fget_files+0x2a/0x420 [ 776.937423][T15163] ? __fget_files+0x2a/0x420 [ 776.942058][T15163] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 776.947816][T15163] __se_sys_ioctl+0xf1/0x160 [ 776.952436][T15163] do_syscall_64+0xf3/0x230 [ 776.957066][T15163] ? clear_bhb_loop+0x45/0xa0 [ 776.961825][T15163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.967770][T15163] RIP: 0033:0x7f6698f8d169 [ 776.972249][T15163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.991985][T15163] RSP: 002b:00007f6696db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.000434][T15163] RAX: ffffffffffffffda RBX: 00007f66991a6160 RCX: 00007f6698f8d169 [ 777.008603][T15163] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 777.016625][T15163] RBP: 00007f669900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 777.024728][T15163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.032723][T15163] R13: 0000000000000001 R14: 00007f66991a6160 R15: 00007f66992cfa28 [ 777.040745][T15163] [ 777.043770][T15163] Modules linked in: [ 777.048932][T15163] ---[ end trace 0000000000000000 ]--- [ 777.066200][ T5886] usb 1-1: no configurations [ 777.071825][ T5886] usb 1-1: can't read configurations, error -22 [ 777.081791][ T5886] usb usb1-port1: unable to enumerate USB device [ 777.088390][T15163] RIP: 0010:workingset_refault+0x48f/0x1b80 [ 777.101996][T15163] Code: c7 c7 48 fa 5f 90 e8 f0 06 1e 00 4c 8b 35 31 85 50 0e 49 8d 9f 00 4e 00 00 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df <42> 0f b6 04 20 84 c0 0f 85 bb 0a 00 00 48 63 03 49 8d 1c c6 48 81 [ 777.122821][T15163] RSP: 0018:ffffc9000d507600 EFLAGS: 00010206 [ 777.129160][T15163] RAX: 00000000000009c0 RBX: 0000000000004e00 RCX: dffffc0000000000 [ 777.138327][T15163] RDX: 0000000000000000 RSI: ffffffff8e4fc666 RDI: ffffffff8ca1b140 [ 777.146937][T15163] RBP: ffffc9000d507890 R08: ffffffff8c2e746c R09: ffffffff8c2e742a [ 777.157489][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.170609][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.194560][T15163] R10: 0000000000000002 R11: ffff88805d951e00 R12: dffffc0000000000 [ 777.204718][ T5887] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 777.215242][T15163] R13: 0000000000000000 R14: ffff88814049c000 R15: 0000000000000000 [ 777.224198][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.233097][T15163] FS: 00007f6696db46c0(0000) GS:ffff888125099000(0000) knlGS:0000000000000000 [ 777.250175][T15163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.258617][ T5887] usb 5-1: config 0 descriptor?? [ 777.265825][T15163] CR2: 00002000000001c4 CR3: 0000000057cd6000 CR4: 00000000003526f0 [ 777.281446][T15163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.291907][T15163] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 777.302296][T15163] Kernel panic - not syncing: Fatal exception [ 777.308672][T15163] Kernel Offset: disabled [ 777.313011][T15163] Rebooting in 86400 seconds..