last executing test programs: 5.607860702s ago: executing program 1 (id=5189): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) unshare(0x28000600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$alg(r0, 0x0, 0x0) 5.550890008s ago: executing program 1 (id=5191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x1, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.474719984s ago: executing program 1 (id=5193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)={0xa60, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2d, 0x3, "79262fbe8cad9dde979852bd14020c5629789aded145e3cc18c9dd935fb60728d4fd13d4fc6a93f7dd"}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf48b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0x93c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x935, 0x3, "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"}]}]}, 0xa60}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) 5.186570232s ago: executing program 0 (id=5197): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002080)={0x1c, &(0x7f0000001f80), 0x0, 0x0}) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000005c0)={0x0, 0x9, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000b00)={r7, 0x80000000, 0x1, [0x80, 0xee4, 0x36, 0x6, 0x7], [0x0, 0x4, 0x10001, 0xffff, 0x10001, 0x8, 0x7fb0, 0x8, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x101, 0xfffffffffffffff0, 0x6000000000000000, 0x9, 0x6, 0x10000, 0x7, 0x0, 0x31a7, 0x6, 0x4, 0x6, 0xc000, 0xa, 0xe, 0x800, 0xe, 0x9, 0xffffffffffffff80, 0x8000000000000001, 0x3, 0x3ff, 0x33900000000, 0x40, 0x5, 0x6, 0x1, 0xfffffffffffffffc, 0x5, 0x352, 0x0, 0x5, 0x4, 0xd5a, 0x4, 0x7, 0xffffffffffffffff, 0x5, 0x76d, 0x9, 0x9, 0xfffffffffffffffd, 0x4, 0x3, 0x8, 0xb96f, 0x5, 0x7fffffff, 0x7, 0x5, 0x10001, 0x43e, 0x81c, 0x8000, 0x100000001, 0x0, 0x444, 0x8000, 0x1000000000000000, 0x4, 0x6, 0x6, 0xbd51, 0x6, 0x8000, 0x2, 0x1, 0x1, 0x3000000000000000, 0xfff, 0x8e6, 0x0, 0x0, 0x4, 0x0, 0x9, 0x8, 0x800, 0x80, 0xffff, 0x7, 0xf, 0x800, 0xd156, 0x7, 0x3a4ad73f, 0x1, 0x604b, 0x0, 0x0, 0x8, 0x1, 0x2, 0x8, 0xec, 0x8, 0xe, 0x40, 0xa, 0x0, 0x7, 0x0, 0xfffffffffffffeff, 0x61a, 0x401, 0x0, 0x1, 0x9, 0x4]}) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, 0x0, 0x0) r11 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00') openat$binfmt(0xffffff9c, r11, 0x41, 0x1ff) (async) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="02130000020000000000000000000000ff195cc2f9b8734d0165790a2b3adb011ed318dcd0509713c396361f46c4ab4016f5634c03589d00ca69410d2ac160802d38400d1cbec40c5f72077b6d3aa2ec10e07cecf8f58aba1df38e5ee954884497d50ec334791308b361af26816e8363"], 0x10}}, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f40)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6b66}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4400c857}, 0x4048090) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="b2079a36210199bc247b96b53896af6b8d11b9fc9f56979494e2bb909b2d6bb025dbf80d25297b1d12b7403d782d401967256bcb7d", @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="7e37874742898e7d92f60b702b0156f784bb8c66d105e87111f64c0b8a4b2b30b42c4af46e4ecc7847781354b4ce023b938fdb7350276cd25db328c815f38c23a1467c5fb669da96e1a101bfb8e509e3d6"], 0xc8) 4.735723338s ago: executing program 3 (id=5199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x12, &(0x7f00000004c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040211080210000000040000a118000200e000110154fd0e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dc934e7ce80b2cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730da4683f65985aab00dbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4e01c9b725de6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x94, 0x0, 0x0, 0x800}]}) r2 = fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x8100}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="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", 0x2d3}, {&(0x7f0000000800)="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", 0x2a7}, {&(0x7f0000000240)="05437c98b91b1455046f57", 0xb}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x24000004) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003880)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000b280)=@newtaction={0x1000, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{0xfec, 0x1, [@m_ipt={0x7c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x51, 0x6, "77a9f4416c9f594ff76fd8e267ea66812c7a7528aaabe3099642cc4e62c9e3da220a3bf70519c0a00943e8fa3350e331e73f7b07d453884add337bc4446d1fdbac36596ac9d284cfcdab95530a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x1b4, 0x1b, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa9, 0x6, {0x401, 'mangle\x00', 0x0, 0x3ea2, "f0faf8c0714bcd689b26c27f966963d040fce98ebe50e35d475169b9487a61697830879b3c42e0ffd477d6f7f6168e744ca67a9b89b615b83ed6373c28b615d2393a4ffc331f1a8362b4b4fbd484bae6069be843a173e0a766f5c7677100744ed83cc8eb8b7d4aac3b5d625f44cf566c86439fba61959475719ff34c67864e"}}]}, {0xde, 0x6, "f3e59a6f6efeedaec9081b95d718ed13f1efc553b25f1c505cf39c51ffb5474a5c0d7c111f7ae90aa0d25058d51531250cb0f7c4d4f7a910b054c93557460b3b5efe7ed3aed0a24282ad8b125c398ed3532438370b409c187b30f2996de06b29e4fe3338d71882c1386e2eae58477234cb2fa1b825bd2c47e2585839efd48e720857aa5d0b8837d38fed7fb304d78828148017913434dcc8fe1ae2b263570257ee609c056724e08b39a13f599ced18aea0f17ef552cd3501244f62b09c644763249732bfd57e8e1c601ab3c28209f58529265faba488167ad630"}, {0xc}, {0xc}}}, @m_ipt={0x74, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x49, 0x6, "293528e749dd78d2b70acf1425d95db1d8e77f995bad7768955bba96ea7d1732d966d87ed54c6dd9d093f99b93aa1c18a367fd71a9a84cbf2666784f5114cc6781f2173f2f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xd44, 0xb, 0x0, 0x0, {{0x8}, {0xca0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc99, 0x6, {0xd7, 'filter\x00', 0x6, 0x7, "83c93dca37beca612b655561c18189dfed048868ba46b8711720024a3ae2c2b8390018a342c67987dcd266802b1d2fb804bf8fc27be585000995817cd6a8d04af4cf979e1b434ecc0d20bbc4e3090853aacc9ac4585f2579d5f46c7829d43c21e38e1b6e0dfdeb9425684802cd3f2c87b2de54ce0cdff9991b89f27a02146c30fcccba0a385653fbc5f155c88287cb3c30d8c8f100315fb75dc992061f1aecb372ceff9de55372c570090bd685ac5fb465fe781960caf3dc77ac7a4d86d99235b990acf058f465e078b0007f8c129e7df3acca72366cbfedcfd6d5b164bb298a7c9759d61d3103181664235b160fb0dec3becf4aa028da2cd99f9c6b2c21d18f0ef124d86403f3c606383383cf9f5a3bbbb60215e3ba7f03d05a13ada934b6550e8fbdad26e78d9ac96f59f21fc855ca10e45e232c799a08755c856a57b44644381b51c4f758ad831beb47e4d4d800bfab90d4fec3fccf886e4c7a58b2fbb8a94528c1ec928d6049c938a409dc713760b9164ef1ec9c1a4cafd82bca0bc3c455ad118af957225acfcab40154f9e44ff34c387f85287ec83774a9d58a5aff3aa0c066bcdb70ff6aca6cc13a286b09c15218cb08c34f2b7da7ed5853e84e57636a837924517711a3da5b110828c4ef6eeef04f7b2a078bcdcbb8f7864ded65e232768f40758e4e0f27ea41807efe23e29003cce96ea384b3f6305594dadfd78f14e76e21ac8fb3976c114f0d88ea71eb9de84deafbeee8880775860efed8f0868bf40e7284cb30b7057faca89db2270056e910b645a18ea92888cd405d679e8e96c6abb4e4bbd6a5ad92834f1768939eff310540b89f412ef31e31da7c162b958488e85b0cbc8d5dfbedc3ae3cd93bdba6aecd917c334afe7769cc82dfeb9f297161d2ba90b86623f71e155956e83a7bc9153dd405dedc2363644b30d7fcc92f43c2e4d69bc9774ad6582f6db9946352e46c5b2b153a967940bfd93964fda72ba4e1343a16c03abfa310355a21287bde1648d748303170aabe634e8c0b3c311f6bbbab5ab3805b8793bd0ebf08d4b9a2130b3f8040a6ee056df17d479f98ead6555e026acfc2154a24003c2b1a873e8bf5125f888177828f0f198c9d94617ca7a52d943d42ef54c901b776069b10766d7a37bf80a8f18a1d87db555d0c59dcb17ded43e7d477a4a7bf8dab28566c187d525595f5550d95027e4c2eef7c383a22adf055dea5bb9307342c51b5a91b7067503a8afe3ec73c902e55017057709090ea366b7bb763c1e5c8e7c3bea1a841693955c0f5e60a526f9853a380b00a2e7fb4e56701cb5d8b603e4fac3004b0fd88dbd497e29a9799ffb823d2881fb54c0d980d2e48bda39be0437864e216d53408e5bb2f2527b2db876f7b3b0065e4edd18c28d2d0a0538b3f757264a285ef8b246ca33b3183314893fb3d93981a070f59627ac81bf14011b9712e2ca6b2a9593cef2067c5bafa3fbd387c54257971eba80f6e37b0ff921a5ceb2121b56283d06b97f5a9be44cebd2082f83dc3f400f3a9e40978340ff600b208c85cd45c2f3b6cb44ad7b18a592a9bd8142286072dfc2c64c076428508a50114ce5ab7d9ed24d70afada51cc8e449a7cbb3b508d99a2fb5b5eac0fc96e7e4110dafd9f227e71e67afaecb01c450ce96d952720264036d82fe50aa5b1bdb0ff021ca3bbe943a82db0ba251fa10d8c7f7e7029284630458111c42fa49f27f594ed7cd10e615b90f3bb659eaa7b08a112490ffa44ceb5ffa569b775c0de8dd6d2a585d591e8a060b6e6c9fcd8ae7d77eea4c0a33c9f4f1fcfe6507ad6fafb7c1eeb2bab4c2d7d5af4c6bea5dd5587ba51784b6891a359d5fe1d235b7e86f5bae2cd6ed7754df55001f1e6b767e2703dd9bf3aad2cf194a33b26424f5d3f9f5551dd90b84698ada207b52489b9dafefb6ea4860ffb6c460690cbb7b5a674a0a34e9b143f3c0d45b9f13ec349f7ba0798b41aa16cee195694c9059f371d4120574551f3c2d66004071c331bdf5500548c061d663809f8ff30eed3bee2c027c1edcc7719bd7e8d3ebd882dc5db5fb246c02f4c310b1ff42366561e0698cbdb3415c1abd026d244b79796bc9bc26d6bdcb823e9eeed297ef1ec7a2926e0560e3ded6afa0dce9cec101f39fb29ad5ccb30fd6f264905859c161f149b4ecbc7363addb53d50f1a8ed9dd8faa37e33156e93fa3541bdb3cb01798bf201f5066280f067fec9dd2d7e67d861baba4d498230627c295e086e3d5a3bc6dd29c4b757bb6db0b24c24dd331c7db810df6273d38e8733508e7128d24ea70705817d3f7afaebb76d9cd02cc2a4c682f6b1337d6fa0b35ddbcbef39b9aef8edc8607574488ad56484d63c56cf72e9c12cbeae5e7cecff40d93d8fb6b6d754aeec25ab4fee4b010694cf793a9439346be539aa6f6c19525cc5e0999fc5ac896b2249a40860685748d4fda6e8e40d18fb7150f95864591fce927ce720b46ce6b2f3f469ab8bdcea1ec9fee68e10a7f0d7667516d6fd9c1b275bff222df5dc23e84e1e05ce5e197b30ff8bc904eec94544d0cfc16e6cd5c2ba5b26667937d9321ee9bfd222d33c6327e7b113cb1526926d4658a0a0826a2203b10dc421fb34667ecb722f0e270f073421af339a56ddbaf1aca7269c66d4325b5473ef607c823c4c9f615a386ece0ba61e7c39be5650a89bcdc4265a9502b43d30b80462d01c79c5a0190cb104645a962a49a26587aefffadeaf17dd56b8c8ae24be836848631625e86e0e0b9d1c41501e6af5d54e63795b6310ae6529ec476fab1bdf75a7da40c5379cee51e30dbda0f8d920d5ac0a667aaae6929bc268010c63766a95013ba2e2011187169a85b16420853ebd81b97302e60ed4beacdf69f03b2f37f0870fd8deab2457d6febe89e79e74bda1bb349aac1614fa6581a5d9aa7c3097e9f912309b62d7678c49a0ea83662b4d39bdee71c9da8581408daff58711d69e3c4a06120c966c39f6aec0588cfebedc600e0b53a079f51f8cd9570d765a6bb4b9366dfdcf8dfb72eed2a1b2e798a564984e195a37f01d956fa701c940e8dc2f04c0cfdb9b9dc3ca89db8569b2070de683c9a87e347fee638fe266e084f433b7dfbfc274dc24a2666f98c4687afa489bb785c51c26054ae1e29a254f92df8f92c723f66a7fdce150295f15a4b40c7c47a1196e5d36776b195df1976a986ce813d984a5f82edb1f5bdb2697cc85e29fcd3a07ebfccfa1af70040299c58aa1af3bf594d5675f28925dc209ade6fec0b56acc2abb7bbd175694c4f0501a4ec73813824d449fbcf5ba1c5aced9edaea823197bf7120da1eb5b2fcbe6686e7c004d4c01a5a4a164be43300d1d77cdbe86f765aee43bde7982ad433692c9e7b38c20ecd13d31f4a2be7fc47da654880c012470a3827cb1ce9e4f69dec3955c0e0eff1f9c71803844f6c33f69ac0b29b1f1fca8442a523d21f43d634df3fd891bc0cb2ee2b8302649a6affc8a9fea9b023328cd0ebd7ab321834a3fcd44ca1fbdeeeaa9183ac112bb8860834fb0a6cc6d0e184ee818cc923843033ce52c1453d46d11de18be9333fd50831d1ec14c2d95e20e4d9a8883a0d7ddf2fdb294ee45f1446607159d1d11e43dafbb0d2044eae4f496858a580e31cb70d7f787af501d9219a02a11a66a81b25906a878d1adf11328e70dc08db4bf49a28855dec3cfe6502513b81bb79af40eb37372ca5097cc8f013f0bcdba18a788739201dcec866809eebde8ecbdbc1a8a9eda8442f41cb085274ac1a705d7de0ab6b8e5452280ff043d990d69b6b31714a506dbb27fad19c2395b38dd8be24913c97703cd18a1923a889038f24b3d5fd48e2d33110d4b8a87da9c2c3cee0cd0a03ec53bd5e2ac60f66de8e1047bbb4a411df538126ff6b2b8635282f73295f803d91dd02a5179e6b5493e1c0eb8f3682ffb0e8c176b96c75ae25394a7c03cc8b2ebb3130084a2d022c89aee0d5cfc5fc47a44629676fd684039e01e8cdbb944172f1f9156336fd7c974875ea880c28e0eadc000579d5305290e6041448004a0f81e736399103c465dfb3bc1916686e29a69fd647b768f55c9eff24dc007b36995be2377756416226e3e3c349fa32278cf1ad1550b8ad38428bf598912a8387931e1339f74920f6b78bd3bcd0feca494d3c4d313b31f102fa8285715047bc4540370d5d1c11bee291a10855ddd812d470856fa842044e6601932ed3e1d2e2ab7e181d263c6dbf5ff16a8c66e696ee2ae8f200343e22a6ab8621add8c64812d89e99086d4fca8cb04c1b882eff4786bd9eec619867d357b2bd8b2f1824760f6155c6c5f5c8014f4b1882510364dd8e7866e61e83eb2ea20a4044a96a8ac870f1ee30fba12a66095ba572ae3f9584eee75cd78b26f42fc00dde6e1c270767512fbd112e9a52c6bf028723aec7800d8b302f17c3c9124e53ed2296c49d54915065ec08d66aff86abc809930f708eade1998a6457a3198ba4efa1705c3c78daed5eee8a6"}}]}, {0x7d, 0x6, "64c4740ece33022d655491d5a2bbac26771830fcd935d5431dbacb31ae97de145545091c1fd128a4a6dd65795574e5945bb986f9c2135145226c7b5043c01278a56cc5dfbc95e0eb07866b789766bcd93bcc5b116d08943599b2b61407b56aa652737e24277e4d5150bce57d90b71f7e6d2066e9e25e6c7361"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1000}}, 0x20048015) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x7, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x110, r1, 0x3a36c000) 4.570284678s ago: executing program 1 (id=5203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x6, 0x9fe, 0x100, 0x2140, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x9, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b12905d60000000b7a2c0f500000000073d58020000f8ffffffb703000008400003006c976c3b3500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) (async) sendmmsg$inet6(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="89fe", 0x2}], 0x1}}], 0x1, 0x4000c000) (async) sendto$inet6(r4, &(0x7f0000000180)="d07ec4140500000000000000a00e618afc87398585eaaff22bfe035ff5f07186179849be74ef12694918048d4fa09e9dcfb0ee1a820e74c6d453cd763c1233a66af158a03bdd5a8afe6ca46de41d3a05", 0x50, 0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000005e000000430000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ab055d670ec2264b449d292b6aab71d335a63cc683823cce944cdbd720e37c13e37c72ee0286af0eee3c81a9f125920ad68219", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r6, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x20010, r6, 0x8000000) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x7, 0x14000, 0x71, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x8000, 0x700, 0x7, 0x6651}}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_sa={0x2}]}, 0x60}, 0x1, 0x7}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000072003303000000000000000007000000", @ANYRES32=0x0, @ANYRES8=r9], 0x20}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r8, 0x0, 0x81, 0x6, 0x101, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x40, 0x0, 0x5, 0x80000000}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x3300}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 4.570007969s ago: executing program 3 (id=5204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c", 0x15) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x64, 0x0, 0x1, "49b1d0f6f7c7a4d199387582f092a7d6", "17553e80776fa043e73a03bda996ddda556c7e1c887eeb2af29403af5aee82cdcecbbc99b8b85f1f78c92919dd9cfc0a1940cc963f4e8cdf470e5e78b0429d01835bed25eb274b2efbd010d02ae735"}, 0x64, 0x3) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x5, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x2) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x12, 0x0, 0x0, 0x900}, 0x60) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=ANY=[], 0x1150}, 0x1, 0x0, 0x0, 0xc09c}, 0x844) 4.473903608s ago: executing program 3 (id=5206): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002300), 0x2801) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000140)='L', 0x1) syz_usb_disconnect(r1) 4.105855199s ago: executing program 1 (id=5208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x0, 0xf, 0x4002}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffff, 0x80000}}, 0x48) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x32, @multicast1, 0x4e20, 0x3, 'lc\x00', 0x22, 0x80000001, 0x40}, 0x2c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r3, 0x0, 0x8000002b) 2.937420183s ago: executing program 2 (id=5218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}}], 0x1, 0x0, 0x0) 2.831475853s ago: executing program 2 (id=5219): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}}], 0x1, 0x0, 0x0) (fail_nth: 2) 2.191917638s ago: executing program 2 (id=5221): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000640)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000020605000000000000000000000000000500040073"], 0x28}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.059231037s ago: executing program 0 (id=5222): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3ec, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}, @TCA_U32_CLASSID={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "17a84e246226dc8310387a1224cf94da"}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa}]}}, @filter_kind_options=@f_route={{0xa}, {0x2d8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1e4, 0x6, [@m_connmark={0x128, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4d, 0x6, "8f4fd23a9ea0b591a991d04aa8cb411880b88050856c4a5b99aadf5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9e700e434a91aee57c298a92d8bd93d12a4974"}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_nat={0xb0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x5d, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee09f14645"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x3ec}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.898454526s ago: executing program 2 (id=5224): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000feffffff0d00", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000030000000800"/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000044b76df344ec49c3", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000880) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x208, 0x0, 0x19, 0x0, 0x0, 0x0, 0x170, 0x1f0, 0x1f0, 0x170, 0x1f0, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xc0, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_vlan\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0xc5cc}}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030123030303030303030303030303034a4d1ccee1237350a93b509f60a", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000040c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbd2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53892cf2b3f41d58e08bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40f2694d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4feed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf977eaf37d043c407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac0653fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512ae8be2f86b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0103d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71a6c8149ffca2434c773bffe76b020000000034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0xfffffd21, &(0x7f0000000700)={&(0x7f00000003c0)={0x50, 0x0, 0x8, {0x7, 0x28, 0x800000, 0x0, 0x0, 0xfffd, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.891646673s ago: executing program 0 (id=5225): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x40814, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (fail_nth: 2) 1.585837698s ago: executing program 3 (id=5226): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0xac}, {0x6}]}) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r0, &(0x7f0000001800)={0x2020}, 0x2020) 1.09194004s ago: executing program 0 (id=5227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x64, 0x0, 0x1, "49b1d0f6f7c7a4d199387582f092a7d6", "17553e80776fa043e73a03bda996ddda556c7e1c887eeb2af29403af5aee82cdcecbbc99b8b85f1f78c92919dd9cfc0a1940cc963f4e8cdf470e5e78b0429d01835bed25eb274b2efbd010d02ae735"}, 0x64, 0x3) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x5, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x2) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x12, 0x0, 0x0, 0x900}, 0x60) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=ANY=[], 0x1150}, 0x1, 0x0, 0x0, 0xc09c}, 0x844) 1.007270967s ago: executing program 4 (id=5228): mkdir(&(0x7f00000002c0)='./file0\x00', 0x191) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) futex(0x0, 0x4, 0x1, 0x0, &(0x7f000000ff00), 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000340)={0x28, 0x4, 0x0, {0x1, 0x2}}, 0x28) 949.788973ms ago: executing program 0 (id=5229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) 887.901178ms ago: executing program 4 (id=5230): r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x602340, 0x1) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x40) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x1, @vbi={0x5a5e, 0xffff, 0x800, 0x31324d4e, [0x5, 0x2], [0x5, 0x5], 0x1}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) 841.269529ms ago: executing program 4 (id=5231): unshare(0x68060200) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 685.925192ms ago: executing program 2 (id=5232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x7f}]}]}, 0x28}}, 0x40840) (fail_nth: 2) 638.636348ms ago: executing program 4 (id=5233): syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1e4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/183, 0xb7}], 0x2, &(0x7f0000003c40), 0x0, 0x0) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x1, 0x0, 0x0, 0x9}) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async, rerun: 32) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000001900)=""/102390, 0x18ff6}], 0x1, 0x4, 0x7fe) (async, rerun: 32) prctl$PR_SET_PTRACER(0x59616d61, 0x0) (rerun: 32) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0x0) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4012}, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) (async) ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = dup(0xffffffffffffffff) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$packet(0x11, 0x0, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async) sendmsg$nl_route(r0, 0x0, 0x4044054) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRESDEC=r1, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0xc891}, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@mcast1, @mcast1}) (async) ptrace$getregs(0xe, 0x0, 0x0, 0x0) 595.393465ms ago: executing program 1 (id=5234): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/111, 0x6f}], 0x1, 0x0, 0x0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="7f96be1030f2a6a5e2c9b768ae834941", 0x10}], 0x1}, 0x8010) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}}], 0x1, 0x0, 0x0) 331.838495ms ago: executing program 3 (id=5235): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3ec, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}, @TCA_U32_CLASSID={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "17a84e246226dc8310387a1224cf94da"}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa}]}}, @filter_kind_options=@f_route={{0xa}, {0x2d8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1e4, 0x6, [@m_connmark={0x128, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4d, 0x6, "8f4fd23a9ea0b591a991d04aa8cb411880b88050856c4a5b99aadf5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9e700e434a91aee57c298a92d8bd93d12a4974"}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_nat={0xb0, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x5d, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee09f14645"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x3ec}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 310.962114ms ago: executing program 3 (id=5236): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002300), 0x2801) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='L', 0x1) syz_usb_disconnect(r0) 245.567676ms ago: executing program 4 (id=5237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) 151.88845ms ago: executing program 2 (id=5238): r0 = gettid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000540)=0x3e4b, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) read$FUSE(r1, &(0x7f0000002d00)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xf, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) readv(r3, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="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", 0xfc) 40.410689ms ago: executing program 0 (id=5239): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x64, 0x0, 0x1, "49b1d0f6f7c7a4d199387582f092a7d6", "17553e80776fa043e73a03bda996ddda556c7e1c887eeb2af29403af5aee82cdcecbbc99b8b85f1f78c92919dd9cfc0a1940cc963f4e8cdf470e5e78b0429d01835bed25eb274b2efbd010d02ae735"}, 0x64, 0x3) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x5, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x2) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x12, 0x0, 0x0, 0x900}, 0x60) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=ANY=[], 0x1150}, 0x1, 0x0, 0x0, 0xc09c}, 0x844) 0s ago: executing program 4 (id=5240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000002030104000000000000000000000000090002"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): .4.4971'. [ 1075.741000][ T5283] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1075.782044][ T5283] usb 4-1: device descriptor read/8, error -71 [ 1075.901650][ T5283] usb usb4-port1: unable to enumerate USB device [ 1075.971502][T23874] fuse: Unknown parameter 'group_i00000000000000000000' [ 1076.308897][T23886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1077.093344][ T5283] usb 3-1: USB disconnect, device number 99 [ 1077.268313][T23901] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1077.287009][T23903] fuse: Unknown parameter 'group_i00000000000000000000' [ 1077.451066][T15343] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1077.601188][ T5283] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1077.618488][T15343] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1077.637075][T15343] usb 5-1: config 0 has no interface number 0 [ 1077.650354][T15343] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=57.82 [ 1077.668301][T15343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.679038][T15343] usb 5-1: Product: syz [ 1077.690193][T15343] usb 5-1: Manufacturer: syz [ 1077.698021][T15343] usb 5-1: SerialNumber: syz [ 1077.715093][T15343] usb 5-1: config 0 descriptor?? [ 1077.726945][T15343] keyspan 5-1:0.184: Keyspan 2 port adapter converter detected [ 1077.736075][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 87 [ 1077.744394][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 7 [ 1077.757577][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 81 [ 1077.766591][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 82 [ 1077.775331][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 1 [ 1077.784402][ T5283] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1077.795203][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 2 [ 1077.804333][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1077.819812][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 85 [ 1077.828099][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1077.839993][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 5 [ 1077.848235][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1077.858037][T15343] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1077.877785][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1077.890195][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 83 [ 1077.898217][ T5291] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1077.909941][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1077.921334][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1077.936037][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 84 [ 1077.948133][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 3 [ 1077.957250][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1077.966529][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1077.968268][T23899] validate_nla: 1 callbacks suppressed [ 1077.968287][T23899] netlink: 'syz.4.4983': attribute type 29 has an invalid length. [ 1077.977933][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 4 [ 1077.999799][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.006846][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 86 [ 1078.017383][T15343] keyspan 5-1:0.184: found no endpoint descriptor for endpoint 6 [ 1078.017950][T23899] netlink: 'syz.4.4983': attribute type 29 has an invalid length. [ 1078.035798][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.046168][T15343] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1078.055016][ T5291] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1078.076422][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.079254][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.102120][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.109300][T15343] usb 5-1: USB disconnect, device number 125 [ 1078.129225][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.147365][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.151961][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.164781][T15343] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1078.175788][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.188665][T15343] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1078.200960][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.206218][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.217554][T15343] keyspan 5-1:0.184: device disconnected [ 1078.224956][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.251381][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.252537][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.279681][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.288805][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.299191][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.313792][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.330730][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.331198][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.351310][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.354745][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.370735][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.382542][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.391492][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.400664][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.402959][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.412068][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.426593][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.436060][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.447331][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.455498][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.455813][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.472805][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.491125][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.503303][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.511126][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.522436][ T5291] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1078.525347][ T5283] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1078.540987][ T5291] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1078.548548][ T5283] usb 4-1: New USB device strings: Mfr=245, Product=64, SerialNumber=168 [ 1078.560737][ T5283] usb 4-1: Product: syz [ 1078.560995][ T5291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.572443][ T5283] usb 4-1: Manufacturer: syz [ 1078.577102][ T5283] usb 4-1: SerialNumber: syz [ 1078.583946][ T5291] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1078.595103][ T5291] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1078.596051][ T5283] usb 4-1: config 0 descriptor?? [ 1078.614465][ T5291] usb 3-1: Product: syz [ 1078.620934][ T5291] usb 3-1: Manufacturer: syz [ 1078.630586][ T5283] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1078.650161][ T5291] usb 3-1: SerialNumber: syz [ 1078.673603][ T5291] usb 3-1: config 0 descriptor?? [ 1078.738435][T23890] coredump: 235(syz.1.4980): written to core: VMAs: 36, size 91131904; core: 70466928 bytes, pos 91140096 [ 1078.760594][ T5291] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 1078.890827][T15343] usb 4-1: USB disconnect, device number 125 [ 1078.901346][T15343] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1078.972389][T19327] usb 3-1: USB disconnect, device number 100 [ 1078.983013][T19327] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 1079.497955][T23925] vivid-007: ================= START STATUS ================= [ 1079.508536][T23925] vivid-007: Enable Output Cropping: true [ 1079.516639][T23925] vivid-007: Enable Output Composing: true [ 1079.522786][T23925] vivid-007: Enable Output Scaler: true [ 1079.528561][T23925] vivid-007: Tx RGB Quantization Range: Automatic [ 1079.535474][T23925] vivid-007: Transmit Mode: HDMI [ 1079.540508][T23925] vivid-007: Hotplug Present: 0x00000000 [ 1079.546621][T23925] vivid-007: RxSense Present: 0x00000000 [ 1079.554639][T23925] vivid-007: EDID Present: 0x00000000 [ 1079.560300][T23925] vivid-007: ================== END STATUS ================== [ 1079.701148][T19327] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1079.809870][T23935] fuse: Unknown parameter 'group_i00000000000000000000' [ 1079.841006][T19327] usb 2-1: device descriptor read/64, error -71 [ 1079.865443][T23937] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4997'. [ 1080.081323][T19327] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1080.171201][ T5292] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1080.241080][T19327] usb 2-1: device descriptor read/64, error -71 [ 1080.334804][ T5292] usb 4-1: Using ep0 maxpacket: 32 [ 1080.341266][T15343] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1080.345505][ T5292] usb 4-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 1080.361198][T19327] usb usb2-port1: attempt power cycle [ 1080.375219][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.389508][ T5292] usb 4-1: Product: syz [ 1080.396925][ T5292] usb 4-1: Manufacturer: syz [ 1080.401762][ T5292] usb 4-1: SerialNumber: syz [ 1080.421747][ T5292] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1080.430268][ T5292] r8152-cfgselector 4-1: config 0 descriptor?? [ 1080.503788][T15343] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1080.528614][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.545812][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.559703][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.571038][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.580238][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.593834][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.602177][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.611320][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.623386][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.636954][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.660042][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.665199][ T5292] r8152-cfgselector 4-1: USB disconnect, device number 126 [ 1080.671310][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.686658][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.696269][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.707443][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.714167][T19327] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1080.729223][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.738668][T19327] usb 2-1: device descriptor read/8, error -71 [ 1080.738843][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.757819][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.766182][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.775726][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.786779][T15342] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1080.795002][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.803536][T15343] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.812776][T15343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.824399][T15343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1080.834245][T15343] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1080.843629][T15343] usb 5-1: New USB device strings: Mfr=245, Product=64, SerialNumber=168 [ 1080.852196][T15343] usb 5-1: Product: syz [ 1080.856480][T15343] usb 5-1: Manufacturer: syz [ 1080.862637][T15343] usb 5-1: SerialNumber: syz [ 1080.869108][T15343] usb 5-1: config 0 descriptor?? [ 1080.885163][T15343] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1080.952067][T15342] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1080.961746][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1080.970745][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1080.984130][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1080.991038][T19327] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1080.992511][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1081.008062][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1081.019436][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.028756][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1081.038006][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1081.049262][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.049442][T19327] usb 2-1: device descriptor read/8, error -71 [ 1081.057370][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1081.071918][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1081.092983][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.102131][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1081.120959][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1081.143506][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.152898][T15343] usb 5-1: USB disconnect, device number 126 [ 1081.160856][T15343] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1081.172094][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1081.181599][T19327] usb usb2-port1: unable to enumerate USB device [ 1081.184753][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1081.213024][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.222404][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1081.233363][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1081.245057][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.262176][T15342] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1081.271450][T15342] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1081.283417][T15342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1081.293688][T15342] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1081.303188][T15342] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1081.311993][T15342] usb 3-1: Product: syz [ 1081.316205][T15342] usb 3-1: Manufacturer: syz [ 1081.320848][T15342] usb 3-1: SerialNumber: syz [ 1081.337898][T23969] fuse: Unknown parameter 'group_id00000000000000000000' [ 1081.351326][T15342] usb 3-1: config 0 descriptor?? [ 1081.366979][T15342] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1081.384209][T23971] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5010'. [ 1081.472270][T23973] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 1081.503106][T23976] netlink: 'syz.0.5012': attribute type 29 has an invalid length. [ 1081.512045][T23973] FAULT_INJECTION: forcing a failure. [ 1081.512045][T23973] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.526546][T23976] netlink: 'syz.0.5012': attribute type 29 has an invalid length. [ 1081.531062][T23973] CPU: 1 UID: 0 PID: 23973 Comm: syz.3.5011 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1081.544854][T23973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1081.555039][T23973] Call Trace: [ 1081.558365][T23973] [ 1081.561338][T23973] dump_stack_lvl+0x241/0x360 [ 1081.566073][T23973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.571320][T23973] ? __pfx__printk+0x10/0x10 [ 1081.575949][T23973] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1081.581977][T23973] ? __pfx___might_resched+0x10/0x10 [ 1081.587320][T23973] should_fail_ex+0x3b0/0x4e0 [ 1081.592056][T23973] should_failslab+0xac/0x100 [ 1081.596782][T23973] ? __alloc_skb+0x1c3/0x440 [ 1081.601526][T23973] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1081.607401][T23973] __alloc_skb+0x1c3/0x440 [ 1081.611885][T23973] ? __pfx___alloc_skb+0x10/0x10 [ 1081.616879][T23973] ? netlink_autobind+0xd6/0x2f0 [ 1081.621866][T23973] ? netlink_autobind+0x2b0/0x2f0 [ 1081.626949][T23973] netlink_sendmsg+0x638/0xcb0 [ 1081.631781][T23973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.637216][T23973] ? __pfx_lock_release+0x10/0x10 [ 1081.642296][T23973] ? aa_sock_msg_perm+0x91/0x160 [ 1081.647288][T23973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.652629][T23973] __sock_sendmsg+0x221/0x270 [ 1081.657357][T23973] ____sys_sendmsg+0x52a/0x7e0 [ 1081.662184][T23973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.667546][T23973] __sys_sendmsg+0x292/0x380 [ 1081.672181][T23973] ? __pfx___sys_sendmsg+0x10/0x10 [ 1081.677414][T23973] ? __pfx_vfs_write+0x10/0x10 [ 1081.682230][T23973] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1081.688839][T23973] ? lockdep_hardirqs_on+0x99/0x150 [ 1081.694051][T23973] __do_fast_syscall_32+0xb4/0x110 [ 1081.699178][T23973] ? exc_page_fault+0x590/0x8c0 [ 1081.704051][T23973] do_fast_syscall_32+0x34/0x80 [ 1081.708917][T23973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1081.715258][T23973] RIP: 0023:0xf742d579 [ 1081.719333][T23973] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1081.738958][T23973] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1081.747384][T23973] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000280 [ 1081.755378][T23973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.763360][T23973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1081.771336][T23973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1081.779318][T23973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1081.787308][T23973] [ 1081.911281][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1081.911867][ T5292] usb 3-1: USB disconnect, device number 101 [ 1081.963626][ T5292] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1082.054350][T23987] FAULT_INJECTION: forcing a failure. [ 1082.054350][T23987] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.082273][T23987] CPU: 1 UID: 0 PID: 23987 Comm: syz.4.5016 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1082.092765][T23987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1082.102836][T23987] Call Trace: [ 1082.106123][T23987] [ 1082.109062][T23987] dump_stack_lvl+0x241/0x360 [ 1082.113767][T23987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1082.118988][T23987] ? __pfx__printk+0x10/0x10 [ 1082.123604][T23987] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1082.129605][T23987] ? __pfx___might_resched+0x10/0x10 [ 1082.134912][T23987] should_fail_ex+0x3b0/0x4e0 [ 1082.139613][T23987] should_failslab+0xac/0x100 [ 1082.144307][T23987] ? __alloc_skb+0x1c3/0x440 [ 1082.148920][T23987] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1082.154839][T23987] __alloc_skb+0x1c3/0x440 [ 1082.159281][T23987] ? __pfx___alloc_skb+0x10/0x10 [ 1082.164238][T23987] ? netlink_autobind+0xd6/0x2f0 [ 1082.169200][T23987] ? netlink_autobind+0x2b0/0x2f0 [ 1082.174246][T23987] netlink_sendmsg+0x638/0xcb0 [ 1082.179049][T23987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.184354][T23987] ? __pfx_lock_release+0x10/0x10 [ 1082.189488][T23987] ? aa_sock_msg_perm+0x91/0x160 [ 1082.194449][T23987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.199751][T23987] __sock_sendmsg+0x221/0x270 [ 1082.204476][T23987] ____sys_sendmsg+0x52a/0x7e0 [ 1082.209267][T23987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1082.214594][T23987] __sys_sendmsg+0x292/0x380 [ 1082.219217][T23987] ? __pfx___sys_sendmsg+0x10/0x10 [ 1082.224361][T23987] ? __pfx_vfs_write+0x10/0x10 [ 1082.229173][T23987] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1082.235905][T23987] ? lockdep_hardirqs_on+0x99/0x150 [ 1082.241159][T23987] __do_fast_syscall_32+0xb4/0x110 [ 1082.246328][T23987] ? exc_page_fault+0x590/0x8c0 [ 1082.251238][T23987] do_fast_syscall_32+0x34/0x80 [ 1082.256124][T23987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1082.262484][T23987] RIP: 0023:0xf7f11579 [ 1082.266565][T23987] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1082.286272][T23987] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1082.294704][T23987] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000540 [ 1082.302690][T23987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1082.310760][T23987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1082.318742][T23987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1082.326722][T23987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1082.334710][T23987] [ 1082.385967][T23992] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5014'. [ 1082.554740][T23998] FAULT_INJECTION: forcing a failure. [ 1082.554740][T23998] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.568943][T23998] CPU: 0 UID: 0 PID: 23998 Comm: syz.1.5019 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1082.579599][T23998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1082.589702][T23998] Call Trace: [ 1082.593023][T23998] [ 1082.595991][T23998] dump_stack_lvl+0x241/0x360 [ 1082.600820][T23998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1082.602955][T24001] fuse: Unknown parameter 'group_id00000000000000000000' [ 1082.606045][T23998] ? __pfx__printk+0x10/0x10 [ 1082.606082][T23998] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1082.623740][T23998] ? __pfx___might_resched+0x10/0x10 [ 1082.629165][T23998] should_fail_ex+0x3b0/0x4e0 [ 1082.633979][T23998] should_failslab+0xac/0x100 [ 1082.638700][T23998] ? __alloc_skb+0x1c3/0x440 [ 1082.643338][T23998] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1082.645343][T24002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5020'. [ 1082.649182][T23998] __alloc_skb+0x1c3/0x440 [ 1082.662601][T23998] ? __pfx___alloc_skb+0x10/0x10 [ 1082.667599][T23998] ? netlink_autobind+0xd6/0x2f0 [ 1082.672597][T23998] ? netlink_autobind+0x2b0/0x2f0 [ 1082.677767][T23998] netlink_sendmsg+0x638/0xcb0 [ 1082.683038][T23998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.688380][T23998] ? __pfx_lock_release+0x10/0x10 [ 1082.693460][T23998] ? aa_sock_msg_perm+0x91/0x160 [ 1082.698421][T23998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1082.703723][T23998] __sock_sendmsg+0x221/0x270 [ 1082.708422][T23998] ____sys_sendmsg+0x52a/0x7e0 [ 1082.713211][T23998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1082.718524][T23998] __sys_sendmsg+0x292/0x380 [ 1082.723176][T23998] ? __pfx___sys_sendmsg+0x10/0x10 [ 1082.728323][T23998] ? __pfx_vfs_write+0x10/0x10 [ 1082.733135][T23998] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1082.739747][T23998] ? lockdep_hardirqs_on+0x99/0x150 [ 1082.744961][T23998] __do_fast_syscall_32+0xb4/0x110 [ 1082.750094][T23998] ? exc_page_fault+0x590/0x8c0 [ 1082.754963][T23998] do_fast_syscall_32+0x34/0x80 [ 1082.760000][T23998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1082.766344][T23998] RIP: 0023:0xf7ff5579 [ 1082.770431][T23998] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1082.790062][T23998] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1082.798497][T23998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1082.806479][T23998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1082.814462][T23998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1082.822442][T23998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1082.830424][T23998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1082.838422][T23998] [ 1082.873792][T24004] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5022'. [ 1082.932559][ T5292] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1083.006081][T24010] FAULT_INJECTION: forcing a failure. [ 1083.006081][T24010] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.019281][T24010] CPU: 1 UID: 0 PID: 24010 Comm: syz.1.5024 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1083.029761][T24010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1083.039870][T24010] Call Trace: [ 1083.043191][T24010] [ 1083.046177][T24010] dump_stack_lvl+0x241/0x360 [ 1083.050907][T24010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1083.056166][T24010] ? __pfx__printk+0x10/0x10 [ 1083.060817][T24010] ? __kmalloc_noprof+0xb0/0x400 [ 1083.065817][T24010] ? __pfx___might_resched+0x10/0x10 [ 1083.071192][T24010] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1083.077247][T24010] should_fail_ex+0x3b0/0x4e0 [ 1083.082002][T24010] ? sock_kmalloc+0xd7/0x160 [ 1083.086652][T24010] should_failslab+0xac/0x100 [ 1083.091377][T24010] ? sock_kmalloc+0xd7/0x160 [ 1083.095997][T24010] __kmalloc_noprof+0xd8/0x400 [ 1083.100783][T24010] sock_kmalloc+0xd7/0x160 [ 1083.105226][T24010] af_alg_alloc_areq+0x90/0x260 [ 1083.110099][T24010] skcipher_recvmsg+0x382/0x1230 [ 1083.115092][T24010] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1083.120490][T24010] ? aa_sock_msg_perm+0x91/0x160 [ 1083.125439][T24010] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1083.130754][T24010] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1083.136234][T24010] sock_recvmsg+0x22f/0x280 [ 1083.140769][T24010] __sys_recvfrom+0x246/0x3d0 [ 1083.145469][T24010] ? __pfx___sys_recvfrom+0x10/0x10 [ 1083.150771][T24010] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1083.156461][T24010] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1083.162816][T24010] __ia32_compat_sys_recvfrom+0xe4/0x100 [ 1083.168489][T24010] __do_fast_syscall_32+0xb4/0x110 [ 1083.173621][T24010] ? exc_page_fault+0x590/0x8c0 [ 1083.178493][T24010] do_fast_syscall_32+0x34/0x80 [ 1083.183364][T24010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1083.189714][T24010] RIP: 0023:0xf7ff5579 [ 1083.193796][T24010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1083.213504][T24010] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000173 [ 1083.221972][T24010] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000280 [ 1083.229963][T24010] RDX: 00000000000012f4 RSI: 0000000000010101 RDI: 0000000000000000 [ 1083.237948][T24010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1083.245930][T24010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1083.254099][T24010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.262138][T24010] [ 1083.268063][ T5292] usb 5-1: Using ep0 maxpacket: 16 [ 1083.279652][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.308628][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.347390][ T5292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1083.368224][ T5292] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1083.391402][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.409527][ T5292] usb 5-1: config 0 descriptor?? [ 1083.445452][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.458344][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.466604][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.474409][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.482764][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.490724][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.501840][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.509362][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.518062][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.525917][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.533954][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.542214][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.549818][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.557588][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.565525][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.573471][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.581240][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.589317][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.597330][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.607154][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.633729][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.648396][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.662810][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.668370][T24026] FAULT_INJECTION: forcing a failure. [ 1083.668370][T24026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.670603][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.691740][T24026] CPU: 0 UID: 0 PID: 24026 Comm: syz.0.5029 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1083.702205][T24026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1083.712275][T24026] Call Trace: [ 1083.715566][T24026] [ 1083.718503][T24026] dump_stack_lvl+0x241/0x360 [ 1083.723210][T24026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1083.728425][T24026] ? __pfx__printk+0x10/0x10 [ 1083.733034][T24026] ? snprintf+0xda/0x120 [ 1083.737301][T24026] should_fail_ex+0x3b0/0x4e0 [ 1083.741999][T24026] _copy_to_user+0x2f/0xb0 [ 1083.746430][T24026] simple_read_from_buffer+0xca/0x150 [ 1083.751830][T24026] proc_fail_nth_read+0x1e9/0x250 [ 1083.756875][T24026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.762460][T24026] ? rw_verify_area+0x55e/0x6f0 [ 1083.767327][T24026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.772906][T24026] vfs_read+0x201/0xbc0 [ 1083.777079][T24026] ? __pfx_lock_release+0x10/0x10 [ 1083.782129][T24026] ? __pfx_vfs_read+0x10/0x10 [ 1083.786828][T24026] ? __fget_files+0x3f3/0x470 [ 1083.791532][T24026] ? fdget_pos+0x24e/0x320 [ 1083.796073][T24026] ksys_read+0x183/0x2b0 [ 1083.800342][T24026] ? __pfx_ksys_read+0x10/0x10 [ 1083.805138][T24026] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1083.811837][T24026] ? lockdep_hardirqs_on+0x99/0x150 [ 1083.817051][T24026] __do_fast_syscall_32+0xb4/0x110 [ 1083.822203][T24026] ? exc_page_fault+0x590/0x8c0 [ 1083.827098][T24026] do_fast_syscall_32+0x34/0x80 [ 1083.831993][T24026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1083.838347][T24026] RIP: 0023:0xf7f72579 [ 1083.842430][T24026] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1083.862062][T24026] RSP: 002b:00000000f56f65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1083.870670][T24026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f56f6620 [ 1083.878657][T24026] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 1083.886642][T24026] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1083.894626][T24026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1083.902624][T24026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.910641][T24026] [ 1083.924871][ T5292] microsoft 0003:045E:07DA.004D: ignoring exceeding usage max [ 1083.939685][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1083.947713][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.957646][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1083.965464][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1083.982414][ T5283] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1083.997479][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.005832][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1084.036130][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.043870][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1084.067924][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.081509][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1084.094766][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.103169][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1084.110625][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1084.120448][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.137271][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.159890][T19327] hid-generic 0000:04AD:0000.004C: unknown main item tag 0x0 [ 1084.168245][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.170095][ T5283] usb 4-1: config 0 has no interfaces? [ 1084.177094][ T5292] microsoft 0003:045E:07DA.004D: unknown main item tag 0x0 [ 1084.188943][T19327] hid-generic 0000:04AD:0000.004C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1084.215217][ T5283] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1084.225066][ T5292] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.004D/input/input56 [ 1084.265447][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.298716][ T5283] usb 4-1: config 0 descriptor?? [ 1084.305103][ T5292] microsoft 0003:045E:07DA.004D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1084.336656][T24032] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1084.343350][T24032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1084.385006][ T5292] usb 5-1: USB disconnect, device number 127 [ 1084.407530][T24032] vhci_hcd vhci_hcd.0: Device attached [ 1084.421967][T24039] fuse: Unknown parameter 'group_id00000000000000000000' [ 1084.473023][T15343] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1084.528507][T24020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5027'. [ 1084.537267][T24042] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5034'. [ 1084.581116][ T5283] vhci_hcd: vhci_device speed not set [ 1084.592964][T24045] FAULT_INJECTION: forcing a failure. [ 1084.592964][T24045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.606595][T24045] CPU: 0 UID: 0 PID: 24045 Comm: syz.2.5035 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1084.607417][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5027'. [ 1084.617074][T24045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1084.617098][T24045] Call Trace: [ 1084.617109][T24045] [ 1084.617120][T24045] dump_stack_lvl+0x241/0x360 [ 1084.617158][T24045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1084.617189][T24045] ? __pfx__printk+0x10/0x10 [ 1084.617221][T24045] ? snprintf+0xda/0x120 [ 1084.617256][T24045] should_fail_ex+0x3b0/0x4e0 [ 1084.617294][T24045] _copy_to_user+0x2f/0xb0 [ 1084.617325][T24045] simple_read_from_buffer+0xca/0x150 [ 1084.617364][T24045] proc_fail_nth_read+0x1e9/0x250 [ 1084.617400][T24045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.617437][T24045] ? rw_verify_area+0x55e/0x6f0 [ 1084.617469][T24045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.617505][T24045] vfs_read+0x201/0xbc0 [ 1084.617538][T24045] ? __pfx_lock_release+0x10/0x10 [ 1084.617578][T24045] ? __pfx_vfs_read+0x10/0x10 [ 1084.617618][T24045] ? __fget_files+0x3f3/0x470 [ 1084.617653][T24045] ? fdget_pos+0x24e/0x320 [ 1084.617682][T24045] ksys_read+0x183/0x2b0 [ 1084.617718][T24045] ? __pfx_ksys_read+0x10/0x10 [ 1084.617757][T24045] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1084.617786][T24045] ? lockdep_hardirqs_on+0x99/0x150 [ 1084.617817][T24045] __do_fast_syscall_32+0xb4/0x110 [ 1084.617848][T24045] ? exc_page_fault+0x590/0x8c0 [ 1084.750590][T24045] do_fast_syscall_32+0x34/0x80 [ 1084.755469][T24045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1084.761829][T24045] RIP: 0023:0xf7f56579 [ 1084.765917][T24045] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1084.785536][T24045] RSP: 002b:00000000f56d65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1084.794003][T24045] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56d6620 [ 1084.801991][T24045] RDX: 000000000000000f RSI: 00000000f73dbff4 RDI: 0000000000000000 [ 1084.809994][T24045] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1084.817982][T24045] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1084.825976][T24045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1084.833979][T24045] [ 1084.837088][T15343] usb 2-1: device descriptor read/64, error -71 [ 1084.851937][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5027'. [ 1084.853992][ T5283] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 1085.080482][T24035] vhci_hcd: connection reset by peer [ 1085.095907][ T11] vhci_hcd: stop threads [ 1085.100399][ T11] vhci_hcd: release socket [ 1085.106663][ T11] vhci_hcd: disconnect device [ 1085.121153][T15343] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1085.293141][T15343] usb 2-1: device descriptor read/64, error -71 [ 1085.402785][T15343] usb usb2-port1: attempt power cycle [ 1085.431044][ T5230] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1085.612829][ T5230] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1085.622270][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1085.633000][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1085.648857][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1085.657425][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1085.674586][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1085.681084][ T5292] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1085.690067][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1085.694756][T24063] FAULT_INJECTION: forcing a failure. [ 1085.694756][T24063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.707225][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1085.713206][T24063] CPU: 0 UID: 0 PID: 24063 Comm: syz.0.5042 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1085.729475][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1085.732382][T24063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1085.732415][T24063] Call Trace: [ 1085.732426][T24063] [ 1085.732438][T24063] dump_stack_lvl+0x241/0x360 [ 1085.732477][T24063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1085.732507][T24063] ? __pfx__printk+0x10/0x10 [ 1085.732539][T24063] ? snprintf+0xda/0x120 [ 1085.745916][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1085.753480][T24063] should_fail_ex+0x3b0/0x4e0 [ 1085.753530][T24063] _copy_to_user+0x2f/0xb0 [ 1085.753562][T24063] simple_read_from_buffer+0xca/0x150 [ 1085.753600][T24063] proc_fail_nth_read+0x1e9/0x250 [ 1085.759184][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1085.759816][T24063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.775029][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1085.778560][T24063] ? rw_verify_area+0x55e/0x6f0 [ 1085.778602][T24063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.778641][T24063] vfs_read+0x201/0xbc0 [ 1085.786142][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1085.789906][T24063] ? __pfx_lock_release+0x10/0x10 [ 1085.796210][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1085.799728][T24063] ? __pfx_vfs_read+0x10/0x10 [ 1085.799778][T24063] ? __fget_files+0x3f3/0x470 [ 1085.805586][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1085.813635][T24063] ? fdget_pos+0x24e/0x320 [ 1085.813674][T24063] ksys_read+0x183/0x2b0 [ 1085.813711][T24063] ? __pfx_ksys_read+0x10/0x10 [ 1085.813747][T24063] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1085.813779][T24063] ? lockdep_hardirqs_on+0x99/0x150 [ 1085.813809][T24063] __do_fast_syscall_32+0xb4/0x110 [ 1085.813843][T24063] ? exc_page_fault+0x590/0x8c0 [ 1085.813875][T24063] do_fast_syscall_32+0x34/0x80 [ 1085.813907][T24063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1085.813946][T24063] RIP: 0023:0xf7f72579 [ 1085.813971][T24063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1085.813993][T24063] RSP: 002b:00000000f56f65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1085.814022][T24063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f56f6620 [ 1085.828410][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1085.830389][T24063] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 1085.830411][T24063] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1085.830427][T24063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1085.837274][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1085.840815][T24063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1085.840853][T24063] [ 1086.011859][ T5292] usb 5-1: Using ep0 maxpacket: 32 [ 1086.015176][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1086.039913][ T5292] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1086.042231][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1086.042379][T15343] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1086.046444][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1086.069982][ T5292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.081064][T15343] usb 2-1: device descriptor read/8, error -71 [ 1086.094741][ T5292] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1086.099008][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1086.106075][ T5292] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1086.124336][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1086.129610][ T5292] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1086.134233][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1086.142158][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.159568][ T5292] usb 5-1: Product: syz [ 1086.162195][ T5230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1086.163825][ T5292] usb 5-1: Manufacturer: syz [ 1086.175191][ T5230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1086.179658][ T5292] usb 5-1: SerialNumber: syz [ 1086.196193][ T5230] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1086.207354][ T5230] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1086.216205][ T5230] usb 3-1: Product: syz [ 1086.220492][ T5230] usb 3-1: Manufacturer: syz [ 1086.225679][ T5230] usb 3-1: SerialNumber: syz [ 1086.232556][ T5230] usb 3-1: config 0 descriptor?? [ 1086.241975][ T5230] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1086.331004][T15343] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1086.353068][T15343] usb 2-1: device descriptor read/8, error -71 [ 1086.460543][ T5292] usb 5-1: USB disconnect, device number 2 [ 1086.474678][T15343] usb usb2-port1: unable to enumerate USB device [ 1086.527738][T15318] usb 4-1: USB disconnect, device number 127 [ 1086.642231][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1086.649753][ T5230] usb 3-1: USB disconnect, device number 102 [ 1086.667995][T24067] fuse: Bad value for 'user_id' [ 1086.671220][ T5230] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1086.691908][T24067] fuse: Bad value for 'user_id' [ 1087.001058][T15343] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1087.161089][T15343] usb 4-1: Using ep0 maxpacket: 32 [ 1087.166049][T24071] FAULT_INJECTION: forcing a failure. [ 1087.166049][T24071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.177013][T15343] usb 4-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 1087.181416][T24071] CPU: 0 UID: 0 PID: 24071 Comm: syz.1.5046 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1087.197133][T15343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.198693][T24071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1087.206749][T15343] usb 4-1: Product: syz [ 1087.216723][T24071] Call Trace: [ 1087.216743][T24071] [ 1087.216760][T24071] dump_stack_lvl+0x241/0x360 [ 1087.216798][T24071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.216827][T24071] ? __pfx__printk+0x10/0x10 [ 1087.216857][T24071] ? __pfx_lock_release+0x10/0x10 [ 1087.221417][T15343] usb 4-1: Manufacturer: syz [ 1087.224285][T24071] ? rcu_is_watching+0x15/0xb0 [ 1087.227221][T15343] usb 4-1: SerialNumber: syz [ 1087.231884][T24071] should_fail_ex+0x3b0/0x4e0 [ 1087.231923][T24071] _copy_from_iter+0x1ed/0x1d60 [ 1087.231960][T24071] ? alloc_pages_mpol_noprof+0x417/0x680 [ 1087.231988][T24071] ? __pfx__copy_from_iter+0x10/0x10 [ 1087.232016][T24071] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1087.232049][T24071] ? alloc_pages_noprof+0xef/0x170 [ 1087.232073][T24071] ? page_copy_sane+0x46/0x260 [ 1087.232101][T24071] copy_page_from_iter+0x7a/0x100 [ 1087.232131][T24071] tun_get_user+0x2046/0x47e0 [ 1087.232162][T24071] ? tun_get_user+0x871/0x47e0 [ 1087.232193][T24071] ? __lock_acquire+0x1384/0x2050 [ 1087.232235][T24071] ? __pfx_tun_get_user+0x10/0x10 [ 1087.248660][T15343] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1087.251668][T24071] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1087.251713][T24071] ? tun_get+0x1e/0x2f0 [ 1087.256481][T15343] r8152-cfgselector 4-1: config 0 descriptor?? [ 1087.261051][T24071] ? __pfx_lock_release+0x10/0x10 [ 1087.261100][T24071] ? tun_get+0x1e/0x2f0 [ 1087.261125][T24071] ? tun_get+0x27d/0x2f0 [ 1087.357342][T24071] tun_chr_write_iter+0x10d/0x1f0 [ 1087.362395][T24071] vfs_write+0xa6d/0xc90 [ 1087.366685][T24071] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1087.372275][T24071] ? __pfx_vfs_write+0x10/0x10 [ 1087.377212][T24071] ? fdget_pos+0x19a/0x320 [ 1087.381661][T24071] ksys_write+0x183/0x2b0 [ 1087.386029][T24071] ? __pfx_ksys_write+0x10/0x10 [ 1087.390910][T24071] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1087.397524][T24071] ? lockdep_hardirqs_on+0x99/0x150 [ 1087.402741][T24071] __do_fast_syscall_32+0xb4/0x110 [ 1087.407869][T24071] ? exc_page_fault+0x590/0x8c0 [ 1087.412737][T24071] do_fast_syscall_32+0x34/0x80 [ 1087.417604][T24071] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1087.423949][T24071] RIP: 0023:0xf7ff5579 [ 1087.428035][T24071] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1087.447658][T24071] RSP: 002b:00000000f5776530 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1087.456088][T24071] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000580 [ 1087.464067][T24071] RDX: 000000000000003e RSI: 00000000f747bff4 RDI: 0000000000000000 [ 1087.472045][T24071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.480025][T24071] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1087.488013][T24071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.496010][T24071] [ 1087.627327][T15318] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 1087.871464][ T5230] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1088.031104][ T5230] usb 2-1: Using ep0 maxpacket: 16 [ 1088.038108][ T5230] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1088.047307][ T5230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.061269][ T5230] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1088.070384][ T5230] usb 2-1: config 1 has no interface number 1 [ 1088.090427][ T5230] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1088.110532][ T5230] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1088.124488][ T5230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1088.143907][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.152445][ T5230] usb 2-1: Product: syz [ 1088.156815][ T5230] usb 2-1: Manufacturer: syz [ 1088.163786][ T5230] usb 2-1: SerialNumber: syz [ 1088.224898][T24092] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1088.353819][T24096] fuse: Bad value for 'user_id' [ 1088.359213][T24096] fuse: Bad value for 'user_id' [ 1088.411180][ T5230] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1088.428376][ T5230] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 1088.436290][ T5230] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1088.458897][ T5230] usb 2-1: USB disconnect, device number 120 [ 1088.483597][T20542] udevd[20542]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.684331][T24103] FAULT_INJECTION: forcing a failure. [ 1088.684331][T24103] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.697594][T24103] CPU: 0 UID: 0 PID: 24103 Comm: syz.4.5058 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1088.708141][T24103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1088.718235][T24103] Call Trace: [ 1088.721562][T24103] [ 1088.724515][T24103] dump_stack_lvl+0x241/0x360 [ 1088.729322][T24103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.734540][T24103] ? __pfx__printk+0x10/0x10 [ 1088.739149][T24103] ? fs_reclaim_acquire+0x93/0x140 [ 1088.744390][T24103] ? __pfx___might_resched+0x10/0x10 [ 1088.749695][T24103] ? dynamic_dname+0x141/0x1b0 [ 1088.754483][T24103] should_fail_ex+0x3b0/0x4e0 [ 1088.759184][T24103] ? tomoyo_encode+0x26f/0x540 [ 1088.763967][T24103] should_failslab+0xac/0x100 [ 1088.768714][T24103] ? tomoyo_encode+0x26f/0x540 [ 1088.773494][T24103] __kmalloc_noprof+0xd8/0x400 [ 1088.778279][T24103] tomoyo_encode+0x26f/0x540 [ 1088.782888][T24103] ? __pfx_sockfs_dname+0x10/0x10 [ 1088.787931][T24103] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1088.793596][T24103] tomoyo_path_number_perm+0x23a/0x880 [ 1088.799083][T24103] ? tomoyo_path_number_perm+0x208/0x880 [ 1088.804737][T24103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1088.810755][T24103] ? __pfx_lock_acquire+0x10/0x10 [ 1088.815821][T24103] ? __fget_files+0x29/0x470 [ 1088.820434][T24103] ? __fget_files+0x3f3/0x470 [ 1088.825306][T24103] security_file_ioctl_compat+0xc6/0x2a0 [ 1088.830972][T24103] __se_compat_sys_ioctl+0xd6/0xc90 [ 1088.836283][T24103] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 1088.842134][T24103] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1088.848138][T24103] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1088.854496][T24103] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1088.861106][T24103] ? lockdep_hardirqs_on+0x99/0x150 [ 1088.866320][T24103] __do_fast_syscall_32+0xb4/0x110 [ 1088.871453][T24103] ? exc_page_fault+0x590/0x8c0 [ 1088.876332][T24103] do_fast_syscall_32+0x34/0x80 [ 1088.881202][T24103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1088.887546][T24103] RIP: 0023:0xf7f11579 [ 1088.891634][T24103] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1088.911456][T24103] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1088.919920][T24103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 1088.927907][T24103] RDX: 0000000020000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1088.935894][T24103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1088.943894][T24103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1088.951880][T24103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1088.959877][T24103] [ 1088.969959][T15343] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1088.981150][T24103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1089.031221][ T5230] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1089.113423][T15343] usb 4-1: device descriptor read/64, error -71 [ 1089.125023][T24112] FAULT_INJECTION: forcing a failure. [ 1089.125023][T24112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.148893][T24112] CPU: 1 UID: 0 PID: 24112 Comm: syz.0.5061 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1089.159400][T24112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1089.169512][T24112] Call Trace: [ 1089.172830][T24112] [ 1089.175800][T24112] dump_stack_lvl+0x241/0x360 [ 1089.180539][T24112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1089.185793][T24112] ? __pfx__printk+0x10/0x10 [ 1089.190442][T24112] ? snprintf+0xda/0x120 [ 1089.194746][T24112] should_fail_ex+0x3b0/0x4e0 [ 1089.199481][T24112] _copy_to_user+0x2f/0xb0 [ 1089.203955][T24112] simple_read_from_buffer+0xca/0x150 [ 1089.209378][T24112] proc_fail_nth_read+0x1e9/0x250 [ 1089.214434][T24112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1089.220009][T24112] ? rw_verify_area+0x55e/0x6f0 [ 1089.224884][T24112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1089.230458][T24112] vfs_read+0x201/0xbc0 [ 1089.234635][T24112] ? __pfx_lock_release+0x10/0x10 [ 1089.239702][T24112] ? __pfx_vfs_read+0x10/0x10 [ 1089.244403][T24112] ? __fget_files+0x3f3/0x470 [ 1089.249100][T24112] ? fdget_pos+0x24e/0x320 [ 1089.253536][T24112] ksys_read+0x183/0x2b0 [ 1089.257803][T24112] ? __pfx_ksys_read+0x10/0x10 [ 1089.262591][T24112] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1089.269211][T24112] ? lockdep_hardirqs_on+0x99/0x150 [ 1089.274429][T24112] __do_fast_syscall_32+0xb4/0x110 [ 1089.279561][T24112] ? exc_page_fault+0x590/0x8c0 [ 1089.284427][T24112] do_fast_syscall_32+0x34/0x80 [ 1089.289293][T24112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1089.295639][T24112] RIP: 0023:0xf7f72579 [ 1089.299719][T24112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1089.319425][T24112] RSP: 002b:00000000f56f65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1089.327862][T24112] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f6620 [ 1089.335855][T24112] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 1089.343845][T24112] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1089.351917][T24112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1089.359919][T24112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1089.367919][T24112] [ 1089.371070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1089.391560][ T5230] usb 2-1: device descriptor read/64, error -71 [ 1089.521761][T15343] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1089.538960][T24120] ɶƣ0GC¦!: entered promiscuous mode [ 1089.641044][ T5230] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1089.643411][T24123] fuse: Bad value for 'user_id' [ 1089.657693][T24123] fuse: Bad value for 'user_id' [ 1089.671280][T15343] usb 4-1: device descriptor read/64, error -71 [ 1089.731528][ T1132] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1089.781150][ T5230] usb 2-1: device descriptor read/64, error -71 [ 1089.803995][T15343] usb usb4-port1: attempt power cycle [ 1089.891765][ T5230] usb usb2-port1: attempt power cycle [ 1089.907913][ T1132] usb 3-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 1089.918330][ T1132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.928716][ T1132] usb 3-1: Product: syz [ 1089.934653][ T1132] usb 3-1: Manufacturer: syz [ 1089.940300][ T1132] usb 3-1: SerialNumber: syz [ 1089.947442][ T1132] usb 3-1: config 0 descriptor?? [ 1089.961138][ T5283] vhci_hcd: vhci_device speed not set [ 1089.967060][ T1132] usbtest 3-1:0.0: EZ-USB device [ 1089.974126][ T1132] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1090.022530][T24133] sctp: [Deprecated]: syz.4.5069 (pid 24133) Use of int in max_burst socket option. [ 1090.022530][T24133] Use struct sctp_assoc_value instead [ 1090.152685][T15343] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1090.195599][T15343] usb 4-1: device descriptor read/8, error -71 [ 1090.251344][ T5230] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1090.281793][ T5230] usb 2-1: device descriptor read/8, error -71 [ 1090.331092][ T1132] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1090.441052][T15343] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1090.466564][T15343] usb 4-1: device descriptor read/8, error -71 [ 1090.492242][ T1132] usb 5-1: Using ep0 maxpacket: 8 [ 1090.502735][ T1132] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 1090.515921][ T1132] usb 5-1: config 0 has no interface number 0 [ 1090.522709][ T1132] usb 5-1: config 0 interface 211 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1090.536882][ T5230] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1090.557011][ T1132] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1090.570758][ T1132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.581435][ T5230] usb 2-1: device descriptor read/8, error -71 [ 1090.588210][ T1132] usb 5-1: config 0 descriptor?? [ 1090.593773][T15343] usb usb4-port1: unable to enumerate USB device [ 1090.614997][ T1132] usb 5-1: bad CDC descriptors [ 1090.712202][ T5230] usb usb2-port1: unable to enumerate USB device [ 1090.804459][T15343] usb 3-1: USB disconnect, device number 103 [ 1090.901508][ T5292] usb 5-1: USB disconnect, device number 3 [ 1091.068677][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5072'. [ 1091.211151][ T5230] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1091.297551][T24163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5074'. [ 1091.311644][T24163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5074'. [ 1091.372670][ T5230] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1091.488770][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.501434][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.516167][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.535905][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.574830][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.642140][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.677237][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.707259][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.719129][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.748628][T24172] fuse: Bad value for 'fd' [ 1091.762280][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.771451][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.791035][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.836915][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.846044][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.857974][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.865853][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.875023][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.887782][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.897535][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.906841][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.918170][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.926105][ T5230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.935249][ T5230] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.946318][ T5230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1091.951215][ T5292] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1091.955122][ T5230] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1091.969828][ T5230] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1091.979136][ T5230] usb 2-1: Product: syz [ 1091.984210][ T5230] usb 2-1: Manufacturer: syz [ 1091.988888][ T5230] usb 2-1: SerialNumber: syz [ 1092.003061][ T5230] usb 2-1: config 0 descriptor?? [ 1092.025690][ T5230] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1092.097674][T24177] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1092.141095][ T5292] usb 4-1: Using ep0 maxpacket: 8 [ 1092.155310][ T5292] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1092.175758][T24177] IPv6: sit1: Disabled Multicast RS [ 1092.185019][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.205099][ T5292] usb 4-1: Product: syz [ 1092.230290][ T5292] usb 4-1: Manufacturer: syz [ 1092.235652][ T5292] usb 4-1: SerialNumber: syz [ 1092.272834][ T5292] usb 4-1: config 0 descriptor?? [ 1092.374527][ T5230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1092.461375][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 1092.477619][T15343] usb 2-1: USB disconnect, device number 125 [ 1092.487773][T15343] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1092.494472][ T5292] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1092.554581][ T5230] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1092.565984][ T5230] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1092.576509][ T5230] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1092.586782][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.605987][T24180] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1092.620328][ T5230] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.832998][T15318] usb 5-1: USB disconnect, device number 4 [ 1092.919871][T24168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.936378][T24168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.157159][ T5292] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1093.169711][ T5292] usb 4-1: USB disconnect, device number 7 [ 1093.261101][ T5230] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1093.411000][ T5230] usb 3-1: device descriptor read/64, error -71 [ 1093.582214][T24204] fuse: Bad value for 'fd' [ 1093.664626][ T5230] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1093.681158][ T5292] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1093.856189][ T5230] usb 3-1: device descriptor read/64, error -71 [ 1093.947917][ T5292] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1093.968779][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.978405][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.985323][ T5230] usb usb3-port1: attempt power cycle [ 1093.989426][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.002875][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.012910][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.024191][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.034230][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.044342][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.055382][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.090387][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.091801][T24217] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1094.099808][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.154499][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.170765][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.180210][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.198375][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.206395][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.215822][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.237827][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.256507][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.266155][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.279877][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.290608][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1094.310169][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.322970][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.339741][ T5292] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1094.349058][ T5292] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1094.353796][T24222] CUSE: zero length info key specified [ 1094.363726][ T5292] usb 2-1: Product: syz [ 1094.368018][ T5292] usb 2-1: Manufacturer: syz [ 1094.375456][ T5292] usb 2-1: SerialNumber: syz [ 1094.379464][T24222] netlink: 'syz.3.5098': attribute type 2 has an invalid length. [ 1094.382652][ T5292] usb 2-1: config 0 descriptor?? [ 1094.397780][ T5292] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1094.406976][T24222] netlink: 528 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1094.442415][ T5230] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1094.461840][ T5230] usb 3-1: device descriptor read/8, error -71 [ 1094.701405][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 1094.701884][ T5283] usb 2-1: USB disconnect, device number 126 [ 1094.715362][ T5230] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1094.734208][ T5283] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1094.766561][ T5230] usb 3-1: device descriptor read/8, error -71 [ 1094.886162][ T5230] usb usb3-port1: unable to enumerate USB device [ 1094.905498][T15343] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1095.066310][T24232] fuse: Bad value for 'fd' [ 1095.084177][T15343] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=20.1e [ 1095.093835][T15343] usb 4-1: New USB device strings: Mfr=252, Product=216, SerialNumber=51 [ 1095.102791][T15343] usb 4-1: Product: syz [ 1095.107271][T15343] usb 4-1: Manufacturer: syz [ 1095.112238][T15343] usb 4-1: SerialNumber: syz [ 1095.119242][T15343] usb 4-1: config 0 descriptor?? [ 1095.335461][ T29] audit: type=1326 audit(1727265617.471:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.375451][ T29] audit: type=1326 audit(1727265617.501:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.409561][ T29] audit: type=1326 audit(1727265617.501:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.444923][ T29] audit: type=1326 audit(1727265617.501:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.478182][ T29] audit: type=1326 audit(1727265617.501:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.510650][ T29] audit: type=1326 audit(1727265617.501:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=239 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.541503][ T29] audit: type=1326 audit(1727265617.511:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.566055][ T29] audit: type=1326 audit(1727265617.511:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.591010][ T29] audit: type=1326 audit(1727265617.511:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.613241][ T29] audit: type=1326 audit(1727265617.511:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24227 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 1095.804666][T15343] mos7840 4-1:0.0: required endpoints missing [ 1095.811523][T24249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5108'. [ 1095.839023][T15343] usb 4-1: USB disconnect, device number 8 [ 1096.213378][T24256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5111'. [ 1096.395663][T24263] fuse: Bad value for 'fd' [ 1096.701024][ T5230] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1096.872831][ T5230] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 1096.886903][ T5230] usb 4-1: config 0 has no interface number 0 [ 1096.898086][ T5230] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x82 has invalid maxpacket 975, setting to 64 [ 1096.917689][ T5230] usb 4-1: New USB device found, idVendor=05c6, idProduct=7102, bcdDevice=10.5f [ 1096.953356][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.988423][ T5230] usb 4-1: Product: syz [ 1096.998574][ T5230] usb 4-1: Manufacturer: syz [ 1097.014573][ T5230] usb 4-1: SerialNumber: syz [ 1097.032550][ T5230] usb 4-1: config 0 descriptor?? [ 1097.050305][T24265] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1097.211169][ T5292] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1097.407902][ T5292] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1097.479794][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.527933][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.533352][T24265] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5114'. [ 1097.539295][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.564122][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.578894][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.629409][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.638170][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.647821][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.661064][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.669865][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.681946][T15318] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1097.694531][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.706591][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.719206][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.728886][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.743815][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.753029][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.763498][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.775397][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.787777][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.798483][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.812339][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.822255][T15318] usb 3-1: device descriptor read/64, error -71 [ 1097.838739][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1097.848302][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1097.860455][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1097.872325][ T5292] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1097.881952][ T5292] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1097.895966][ T5292] usb 2-1: Product: syz [ 1097.908530][ T5292] usb 2-1: Manufacturer: syz [ 1097.921689][ T5230] usb 4-1: USB disconnect, device number 9 [ 1097.926318][ T5292] usb 2-1: SerialNumber: syz [ 1097.942969][ T5292] usb 2-1: config 0 descriptor?? [ 1097.968292][ T5292] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1098.061099][T15318] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1098.191169][T15318] usb 3-1: device descriptor read/64, error -71 [ 1098.238490][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 1098.247288][ T5292] usb 2-1: USB disconnect, device number 127 [ 1098.257192][ T5292] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1098.301432][T15318] usb usb3-port1: attempt power cycle [ 1098.516886][T24295] fuse: Bad value for 'fd' [ 1098.641187][T15318] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1098.672152][T15318] usb 3-1: device descriptor read/8, error -71 [ 1098.922104][T15318] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1098.961670][T15318] usb 3-1: device descriptor read/8, error -71 [ 1099.081565][T15318] usb usb3-port1: unable to enumerate USB device [ 1099.188614][T24323] fuse: Bad value for 'fd' [ 1099.228663][T15318] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1099.228707][T15318] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1099.238577][T15318] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1099.287608][T24328] netlink: 'syz.1.5137': attribute type 1 has an invalid length. [ 1099.287638][T24328] netlink: 'syz.1.5137': attribute type 2 has an invalid length. [ 1099.302379][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5135'. [ 1099.374652][T24330] FAULT_INJECTION: forcing a failure. [ 1099.374652][T24330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.374680][T24330] CPU: 0 UID: 0 PID: 24330 Comm: syz.4.5138 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1099.374702][T24330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1099.374714][T24330] Call Trace: [ 1099.374721][T24330] [ 1099.374730][T24330] dump_stack_lvl+0x241/0x360 [ 1099.374758][T24330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1099.374779][T24330] ? __pfx__printk+0x10/0x10 [ 1099.374806][T24330] should_fail_ex+0x3b0/0x4e0 [ 1099.374833][T24330] _copy_from_user+0x2f/0xe0 [ 1099.374856][T24330] move_addr_to_kernel+0x82/0x150 [ 1099.374875][T24330] get_compat_msghdr+0x425/0x730 [ 1099.374901][T24330] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1099.374923][T24330] ? __fget_files+0x3f3/0x470 [ 1099.374976][T24330] __sys_sendmsg+0x25d/0x380 [ 1099.375013][T24330] ? __pfx___sys_sendmsg+0x10/0x10 [ 1099.375057][T24330] ? __pfx_vfs_write+0x10/0x10 [ 1099.375112][T24330] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1099.375133][T24330] ? lockdep_hardirqs_on+0x99/0x150 [ 1099.375154][T24330] __do_fast_syscall_32+0xb4/0x110 [ 1099.375175][T24330] ? exc_page_fault+0x590/0x8c0 [ 1099.375197][T24330] do_fast_syscall_32+0x34/0x80 [ 1099.375218][T24330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1099.375241][T24330] RIP: 0023:0xf7f11579 [ 1099.375256][T24330] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1099.375272][T24330] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1099.375291][T24330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 1099.375305][T24330] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1099.375316][T24330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1099.375328][T24330] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1099.375339][T24330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.375360][T24330] [ 1099.461654][T24332] FAULT_INJECTION: forcing a failure. [ 1099.461654][T24332] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.648733][T24332] CPU: 1 UID: 0 PID: 24332 Comm: syz.4.5139 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1099.648770][T24332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1099.648787][T24332] Call Trace: [ 1099.648798][T24332] [ 1099.648810][T24332] dump_stack_lvl+0x241/0x360 [ 1099.648849][T24332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1099.648881][T24332] ? __pfx__printk+0x10/0x10 [ 1099.648911][T24332] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1099.648944][T24332] ? __pfx___might_resched+0x10/0x10 [ 1099.648981][T24332] should_fail_ex+0x3b0/0x4e0 [ 1099.649019][T24332] should_failslab+0xac/0x100 [ 1099.649045][T24332] ? __alloc_skb+0x1c3/0x440 [ 1099.649076][T24332] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1099.721307][T24332] __alloc_skb+0x1c3/0x440 [ 1099.721355][T24332] ? __pfx___alloc_skb+0x10/0x10 [ 1099.721386][T24332] ? netlink_autobind+0xd6/0x2f0 [ 1099.721415][T24332] ? netlink_autobind+0x2b0/0x2f0 [ 1099.721449][T24332] netlink_sendmsg+0x638/0xcb0 [ 1099.745526][T24332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.745564][T24332] ? __pfx_lock_release+0x10/0x10 [ 1099.745591][T24332] ? aa_sock_msg_perm+0x91/0x160 [ 1099.745615][T24332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.745638][T24332] __sock_sendmsg+0x221/0x270 [ 1099.745661][T24332] ____sys_sendmsg+0x52a/0x7e0 [ 1099.745699][T24332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.745737][T24332] __sys_sendmsg+0x292/0x380 [ 1099.745764][T24332] ? __pfx___sys_sendmsg+0x10/0x10 [ 1099.745798][T24332] ? __pfx_vfs_write+0x10/0x10 [ 1099.745849][T24332] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1099.745874][T24332] ? lockdep_hardirqs_on+0x99/0x150 [ 1099.745897][T24332] __do_fast_syscall_32+0xb4/0x110 [ 1099.745924][T24332] ? exc_page_fault+0x590/0x8c0 [ 1099.745948][T24332] do_fast_syscall_32+0x34/0x80 [ 1099.745972][T24332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1099.745998][T24332] RIP: 0023:0xf7f11579 [ 1099.746016][T24332] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1099.746033][T24332] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1099.746055][T24332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 1099.746070][T24332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1099.746083][T24332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1099.746095][T24332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1099.746108][T24332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.746132][T24332] [ 1099.746207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.311748][T24354] fuse: Invalid rootmode [ 1100.331848][T19327] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1100.492427][T19327] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1100.525428][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.541129][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.568409][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.586729][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.602899][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.631202][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.640706][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.665286][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.692826][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.702513][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.734788][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.756853][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.802523][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.827913][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.865719][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.879198][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.909357][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.933461][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.954828][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1100.981961][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1100.997779][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1101.016467][T19327] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1101.045698][T19327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1101.071753][T19327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1101.098049][T19327] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1101.113567][T24378] FAULT_INJECTION: forcing a failure. [ 1101.113567][T24378] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.116577][T19327] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1101.132671][T24378] CPU: 1 UID: 0 PID: 24378 Comm: syz.1.5157 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1101.142340][T19327] usb 5-1: Product: syz [ 1101.145143][T24378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1101.149300][T19327] usb 5-1: Manufacturer: syz [ 1101.159351][T24378] Call Trace: [ 1101.159370][T24378] [ 1101.159382][T24378] dump_stack_lvl+0x241/0x360 [ 1101.159419][T24378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1101.159447][T24378] ? __pfx__printk+0x10/0x10 [ 1101.159475][T24378] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1101.159506][T24378] ? __pfx___might_resched+0x10/0x10 [ 1101.159542][T24378] should_fail_ex+0x3b0/0x4e0 [ 1101.159580][T24378] should_failslab+0xac/0x100 [ 1101.159606][T24378] ? __alloc_skb+0x1c3/0x440 [ 1101.159634][T24378] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1101.171632][T19327] usb 5-1: SerialNumber: syz [ 1101.175128][T24378] __alloc_skb+0x1c3/0x440 [ 1101.225078][T24378] ? __pfx___alloc_skb+0x10/0x10 [ 1101.230053][T24378] ? netlink_autobind+0xd6/0x2f0 [ 1101.235010][T24378] ? netlink_autobind+0x2b0/0x2f0 [ 1101.240058][T24378] netlink_sendmsg+0x638/0xcb0 [ 1101.244952][T24378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.250256][T24378] ? __pfx_lock_release+0x10/0x10 [ 1101.255299][T24378] ? aa_sock_msg_perm+0x91/0x160 [ 1101.260282][T24378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.265586][T24378] __sock_sendmsg+0x221/0x270 [ 1101.270365][T24378] ____sys_sendmsg+0x52a/0x7e0 [ 1101.275151][T24378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1101.280475][T24378] __sys_sendmsg+0x292/0x380 [ 1101.285201][T24378] ? __pfx___sys_sendmsg+0x10/0x10 [ 1101.290340][T24378] ? __pfx_vfs_write+0x10/0x10 [ 1101.295237][T24378] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1101.301848][T24378] ? lockdep_hardirqs_on+0x99/0x150 [ 1101.307072][T24378] __do_fast_syscall_32+0xb4/0x110 [ 1101.312208][T24378] ? exc_page_fault+0x590/0x8c0 [ 1101.317080][T24378] do_fast_syscall_32+0x34/0x80 [ 1101.321968][T24378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1101.328316][T24378] RIP: 0023:0xf7ff5579 [ 1101.332403][T24378] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1101.352024][T24378] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1101.360450][T24378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200018c0 [ 1101.368433][T24378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1101.376412][T24378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1101.384410][T24378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1101.392391][T24378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.400396][T24378] [ 1101.403533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.431382][T19327] usb 5-1: config 0 descriptor?? [ 1101.450684][T24380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5158'. [ 1101.472281][T19327] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1101.580735][T24384] fuse: Invalid rootmode [ 1101.744328][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 1101.752466][T15318] usb 5-1: USB disconnect, device number 5 [ 1101.763057][T15318] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1101.803050][T24393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1101.931082][T19327] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1101.941011][ T5292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1102.012109][T24396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5164'. [ 1102.081931][T19327] usb 4-1: device descriptor read/64, error -71 [ 1102.100992][ T5292] usb 2-1: Using ep0 maxpacket: 8 [ 1102.124318][ T5292] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1102.138441][ T5292] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1102.149203][ T5292] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1102.162210][ T5292] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.190994][ T5292] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1102.210577][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.323000][T19327] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1102.451244][ T5292] usb 2-1: GET_CAPABILITIES returned 0 [ 1102.456817][ T5292] usbtmc 2-1:16.0: can't read capabilities [ 1102.481033][T19327] usb 4-1: device descriptor read/64, error -71 [ 1102.595976][T19327] usb usb4-port1: attempt power cycle [ 1102.786805][ T1132] usb 2-1: USB disconnect, device number 2 [ 1102.851113][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.962690][T19327] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1102.991609][T19327] usb 4-1: device descriptor read/8, error -71 [ 1103.044558][T24422] fuse: Invalid rootmode [ 1103.177792][T24426] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5173'. [ 1103.241134][T19327] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1103.261710][T19327] usb 4-1: device descriptor read/8, error -71 [ 1103.371569][T19327] usb usb4-port1: unable to enumerate USB device [ 1103.386371][T24431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5174'. [ 1103.569527][T24441] FAULT_INJECTION: forcing a failure. [ 1103.569527][T24441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.592509][T24441] CPU: 1 UID: 0 PID: 24441 Comm: syz.1.5176 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1103.603097][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1103.613284][T24441] Call Trace: [ 1103.616609][T24441] [ 1103.619589][T24441] dump_stack_lvl+0x241/0x360 [ 1103.624332][T24441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.629592][T24441] ? __pfx__printk+0x10/0x10 [ 1103.634234][T24441] ? snprintf+0xda/0x120 [ 1103.638534][T24441] should_fail_ex+0x3b0/0x4e0 [ 1103.643270][T24441] _copy_to_user+0x2f/0xb0 [ 1103.647716][T24441] simple_read_from_buffer+0xca/0x150 [ 1103.653113][T24441] proc_fail_nth_read+0x1e9/0x250 [ 1103.658161][T24441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1103.663732][T24441] ? rw_verify_area+0x55e/0x6f0 [ 1103.668637][T24441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1103.674231][T24441] vfs_read+0x201/0xbc0 [ 1103.678434][T24441] ? __pfx_vfs_read+0x10/0x10 [ 1103.683145][T24441] ? do_sock_setsockopt+0x3e2/0x720 [ 1103.688382][T24441] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1103.693951][T24441] ? fdget_pos+0x265/0x320 [ 1103.698424][T24441] ksys_read+0x183/0x2b0 [ 1103.702736][T24441] ? __pfx_ksys_read+0x10/0x10 [ 1103.707541][T24441] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1103.714152][T24441] ? lockdep_hardirqs_on+0x99/0x150 [ 1103.719370][T24441] __do_fast_syscall_32+0xb4/0x110 [ 1103.724500][T24441] ? exc_page_fault+0x590/0x8c0 [ 1103.729370][T24441] do_fast_syscall_32+0x34/0x80 [ 1103.734239][T24441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.740586][T24441] RIP: 0023:0xf7ff5579 [ 1103.744663][T24441] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.764373][T24441] RSP: 002b:00000000f57765a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1103.772803][T24441] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5776620 [ 1103.780783][T24441] RDX: 000000000000000f RSI: 00000000f747bff4 RDI: 0000000000000000 [ 1103.788789][T24441] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1103.796783][T24441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.804768][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.812773][T24441] [ 1103.815996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.111054][ T5283] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1104.161038][ T1132] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1104.261745][ T5283] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1104.271035][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.281139][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.293774][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.301715][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.311231][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.322433][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.330349][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.339528][ T1132] usb 2-1: Using ep0 maxpacket: 32 [ 1104.344827][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.355923][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.365826][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.376118][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.387811][ T1132] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 1104.397003][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.403811][ T1132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.413562][ T1132] usb 2-1: Product: syz [ 1104.418178][ T1132] usb 2-1: Manufacturer: syz [ 1104.423298][ T1132] usb 2-1: SerialNumber: syz [ 1104.428343][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.440160][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.451542][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.458773][ T1132] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1104.465745][ T1132] r8152-cfgselector 2-1: config 0 descriptor?? [ 1104.472678][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.482658][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.494026][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.506694][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.516270][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.529050][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.546541][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.556727][ T5283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.568043][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.577594][ T5283] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1104.587487][ T5283] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1104.596374][ T5283] usb 5-1: Product: syz [ 1104.600697][ T5283] usb 5-1: Manufacturer: syz [ 1104.605618][ T5283] usb 5-1: SerialNumber: syz [ 1104.612814][ T5283] usb 5-1: config 0 descriptor?? [ 1104.623564][ T5283] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1104.759084][T15318] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 1104.926179][T24458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5182'. [ 1104.937679][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 1104.938323][T19327] usb 5-1: USB disconnect, device number 6 [ 1104.969765][T19327] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1105.045032][T24461] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5184'. [ 1105.236769][T24465] netlink: 'syz.0.5186': attribute type 10 has an invalid length. [ 1105.255764][T24465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.265430][T24465] team0: Port device batadv0 added [ 1105.834078][T24487] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5195'. [ 1105.942037][T24495] FAULT_INJECTION: forcing a failure. [ 1105.942037][T24495] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.955034][T24495] CPU: 0 UID: 0 PID: 24495 Comm: syz.4.5198 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1105.965505][T24495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1105.975599][T24495] Call Trace: [ 1105.978906][T24495] [ 1105.981848][T24495] dump_stack_lvl+0x241/0x360 [ 1105.986571][T24495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1105.991822][T24495] ? __pfx__printk+0x10/0x10 [ 1105.996469][T24495] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1106.002520][T24495] ? __pfx___might_resched+0x10/0x10 [ 1106.007848][T24495] should_fail_ex+0x3b0/0x4e0 [ 1106.012585][T24495] should_failslab+0xac/0x100 [ 1106.017313][T24495] ? __alloc_skb+0x1c3/0x440 [ 1106.021933][T24495] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1106.027766][T24495] __alloc_skb+0x1c3/0x440 [ 1106.032208][T24495] ? __pfx___alloc_skb+0x10/0x10 [ 1106.037191][T24495] ? netlink_autobind+0xd6/0x2f0 [ 1106.042297][T24495] ? netlink_autobind+0x2b0/0x2f0 [ 1106.047380][T24495] netlink_sendmsg+0x638/0xcb0 [ 1106.052188][T24495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.057497][T24495] ? __pfx_lock_release+0x10/0x10 [ 1106.062546][T24495] ? aa_sock_msg_perm+0x91/0x160 [ 1106.067499][T24495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.072801][T24495] __sock_sendmsg+0x221/0x270 [ 1106.077503][T24495] ____sys_sendmsg+0x52a/0x7e0 [ 1106.082295][T24495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.087629][T24495] __sys_sendmsg+0x292/0x380 [ 1106.092237][T24495] ? __pfx___sys_sendmsg+0x10/0x10 [ 1106.097374][T24495] ? __pfx_vfs_write+0x10/0x10 [ 1106.102186][T24495] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1106.108792][T24495] ? lockdep_hardirqs_on+0x99/0x150 [ 1106.114013][T24495] __do_fast_syscall_32+0xb4/0x110 [ 1106.119235][T24495] ? exc_page_fault+0x590/0x8c0 [ 1106.124109][T24495] do_fast_syscall_32+0x34/0x80 [ 1106.128981][T24495] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1106.135328][T24495] RIP: 0023:0xf7f11579 [ 1106.139497][T24495] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1106.159290][T24495] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1106.167816][T24495] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 1106.175822][T24495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1106.183801][T24495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1106.191780][T24495] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1106.199758][T24495] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1106.207839][T24495] [ 1106.290832][T24498] netlink: 'syz.3.5199': attribute type 2 has an invalid length. [ 1106.300355][T24498] netlink: 'syz.3.5199': attribute type 8 has an invalid length. [ 1106.336961][T24498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5199'. [ 1106.404191][T24504] fuse: Bad value for 'rootmode' [ 1106.510264][T24510] FAULT_INJECTION: forcing a failure. [ 1106.510264][T24510] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.559970][T24510] CPU: 0 UID: 0 PID: 24510 Comm: syz.4.5205 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1106.570557][T24510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1106.580676][T24510] Call Trace: [ 1106.583980][T24510] [ 1106.586920][T24510] dump_stack_lvl+0x241/0x360 [ 1106.591629][T24510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.596840][T24510] ? __pfx__printk+0x10/0x10 [ 1106.601440][T24510] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1106.607429][T24510] ? __pfx___might_resched+0x10/0x10 [ 1106.612747][T24510] should_fail_ex+0x3b0/0x4e0 [ 1106.617476][T24510] should_failslab+0xac/0x100 [ 1106.622213][T24510] ? __alloc_skb+0x1c3/0x440 [ 1106.626832][T24510] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1106.632680][T24510] __alloc_skb+0x1c3/0x440 [ 1106.637113][T24510] ? __pfx___alloc_skb+0x10/0x10 [ 1106.642063][T24510] ? netlink_autobind+0xd6/0x2f0 [ 1106.647011][T24510] ? netlink_autobind+0x2b0/0x2f0 [ 1106.652049][T24510] netlink_sendmsg+0x638/0xcb0 [ 1106.656829][T24510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.662134][T24510] ? __pfx_lock_release+0x10/0x10 [ 1106.667179][T24510] ? aa_sock_msg_perm+0x91/0x160 [ 1106.672140][T24510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.677439][T24510] __sock_sendmsg+0x221/0x270 [ 1106.682141][T24510] ____sys_sendmsg+0x52a/0x7e0 [ 1106.686927][T24510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.692242][T24510] __sys_sendmsg+0x292/0x380 [ 1106.696848][T24510] ? __pfx___sys_sendmsg+0x10/0x10 [ 1106.701983][T24510] ? __pfx_vfs_write+0x10/0x10 [ 1106.706787][T24510] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1106.713392][T24510] ? lockdep_hardirqs_on+0x99/0x150 [ 1106.718606][T24510] __do_fast_syscall_32+0xb4/0x110 [ 1106.723738][T24510] ? exc_page_fault+0x590/0x8c0 [ 1106.728618][T24510] do_fast_syscall_32+0x34/0x80 [ 1106.733497][T24510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1106.740108][T24510] RIP: 0023:0xf7f11579 [ 1106.744197][T24510] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1106.763992][T24510] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1106.772426][T24510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1106.780411][T24510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1106.788409][T24510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1106.796405][T24510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1106.804386][T24510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1106.812380][T24510] [ 1107.129986][T24525] FAULT_INJECTION: forcing a failure. [ 1107.129986][T24525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.144827][ T5283] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1107.154781][T24525] CPU: 1 UID: 0 PID: 24525 Comm: syz.2.5210 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1107.165260][T24525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1107.175364][T24525] Call Trace: [ 1107.178771][T24525] [ 1107.181745][T24525] dump_stack_lvl+0x241/0x360 [ 1107.186481][T24525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.191740][T24525] ? __pfx__printk+0x10/0x10 [ 1107.196380][T24525] ? __pfx_lock_release+0x10/0x10 [ 1107.201467][T24525] should_fail_ex+0x3b0/0x4e0 [ 1107.206208][T24525] _copy_to_iter+0x434/0x1d60 [ 1107.211029][T24525] ? __virt_addr_valid+0x183/0x530 [ 1107.216289][T24525] ? __pfx__copy_to_iter+0x10/0x10 [ 1107.221464][T24525] ? __virt_addr_valid+0x183/0x530 [ 1107.226627][T24525] ? __virt_addr_valid+0x183/0x530 [ 1107.231784][T24525] ? __virt_addr_valid+0x45f/0x530 [ 1107.236940][T24525] ? __phys_addr_symbol+0x2f/0x70 [ 1107.242018][T24525] ? __check_object_size+0x48e/0x900 [ 1107.247356][T24525] __skb_datagram_iter+0x107/0x900 [ 1107.252529][T24525] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1107.258238][T24525] skb_copy_datagram_iter+0xd1/0x250 [ 1107.263608][T24525] netlink_recvmsg+0x2d0/0x11d0 [ 1107.268500][T24525] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1107.273815][T24525] ? __pfx_aa_sk_perm+0x10/0x10 [ 1107.278695][T24525] ? aa_sock_msg_perm+0x91/0x160 [ 1107.283649][T24525] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1107.288958][T24525] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1107.294271][T24525] sock_recvmsg+0x22f/0x280 [ 1107.298819][T24525] ____sys_recvmsg+0x1c6/0x480 [ 1107.303623][T24525] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1107.309107][T24525] ? get_compat_msghdr+0x500/0x730 [ 1107.314265][T24525] __sys_recvmsg+0x2e6/0x3d0 [ 1107.318902][T24525] ? __pfx___sys_recvmsg+0x10/0x10 [ 1107.324033][T24525] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1107.329712][T24525] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1107.336321][T24525] ? lockdep_hardirqs_on+0x99/0x150 [ 1107.341544][T24525] __do_fast_syscall_32+0xb4/0x110 [ 1107.346678][T24525] ? exc_page_fault+0x590/0x8c0 [ 1107.351550][T24525] do_fast_syscall_32+0x34/0x80 [ 1107.356417][T24525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1107.362764][T24525] RIP: 0023:0xf7f56579 [ 1107.366861][T24525] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1107.386484][T24525] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1107.394918][T24525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1107.402901][T24525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1107.410895][T24525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.418904][T24525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1107.426892][T24525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.434977][T24525] [ 1107.438030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.457958][ T1132] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1107.641723][ T5283] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1107.652713][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.662246][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.682888][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.691216][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.700528][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.714219][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.723048][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.732770][ T1132] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.743510][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.755343][ T1132] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1107.764560][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.773081][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.783185][ T1132] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1107.792686][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.803937][ T1132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1107.812244][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.819179][ T1132] usb 2-1: SerialNumber: syz [ 1107.826662][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.840404][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.851887][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.861047][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.870657][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.883708][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.893410][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.903397][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.915349][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.923834][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.936643][ T5283] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1107.948537][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.960751][ T5283] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1107.980375][ T5283] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1107.990563][ T5283] usb 4-1: Product: syz [ 1108.000828][ T5283] usb 4-1: Manufacturer: syz [ 1108.005722][ T5283] usb 4-1: SerialNumber: syz [ 1108.020706][ T5283] usb 4-1: config 0 descriptor?? [ 1108.044510][ T5283] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1108.045140][T24517] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 1108.320599][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 1108.321421][ T5292] usb 4-1: USB disconnect, device number 14 [ 1108.328621][T24549] FAULT_INJECTION: forcing a failure. [ 1108.328621][T24549] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.361337][T24549] CPU: 1 UID: 0 PID: 24549 Comm: syz.2.5219 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1108.371825][T24549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1108.381925][T24549] Call Trace: [ 1108.385244][T24549] [ 1108.388216][T24549] dump_stack_lvl+0x241/0x360 [ 1108.392947][T24549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.397199][ T5292] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1108.398168][T24549] ? __pfx__printk+0x10/0x10 [ 1108.409047][T24549] ? __kmalloc_noprof+0xb0/0x400 [ 1108.414043][T24549] ? __pfx___might_resched+0x10/0x10 [ 1108.419380][T24549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1108.425424][T24549] should_fail_ex+0x3b0/0x4e0 [ 1108.430169][T24549] ? sock_kmalloc+0xd7/0x160 [ 1108.434793][T24549] should_failslab+0xac/0x100 [ 1108.439491][T24549] ? sock_kmalloc+0xd7/0x160 [ 1108.444100][T24549] __kmalloc_noprof+0xd8/0x400 [ 1108.448883][T24549] sock_kmalloc+0xd7/0x160 [ 1108.453322][T24549] af_alg_alloc_areq+0x90/0x260 [ 1108.458195][T24549] skcipher_recvmsg+0x382/0x1230 [ 1108.463168][T24549] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1108.468561][T24549] ? aa_sock_msg_perm+0x91/0x160 [ 1108.473513][T24549] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1108.478816][T24549] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1108.484218][T24549] sock_recvmsg+0x22f/0x280 [ 1108.488828][T24549] ____sys_recvmsg+0x1c6/0x480 [ 1108.493618][T24549] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1108.498921][T24549] ? get_compat_msghdr+0x500/0x730 [ 1108.504064][T24549] do_recvmmsg+0x579/0xad0 [ 1108.508506][T24549] ? __pfx_do_recvmmsg+0x10/0x10 [ 1108.513464][T24549] ? __pfx_lock_release+0x10/0x10 [ 1108.518516][T24549] ? kstrtouint_from_user+0x128/0x190 [ 1108.523976][T24549] ? vfs_write+0x7bf/0xc90 [ 1108.528422][T24549] ? __pfx_vfs_write+0x10/0x10 [ 1108.533209][T24549] ? __fget_files+0x3f3/0x470 [ 1108.537993][T24549] __sys_recvmmsg+0x1a8/0x270 [ 1108.542691][T24549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1108.548692][T24549] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1108.553908][T24549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1108.560262][T24549] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 1108.566436][T24549] __do_fast_syscall_32+0xb4/0x110 [ 1108.571565][T24549] ? exc_page_fault+0x590/0x8c0 [ 1108.576431][T24549] do_fast_syscall_32+0x34/0x80 [ 1108.581321][T24549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1108.587684][T24549] RIP: 0023:0xf7f56579 [ 1108.591782][T24549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1108.611439][T24549] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1108.619878][T24549] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 1108.627861][T24549] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1108.635843][T24549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.643821][T24549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1108.651827][T24549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1108.659818][T24549] [ 1108.662924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.127624][T24560] FAULT_INJECTION: forcing a failure. [ 1109.127624][T24560] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.177261][T24560] CPU: 0 UID: 0 PID: 24560 Comm: syz.4.5223 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1109.187853][T24560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1109.197963][T24560] Call Trace: [ 1109.201284][T24560] [ 1109.204252][T24560] dump_stack_lvl+0x241/0x360 [ 1109.208991][T24560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.214244][T24560] ? __pfx__printk+0x10/0x10 [ 1109.218884][T24560] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1109.224921][T24560] ? __pfx___might_resched+0x10/0x10 [ 1109.230271][T24560] should_fail_ex+0x3b0/0x4e0 [ 1109.235013][T24560] should_failslab+0xac/0x100 [ 1109.239740][T24560] ? __alloc_skb+0x1c3/0x440 [ 1109.244380][T24560] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1109.250246][T24560] __alloc_skb+0x1c3/0x440 [ 1109.254766][T24560] ? tcp_call_bpf+0x228/0x4f0 [ 1109.259498][T24560] ? __pfx___alloc_skb+0x10/0x10 [ 1109.264488][T24560] ? __kasan_kmalloc+0x98/0xb0 [ 1109.269397][T24560] ? __asan_memset+0x23/0x50 [ 1109.274042][T24560] tcp_stream_alloc_skb+0x3d/0x310 [ 1109.279205][T24560] tcp_connect+0x11ee/0x4940 [ 1109.283866][T24560] ? __pfx_tcp_connect+0x10/0x10 [ 1109.288848][T24560] ? __kasan_kmalloc+0x97/0xb0 [ 1109.293828][T24560] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 1109.299339][T24560] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1109.305033][T24560] tcp_sendmsg_fastopen+0x2b0/0x5d0 [ 1109.310290][T24560] mptcp_sendmsg_fastopen+0x16f/0x530 [ 1109.315726][T24560] mptcp_sendmsg+0x1884/0x1b10 [ 1109.320562][T24560] ? aa_sk_perm+0x96d/0xab0 [ 1109.325136][T24560] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1109.330296][T24560] ? inet_send_prepare+0x5a/0x260 [ 1109.335469][T24560] __sock_sendmsg+0xef/0x270 [ 1109.340335][T24560] __sys_sendto+0x39b/0x4f0 [ 1109.344817][T24565] FAULT_INJECTION: forcing a failure. [ 1109.344817][T24565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.344966][T24560] ? __pfx___sys_sendto+0x10/0x10 [ 1109.363077][T24560] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1109.368795][T24560] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1109.375195][T24560] __ia32_sys_sendto+0xdd/0x100 [ 1109.380123][T24560] __do_fast_syscall_32+0xb4/0x110 [ 1109.385297][T24560] ? exc_page_fault+0x590/0x8c0 [ 1109.390204][T24560] do_fast_syscall_32+0x34/0x80 [ 1109.395110][T24560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.401585][T24560] RIP: 0023:0xf7f11579 [ 1109.405695][T24560] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1109.425354][T24560] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1109.433834][T24560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1109.441940][T24560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1109.449954][T24560] RBP: 00000000fffffe74 R08: 0000000000000000 R09: 0000000000000000 [ 1109.457974][T24560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1109.465994][T24560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.474035][T24560] [ 1109.477078][T24565] CPU: 1 UID: 0 PID: 24565 Comm: syz.0.5225 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1109.487542][T24565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1109.497704][T24565] Call Trace: [ 1109.501002][T24565] [ 1109.503942][T24565] dump_stack_lvl+0x241/0x360 [ 1109.508646][T24565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.513883][T24565] ? __pfx__printk+0x10/0x10 [ 1109.518491][T24565] ? __pfx_lock_release+0x10/0x10 [ 1109.523620][T24565] ? __lock_acquire+0x1384/0x2050 [ 1109.528668][T24565] should_fail_ex+0x3b0/0x4e0 [ 1109.533370][T24565] _copy_from_user+0x2f/0xe0 [ 1109.537976][T24565] kstrtouint_from_user+0xc6/0x190 [ 1109.543109][T24565] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1109.548841][T24565] ? __pfx_lock_acquire+0x10/0x10 [ 1109.553917][T24565] proc_fail_nth_write+0xaa/0x2d0 [ 1109.558960][T24565] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1109.564887][T24565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1109.570633][T24565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1109.576310][T24565] vfs_write+0x29c/0xc90 [ 1109.580586][T24565] ? __pfx_vfs_write+0x10/0x10 [ 1109.585374][T24565] ? __fget_files+0x3f3/0x470 [ 1109.590071][T24565] ? fdget_pos+0x24e/0x320 [ 1109.594526][T24565] ksys_write+0x183/0x2b0 [ 1109.598968][T24565] ? __pfx_ksys_write+0x10/0x10 [ 1109.603931][T24565] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1109.610539][T24565] ? lockdep_hardirqs_on+0x99/0x150 [ 1109.615757][T24565] __do_fast_syscall_32+0xb4/0x110 [ 1109.620896][T24565] ? exc_page_fault+0x590/0x8c0 [ 1109.625794][T24565] do_fast_syscall_32+0x34/0x80 [ 1109.630663][T24565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.637009][T24565] RIP: 0023:0xf7f72579 [ 1109.641088][T24565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1109.660710][T24565] RSP: 002b:00000000f56d55a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1109.669139][T24565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f56d5620 [ 1109.677120][T24565] RDX: 0000000000000001 RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 1109.685129][T24565] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1109.693110][T24565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1109.701092][T24565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.709091][T24565] [ 1109.712226][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.785096][ T1132] usb 2-1: 0:2 : does not exist [ 1109.827404][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1109.827426][ T29] audit: type=1326 audit(1727265631.951:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.3.5226" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 1109.861104][ T1132] usb 2-1: USB disconnect, device number 4 [ 1109.983717][T20542] udevd[20542]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.058405][T24573] fuse: Unknown parameter 'use00000000000000000000' [ 1110.092836][T24571] fuse: Bad value for 'rootmode' [ 1110.429044][T24583] FAULT_INJECTION: forcing a failure. [ 1110.429044][T24583] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.464617][T24583] CPU: 1 UID: 0 PID: 24583 Comm: syz.2.5232 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1110.475114][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1110.485218][T24583] Call Trace: [ 1110.488536][T24583] [ 1110.491503][T24583] dump_stack_lvl+0x241/0x360 [ 1110.496408][T24583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.501664][T24583] ? __pfx__printk+0x10/0x10 [ 1110.506304][T24583] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1110.512342][T24583] ? __pfx___might_resched+0x10/0x10 [ 1110.517781][T24583] should_fail_ex+0x3b0/0x4e0 [ 1110.522913][T24583] should_failslab+0xac/0x100 [ 1110.527652][T24583] ? __alloc_skb+0x1c3/0x440 [ 1110.532301][T24583] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1110.538181][T24583] __alloc_skb+0x1c3/0x440 [ 1110.542663][T24583] ? __pfx___alloc_skb+0x10/0x10 [ 1110.547667][T24583] ? netlink_autobind+0xd6/0x2f0 [ 1110.552669][T24583] ? netlink_autobind+0x2b0/0x2f0 [ 1110.557758][T24583] netlink_sendmsg+0x638/0xcb0 [ 1110.562598][T24583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.567943][T24583] ? __pfx_lock_release+0x10/0x10 [ 1110.573023][T24583] ? aa_sock_msg_perm+0x91/0x160 [ 1110.578015][T24583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.583446][T24583] __sock_sendmsg+0x221/0x270 [ 1110.588163][T24583] ____sys_sendmsg+0x52a/0x7e0 [ 1110.593001][T24583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.598336][T24583] __sys_sendmsg+0x292/0x380 [ 1110.602951][T24583] ? __pfx___sys_sendmsg+0x10/0x10 [ 1110.608088][T24583] ? __pfx_vfs_write+0x10/0x10 [ 1110.612896][T24583] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1110.619522][T24583] ? lockdep_hardirqs_on+0x99/0x150 [ 1110.624794][T24583] __do_fast_syscall_32+0xb4/0x110 [ 1110.629967][T24583] ? exc_page_fault+0x590/0x8c0 [ 1110.634872][T24583] do_fast_syscall_32+0x34/0x80 [ 1110.639863][T24583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.646246][T24583] RIP: 0023:0xf7f56579 [ 1110.650357][T24583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1110.670099][T24583] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1110.678570][T24583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 1110.686595][T24583] RDX: 0000000000040840 RSI: 0000000000000000 RDI: 0000000000000000 [ 1110.694655][T24583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.702701][T24583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1110.710718][T24583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.718757][T24583] [ 1110.721922][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.991105][ T5292] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1111.032719][T24600] [ 1111.035119][T24600] ====================================================== [ 1111.042167][T24600] WARNING: possible circular locking dependency detected [ 1111.049196][T24600] 6.11.0-syzkaller-10547-g684a64bf32b6 #0 Not tainted [ 1111.055970][T24600] ------------------------------------------------------ [ 1111.063167][T24600] syz.2.5238/24600 is trying to acquire lock: [ 1111.069237][T24600] ffff88807c2a2798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 1111.078921][T24600] [ 1111.078921][T24600] but task is already holding lock: [ 1111.086287][T24600] ffff88805c194aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 1111.097017][T24600] [ 1111.097017][T24600] which lock already depends on the new lock. [ 1111.097017][T24600] [ 1111.107436][T24600] [ 1111.107436][T24600] the existing dependency chain (in reverse order) is: [ 1111.116463][T24600] [ 1111.116463][T24600] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1111.125270][T24600] lock_acquire+0x1ed/0x550 [ 1111.130318][T24600] down_write+0x99/0x220 [ 1111.135095][T24600] process_measurement+0x439/0x1fb0 [ 1111.140828][T24600] ima_file_mmap+0x13d/0x2b0 [ 1111.145948][T24600] security_mmap_file+0x7e7/0xa40 [ 1111.151505][T24600] __se_sys_remap_file_pages+0x6e6/0xa50 [ 1111.157674][T24600] __do_fast_syscall_32+0xb4/0x110 [ 1111.163320][T24600] do_fast_syscall_32+0x34/0x80 [ 1111.168703][T24600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1111.175563][T24600] [ 1111.175563][T24600] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1111.183161][T24600] validate_chain+0x18ef/0x5920 [ 1111.188542][T24600] __lock_acquire+0x1384/0x2050 [ 1111.193932][T24600] lock_acquire+0x1ed/0x550 [ 1111.198967][T24600] down_read_killable+0xca/0xd30 [ 1111.204439][T24600] mmap_read_lock_killable+0x1d/0x70 [ 1111.210253][T24600] lock_mm_and_find_vma+0x29c/0x2f0 [ 1111.216006][T24600] exc_page_fault+0x1bf/0x8c0 [ 1111.221212][T24600] asm_exc_page_fault+0x26/0x30 [ 1111.226592][T24600] fault_in_readable+0x165/0x2b0 [ 1111.232063][T24600] fault_in_iov_iter_readable+0x229/0x280 [ 1111.238317][T24600] generic_perform_write+0x259/0x6d0 [ 1111.244137][T24600] shmem_file_write_iter+0xf9/0x120 [ 1111.249867][T24600] vfs_write+0xa6d/0xc90 [ 1111.254649][T24600] ksys_write+0x183/0x2b0 [ 1111.259516][T24600] __do_fast_syscall_32+0xb4/0x110 [ 1111.265161][T24600] do_fast_syscall_32+0x34/0x80 [ 1111.270545][T24600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1111.277406][T24600] [ 1111.277406][T24600] other info that might help us debug this: [ 1111.277406][T24600] [ 1111.287635][T24600] Possible unsafe locking scenario: [ 1111.287635][T24600] [ 1111.295091][T24600] CPU0 CPU1 [ 1111.300454][T24600] ---- ---- [ 1111.305823][T24600] lock(&sb->s_type->i_mutex_key#12); [ 1111.311302][T24600] lock(&mm->mmap_lock); [ 1111.318155][T24600] lock(&sb->s_type->i_mutex_key#12); [ 1111.326148][T24600] rlock(&mm->mmap_lock); [ 1111.330573][T24600] [ 1111.330573][T24600] *** DEADLOCK *** [ 1111.330573][T24600] [ 1111.338745][T24600] 3 locks held by syz.2.5238/24600: [ 1111.343947][T24600] #0: ffff888068e17b38 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 1111.353027][T24600] #1: ffff88807d778420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1111.361939][T24600] #2: ffff88805c194aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 1111.373121][T24600] [ 1111.373121][T24600] stack backtrace: [ 1111.379011][T24600] CPU: 0 UID: 0 PID: 24600 Comm: syz.2.5238 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 1111.389516][T24600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1111.399578][T24600] Call Trace: [ 1111.402861][T24600] [ 1111.405824][T24600] dump_stack_lvl+0x241/0x360 [ 1111.410541][T24600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.415751][T24600] ? __pfx__printk+0x10/0x10 [ 1111.420357][T24600] print_circular_bug+0x13a/0x1b0 [ 1111.425394][T24600] check_noncircular+0x36a/0x4a0 [ 1111.430346][T24600] ? __pfx_check_noncircular+0x10/0x10 [ 1111.435815][T24600] ? lockdep_lock+0x123/0x2b0 [ 1111.440511][T24600] ? __pfx_validate_chain+0x10/0x10 [ 1111.445725][T24600] validate_chain+0x18ef/0x5920 [ 1111.451089][T24600] ? __pfx_validate_chain+0x10/0x10 [ 1111.456295][T24600] ? mark_lock+0x9a/0x360 [ 1111.460650][T24600] ? __pfx_validate_chain+0x10/0x10 [ 1111.465855][T24600] ? __lock_acquire+0x1384/0x2050 [ 1111.470924][T24600] ? mark_lock+0x9a/0x360 [ 1111.475260][T24600] ? __lock_acquire+0x1384/0x2050 [ 1111.480307][T24600] ? mark_lock+0x9a/0x360 [ 1111.484648][T24600] __lock_acquire+0x1384/0x2050 [ 1111.489527][T24600] lock_acquire+0x1ed/0x550 [ 1111.494050][T24600] ? mmap_read_lock_killable+0x1d/0x70 [ 1111.499522][T24600] ? __pfx_lock_acquire+0x10/0x10 [ 1111.504567][T24600] ? __pfx___might_resched+0x10/0x10 [ 1111.509878][T24600] ? __folio_batch_add_and_move+0x845/0xf00 [ 1111.515796][T24600] ? __pfx_lru_add+0x10/0x10 [ 1111.520392][T24600] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 1111.526702][T24600] down_read_killable+0xca/0xd30 [ 1111.531668][T24600] ? mmap_read_lock_killable+0x1d/0x70 [ 1111.537169][T24600] ? folio_add_lru+0x28f/0x870 [ 1111.541948][T24600] ? cmp_ex_search+0x74/0xa0 [ 1111.546562][T24600] ? mmap_read_lock_killable+0x1d/0x70 [ 1111.552031][T24600] ? bsearch+0x98/0xc0 [ 1111.556115][T24600] ? __pfx_down_read_killable+0x10/0x10 [ 1111.561677][T24600] ? search_extable+0xb3/0x100 [ 1111.566450][T24600] ? __pfx_search_extable+0x10/0x10 [ 1111.571657][T24600] ? fault_in_readable+0x165/0x2b0 [ 1111.576783][T24600] ? __pfx_down_read_trylock+0x10/0x10 [ 1111.582253][T24600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1111.588598][T24600] mmap_read_lock_killable+0x1d/0x70 [ 1111.593901][T24600] lock_mm_and_find_vma+0x29c/0x2f0 [ 1111.599114][T24600] exc_page_fault+0x1bf/0x8c0 [ 1111.603801][T24600] asm_exc_page_fault+0x26/0x30 [ 1111.608668][T24600] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 1111.614406][T24600] Code: b3 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 95 cd b3 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 1111.634017][T24600] RSP: 0018:ffffc90003b37a20 EFLAGS: 00050287 [ 1111.640091][T24600] RAX: ffffffff81e0e7ab RBX: 0000000020201000 RCX: 0000000000040000 [ 1111.648160][T24600] RDX: ffffc90011d06000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1111.656140][T24600] RBP: ffffc90003b37ad8 R08: ffffffff81e0e748 R09: ffffffff84b90999 [ 1111.664141][T24600] R10: 0000000000000002 R11: ffff888026db3c00 R12: 0000000000200000 [ 1111.672118][T24600] R13: dffffc0000000000 R14: 0000000020401000 R15: 1ffff92000766f4c [ 1111.680123][T24600] ? fault_in_iov_iter_readable+0x49/0x280 [ 1111.685952][T24600] ? fault_in_readable+0xf8/0x2b0 [ 1111.690996][T24600] ? fault_in_readable+0x15b/0x2b0 [ 1111.696128][T24600] ? __pfx_fault_in_readable+0x10/0x10 [ 1111.701601][T24600] ? folio_unlock+0x126/0x2f0 [ 1111.706291][T24600] ? inode_to_bdi+0x69/0xf0 [ 1111.710808][T24600] fault_in_iov_iter_readable+0x229/0x280 [ 1111.716550][T24600] generic_perform_write+0x259/0x6d0 [ 1111.721956][T24600] ? __pfx_generic_perform_write+0x10/0x10 [ 1111.727772][T24600] ? __pfx_generic_write_checks+0x10/0x10 [ 1111.733501][T24600] ? rcu_read_lock_any_held+0xb7/0x160 [ 1111.738971][T24600] ? file_update_time+0x2a0/0x430 [ 1111.744008][T24600] shmem_file_write_iter+0xf9/0x120 [ 1111.749239][T24600] vfs_write+0xa6d/0xc90 [ 1111.753522][T24600] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1111.759350][T24600] ? __pfx_vfs_write+0x10/0x10 [ 1111.764151][T24600] ? fdget_pos+0x24e/0x320 [ 1111.768676][T24600] ksys_write+0x183/0x2b0 [ 1111.773026][T24600] ? __pfx_ksys_write+0x10/0x10 [ 1111.777895][T24600] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1111.784499][T24600] ? lockdep_hardirqs_on+0x99/0x150 [ 1111.789796][T24600] __do_fast_syscall_32+0xb4/0x110 [ 1111.795008][T24600] ? ret_from_fork_asm+0x1a/0x30 [ 1111.799960][T24600] ? lockdep_hardirqs_on+0x99/0x150 [ 1111.805167][T24600] do_fast_syscall_32+0x34/0x80 [ 1111.810050][T24600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1111.816397][T24600] RIP: 0023:0xf7f56579 [ 1111.820470][T24600] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1111.840097][T24600] RSP: 002b:00000000f56b556c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1111.848527][T24600] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000240 [ 1111.856602][T24600] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 1111.864582][T24600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1111.872558][T24600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1111.880533][T24600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1111.888531][T24600] [ 1111.962366][T24599] netlink: 'syz.2.5238': attribute type 3 has an invalid length. [ 1111.993889][ T5292] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1112.003138][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.012365][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.024622][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.032671][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.041712][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.053152][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.061423][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.070526][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.081525][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.088896][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.097999][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.108955][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.116609][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.125635][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.138223][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.145690][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.154610][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.165840][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.173290][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.182383][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.193355][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.200917][ T5292] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.209994][ T5292] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.220952][ T5292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1112.229142][ T5292] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1112.238393][ T5292] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1112.247966][ T5292] usb 4-1: Product: syz [ 1112.252188][ T5292] usb 4-1: Manufacturer: syz [ 1112.256799][ T5292] usb 4-1: SerialNumber: syz [ 1112.262842][ T5292] usb 4-1: config 0 descriptor?? [ 1112.270514][ T5292] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1112.531443][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 1112.538854][ T5292] usb 4-1: USB disconnect, device number 15 [ 1112.548151][ T5292] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1116.142308][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.150938][ T1268] ieee802154 phy1 wpan1: encryption failed: -22