last executing test programs: 2m7.66717408s ago: executing program 3 (id=346): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r1, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x1800, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) 2m6.351829836s ago: executing program 3 (id=356): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x54d00000) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3, 0xffe4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) 2m3.38367292s ago: executing program 3 (id=370): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00}', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf", @ANYBLOB="0c009900090000006600000008006b00b400000008006b00b400000008006b003700000008006b001c02000008006b004c020000cafe6b00e001000008006b0068010000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) readlink(0x0, 0x0, 0x0) unshare(0x22020600) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r9, 0x0, 0x0) sendto$packet(r6, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x20000014, &(0x7f0000002780)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) 2m3.059487264s ago: executing program 4 (id=373): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfa, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x3c, {0x9, 0x21, 0x0, 0xe, 0x1, {0x22, 0x8ca}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x7, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xbe, 0xef, 0x1}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0x3, 0x7, 0x40, 0x63}, 0x4a, &(0x7f0000000200)=ANY=[], 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0x7f, &(0x7f0000000280)=@string={0x7f, 0x3, "13a196588a2b99fd58ad9f37676cfb4641598f00772e6e555dd102a3a80ad90000007094d6da51166c07006c300ec2f55271c4d35f6fb3031722533e09904ff5bae0c9cb3e44a2c21b19228a449d0bc708d8643e99341b2ce74b7d30aa16d1d9c21e408618f0f2f582b6d089f0a44f326db6d2c20b4679f6e7bdacfa86"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x96, &(0x7f0000000340)=@string={0x96, 0x3, "612f583a0f3cd7f0d9ca018be50f34d1fe5a8526de5a04379582cdbb388add9fd7b93c1f42ce0f5ab92f2b75a8e577017fd161fbe098100995531c333d9d411a4d0bb9012d3bd1b9cda64faa7f47a87e755b17e56047eb77af944555faacf6cffe6ef6a13dc66d3d151380044fcc602b851e6f937c1fc2139470d52acf4787c4650873cf926aa10018d7dc60d2b70e97ecf1b691"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40a}}, {0xfb, &(0x7f0000000440)=ANY=[@ANYBLOB="fb039581ced788ce61004e21390b9db138e01db4e88db22375ba428e80e230aabdabc610df319a3d7e9cbae7ff93187bdbe9362d00e15b57038abddf8968ee63b9ee3181a110518878616dc2441f31d9dcc186b0e644ab8dd2c88fd1b92a259578e34044da16c596f780e366b848c633b6da3185927d54da5dde0290bc01d8831a365d7f5b42cc7c774af4152a80a12d627f631af45caa282d1fe7333fc02d38223dd31fe9c89984d16bb0079c3a1bdc0de3fb97426c7221f67bf7199005725736ef4ef23aaf24e2aba4aac5c95afe8d0ea04697346cf9c5f78e1eaddd4e4fe3fd46a9dd46e7567b2214478e56c100"/251]}, {0x48, &(0x7f0000000540)=@string={0x48, 0x3, "09378af148d66bd85608b15bcf55164b23fc85e768db39dacb0ddf8a2d34d322bf5811b246d51f899dee8f131263f34897c5612dd7dbfefd1dda4739efedf7a6ba12337461c6"}}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x9f1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400000000000000", @ANYRES32, @ANYRES32], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbfffffffffe}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x20) preadv(r4, 0x0, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f00000001c0)={0x0, 0x725f, 0x7ff, 0x38, 0x5c, 0x0, r4}, 0x1) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/110, 0x6e}, 0x40000102) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) acct(&(0x7f0000000180)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r7, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x78, 0x10, 0x403, 0x7fffffc, 0x0, {0x0, 0x0, 0x74, 0x0, 0x11}, [@IFLA_PORT_SELF={0x58, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aa49ab877d174efc9ce7c4ec93d8b4b8"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1979e67b8802a486db1674ca277b2672"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3183beb7509dd27fe95ba01da87bb767"}, @IFLA_PORT_PROFILE={0x7, 0x2, '%-\x00'}]}]}, 0x78}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') set_mempolicy(0x1, &(0x7f0000005740)=0x2, 0x6) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f00000001c0)={0x40, 0x35, 0x4, "5c1d712f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m2.843721851s ago: executing program 2 (id=375): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0xe9d8, 0x1, 0xc4, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x80000001}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001330e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 2m2.747831274s ago: executing program 2 (id=376): syz_emit_ethernet(0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbff70dbffffffffff8100290088f5ec3765b121e17fee739664aba881c7ff3fb3d37de15482c3c5d8175408e4bf886bc9b2d19c3273265ba9be2f43416c78decd6ca6fed1c982ed86310756eb25fadebef867a9c16304c55472b943cfbf92711cdab2553668a235590170ae1168d3bfba519328c67c8f2d44ab5c4f1614bb847179448012ddab6337049d9d6fdf7d1f44909cf8d0183ca0da2b62ce579497f4e2b7ee3535"], 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89101) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x20800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) ioctl$CEC_TRANSMIT(r3, 0xc0386105, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="121b100c0000000000010902240001000060060904001005030001000921000016012205000905810300000c00070000000000000000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa}]}}, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xc0189436, &(0x7f00000000c0)={'veth0_to_hsr\x00', @remote}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xf7, 0x7, 0x1, 0x14, @mcast1, @remote, 0x700, 0x1, 0x2, 0x4}}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) epoll_pwait(r5, &(0x7f0000000040)=[{}, {}], 0x2, 0x8001, &(0x7f0000000080)={[0x6]}, 0x8) 2m1.695830853s ago: executing program 1 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 2m1.680925988s ago: executing program 1 (id=380): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a80100004800c"], 0x34}}, 0x0) 2m1.584180954s ago: executing program 1 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008704"]) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0x10, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0xf8, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xd8, 0x7, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x2, 0xd}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0x2, 0x5, 0x20, 0x7}, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0xd, 0x515d}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xfa, 0x19, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x1, 0x3, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "28f6bb774be5cf4cb44f8e03d5a4fa52"}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x340a}}, {0x3b, &(0x7f0000000140)=@string={0x3b, 0x3, "cbadba4cda593ddb7dd252592d4a283c4f271cb0fd981672471233b8b430eee039dc63967bbd3973e9ced18ee03e6d339e4f15a31c55c20b5e"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc09}}, {0xa1, &(0x7f00000001c0)=@string={0xa1, 0x3, "fbdf0124c08574ba5d09ab13f30a355eb274605c9b6fa5ab2f28ad0499863fe33490505753123707e9eb9e0783bbb21300b939e74816b34cb789d10b41ac0e6612b04edb2e0e2b96c2f7fa5481c87e88f896449dd49d86726c617b50a7ec8b8adf7bc108d511bc9ef05ff1e3b6ecc612d2e1513394e1e5044d58762db74bb1f48645757a22274d34f934a03ccd20e455b4d930197c9093bd687848678ab62a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0x28, &(0x7f0000000380)=@string={0x28, 0x3, "c71565450b700a67bf3ce7779654ecf1e58bb413c4717fdbc2e108a03637dfbee1d51f238243"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000580)={0x14, &(0x7f00000004c0)={0x40, 0x11, 0x83, {0x83, 0x7, "1a1b189bb0fd66bec8594668a91134561797d0ebd24f9db0790807151b8a600502b5011787bc9afbd19c2a5efa06a4f392fa8a50a9304654d877d0102a71b29a2ab80f9e2a9397f7c415f255ae6785375fd0ac9468ead10bfbb4cc14108e5a5114bf3fdbcff377e928c05391d2c0bf3a2bd97331d83bead0c62320722edcc06284"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)={0xa0d65b1a2995bdc5, 0x0, 0x7, "86e1f648dce47d"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x1, 0xfff, 0x6, 0x9, 0x6, 0x9, 0x689e, 0x8, 0x6daf, 0x9, 0x3}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 2m0.348926536s ago: executing program 3 (id=384): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x500, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 2m0.179538898s ago: executing program 3 (id=385): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414100c0002801f00010000000000240002800c00028005000100000000001400018008000100e000000208000200e00000020800074000000000180006800c000380060002004e22000008000100e0000002"], 0x7c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000001904000000b9000001"]) syz_emit_ethernet(0x63e, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={0xc8, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040801}, 0x4abb6599b8f50c3d) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000040)={0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8, 0x80, 0xfffffff9, 0x100, {{0x3d, 0x4, 0x0, 0x24, 0xf4, 0x66, 0x0, 0x6, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xa8, [@multicast2, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @end, @cipso={0x86, 0x72, 0xffffffffffffffff, [{0x7, 0x11, "5446904fda9739dec3a9e6474c359a"}, {0x6, 0xb, "7fd453359b27760508"}, {0x5, 0xc, "dccd50fc6da45e4fc48d"}, {0x6, 0x10, "fc81616e24c1008079d3fc9efb83"}, {0x1, 0xb, "4e3b6228e2793b509a"}, {0x7, 0x4, "9a69"}, {0x5, 0x12, "2fd3566e06434e02cd32f0212c5d80e5"}, {0x0, 0xf, "83e5be23d242d1e2921d374d8b"}, {0x6, 0x4, '\x00\x00'}]}, @cipso={0x86, 0x49, 0x3, [{0x7, 0xa, "a214beb9db79865a"}, {0x0, 0x5, 'v#2'}, {0x7, 0x8, "e9205794fc05"}, {0x0, 0x4, '<-'}, {0x6, 0xb, "b175107bac76d4adbd"}, {0x6, 0x7, "abd3abf04b"}, {0x0, 0xc, "fb23d16494f15905a64c"}, {0x1, 0xa, "88f8d3c410e1dfc5"}]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0xc61, 0xf]}]}}}}}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$sock_proto_private(r6, 0x89e0, &(0x7f0000000140)="573fc4b393275e87ff093099978eba0709ea9dbf4299465eda45028761e6ee919c455531c23ebbaedf9996f86dc8bc362e1cfa01c2d3f4da1736acd4d5dc4c71e33fadc354dd06d7285dcb000e28c4a7d2342532d553477c6ab8397cabadba5ea6d7e4fabb") setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc)=0x3, 0x4) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0x1, 0x2, 0x7, {0x0, 0x101, 0x4, 0x6}}) bind$inet(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000940)=""/118, 0x76) 1m59.923844485s ago: executing program 4 (id=388): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8412, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10100}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) (fail_nth: 47) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff010000"], 0x80}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c080) 1m59.848926151s ago: executing program 0 (id=389): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000780)=[{{&(0x7f0000000180)=@hci={0x1f, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}, 0x60}], 0x1, 0x24064050) 1m59.735452552s ago: executing program 4 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 1m59.707195889s ago: executing program 0 (id=391): syz_usb_connect(0x6, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x60, 0xe0, 0xb7, 0x8, 0x13d3, 0x3350, 0xedb6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1f, 0x0, 0x0, 0x96, 0xcc, 0x95, 0xfe, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x28, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x1, 0xe, 0x80, "b266ee63532bc2a2"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x3, 0xb1, 0x1, "abacc67bcf79b1"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xff, 0x1, 0x9, 0x0, "dae76371ec304fd8ac"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x3, 0x7}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x58}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x8f, "b3482bdee498"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x3, 0x1, 0x4df5, 0x6, 0x3e}]}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x6, 0x40, 0x7, 0x8, 0x81}, 0x2f, &(0x7f0000000140)={0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x9f, 0x6, 0xf, 0xff0f, 0x8, [0x30, 0x0, 0x0, 0xbe30, 0xff0000, 0x0]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x2a, &(0x7f0000000180)=@string={0x2a, 0x3, "1ee45567b9209ea2e33d8d5c6c4ecefeacd281e455a65336f32d3341b82967e0ce8393eaada2f9bd"}}, {0x6a, &(0x7f00000001c0)=@string={0x6a, 0x3, "61ce2c72c17d6699643183dd5a2d4b1e85a5859b61a50ce6bc389451cf66625fcc5d1f174b98e0a9880997ad2a52925dfb692c84c4c5c2b5886e2094298070a435cf56b35b017550271228b5a999f4a7fbf49ba3d53af33cb12797ffc7c894f1da418a51f5a2db68"}}, {0x87, &(0x7f0000000240)=@string={0x87, 0x3, "dbd1d287a38f9241389621c96b7c5b6e3f94da5e12f40f221a05b270938cb888fbe00231ff4d40762253b69c8eecfe97221926241a07cf0da1f938e1950798f99b9660fc262c1a6eb4c286ef4c0e838a0179dd0b5bf8bf7af51c39c13107e07e911cf7d0088f3bd52a5e67d8be55c3015b1cd644e5054e1c99713ac48f670087dcfe3838c5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}, {0x47, &(0x7f0000000400)=@string={0x47, 0x3, "76fcfc6aafa01d0d889a7ae56aba537b54bfb11ab3e038826854b4909430c48aba1b55f6d481ba3d06ed843a15cc747c50348a36a08572f0dc81ff3141f509380670cbef0d"}}]}) 1m59.705553802s ago: executing program 2 (id=392): r0 = syz_io_uring_setup(0x5be, &(0x7f0000000140)={0x0, 0x4cd6, 0x400, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x449, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0x8, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x402, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x3, 0x4, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x20007, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0xfffffffd, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x9, 0x6, 0x9, 0x2, 0x4], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x0, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x40003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x6, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r8, 0x1000006) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x1000000}) connect$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000300)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000000)=0x1) 1m59.533791469s ago: executing program 4 (id=393): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x2000) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000001040)={0x40000000, 0x6, "23a3bc5a72a1f1b8e4c1229f3675141f65d13377b74ef34d1102b6d87bfa71fd", 0xfff, 0x8, 0x4f9, 0x2, 0x17}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000680)=""/4109, 0x100d}], 0x1}, 0xffffdff9}], 0x1, 0x10040, 0x0) 1m59.299693121s ago: executing program 4 (id=394): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0}) 1m59.242256827s ago: executing program 4 (id=395): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r2, 0x8000000000000000) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x28de, 0x1205, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xb0, 0xff, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xfff, 0xbc, 0x1, {0x22, 0x2f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0xc, 0x4, 0xdd}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xbf, 0x5, 0xd8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xfb, 0x9, 0x3a, 0x8, 0x53}, 0x25, &(0x7f00000001c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x9, 0xff07, 0x8, [0x3f30, 0xff3f0f, 0xc0c0, 0xc000, 0xcf]}]}, 0x2, [{0x7e, &(0x7f00000002c0)=@string={0x7e, 0x3, "004cb9482d57224c89d35c0746afc9f427f93067f031d1bd5b1a33949fd47bdafa1688135fdbf400c8d03f82aded3bf3d728473bed6f6e1720f92d864f1f25f3756ca4829b46187149188c183264b62a1a9bdd557b9899cef5a582b8d1de089db576d0effed48a8530afeb7f90baa0764813f64c1e9c86f517431303"}}, {0xa7, &(0x7f00000003c0)=@string={0xa7, 0x3, "1ab585faa716c37659378cbf681d4451de70394c2d433034fdce3ecbdb1507afd2c0fc50463fb29d86ceb9ad8d3dd3ac478e4e56da49af342c6f5550036f9cd8b9cf8ab49578cfd576cd912dfc86ce1c1e7eb260993eab8b4b46b36adcd7fcdf7a378cee85d61be5b7d85ad2a813d844f2c6101708fe2092ca32f2ad12aa150fe971352951399b3106057deecc09770227deb522820d7ba0a2d448ca9ec4261a92824f3604"}}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) 1m59.062611588s ago: executing program 0 (id=396): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r3 = syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0xd15, 0xffff, 0x6]}, &(0x7f00000001c0)=0x44) syz_clone(0x670c7200, 0x0, 0x0, 0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0xffffffffffffff2e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) capset(&(0x7f0000000100)={0x20080522, r3}, &(0x7f00000004c0)={0x9abf1aa8, 0x101, 0x1, 0x2, 0x0, 0x2}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRESHEX=r6, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_RUN(r2, 0xae80, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x200, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) write$cgroup_devices(r9, &(0x7f0000000240)=ANY=[@ANYRES8=r9], 0xffdd) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8001000, 0x0, 0xa000, 0x10000, 0x0, r8, 0x738}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f000000c280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0xfffffffffffffffe, 0x9, {0xffffffffffffffff, 0xfffffffffffffffc, 0x16, 0x0, 0x12754f40, 0x3, {0x2, 0x7, 0x2, 0x5, 0xffffffffffffffff, 0x100000000000008, 0x80000000, 0x800, 0x3, 0xa000, 0x1, r10, r8, 0x0, 0x49}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 1m58.459724622s ago: executing program 1 (id=397): socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x21, 0xd, 0x0, 0x100, 0x1, 0xb, 0xb, 0x1, 0x80, 0x9, 0x5, 0x0, 0x1001, 0x52f, 0x4, 0xc0, 0xbe, 0x4, '\x00', 0x0, 0x6}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0x20003, 0xfffffff9, 0x0, [{}, {}, {}, {0x0, 0x35, 0x1}, {0x34, 0x6}, {0x0, 0x0, 0x6, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0x0, &(0x7f0000000180)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x24) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$inet(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000800)=@ethtool_per_queue_op={0x4b, 0x14, [0x3, 0x0, 0x5, 0x5, 0x5, 0x10001, 0x7, 0xc0, 0xc205, 0x0, 0x5, 0x1, 0xd7e3, 0xffff, 0x81, 0x2, 0x1, 0x6, 0x100, 0x2, 0x1, 0x7, 0x5, 0x3, 0x2, 0x308, 0x7fff, 0x3fff8000, 0x1, 0x0, 0x6, 0x8adf, 0x101, 0x8, 0x7, 0x371b46f3, 0x1, 0x80000000, 0xffffe8c0, 0x1, 0xfffffe15, 0x401, 0x800, 0x4, 0x2, 0x4, 0x3, 0x3ff, 0x7, 0x3, 0x8, 0x2, 0x8, 0x7fffffff, 0x0, 0xffffff31, 0x8, 0x1ff, 0x1, 0x2, 0x8, 0x8, 0x2, 0xfffffffd, 0xfffffffa, 0xa, 0xb96d, 0x7, 0x2, 0x6, 0x4, 0x26, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x7fff, 0x40, 0x5b, 0x57d5, 0x105, 0x8, 0x4, 0xffffffff, 0x1, 0x7, 0x7, 0x7f, 0xc6, 0x401, 0x9, 0xfffffff0, 0x8, 0x6, 0x3, 0x3ff, 0xcb, 0x3, 0x800, 0x5, 0xffffff81, 0xf0, 0x8, 0x9, 0x7f2, 0x46e7, 0x8, 0x2, 0x7, 0x8, 0x101, 0xc5, 0x2e5, 0x81, 0x2, 0x3, 0x7fffffff, 0x7, 0x2, 0x5, 0x9, 0x20000000, 0xfffffadb, 0x0, 0xffffffff]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000080)=""/120) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, &(0x7f0000000100)=0x9c) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r10 = dup(r8) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="3b00000000020004000001c000"]) r11 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r11, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000002740)=""/4097, 0x1001}, {&(0x7f0000000440)=""/242, 0xf2}], 0x3}, 0x9}], 0x1, 0x10000, 0x0) 1m58.060239116s ago: executing program 0 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000201000010800"/20, @ANYRES32=0x0, @ANYBLOB="01000000042004001c002b8018000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) 1m57.965787422s ago: executing program 2 (id=399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000001c0)={0xffffffff, 0x6, 0x4, 0x7, 0x8c, 0xf7}) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$rds(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) recvmmsg(r1, &(0x7f000000a280)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x2000, 0x0) 1m57.807700047s ago: executing program 0 (id=400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xd96d, 0x101, 0x0, 0x4000, 0x0, 0x0}, 0x0, 0x0) setuid(r2) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000000)="f3", 0x1}], 0x5, 0x0, 0xffa6}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000000100)="c7d752491ac61dff0481895e262db2b03fe64babe5602096de77aa7eff43d89929", 0x21}], 0x3}}], 0x4, 0x4048841) 1m57.765785742s ago: executing program 0 (id=401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) fsmount(r5, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x5, @pix_mp={0x3, 0x1, 0x31303553, 0x0, 0x0, [{0x80, 0xc1}, {0x7, 0x7}, {0x8, 0xfffffe01}, {0x6, 0x80000000}, {0x0, 0x8}, {0x9197, 0x400}, {0x81, 0x3}, {0x6, 0x1}], 0x18, 0x3, 0x2, 0x2, 0x7}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, 0x0) close(r9) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1m54.008274211s ago: executing program 3 (id=402): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0xffffffff, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000008, 0x10, r3, 0xa8800000) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r4) r5 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x37d, 0x0) getdents64(r7, 0x0, 0xffffffffffffff3a) umount2(&(0x7f0000000000)='.\x00', 0x9) r8 = syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000000140)={0x14, &(0x7f0000000200)={0x60, 0x3, 0xb2, {0xb2, 0x6, "5f8e642810515d957c2d4dabfd7743676fe57ddc04f0df8b85746cff79fbcfea17655de2a8e3cbd6e245e549b0af84ee926d1f400edf231a9dadf9179f3a6bd5d33f8cb6e998d40fba28ef1ac2df1fc17b4ce8bd4514f6ffd4271eb01fab432a1b0f702ec3af8dabf0b1e319e806cbd89f745692127360382df2a08916a348c3daf28970062a895de13ee24bffa08ce7d14f43686fe1651b12f318cb2249483d3781f5b732666fa2661c0525a0306b26"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xd, 0x2d, "e81b4b81ef06deec55d145019b9ecf4580473715fe27fe1c9381431e48606e28332cd383b79c362942943fe660"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x81, 0x2, '?8'}, &(0x7f0000000380)={0x20, 0x82, 0x1, '\a'}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '\\'}, &(0x7f0000000400)={0x20, 0x84, 0x2, '@e'}, &(0x7f0000000440)={0x20, 0x85, 0x3, '0?9'}}) 1m53.887863066s ago: executing program 2 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 1m49.743871034s ago: executing program 1 (id=404): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x0, 0x0, {0x0, 0x0, 0x2000000}, {0x0, 0x2}, {}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613}) 1m49.531313117s ago: executing program 2 (id=405): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000140)=[{r0, 0x19f23}], 0x1, 0x2000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r1, &(0x7f0000000480)="1d80c92bc609881ade0c3bb4d4797233ee911d50fbdf12a30d7a48b2c5b3bf1d3a86f9c7399de5050f5d7c2d6052a6b2cdff59fbb22b70502443011fd801251bcef8f165533aacd8c7556dd502000000000000002944de604d849a1e3b00905b0d22e9cb30b83f38a2aa8b00000000", 0x6f, 0x4c080, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x19575c, 0x3029fa}) close_range(r2, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)='}', 0x1) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1m47.023592533s ago: executing program 1 (id=406): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000580)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="16d05320df81ce712911cdf69f1ae4ec6ad3514d4a89f5286bd6295b1255fc22eaa59285c3a489c7", 0x28}], 0x1, 0x0, 0x0, 0x8040}}], 0x1, 0x2400000c) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xfdff, 0x12f700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000007c0)={r4, 0xdfd, {0x2a00, 0x80010000, 0x0, 0x0, 0xe, 0x0, 0x12, 0xd, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x3, 0x2]}}) syz_clone3(&(0x7f0000000740)={0x100000, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000240), {0x11}, &(0x7f0000000280)=""/54, 0x36, &(0x7f0000000600)=""/226, &(0x7f0000000700)=[0x0], 0x1, {r4}}, 0x58) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r7, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r9, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000200)=0x6) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000001c0)=0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 32 (id=395): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r2, 0x8000000000000000) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x28de, 0x1205, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xb0, 0xff, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xfff, 0xbc, 0x1, {0x22, 0x2f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0xc, 0x4, 0xdd}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xbf, 0x5, 0xd8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xfb, 0x9, 0x3a, 0x8, 0x53}, 0x25, &(0x7f00000001c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x9, 0xff07, 0x8, [0x3f30, 0xff3f0f, 0xc0c0, 0xc000, 0xcf]}]}, 0x2, [{0x7e, &(0x7f00000002c0)=@string={0x7e, 0x3, "004cb9482d57224c89d35c0746afc9f427f93067f031d1bd5b1a33949fd47bdafa1688135fdbf400c8d03f82aded3bf3d728473bed6f6e1720f92d864f1f25f3756ca4829b46187149188c183264b62a1a9bdd557b9899cef5a582b8d1de089db576d0effed48a8530afeb7f90baa0764813f64c1e9c86f517431303"}}, {0xa7, &(0x7f00000003c0)=@string={0xa7, 0x3, "1ab585faa716c37659378cbf681d4451de70394c2d433034fdce3ecbdb1507afd2c0fc50463fb29d86ceb9ad8d3dd3ac478e4e56da49af342c6f5550036f9cd8b9cf8ab49578cfd576cd912dfc86ce1c1e7eb260993eab8b4b46b36adcd7fcdf7a378cee85d61be5b7d85ad2a813d844f2c6101708fe2092ca32f2ad12aa150fe971352951399b3106057deecc09770227deb522820d7ba0a2d448ca9ec4261a92824f3604"}}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) kernel console output (not intermixed with test programs): usb 5-1: SerialNumber: syz [ 82.547089][ T5959] FAULT_INJECTION: forcing a failure. [ 82.547089][ T5959] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.560607][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.4.14 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 82.560632][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.560653][ T5959] Call Trace: [ 82.560660][ T5959] [ 82.560667][ T5959] dump_stack_lvl+0x241/0x360 [ 82.560709][ T5959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.560733][ T5959] ? __pfx__printk+0x10/0x10 [ 82.560767][ T5959] should_fail_ex+0x424/0x570 [ 82.560792][ T5959] _copy_to_user+0x31/0xb0 [ 82.560818][ T5959] simple_read_from_buffer+0xc4/0x170 [ 82.560846][ T5959] proc_fail_nth_read+0x1ef/0x260 [ 82.560866][ T5959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.560887][ T5959] ? rw_verify_area+0x246/0x630 [ 82.560905][ T5959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.560924][ T5959] vfs_read+0x21f/0xb90 [ 82.560948][ T5959] ? __pfx___mutex_lock+0x10/0x10 [ 82.560969][ T5959] ? __pfx_vfs_read+0x10/0x10 [ 82.560991][ T5959] ? __fget_files+0x2a/0x420 [ 82.561009][ T5959] ? __fget_files+0x39d/0x420 [ 82.561022][ T5959] ? __fget_files+0x2a/0x420 [ 82.561047][ T5959] ksys_read+0x19d/0x2d0 [ 82.561068][ T5959] ? __pfx_ksys_read+0x10/0x10 [ 82.561093][ T5959] ? do_syscall_64+0xb6/0x230 [ 82.561116][ T5959] do_syscall_64+0xf3/0x230 [ 82.561136][ T5959] ? clear_bhb_loop+0x45/0xa0 [ 82.561157][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.561172][ T5959] RIP: 0033:0x7f6baa38bb7c [ 82.561192][ T5959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.561205][ T5959] RSP: 002b:00007f6bab2c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.561223][ T5959] RAX: ffffffffffffffda RBX: 00007f6baa5a5fa0 RCX: 00007f6baa38bb7c [ 82.561235][ T5959] RDX: 000000000000000f RSI: 00007f6bab2c80a0 RDI: 0000000000000004 [ 82.561245][ T5959] RBP: 00007f6bab2c8090 R08: 0000000000000000 R09: 0000000000000000 [ 82.561255][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.561265][ T5959] R13: 0000000000000000 R14: 00007f6baa5a5fa0 R15: 00007f6baa6cfa28 [ 82.561294][ T5959] [ 82.563105][ T5946] usb 4-1: USB disconnect, device number 2 [ 82.625183][ T5889] usbhid 5-1:1.0: can't add hid device: -71 [ 82.798616][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.893183][ T5889] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 82.928540][ T5889] usb 5-1: USB disconnect, device number 2 [ 83.021581][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 83.029644][ T5874] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.037539][ T5874] usb 1-1: can't read configurations, error -61 [ 83.113764][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 83.127283][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 83.142855][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 83.208146][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.216676][ T917] usb 2-1: USB disconnect, device number 3 [ 83.294809][ T5979] Zero length message leads to an empty skb [ 83.393274][ T5888] usb 3-1: USB disconnect, device number 2 [ 83.408037][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 83.434687][ T5874] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.461935][ T5874] usb 1-1: can't read configurations, error -61 [ 83.504800][ T5874] usb usb1-port1: attempt power cycle [ 83.526761][ T5983] netlink: 'syz.3.22': attribute type 12 has an invalid length. [ 83.725048][ T5987] netlink: 'syz.2.23': attribute type 21 has an invalid length. [ 83.734904][ T5987] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 83.778069][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.804788][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.888905][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.919521][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 83.929823][ T5874] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.930084][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 83.942234][ T5874] usb 1-1: can't read configurations, error -61 [ 83.965716][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.977796][ T9] usb 4-1: config 0 has no interface number 0 [ 83.988491][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.006809][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 84.027093][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.037292][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 84.086673][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 84.096102][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.098034][ T5874] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.111756][ T9] usb 4-1: Product: syz [ 84.111779][ T9] usb 4-1: Manufacturer: syz [ 84.111792][ T9] usb 4-1: SerialNumber: syz [ 84.117156][ T9] usb 4-1: config 0 descriptor?? [ 84.134887][ T5993] vivid-003: disconnect [ 84.158031][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 84.165313][ T5887] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 84.176640][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.184406][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.204481][ T5887] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 84.222334][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 84.232873][ T5887] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.240327][ T5874] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 84.308987][ T5874] usb 1-1: can't read configurations, error -61 [ 84.316239][ T5874] usb usb1-port1: unable to enumerate USB device [ 84.336849][ T5887] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.353933][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.402754][ T5887] usbtmc 3-1:16.0: bulk endpoints not found [ 84.408236][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.422145][ T5997] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.449759][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.606887][ T5987] loop9: detected capacity change from 0 to 7 [ 84.645570][ T5987] ldm_validate_partition_table(): Disk read failed. [ 84.665463][ T5987] Dev loop9: unable to read RDB block 0 [ 84.673314][ T5987] loop9: unable to read partition table [ 84.689480][ T5987] loop9: partition table beyond EOD, truncated [ 84.695909][ T5987] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 84.835764][ T5990] vivid-003: reconnect [ 84.955812][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 85.006902][ T9] usb 4-1: USB disconnect, device number 3 [ 85.212622][ T6009] netlink: 'syz.4.30': attribute type 21 has an invalid length. [ 85.225222][ T6009] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 85.488320][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.514099][ T6017] FAULT_INJECTION: forcing a failure. [ 85.514099][ T6017] name failslab, interval 1, probability 0, space 0, times 1 [ 85.527741][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: syz.0.35 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 85.527765][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.527774][ T6017] Call Trace: [ 85.527780][ T6017] [ 85.527787][ T6017] dump_stack_lvl+0x241/0x360 [ 85.527817][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.527836][ T6017] ? __pfx__printk+0x10/0x10 [ 85.527861][ T6017] ? __pfx___might_resched+0x10/0x10 [ 85.527885][ T6017] should_fail_ex+0x424/0x570 [ 85.527911][ T6017] should_failslab+0xac/0x100 [ 85.527936][ T6017] __kmalloc_noprof+0xdf/0x4d0 [ 85.527956][ T6017] ? tomoyo_encode+0x26f/0x540 [ 85.527984][ T6017] tomoyo_encode+0x26f/0x540 [ 85.528012][ T6017] tomoyo_realpath_from_path+0x59e/0x5e0 [ 85.528048][ T6017] tomoyo_path_number_perm+0x245/0x790 [ 85.528073][ T6017] ? tomoyo_path_number_perm+0x215/0x790 [ 85.528097][ T6017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.528123][ T6017] ? ksys_write+0x24e/0x2d0 [ 85.528147][ T6017] ? __lock_acquire+0xad5/0xd80 [ 85.528191][ T6017] ? __fget_files+0x2a/0x420 [ 85.528206][ T6017] ? __fget_files+0x2a/0x420 [ 85.528225][ T6017] ? __fget_files+0x2a/0x420 [ 85.528245][ T6017] security_file_ioctl+0xc6/0x2a0 [ 85.528268][ T6017] __se_sys_ioctl+0x46/0x160 [ 85.528291][ T6017] do_syscall_64+0xf3/0x230 [ 85.528313][ T6017] ? clear_bhb_loop+0x45/0xa0 [ 85.528333][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.528349][ T6017] RIP: 0033:0x7f60fb78d169 [ 85.528365][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.528377][ T6017] RSP: 002b:00007f60fc5a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.528395][ T6017] RAX: ffffffffffffffda RBX: 00007f60fb9a5fa0 RCX: 00007f60fb78d169 [ 85.528406][ T6017] RDX: 0000200000000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 85.528416][ T6017] RBP: 00007f60fc5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 85.528426][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.528436][ T6017] R13: 0000000000000000 R14: 00007f60fb9a5fa0 R15: 00007f60fbacfa28 [ 85.528464][ T6017] [ 85.752321][ T6017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.838005][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 85.845712][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 85.854082][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 85.864812][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.879244][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.888369][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.902425][ T9] usbtmc 5-1:16.0: bulk endpoints not found [ 86.076514][ T6027] netlink: 'syz.0.38': attribute type 21 has an invalid length. [ 86.085584][ T6027] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 86.123522][ T6028] netlink: 'syz.3.39': attribute type 21 has an invalid length. [ 86.131484][ T6028] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 86.338093][ T5874] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.388107][ T917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.498036][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 86.504669][ T5874] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 86.513882][ T5874] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 86.524998][ T5874] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.538178][ T917] usb 4-1: Using ep0 maxpacket: 8 [ 86.543437][ T5874] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.553030][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.562994][ T917] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 86.574611][ T917] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 86.591455][ T917] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.605949][ T5874] usbtmc 1-1:16.0: bulk endpoints not found [ 86.612433][ T917] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.612446][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.632062][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.647710][ T917] usbtmc 4-1:16.0: bulk endpoints not found [ 86.694251][ T5946] usb 3-1: USB disconnect, device number 3 [ 86.779313][ T6035] bridge0: port 3(vlan0) entered blocking state [ 86.786563][ T6035] bridge0: port 3(vlan0) entered disabled state [ 86.794081][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 86.804860][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.815240][ T6035] vlan0: entered allmulticast mode [ 86.820747][ T6035] batadv0: entered allmulticast mode [ 86.826323][ T9] usb 2-1: Product: syz [ 86.830806][ T9] usb 2-1: Manufacturer: syz [ 86.837542][ T9] usb 2-1: SerialNumber: syz [ 86.842684][ T6035] vlan0: entered promiscuous mode [ 86.848701][ T6035] batadv0: entered promiscuous mode [ 86.855309][ T9] usb 2-1: config 0 descriptor?? [ 86.863472][ T6035] bridge0: port 3(vlan0) entered blocking state [ 86.870030][ T6035] bridge0: port 3(vlan0) entered forwarding state [ 86.879842][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 004 [ 86.941025][ T24] cfg80211: failed to load regulatory.db [ 87.065806][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.077259][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.089334][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.102037][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.113006][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.123470][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.135268][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.147195][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.158337][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.184182][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.197342][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'. [ 87.222868][ T9] (null): failure reading functionality [ 87.257770][ T9] i2c i2c-1: failure reading functionality [ 87.269264][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 87.304753][ T9] usb 2-1: USB disconnect, device number 4 [ 87.947465][ T6051] netlink: 'syz.2.46': attribute type 21 has an invalid length. [ 88.180949][ T917] usb 5-1: USB disconnect, device number 3 [ 88.218452][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.303904][ T6054] xfrm0: entered promiscuous mode [ 88.310975][ T6054] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 88.390787][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 88.401557][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 88.422417][ T24] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.444717][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.467822][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.477635][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.494624][ T24] usbtmc 3-1:16.0: bulk endpoints not found [ 88.728007][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 88.899819][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 88.909014][ T9] usb 2-1: config 0 has no interface number 0 [ 88.916199][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.927748][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 88.943334][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 88.956169][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 88.970591][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 88.981877][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.995012][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.012145][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.030189][ T5887] usb 1-1: USB disconnect, device number 6 [ 89.036302][ T6052] delete_channel: no stack [ 89.104966][ T9] usb 2-1: config 0 descriptor?? [ 89.129752][ T24] usb 4-1: USB disconnect, device number 4 [ 89.143867][ T6056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.162204][ T6056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.229114][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 89.393407][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.415000][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.473764][ T24] usb 2-1: USB disconnect, device number 5 [ 89.507321][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 89.628187][ T5887] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 89.821185][ T5887] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.837130][ T5887] usb 5-1: config 179 has no interface number 0 [ 89.851523][ T5887] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 89.867870][ T5887] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 89.887795][ T5887] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 89.902955][ T5887] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 89.915311][ T5887] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.933112][ T5887] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.949473][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.970420][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.989640][ T6062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 90.010802][ T5887] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 90.038777][ T5887] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 90.150241][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.166098][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.192730][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.211560][ T5890] usb 5-1: USB disconnect, device number 4 [ 90.235316][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.258058][ T6074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.276380][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.308672][ T5946] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.482300][ T5890] usb 4-1: USB disconnect, device number 5 [ 90.496008][ T5946] usb 2-1: config 0 has no interfaces? [ 90.521536][ T5946] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 90.535662][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.553369][ T5946] usb 2-1: Product: syz [ 90.563470][ T5946] usb 2-1: Manufacturer: syz [ 90.573557][ T5946] usb 2-1: SerialNumber: syz [ 90.611644][ T5946] usb 2-1: config 0 descriptor?? [ 90.637532][ T6084] validate_nla: 1 callbacks suppressed [ 90.637547][ T6084] netlink: 'syz.0.58': attribute type 21 has an invalid length. [ 90.657599][ T6084] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 90.824328][ T30] audit: type=1326 audit(1744176436.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.4.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6baa38d169 code=0x0 [ 90.902474][ T5890] usb 3-1: USB disconnect, device number 4 [ 90.908050][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.075670][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 91.147382][ T5888] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 91.155775][ T5888] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 91.166640][ T5888] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.429569][ T5888] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.439458][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.466906][ T5888] usbtmc 1-1:16.0: bulk endpoints not found [ 91.529785][ T6101] QAT: Device 127 not found [ 91.543235][ T6101] bridge1: entered allmulticast mode [ 91.608277][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.704724][ T6084] loop9: detected capacity change from 0 to 7 [ 91.721827][ T6084] buffer_io_error: 18 callbacks suppressed [ 91.721841][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.768506][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 91.777420][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.797742][ T5890] usb 3-1: config 0 has no interfaces? [ 91.816923][ T5890] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 91.829838][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.838617][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.851377][ T5890] usb 3-1: Product: syz [ 91.855758][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.864612][ T5890] usb 3-1: Manufacturer: syz [ 91.872086][ T5890] usb 3-1: SerialNumber: syz [ 91.885055][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.899865][ T5890] usb 3-1: config 0 descriptor?? [ 91.924655][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.963828][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.994864][ T6084] ldm_validate_partition_table(): Disk read failed. [ 92.031906][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.065423][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.099714][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.107760][ T6084] Dev loop9: unable to read RDB block 0 [ 92.134773][ T6084] loop9: unable to read partition table [ 92.142469][ T6084] loop9: partition table beyond EOD, truncated [ 92.152205][ T6084] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 92.314533][ T6099] kvm: kvm [6098]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 92.335116][ T6120] netlink: 'syz.4.69': attribute type 3 has an invalid length. [ 92.371169][ T6122] process 'syz.4.70' launched './file0' with NULL argv: empty string added [ 92.402889][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 92.438742][ T6099] kvm: kvm [6098]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 92.583158][ T5946] usb 3-1: USB disconnect, device number 5 [ 92.618387][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.769916][ T24] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 92.782535][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.790187][ T24] usb 5-1: config 16 interface 0 has no altsetting 0 [ 92.797021][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 92.811391][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.843447][ T5888] usb 2-1: USB disconnect, device number 6 [ 92.970230][ T5874] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.988177][ T5874] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.009464][ T5874] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.021943][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.035442][ T6124] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 93.046195][ T24] usb 5-1: string descriptor 0 read error: -71 [ 93.056632][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 93.065967][ T5874] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.073876][ T24] imon 5-1:16.0: unable to initialize intf0, err -19 [ 93.089856][ T24] imon:imon_probe: failed to initialize context! [ 93.097211][ T24] imon 5-1:16.0: unable to register, err -19 [ 93.132337][ T24] usb 5-1: USB disconnect, device number 5 [ 93.283243][ T5874] usb 4-1: USB disconnect, device number 6 [ 93.312234][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 93.337091][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 93.618062][ T5874] usb 1-1: USB disconnect, device number 7 [ 93.627715][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.808995][ T24] usb 2-1: device descriptor read/64, error -71 [ 93.908010][ T5946] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.068020][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.080053][ T5946] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.108991][ T5946] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.128100][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.138155][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 94.145779][ T5946] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 94.172161][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.192382][ T6158] FAULT_INJECTION: forcing a failure. [ 94.192382][ T6158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.207629][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.2.84 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 94.207652][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.207660][ T6158] Call Trace: [ 94.207667][ T6158] [ 94.207674][ T6158] dump_stack_lvl+0x241/0x360 [ 94.207702][ T6158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.207725][ T6158] ? __pfx__printk+0x10/0x10 [ 94.207757][ T6158] should_fail_ex+0x424/0x570 [ 94.207778][ T6158] _copy_from_user+0x2d/0xb0 [ 94.207800][ T6158] input_event_from_user+0x211/0x510 [ 94.207822][ T6158] ? __pfx_input_event_from_user+0x10/0x10 [ 94.207842][ T6158] ? input_inject_event+0xd9/0x360 [ 94.207859][ T6158] evdev_write+0x4c4/0x7d0 [ 94.207874][ T6158] ? __pfx_evdev_write+0x10/0x10 [ 94.207889][ T6158] ? bpf_lsm_file_permission+0x9/0x10 [ 94.207907][ T6158] ? rw_verify_area+0x246/0x630 [ 94.207923][ T6158] ? __pfx_evdev_write+0x10/0x10 [ 94.207938][ T6158] vfs_write+0x2bc/0xd10 [ 94.207967][ T6158] ? __pfx_vfs_write+0x10/0x10 [ 94.207985][ T6158] ? __fget_files+0x2a/0x420 [ 94.208000][ T6158] ? __fget_files+0x2a/0x420 [ 94.208017][ T6158] ? __fget_files+0x39d/0x420 [ 94.208030][ T6158] ? __fget_files+0x2a/0x420 [ 94.208054][ T6158] ksys_write+0x19d/0x2d0 [ 94.208074][ T6158] ? __pfx_ksys_write+0x10/0x10 [ 94.208096][ T6158] ? do_syscall_64+0xb6/0x230 [ 94.208116][ T6158] do_syscall_64+0xf3/0x230 [ 94.208133][ T6158] ? clear_bhb_loop+0x45/0xa0 [ 94.208150][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.208166][ T6158] RIP: 0033:0x7f932578d169 [ 94.208181][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.208193][ T6158] RSP: 002b:00007f932661f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.208210][ T6158] RAX: ffffffffffffffda RBX: 00007f93259a5fa0 RCX: 00007f932578d169 [ 94.208220][ T6158] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 94.208229][ T6158] RBP: 00007f932661f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.208238][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.208246][ T6158] R13: 0000000000000000 R14: 00007f93259a5fa0 R15: 00007f9325acfa28 [ 94.208271][ T6158] [ 94.431576][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.437717][ T24] usb 2-1: device descriptor read/64, error -71 [ 94.439693][ T5946] usb 5-1: config 0 descriptor?? [ 94.548259][ T24] usb usb2-port1: attempt power cycle [ 94.648639][ T5874] usb 1-1: config 0 has no interfaces? [ 94.665307][ T5874] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 94.674521][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.769080][ T5874] usb 1-1: Product: syz [ 94.773287][ T5874] usb 1-1: Manufacturer: syz [ 94.787112][ T6165] loop8: detected capacity change from 0 to 1 [ 94.799052][ T6165] Dev loop8: unable to read RDB block 1 [ 94.804840][ T6165] loop8: unable to read partition table [ 94.825029][ T6165] loop8: partition table beyond EOD, truncated [ 94.832516][ T6165] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 94.844975][ T5874] usb 1-1: SerialNumber: syz [ 94.858102][ T5874] usb 1-1: config 0 descriptor?? [ 94.898332][ T6166] futex_wake_op: syz.3.83 tries to shift op by -33; fix this program [ 94.908157][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 94.937937][ T24] usb 2-1: device descriptor read/8, error -71 [ 94.972551][ T6165] netdevsim netdevsim3: Direct firmware load for . [ 94.972551][ T6165] failed with error -2 [ 94.991126][ T6165] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 94.991126][ T6165] [ 95.016817][ T5946] ryos 0003:1E7D:3138.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 95.103840][ T6141] xt_hashlimit: max too large, truncated to 1048576 [ 95.188418][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.300941][ T24] usb 2-1: device descriptor read/8, error -71 [ 95.402551][ T5946] usb 5-1: USB disconnect, device number 6 [ 95.422721][ T24] usb usb2-port1: unable to enumerate USB device [ 95.724088][ T6179] loop2: detected capacity change from 0 to 7 [ 95.733723][ T6179] Dev loop2: unable to read RDB block 7 [ 95.739485][ T6179] loop2: unable to read partition table [ 95.745340][ T6179] loop2: partition table beyond EOD, truncated [ 95.751618][ T6179] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.778091][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.948463][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 95.956064][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.968535][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.982935][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.995233][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.008304][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.021016][ T24] usb 3-1: Product: syz [ 96.028596][ T24] usb 3-1: Manufacturer: syz [ 96.048026][ T24] usb 3-1: SerialNumber: syz [ 96.132556][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.141477][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.378150][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.446882][ T6195] FAULT_INJECTION: forcing a failure. [ 96.446882][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 96.461806][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.1.95 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 96.461830][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.461839][ T6195] Call Trace: [ 96.461847][ T6195] [ 96.461854][ T6195] dump_stack_lvl+0x241/0x360 [ 96.461886][ T6195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.461913][ T6195] ? __pfx__printk+0x10/0x10 [ 96.461942][ T6195] ? __pfx___might_resched+0x10/0x10 [ 96.461968][ T6195] should_fail_ex+0x424/0x570 [ 96.461992][ T6195] should_failslab+0xac/0x100 [ 96.462017][ T6195] __kmalloc_noprof+0xdf/0x4d0 [ 96.462040][ T6195] ? security_sk_alloc+0x53/0x360 [ 96.462063][ T6195] security_sk_alloc+0x53/0x360 [ 96.462084][ T6195] sk_prot_alloc+0xfa/0x210 [ 96.462107][ T6195] sk_alloc+0x3e/0x370 [ 96.462129][ T6195] inet_create+0x648/0xea0 [ 96.462148][ T6195] ? inet_create+0x94/0xea0 [ 96.462173][ T6195] __sock_create+0x4c0/0xa30 [ 96.462207][ T6195] start_sync_thread+0xe49/0x2d60 [ 96.462255][ T6195] ? __pfx_sync_thread_backup+0x10/0x10 [ 96.462287][ T6195] ? __pfx_start_sync_thread+0x10/0x10 [ 96.462340][ T6195] ? read_word_at_a_time+0xe/0x20 [ 96.462361][ T6195] ? sized_strscpy+0x9a/0x2b0 [ 96.462388][ T6195] do_ip_vs_set_ctl+0x48e/0xe50 [ 96.462420][ T6195] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 96.462463][ T6195] ? __mutex_unlock_slowpath+0x229/0x800 [ 96.462494][ T6195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.462512][ T6195] ? aa_sk_perm+0x96f/0xac0 [ 96.462540][ T6195] ? ksys_write+0x24e/0x2d0 [ 96.462559][ T6195] ? __pfx_aa_sk_perm+0x10/0x10 [ 96.462584][ T6195] nf_setsockopt+0x295/0x2c0 [ 96.462614][ T6195] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 96.462637][ T6195] do_sock_setsockopt+0x3b1/0x710 [ 96.462661][ T6195] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 96.462675][ T6195] ? __fget_files+0x2a/0x420 [ 96.462696][ T6195] ? __fget_files+0x39d/0x420 [ 96.462710][ T6195] ? __fget_files+0x2a/0x420 [ 96.462734][ T6195] __x64_sys_setsockopt+0x1ee/0x280 [ 96.462759][ T6195] do_syscall_64+0xf3/0x230 [ 96.462780][ T6195] ? clear_bhb_loop+0x45/0xa0 [ 96.462801][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.462817][ T6195] RIP: 0033:0x7fd1b238d169 [ 96.462832][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.462844][ T6195] RSP: 002b:00007fd1b3174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.462863][ T6195] RAX: ffffffffffffffda RBX: 00007fd1b25a5fa0 RCX: 00007fd1b238d169 [ 96.462874][ T6195] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 96.462884][ T6195] RBP: 00007fd1b3174090 R08: 0000000000000018 R09: 0000000000000000 [ 96.462894][ T6195] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000001 [ 96.462904][ T6195] R13: 0000000000000000 R14: 00007fd1b25a5fa0 R15: 00007fd1b26cfa28 [ 96.462926][ T6195] [ 96.464259][ T6195] IPVS: Error during creation of socket; terminating [ 96.607968][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 96.619383][ T24] usb 3-1: 0:2 : does not exist [ 96.630650][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 96.816570][ T9] usb 5-1: config 2 has an invalid interface number: 189 but max is 0 [ 96.848091][ T9] usb 5-1: config 2 has no interface number 0 [ 96.855038][ T9] usb 5-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 96.871274][ T9] usb 5-1: config 2 interface 189 has no altsetting 0 [ 96.873384][ T5888] usb 1-1: USB disconnect, device number 8 [ 96.898770][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 96.911661][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.941818][ T9] usb 5-1: Product: syz [ 96.956026][ T9] usb 5-1: Manufacturer: syz [ 97.056721][ T9] usb 5-1: SerialNumber: syz [ 97.348134][ T5888] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 97.533053][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 97.546166][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.578016][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.605928][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.619481][ T5888] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.628998][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.665461][ T24] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 97.677292][ T6209] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 97.687314][ T5888] usb 1-1: config 0 descriptor?? [ 97.696096][ T6209] macsec1: entered promiscuous mode [ 97.711198][ T6209] macsec1: entered allmulticast mode [ 97.716579][ T6209] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 97.730304][ T24] usb 3-1: USB disconnect, device number 6 [ 97.738290][ T9] usb 5-1: unknown interface protocol 0x3b, assuming v1 [ 97.758306][ T9] usb 5-1: 189:2 : does not exist [ 97.780377][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.101'. [ 97.826525][ T9] usb 5-1: USB disconnect, device number 7 [ 97.932338][ T6220] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.969679][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 98.069735][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.114154][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.189/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 98.181044][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 98.192777][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 98.213009][ T6227] capability: warning: `syz.1.106' uses deprecated v2 capabilities in a way that may be insecure [ 98.235706][ T5888] usb 1-1: USB disconnect, device number 9 [ 98.378083][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.548053][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 98.561047][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.574032][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.585999][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 98.596097][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.607782][ T9] usb 5-1: config 0 descriptor?? [ 98.922006][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 98.948181][ T917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.038461][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 99.041391][ T9] kye 0003:0458:5016.0002: control desc unexpectedly large [ 99.060594][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0002/input/input6 [ 99.147467][ T6257] netlink: 830 bytes leftover after parsing attributes in process `syz.3.118'. [ 99.156829][ T6257] bond_slave_0: entered promiscuous mode [ 99.162771][ T6257] bond_slave_1: entered promiscuous mode [ 99.220972][ T917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.236391][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.247494][ T917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.247847][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.288260][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 99.292707][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0002/input/input7 [ 99.326956][ T917] usb 3-1: config 1 has no interface number 0 [ 99.335654][ T5888] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.345454][ T917] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.359014][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.371739][ T917] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 99.414546][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.429073][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.120'. [ 99.451685][ T9] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 99.453486][ T917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.495399][ T5888] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.507172][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.518030][ T5946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.530041][ T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.530535][ T9] usb 5-1: USB disconnect, device number 8 [ 99.566966][ T5888] usb 1-1: Product: syz [ 99.578103][ T917] usb 3-1: Product: syz [ 99.582355][ T5888] usb 1-1: Manufacturer: syz [ 99.590115][ T917] usb 3-1: Manufacturer: syz [ 99.602600][ T5888] usb 1-1: SerialNumber: syz [ 99.610108][ T917] usb 3-1: SerialNumber: syz [ 99.678373][ T5946] usb 4-1: device descriptor read/64, error -71 [ 99.836888][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.848505][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.998098][ T5946] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.129123][ T5888] usb 1-1: 0:2 : does not exist [ 100.151359][ T5946] usb 4-1: device descriptor read/64, error -71 [ 100.279407][ T5946] usb usb4-port1: attempt power cycle [ 100.295907][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.342151][ T6263] FAULT_INJECTION: forcing a failure. [ 100.342151][ T6263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.355881][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.4.121 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 100.355914][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.355923][ T6263] Call Trace: [ 100.355930][ T6263] [ 100.355937][ T6263] dump_stack_lvl+0x241/0x360 [ 100.355968][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.355992][ T6263] ? __pfx__printk+0x10/0x10 [ 100.356027][ T6263] should_fail_ex+0x424/0x570 [ 100.356050][ T6263] _copy_from_user+0x2d/0xb0 [ 100.356074][ T6263] copy_msghdr_from_user+0xb3/0x580 [ 100.356103][ T6263] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.356130][ T6263] ? kasan_check_range+0x94/0x2a0 [ 100.356161][ T6263] __sys_sendmsg+0x20a/0x360 [ 100.356184][ T6263] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.356253][ T6263] ? do_syscall_64+0xb6/0x230 [ 100.356277][ T6263] do_syscall_64+0xf3/0x230 [ 100.356297][ T6263] ? clear_bhb_loop+0x45/0xa0 [ 100.356318][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.356333][ T6263] RIP: 0033:0x7f6baa38d169 [ 100.356349][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.356362][ T6263] RSP: 002b:00007f6bab2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.356381][ T6263] RAX: ffffffffffffffda RBX: 00007f6baa5a6080 RCX: 00007f6baa38d169 [ 100.356392][ T6263] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 100.356403][ T6263] RBP: 00007f6bab2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.356413][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.356423][ T6263] R13: 0000000000000000 R14: 00007f6baa5a6080 R15: 00007f6baa6cfa28 [ 100.356449][ T6263] [ 100.408500][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.636302][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 100.648567][ T5946] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 100.662483][ T917] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 100.686162][ T917] cdc_ncm 3-1:1.1: bind() failure [ 100.713712][ T5946] usb 4-1: device descriptor read/8, error -71 [ 100.749736][ T917] usb 3-1: USB disconnect, device number 7 [ 100.785712][ T5888] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 100.959922][ T5888] usb 1-1: USB disconnect, device number 10 [ 100.986782][ T5946] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 101.100616][ T5946] usb 4-1: device descriptor read/8, error -71 [ 101.228306][ T5946] usb usb4-port1: unable to enumerate USB device [ 101.247494][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.447284][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.463401][ T6274] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.126'. [ 101.483531][ T6273] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.126'. [ 101.506251][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.618324][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.666416][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.703132][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 101.718322][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.727689][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 101.757064][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.776127][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.800738][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.833103][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.862030][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.885380][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.911605][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.924860][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.936089][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.949782][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.961283][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.970920][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.989565][ T5946] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.043232][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.113936][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.128954][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.138723][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.148757][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.162408][ T6292] FAULT_INJECTION: forcing a failure. [ 102.162408][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.175849][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.188859][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 102.195628][ T5946] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 102.207218][ T6272] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.216685][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.0.134 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 102.216709][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.216720][ T6292] Call Trace: [ 102.216727][ T6292] [ 102.216733][ T6292] dump_stack_lvl+0x241/0x360 [ 102.216761][ T6292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.216786][ T6292] ? __pfx__printk+0x10/0x10 [ 102.216815][ T6292] should_fail_ex+0x424/0x570 [ 102.216837][ T6292] _copy_from_iter+0x211/0x1c70 [ 102.216866][ T6292] ? alloc_pages_mpol+0x4e6/0x690 [ 102.216895][ T6292] ? __pfx__copy_from_iter+0x10/0x10 [ 102.216923][ T6292] ? set_page_refcounted+0xa1/0x1e0 [ 102.216947][ T6292] ? alloc_pages_noprof+0x136/0x190 [ 102.216967][ T6292] ? page_copy_sane+0x46/0x260 [ 102.216990][ T6292] copy_page_from_iter+0x7a/0x100 [ 102.217015][ T6292] tun_get_user+0x1f6c/0x47c0 [ 102.217035][ T6292] ? tun_get_user+0x852/0x47c0 [ 102.217066][ T6292] ? aa_file_perm+0x139/0xf60 [ 102.217091][ T6292] ? aa_file_perm+0x3f1/0xf60 [ 102.217113][ T6292] ? __pfx_tun_get_user+0x10/0x10 [ 102.217146][ T6292] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 102.217182][ T6292] ? tun_get+0x1e/0x2f0 [ 102.217207][ T6292] ? tun_get+0x1e/0x2f0 [ 102.217229][ T6292] ? tun_get+0x27d/0x2f0 [ 102.217255][ T6292] tun_chr_write_iter+0x10d/0x1f0 [ 102.217283][ T6292] vfs_write+0x70f/0xd10 [ 102.217310][ T6292] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 102.217334][ T6292] ? __pfx_vfs_write+0x10/0x10 [ 102.217354][ T6292] ? __fget_files+0x2a/0x420 [ 102.217371][ T6292] ? __fget_files+0x2a/0x420 [ 102.217394][ T6292] ksys_write+0x19d/0x2d0 [ 102.217416][ T6292] ? __pfx_ksys_write+0x10/0x10 [ 102.217441][ T6292] ? do_syscall_64+0xb6/0x230 [ 102.217464][ T6292] do_syscall_64+0xf3/0x230 [ 102.217485][ T6292] ? clear_bhb_loop+0x45/0xa0 [ 102.217505][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.217520][ T6292] RIP: 0033:0x7f60fb78bc1f [ 102.217543][ T6292] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 102.217555][ T6292] RSP: 002b:00007f60fc5a5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 102.217574][ T6292] RAX: ffffffffffffffda RBX: 00007f60fb9a5fa0 RCX: 00007f60fb78bc1f [ 102.217586][ T6292] RDX: 000000000000004e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 102.217597][ T6292] RBP: 00007f60fc5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 102.217607][ T6292] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 102.217617][ T6292] R13: 0000000000000000 R14: 00007f60fb9a5fa0 R15: 00007f60fbacfa28 [ 102.217644][ T6292] [ 102.488055][ T917] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.488085][ T5946] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.516862][ T5946] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.525968][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.533999][ T5946] usb 3-1: Product: syz [ 102.538192][ T5946] usb 3-1: Manufacturer: syz [ 102.542784][ T5946] usb 3-1: SerialNumber: syz [ 102.641030][ T30] audit: type=1326 audit(1744176448.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6013b8d169 code=0x7ffc0000 [ 102.668801][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 102.690260][ T917] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.700457][ T30] audit: type=1326 audit(1744176448.170:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6013b8d169 code=0x7ffc0000 [ 102.723044][ T30] audit: type=1326 audit(1744176448.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6013b8d169 code=0x7ffc0000 [ 102.745835][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.749449][ T30] audit: type=1326 audit(1744176448.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6013b8d169 code=0x7ffc0000 [ 102.777873][ T30] audit: type=1326 audit(1744176448.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6013b8bad0 code=0x7ffc0000 [ 102.791758][ T6299] input: syz0 as /devices/virtual/input/input8 [ 102.799958][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.801786][ T30] audit: type=1326 audit(1744176448.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6013b8d169 code=0x7ffc0000 [ 102.823642][ T917] usb 5-1: Product: syz [ 102.834734][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.844045][ T30] audit: type=1326 audit(1744176448.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6013b8d169 code=0x7ffc0000 [ 102.867669][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.902132][ T917] usb 5-1: Manufacturer: syz [ 102.909178][ T30] audit: type=1326 audit(1744176448.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6013b8bad0 code=0x7ffc0000 [ 102.929962][ T917] usb 5-1: SerialNumber: syz [ 102.956274][ T30] audit: type=1326 audit(1744176448.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6013b8d169 code=0x7ffc0000 [ 102.978578][ T917] usb 5-1: config 0 descriptor?? [ 103.006541][ T30] audit: type=1326 audit(1744176448.220:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6295 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6013b8bdca code=0x7ffc0000 [ 103.050257][ T5946] usb 3-1: USB disconnect, device number 8 [ 103.178094][ T5874] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 103.368066][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 103.382713][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 103.397557][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.415449][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.451906][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.469037][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 103.495608][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.520189][ T5874] usb 4-1: Product: syz [ 103.534424][ T5874] usb 4-1: Manufacturer: syz [ 103.564412][ T5874] usb 4-1: SerialNumber: syz [ 103.575270][ T5874] usb 4-1: config 0 descriptor?? [ 103.591766][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.649231][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.692488][ T5890] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 103.712599][ T6322] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 103.730826][ T6322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.792933][ T5874] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.852677][ T5890] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 103.863281][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.873079][ T5890] usb 2-1: Product: syz [ 103.877486][ T5890] usb 2-1: Manufacturer: syz [ 103.884093][ T5890] usb 2-1: SerialNumber: syz [ 103.894877][ T5890] usb 2-1: config 0 descriptor?? [ 103.904313][ T5890] ch341 2-1:0.0: ch341-uart converter detected [ 104.021072][ T5874] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 104.032823][ T5874] usb 4-1: USB disconnect, device number 11 [ 104.351789][ T6331] kvm: pic: non byte write [ 104.575970][ T6337] delete_channel: no stack [ 104.677383][ T6339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.687287][ T6339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.868706][ T5888] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 104.940797][ T5887] usb 5-1: USB disconnect, device number 9 [ 105.019282][ T5888] usb 4-1: Invalid ep0 maxpacket: 32 [ 105.035107][ T6348] trusted_key: syz.4.152 sent an empty control message without MSG_MORE. [ 105.047436][ T6348] FAULT_INJECTION: forcing a failure. [ 105.047436][ T6348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.065593][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.4.152 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 105.065617][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.065627][ T6348] Call Trace: [ 105.065635][ T6348] [ 105.065642][ T6348] dump_stack_lvl+0x241/0x360 [ 105.065664][ T6348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.065678][ T6348] ? __pfx__printk+0x10/0x10 [ 105.065702][ T6348] should_fail_ex+0x424/0x570 [ 105.065723][ T6348] prepare_alloc_pages+0x220/0x610 [ 105.065751][ T6348] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 105.065774][ T6348] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.065805][ T6348] alloc_pages_mpol+0x339/0x690 [ 105.065822][ T6348] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 105.065836][ T6348] ? __kmalloc_noprof+0x2ae/0x4d0 [ 105.065849][ T6348] ? sock_kmalloc+0xd7/0x160 [ 105.065867][ T6348] alloc_pages_noprof+0x121/0x190 [ 105.065893][ T6348] af_alg_sendmsg+0x142b/0x24d0 [ 105.065914][ T6348] ? __pfx___might_resched+0x10/0x10 [ 105.065951][ T6348] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 105.065964][ T6348] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.065979][ T6348] ? aa_sock_msg_perm+0x91/0x160 [ 105.065992][ T6348] ? skcipher_sendmsg+0x28/0xf0 [ 105.066006][ T6348] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 105.066026][ T6348] __sock_sendmsg+0x221/0x270 [ 105.066049][ T6348] __sys_sendto+0x365/0x4c0 [ 105.066071][ T6348] ? __pfx___sys_sendto+0x10/0x10 [ 105.066101][ T6348] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 105.066135][ T6348] __x64_sys_sendto+0xde/0x100 [ 105.066146][ T6348] do_syscall_64+0xf3/0x230 [ 105.066162][ T6348] ? clear_bhb_loop+0x45/0xa0 [ 105.066174][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.066187][ T6348] RIP: 0033:0x7f6baa38effc [ 105.066202][ T6348] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 105.066215][ T6348] RSP: 002b:00007f6bab2c6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 105.066234][ T6348] RAX: ffffffffffffffda RBX: 00007f6bab2c6fc0 RCX: 00007f6baa38effc [ 105.066253][ T6348] RDX: 0000000000000020 RSI: 00007f6bab2c7010 RDI: 0000000000000004 [ 105.066263][ T6348] RBP: 0000000000000000 R08: 00007f6bab2c6f14 R09: 000000000000000c [ 105.066272][ T6348] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 105.066278][ T6348] R13: 00007f6bab2c6f68 R14: 00007f6bab2c7010 R15: 0000000000000000 [ 105.066293][ T6348] [ 105.368005][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.375694][ T5888] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 105.392537][ T5890] usb 2-1: failed to send control message: -110 [ 105.400401][ T5890] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 105.528668][ T5888] usb 4-1: Invalid ep0 maxpacket: 32 [ 105.537026][ T5888] usb usb4-port1: attempt power cycle [ 105.545207][ T5874] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.562045][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 105.571699][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.579904][ T5874] usb 3-1: Product: syz [ 105.584639][ T5874] usb 3-1: Manufacturer: syz [ 105.589537][ T5874] usb 3-1: SerialNumber: syz [ 105.808879][ T5874] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.878776][ T5888] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 105.908839][ T5888] usb 4-1: Invalid ep0 maxpacket: 32 [ 106.009449][ T5874] usb 3-1: USB disconnect, device number 9 [ 106.038196][ T5888] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 106.060287][ T5888] usb 4-1: Invalid ep0 maxpacket: 32 [ 106.066127][ T5888] usb usb4-port1: unable to enumerate USB device [ 106.219064][ T6340] usblp0: removed [ 106.513607][ T917] usb 2-1: USB disconnect, device number 11 [ 106.541975][ T917] ch341 2-1:0.0: device disconnected [ 106.579725][ T6359] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 106.734698][ T5946] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.804356][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 106.920517][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 106.944188][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.962460][ T5946] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 106.974458][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.006544][ T5946] usb 5-1: config 0 descriptor?? [ 107.238065][ T917] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 107.388100][ T917] usb 2-1: device descriptor read/64, error -71 [ 107.435057][ T6391] FAULT_INJECTION: forcing a failure. [ 107.435057][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.436846][ T5946] usbhid 5-1:0.0: can't add hid device: -71 [ 107.462357][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.0.168 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 107.462384][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.462393][ T6391] Call Trace: [ 107.462401][ T6391] [ 107.462408][ T6391] dump_stack_lvl+0x241/0x360 [ 107.462439][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.462463][ T6391] ? __pfx__printk+0x10/0x10 [ 107.462498][ T6391] should_fail_ex+0x424/0x570 [ 107.462522][ T6391] _copy_to_user+0x31/0xb0 [ 107.462548][ T6391] copy_to_sockptr_offset+0x60/0xc0 [ 107.462575][ T6391] sk_getsockopt+0x28ec/0x34f0 [ 107.462601][ T6391] ? __pfx_sk_getsockopt+0x10/0x10 [ 107.462632][ T6391] ? __lock_acquire+0xad5/0xd80 [ 107.462681][ T6391] do_sock_getsockopt+0x2a0/0x740 [ 107.462706][ T6391] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 107.462721][ T6391] ? __fget_files+0x2a/0x420 [ 107.462739][ T6391] ? __fget_files+0x39d/0x420 [ 107.462752][ T6391] ? __fget_files+0x2a/0x420 [ 107.462775][ T6391] __x64_sys_getsockopt+0x2a3/0x370 [ 107.462800][ T6391] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 107.462824][ T6391] ? do_syscall_64+0xb6/0x230 [ 107.462847][ T6391] do_syscall_64+0xf3/0x230 [ 107.462867][ T6391] ? clear_bhb_loop+0x45/0xa0 [ 107.462887][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.462902][ T6391] RIP: 0033:0x7f60fb78d169 [ 107.462918][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.462930][ T6391] RSP: 002b:00007f60fc5a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 107.462948][ T6391] RAX: ffffffffffffffda RBX: 00007f60fb9a5fa0 RCX: 00007f60fb78d169 [ 107.462968][ T6391] RDX: 000000000000004c RSI: 0000000000000001 RDI: 0000000000000003 [ 107.462978][ T6391] RBP: 00007f60fc5a5090 R08: 0000200000000240 R09: 0000000000000000 [ 107.462989][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.462999][ T6391] R13: 0000000000000000 R14: 00007f60fb9a5fa0 R15: 00007f60fbacfa28 [ 107.463027][ T6391] [ 107.466644][ T5946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.648193][ T917] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 107.785093][ T5946] usb 5-1: USB disconnect, device number 10 [ 107.868175][ T917] usb 2-1: device descriptor read/64, error -71 [ 108.008412][ T917] usb usb2-port1: attempt power cycle [ 108.088686][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 108.269773][ T5889] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 108.303212][ T5889] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 108.336661][ T5889] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 108.373592][ T5889] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 108.390323][ T917] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 108.408203][ T5887] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 108.415962][ T5889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 108.446783][ T917] usb 2-1: device descriptor read/8, error -71 [ 108.466834][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.598283][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 108.606359][ T5887] usb 5-1: config 1 interface 0 has no altsetting 0 [ 108.630230][ T5887] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.40 [ 108.664304][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.675726][ T6421] netlink: 'syz.2.179': attribute type 2 has an invalid length. [ 108.676089][ T5887] usb 5-1: Product: syz [ 108.695711][ T5887] usb 5-1: Manufacturer: syz [ 108.708410][ T5887] usb 5-1: SerialNumber: syz [ 108.738075][ T917] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 108.769124][ T5889] ath6kl: Failed to submit usb control message: -71 [ 108.775842][ T5889] ath6kl: unable to send the bmi data to the device: -71 [ 108.801972][ T917] usb 2-1: device descriptor read/8, error -71 [ 108.835588][ T5889] ath6kl: Unable to send get target info: -71 [ 108.869764][ T5889] ath6kl: Failed to init ath6kl core: -71 [ 108.890613][ T5889] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 108.918810][ T917] usb usb2-port1: unable to enumerate USB device [ 108.978226][ T5889] usb 4-1: USB disconnect, device number 16 [ 109.016607][ T5887] usbhid 5-1:1.0: can't add hid device: -71 [ 109.038956][ T5887] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 109.073830][ T5887] usb 5-1: USB disconnect, device number 11 [ 109.165942][ T6433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.183'. [ 109.341050][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 109.788894][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 109.988223][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 110.004092][ T5889] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 110.012515][ T5889] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 110.029767][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.046333][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.055675][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.074919][ T5889] usbtmc 4-1:16.0: bulk endpoints not found [ 110.108355][ T5887] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 110.275559][ T6458] loop9: detected capacity change from 0 to 7 [ 110.282095][ T6458] buffer_io_error: 4 callbacks suppressed [ 110.282106][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.324260][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.336031][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.346012][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.354034][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 110.368952][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.377703][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.386686][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 110.398598][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.410041][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.422117][ T6458] ldm_validate_partition_table(): Disk read failed. [ 110.431430][ T5887] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.449031][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.458744][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.470063][ T5887] usb 5-1: Product: syz [ 110.474429][ T5887] usb 5-1: Manufacturer: syz [ 110.486800][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.486837][ T5887] usb 5-1: SerialNumber: syz [ 110.532484][ T6458] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.535379][ T5887] usb 5-1: config 0 descriptor?? [ 110.546973][ T5887] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.547013][ T5887] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 110.579705][ T6458] Dev loop9: unable to read RDB block 0 [ 110.587189][ T6458] loop9: unable to read partition table [ 110.587358][ T6458] loop9: partition table beyond EOD, truncated [ 110.587371][ T6458] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 110.770039][ T6472] tty tty20: ldisc open failed (-12), clearing slot 19 [ 111.118569][ T6481] libceph: resolve 'c' (ret=-3): failed [ 111.141153][ T6481] libceph: resolve 'c' (ret=-3): failed [ 111.146833][ T5887] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 111.153901][ T5887] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 111.719137][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 111.746706][ T6498] FAULT_INJECTION: forcing a failure. [ 111.746706][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 111.765911][ T5887] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 111.786200][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.816324][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.1.204 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 111.816349][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.816359][ T6498] Call Trace: [ 111.816366][ T6498] [ 111.816373][ T6498] dump_stack_lvl+0x241/0x360 [ 111.816407][ T6498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.816430][ T6498] ? __pfx__printk+0x10/0x10 [ 111.816457][ T6498] ? __pfx___might_resched+0x10/0x10 [ 111.816481][ T6498] should_fail_ex+0x424/0x570 [ 111.816503][ T6498] should_failslab+0xac/0x100 [ 111.816526][ T6498] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 111.816550][ T6498] ? __alloc_skb+0x1c2/0x480 [ 111.816564][ T6498] ? rtnl_bridge_setlink+0x6c1/0xa10 [ 111.816592][ T6498] __alloc_skb+0x1c2/0x480 [ 111.816614][ T6498] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 111.816640][ T6498] ? __pfx___alloc_skb+0x10/0x10 [ 111.816660][ T6498] ? netlink_ack_tlv_len+0x6e/0x200 [ 111.816684][ T6498] netlink_ack+0x147/0xa70 [ 111.816702][ T6498] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.816730][ T6498] ? ref_tracker_free+0x63e/0x7e0 [ 111.816753][ T6498] netlink_rcv_skb+0x296/0x480 [ 111.816775][ T6498] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.816799][ T6498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.816837][ T6498] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.816861][ T6498] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.816886][ T6498] netlink_unicast+0x7f8/0x9a0 [ 111.816913][ T6498] ? __pfx_netlink_unicast+0x10/0x10 [ 111.816936][ T6498] ? skb_put+0x114/0x1f0 [ 111.816956][ T6498] netlink_sendmsg+0x8c3/0xcd0 [ 111.816990][ T6498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.817018][ T6498] ? aa_sock_msg_perm+0x91/0x160 [ 111.817046][ T6498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.817067][ T6498] __sock_sendmsg+0x221/0x270 [ 111.817092][ T6498] ____sys_sendmsg+0x523/0x860 [ 111.817117][ T6498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.817133][ T6498] ? __fget_files+0x2a/0x420 [ 111.817151][ T6498] ? __fget_files+0x2a/0x420 [ 111.817176][ T6498] __sys_sendmsg+0x271/0x360 [ 111.817199][ T6498] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.817268][ T6498] ? do_syscall_64+0xb6/0x230 [ 111.817292][ T6498] do_syscall_64+0xf3/0x230 [ 111.817311][ T6498] ? clear_bhb_loop+0x45/0xa0 [ 111.817329][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.817343][ T6498] RIP: 0033:0x7fd1b238d169 [ 111.817358][ T6498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.817370][ T6498] RSP: 002b:00007fd1b3174038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.817388][ T6498] RAX: ffffffffffffffda RBX: 00007fd1b25a5fa0 RCX: 00007fd1b238d169 [ 111.817399][ T6498] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 111.817408][ T6498] RBP: 00007fd1b3174090 R08: 0000000000000000 R09: 0000000000000000 [ 111.817417][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.817425][ T6498] R13: 0000000000000000 R14: 00007fd1b25a5fa0 R15: 00007fd1b26cfa28 [ 111.817451][ T6498] [ 111.820388][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.223806][ T6501] vivid-003: disconnect [ 112.665265][ T5946] usb 4-1: USB disconnect, device number 17 [ 112.675347][ T5887] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 112.843530][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 112.864794][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 112.919369][ T6465] capability: warning: `syz.4.194' uses 32-bit capabilities (legacy support in use) [ 112.975468][ T5889] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 112.987555][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.030733][ T6512] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 113.097861][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.143221][ T5889] usb 3-1: config 0 has no interfaces? [ 113.151934][ T5889] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.161748][ T5874] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 113.173857][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.192637][ T6464] vivid-003: reconnect [ 113.214956][ T5887] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 113.223906][ T5889] usb 3-1: Product: syz [ 113.226906][ T5887] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 113.357988][ T5889] usb 3-1: Manufacturer: syz [ 113.362649][ T5889] usb 3-1: SerialNumber: syz [ 113.373205][ T5887] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 113.388091][ T6515] netlink: 164 bytes leftover after parsing attributes in process `syz.0.210'. [ 113.398396][ T5874] usb 4-1: device descriptor read/64, error -71 [ 113.404932][ T5887] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 113.449984][ T5889] usb 3-1: config 0 descriptor?? [ 113.451357][ T5887] usb 5-1: USB disconnect, device number 12 [ 113.674052][ T5874] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 113.828031][ T5874] usb 4-1: device descriptor read/64, error -71 [ 113.848080][ T9] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 113.942654][ T5874] usb usb4-port1: attempt power cycle [ 113.948501][ T6523] bridge0: port 3(vlan3) entered blocking state [ 113.960847][ T6523] bridge0: port 3(vlan3) entered disabled state [ 113.978435][ T6523] vlan3: entered allmulticast mode [ 113.993885][ T6523] gretap0: entered allmulticast mode [ 114.020777][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 114.036095][ T6523] vlan3: entered promiscuous mode [ 114.081601][ T6523] gretap0: entered promiscuous mode [ 114.102707][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.114280][ T6523] bridge0: port 3(vlan3) entered blocking state [ 114.120718][ T6523] bridge0: port 3(vlan3) entered forwarding state [ 114.180521][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.193938][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 114.250281][ T6527] netlink: 528 bytes leftover after parsing attributes in process `syz.1.215'. [ 114.267800][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.307025][ T9] usb 1-1: config 0 descriptor?? [ 114.318583][ T5874] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 114.347829][ T6526] can: request_module (can-proto-0) failed. [ 114.356155][ T5874] usb 4-1: device descriptor read/8, error -71 [ 114.540165][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.565716][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.618129][ T5874] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 114.648929][ T5874] usb 4-1: device descriptor read/8, error -71 [ 114.761348][ T5874] usb usb4-port1: unable to enumerate USB device [ 114.858127][ T5889] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 114.891812][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.956904][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.073139][ T5889] usb 2-1: config 0 has no interfaces? [ 115.086040][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.119711][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.149656][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 115.156916][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.169720][ T9] usb 1-1: USB disconnect, device number 11 [ 115.184109][ T5889] usb 2-1: Product: syz [ 115.194107][ T5889] usb 2-1: Manufacturer: syz [ 115.202909][ T5889] usb 2-1: SerialNumber: syz [ 115.248247][ T5889] usb 2-1: config 0 descriptor?? [ 115.487790][ T6537] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 115.499895][ T6537] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 115.596351][ T6537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.606987][ T5889] usb 3-1: USB disconnect, device number 10 [ 115.909826][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.955290][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.248108][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 116.458080][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 116.473397][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.484493][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=bcbd, bcdDevice= 0.00 [ 116.495147][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.507848][ T9] usb 3-1: config 0 descriptor?? [ 116.931987][ T9] hid-generic 0003:04B4:BCBD.0004: unknown main item tag 0x0 [ 116.954864][ T9] hid-generic 0003:04B4:BCBD.0004: unknown main item tag 0x0 [ 116.972899][ T9] hid-generic 0003:04B4:BCBD.0004: hidraw1: USB HID v0.01 Device [HID 04b4:bcbd] on usb-dummy_hcd.2-1/input0 [ 117.244826][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 117.280597][ T6552] vlan0: left allmulticast mode [ 117.305280][ T6552] batadv0: left allmulticast mode [ 117.317671][ T6552] vlan0: left promiscuous mode [ 117.324640][ T6552] batadv0: left promiscuous mode [ 117.332130][ T6552] bridge0: port 3(vlan0) entered disabled state [ 117.344805][ T6561] fuse: Bad value for 'fd' [ 117.360057][ T6552] bridge_slave_1: left allmulticast mode [ 117.366159][ T6552] bridge_slave_1: left promiscuous mode [ 117.373959][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.391107][ T6552] bridge_slave_0: left allmulticast mode [ 117.397125][ T6552] bridge_slave_0: left promiscuous mode [ 117.407412][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.535579][ T5874] usb 2-1: USB disconnect, device number 16 [ 117.684497][ T6567] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 117.895509][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'. [ 117.978870][ T5874] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 118.144970][ T5874] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.218072][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.237288][ T5874] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 118.256460][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.291657][ T5874] usb 2-1: config 0 descriptor?? [ 118.488107][ T5887] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 118.629550][ T6580] kvm: pic: non byte write [ 118.694124][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 118.709627][ T5887] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 118.720230][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.735531][ T5887] usb 5-1: config 0 descriptor?? [ 118.741688][ T5874] magicmouse 0003:05AC:0269.0005: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 118.920233][ T5874] usb 2-1: USB disconnect, device number 17 [ 119.090439][ T5874] usb 3-1: USB disconnect, device number 11 [ 119.261624][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.234'. [ 119.310648][ T6585] netlink: 'syz.0.234': attribute type 5 has an invalid length. [ 119.616744][ T6599] netlink: 32 bytes leftover after parsing attributes in process `syz.3.241'. [ 119.620304][ T6598] FAULT_INJECTION: forcing a failure. [ 119.620304][ T6598] name failslab, interval 1, probability 0, space 0, times 0 [ 119.638965][ T6598] CPU: 1 UID: 0 PID: 6598 Comm: syz.2.240 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 119.638989][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.638999][ T6598] Call Trace: [ 119.639006][ T6598] [ 119.639013][ T6598] dump_stack_lvl+0x241/0x360 [ 119.639053][ T6598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.639077][ T6598] ? __pfx__printk+0x10/0x10 [ 119.639104][ T6598] ? __pfx___might_resched+0x10/0x10 [ 119.639128][ T6598] should_fail_ex+0x424/0x570 [ 119.639150][ T6598] should_failslab+0xac/0x100 [ 119.639175][ T6598] __kmalloc_noprof+0xdf/0x4d0 [ 119.639197][ T6598] ? tomoyo_encode+0x26f/0x540 [ 119.639225][ T6598] tomoyo_encode+0x26f/0x540 [ 119.639254][ T6598] tomoyo_realpath_from_path+0x59e/0x5e0 [ 119.639291][ T6598] tomoyo_path_number_perm+0x245/0x790 [ 119.639316][ T6598] ? tomoyo_path_number_perm+0x215/0x790 [ 119.639340][ T6598] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.639367][ T6598] ? ksys_write+0x24e/0x2d0 [ 119.639394][ T6598] ? __lock_acquire+0xad5/0xd80 [ 119.639431][ T6598] ? __fget_files+0x2a/0x420 [ 119.639446][ T6598] ? __fget_files+0x2a/0x420 [ 119.639465][ T6598] ? __fget_files+0x2a/0x420 [ 119.639486][ T6598] security_file_ioctl+0xc6/0x2a0 [ 119.639508][ T6598] __se_sys_ioctl+0x46/0x160 [ 119.639530][ T6598] do_syscall_64+0xf3/0x230 [ 119.639551][ T6598] ? clear_bhb_loop+0x45/0xa0 [ 119.639569][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.639584][ T6598] RIP: 0033:0x7f932578d169 [ 119.639599][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.639612][ T6598] RSP: 002b:00007f932661f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.639630][ T6598] RAX: ffffffffffffffda RBX: 00007f93259a5fa0 RCX: 00007f932578d169 [ 119.639642][ T6598] RDX: 0000000000000000 RSI: 000000008004745a RDI: 0000000000000005 [ 119.639652][ T6598] RBP: 00007f932661f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.639662][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.639672][ T6598] R13: 0000000000000000 R14: 00007f93259a5fa0 R15: 00007f9325acfa28 [ 119.639698][ T6598] [ 119.639719][ T6598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.644108][ T6599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.241'. [ 119.918468][ T5887] usb 5-1: Cannot set autoneg [ 119.921523][ T6599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.241'. [ 119.923391][ T5887] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 119.960070][ T5887] usb 5-1: USB disconnect, device number 13 [ 119.973329][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 120.084941][ T6607] FAULT_INJECTION: forcing a failure. [ 120.084941][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.122958][ T6611] fuse: Unknown parameter 'use00000000000000000000' [ 120.161997][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.4.244 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 120.162021][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.162028][ T6607] Call Trace: [ 120.162032][ T6607] [ 120.162037][ T6607] dump_stack_lvl+0x241/0x360 [ 120.162066][ T6607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.162080][ T6607] ? __pfx__printk+0x10/0x10 [ 120.162100][ T6607] should_fail_ex+0x424/0x570 [ 120.162114][ T6607] _copy_from_user+0x2d/0xb0 [ 120.162128][ T6607] copy_msghdr_from_user+0xb3/0x580 [ 120.162145][ T6607] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.162166][ T6607] do_recvmmsg+0x3bf/0xab0 [ 120.162183][ T6607] ? __pfx_do_recvmmsg+0x10/0x10 [ 120.162201][ T6607] ? rcu_read_lock_any_held+0xbb/0x160 [ 120.162215][ T6607] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 120.162228][ T6607] ? vfs_write+0xb29/0xd10 [ 120.162244][ T6607] ? ksys_write+0x24e/0x2d0 [ 120.162257][ T6607] ? __mutex_unlock_slowpath+0x229/0x800 [ 120.162278][ T6607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.162289][ T6607] ? __fget_files+0x2a/0x420 [ 120.162306][ T6607] __x64_sys_recvmmsg+0x1ab/0x260 [ 120.162318][ T6607] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 120.162332][ T6607] ? do_syscall_64+0xb6/0x230 [ 120.162346][ T6607] do_syscall_64+0xf3/0x230 [ 120.162357][ T6607] ? clear_bhb_loop+0x45/0xa0 [ 120.162369][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.162378][ T6607] RIP: 0033:0x7f6baa38d169 [ 120.162391][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.162399][ T6607] RSP: 002b:00007f6bab2c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 120.162416][ T6607] RAX: ffffffffffffffda RBX: 00007f6baa5a5fa0 RCX: 00007f6baa38d169 [ 120.162423][ T6607] RDX: 0400000000000179 RSI: 0000200000000480 RDI: 0000000000000003 [ 120.162430][ T6607] RBP: 00007f6bab2c8090 R08: 0000000000000000 R09: 0000000000000000 [ 120.162436][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.162441][ T6607] R13: 0000000000000000 R14: 00007f6baa5a5fa0 R15: 00007f6baa6cfa28 [ 120.162456][ T6607] [ 120.408082][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 120.415219][ T5889] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 120.423500][ T5889] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 120.433706][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.446718][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.455786][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.478312][ T5889] usbtmc 1-1:16.0: bulk endpoints not found [ 120.620055][ T5874] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 120.739547][ T6595] loop9: detected capacity change from 0 to 7 [ 120.745913][ T6595] buffer_io_error: 4 callbacks suppressed [ 120.745923][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.794954][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.804616][ T5874] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 120.816227][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.844423][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.879244][ T5874] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.891440][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.914057][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.923903][ T5874] usb 3-1: Product: syz [ 120.929001][ T5874] usb 3-1: Manufacturer: syz [ 120.933752][ T5874] usb 3-1: SerialNumber: syz [ 120.938656][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.950647][ T5874] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.969502][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.982676][ T6595] ldm_validate_partition_table(): Disk read failed. [ 120.997312][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.007846][ T5889] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 121.048953][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.083208][ T6595] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.093999][ T6595] Dev loop9: unable to read RDB block 0 [ 121.116216][ T6595] loop9: unable to read partition table [ 121.143894][ T6595] loop9: partition table beyond EOD, truncated [ 121.154386][ T6595] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 121.426412][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.435341][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.713060][ T6627] netlink: 'syz.4.250': attribute type 3 has an invalid length. [ 121.855279][ T6632] warning: `syz.2.245' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.094749][ T6638] program syz.4.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.118868][ T5889] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 122.129043][ T5889] ath9k_htc: Failed to initialize the device [ 122.185522][ T5889] usb 3-1: ath9k_htc: USB layer deinitialized [ 122.627329][ T5887] usb 1-1: USB disconnect, device number 12 [ 122.814802][ T5889] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 122.946527][ T5888] usb 3-1: USB disconnect, device number 12 [ 123.000813][ T5889] usb 2-1: config 0 has no interfaces? [ 123.056858][ T5889] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.066189][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.076113][ T5916] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 123.125093][ T5889] usb 2-1: Product: syz [ 123.183558][ T5889] usb 2-1: Manufacturer: syz [ 123.222542][ T5889] usb 2-1: SerialNumber: syz [ 123.232754][ T5889] usb 2-1: config 0 descriptor?? [ 123.271077][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.295802][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.310525][ T6669] vivid-000: disconnect [ 123.314844][ T5916] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 123.316883][ T6668] vivid-000: reconnect [ 123.326113][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.361161][ T5916] usb 5-1: config 0 descriptor?? [ 123.800746][ T6656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'. [ 123.816771][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.826563][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.841550][ T5916] asus 0003:0B05:18C6.0006: item fetching failed at offset 0/3 [ 123.857657][ T5916] asus 0003:0B05:18C6.0006: Asus hid parse failed: -22 [ 123.867267][ T5916] asus 0003:0B05:18C6.0006: probe with driver asus failed with error -22 [ 124.015828][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.027063][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.042519][ T6689] netlink: 'syz.2.270': attribute type 21 has an invalid length. [ 124.061236][ T9] usb 5-1: USB disconnect, device number 14 [ 124.092888][ T6689] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 124.195809][ T6694] netlink: 'syz.3.272': attribute type 12 has an invalid length. [ 124.204012][ T6694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.272'. [ 124.215118][ T6695] netlink: 'syz.3.272': attribute type 12 has an invalid length. [ 124.224428][ T6695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.272'. [ 124.338372][ T5916] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 124.502181][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 124.531757][ T5916] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 124.542433][ T5916] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 124.561354][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.588027][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.608569][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.620457][ T5916] usbtmc 3-1:16.0: bulk endpoints not found [ 124.747391][ T6710] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 124.792544][ T6710] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 124.848221][ T6689] loop9: detected capacity change from 0 to 7 [ 124.854974][ T6689] ldm_validate_partition_table(): Disk read failed. [ 124.862259][ T6689] Dev loop9: unable to read RDB block 0 [ 124.868211][ T6689] loop9: unable to read partition table [ 124.874363][ T6689] loop9: partition table beyond EOD, truncated [ 124.885330][ T6689] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 125.583331][ T5916] usb 2-1: USB disconnect, device number 18 [ 126.233440][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 126.961429][ T9] usb 3-1: USB disconnect, device number 13 [ 127.055590][ T6745] FAULT_INJECTION: forcing a failure. [ 127.055590][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 127.137538][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.1.289 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 127.137557][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.137563][ T6745] Call Trace: [ 127.137568][ T6745] [ 127.137572][ T6745] dump_stack_lvl+0x241/0x360 [ 127.137592][ T6745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.137607][ T6745] ? __pfx__printk+0x10/0x10 [ 127.137623][ T6745] ? __pfx___might_resched+0x10/0x10 [ 127.137638][ T6745] should_fail_ex+0x424/0x570 [ 127.137652][ T6745] should_failslab+0xac/0x100 [ 127.137668][ T6745] __kmalloc_noprof+0xdf/0x4d0 [ 127.137681][ T6745] ? sock_kmalloc+0xd7/0x160 [ 127.137695][ T6745] sock_kmalloc+0xd7/0x160 [ 127.137707][ T6745] skcipher_recvmsg+0x613/0x1250 [ 127.137731][ T6745] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 127.137742][ T6745] ? __fget_files+0x2a/0x420 [ 127.137751][ T6745] ? aa_sock_msg_perm+0x91/0x160 [ 127.137765][ T6745] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 127.137774][ T6745] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 127.137788][ T6745] sock_recvmsg+0x22f/0x280 [ 127.137803][ T6745] __sys_recvfrom+0x204/0x380 [ 127.137816][ T6745] ? __pfx___sys_recvfrom+0x10/0x10 [ 127.137832][ T6745] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 127.137859][ T6745] __x64_sys_recvfrom+0xde/0x100 [ 127.137877][ T6745] do_syscall_64+0xf3/0x230 [ 127.137894][ T6745] ? clear_bhb_loop+0x45/0xa0 [ 127.137913][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.137927][ T6745] RIP: 0033:0x7fd1b238ef34 [ 127.137941][ T6745] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 127.137954][ T6745] RSP: 002b:00007fd1b3172ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 127.137972][ T6745] RAX: ffffffffffffffda RBX: 00007fd1b3172fc0 RCX: 00007fd1b238ef34 [ 127.137984][ T6745] RDX: 0000000000001000 RSI: 00007fd1b3173010 RDI: 0000000000000004 [ 127.137994][ T6745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.138004][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 127.138014][ T6745] R13: 00007fd1b3172f68 R14: 00007fd1b3173010 R15: 0000000000000000 [ 127.138050][ T6745] [ 127.394097][ T6747] netlink: 216 bytes leftover after parsing attributes in process `syz.2.290'. [ 127.501131][ T5874] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 127.609172][ T6750] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 127.663952][ T5874] usb 4-1: device descriptor read/64, error -71 [ 127.938010][ T5874] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 128.077984][ T5874] usb 4-1: device descriptor read/64, error -71 [ 128.150481][ T5887] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 128.276069][ T5874] usb usb4-port1: attempt power cycle [ 128.488607][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 128.502095][ T5887] usb 5-1: config 1 interface 0 has no altsetting 0 [ 128.516092][ T5887] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.40 [ 128.535635][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.558107][ T5887] usb 5-1: Product: syz [ 128.562289][ T5887] usb 5-1: Manufacturer: syz [ 128.594051][ T5887] usb 5-1: SerialNumber: syz [ 128.740822][ T5874] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 128.780463][ T5874] usb 4-1: device descriptor read/8, error -71 [ 128.866126][ T5887] usbhid 5-1:1.0: can't add hid device: -71 [ 128.977748][ T5887] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 129.015660][ T5887] usb 5-1: USB disconnect, device number 15 [ 129.088195][ T5874] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 129.157141][ T5874] usb 4-1: device descriptor read/8, error -71 [ 129.279066][ T5874] usb usb4-port1: unable to enumerate USB device [ 129.326296][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 129.507636][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 129.507655][ T30] audit: type=1326 audit(1744176475.040:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 129.577347][ T30] audit: type=1326 audit(1744176475.040:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 129.599479][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.631500][ T30] audit: type=1326 audit(1744176475.040:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 129.677491][ T30] audit: type=1326 audit(1744176475.040:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 129.699624][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.706581][ T6791] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 129.720562][ T30] audit: type=1326 audit(1744176475.040:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 129.783782][ T30] audit: type=1326 audit(1744176475.050:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 129.859481][ T30] audit: type=1326 audit(1744176475.050:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 129.881618][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.901965][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.308'. [ 129.965079][ T6800] FAULT_INJECTION: forcing a failure. [ 129.965079][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.008034][ T30] audit: type=1326 audit(1744176475.050:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 130.048172][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.4.309 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 130.048199][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.048208][ T6800] Call Trace: [ 130.048215][ T6800] [ 130.048222][ T6800] dump_stack_lvl+0x241/0x360 [ 130.048251][ T6800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.048272][ T6800] ? __pfx__printk+0x10/0x10 [ 130.048303][ T6800] should_fail_ex+0x424/0x570 [ 130.048323][ T6800] _copy_to_user+0x31/0xb0 [ 130.048347][ T6800] sk_getsockopt+0x2981/0x34f0 [ 130.048372][ T6800] ? __pfx_sk_getsockopt+0x10/0x10 [ 130.048407][ T6800] ? __lock_acquire+0xad5/0xd80 [ 130.048450][ T6800] do_sock_getsockopt+0x2a0/0x740 [ 130.048475][ T6800] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 130.048490][ T6800] ? __fget_files+0x2a/0x420 [ 130.048508][ T6800] ? __fget_files+0x39d/0x420 [ 130.048521][ T6800] ? __fget_files+0x2a/0x420 [ 130.048544][ T6800] __x64_sys_getsockopt+0x2a3/0x370 [ 130.048569][ T6800] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 130.048593][ T6800] ? do_syscall_64+0xb6/0x230 [ 130.048616][ T6800] do_syscall_64+0xf3/0x230 [ 130.048636][ T6800] ? clear_bhb_loop+0x45/0xa0 [ 130.048657][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.048673][ T6800] RIP: 0033:0x7f6baa38d169 [ 130.048689][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.048703][ T6800] RSP: 002b:00007f6bab2c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 130.048722][ T6800] RAX: ffffffffffffffda RBX: 00007f6baa5a5fa0 RCX: 00007f6baa38d169 [ 130.048735][ T6800] RDX: 000000000000004c RSI: 0000000000000001 RDI: 0000000000000003 [ 130.048753][ T6800] RBP: 00007f6bab2c8090 R08: 0000200000000240 R09: 0000000000000000 [ 130.048764][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.048774][ T6800] R13: 0000000000000000 R14: 00007f6baa5a5fa0 R15: 00007f6baa6cfa28 [ 130.048800][ T6800] [ 130.254074][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.271556][ T6803] netlink: 124 bytes leftover after parsing attributes in process `syz.1.311'. [ 130.281556][ T30] audit: type=1326 audit(1744176475.050:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 130.303661][ T30] audit: type=1326 audit(1744176475.050:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b238d169 code=0x7ffc0000 [ 131.918223][ T5916] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 132.242942][ T5916] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.252026][ T5916] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.268400][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.278090][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 132.297976][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 132.331080][ T5916] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.340409][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.354953][ T5916] usb 4-1: Product: syz [ 132.365967][ T5916] usb 4-1: Manufacturer: syz [ 132.414622][ T5916] cdc_wdm 4-1:1.0: skipping garbage [ 132.425526][ T5916] cdc_wdm 4-1:1.0: skipping garbage [ 132.530093][ T5916] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 132.578505][ T5916] cdc_wdm 4-1:1.0: Unknown control protocol [ 133.010539][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016914][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.348599][ T5916] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.503294][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.512891][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 133.541695][ T5916] usb 1-1: can't read configurations, error -71 [ 133.603014][ T6862] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 133.706738][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.732430][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.940574][ T5887] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 134.108668][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 134.119306][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.135693][ T5887] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 134.146747][ T5887] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 134.161423][ T5887] usb 2-1: config 4 has no interface number 0 [ 134.171448][ T5887] usb 2-1: string descriptor 0 read error: -22 [ 134.180362][ T5887] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 134.190343][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.232341][ T5887] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 134.247598][ T5887] usb 2-1: No valid video chain found. [ 134.268585][ T6880] FAULT_INJECTION: forcing a failure. [ 134.268585][ T6880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.298004][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.4.337 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 134.298033][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.298042][ T6880] Call Trace: [ 134.298048][ T6880] [ 134.298055][ T6880] dump_stack_lvl+0x241/0x360 [ 134.298093][ T6880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.298116][ T6880] ? __pfx__printk+0x10/0x10 [ 134.298152][ T6880] should_fail_ex+0x424/0x570 [ 134.298176][ T6880] _copy_from_user+0x2d/0xb0 [ 134.298200][ T6880] video_usercopy+0x3bf/0x1330 [ 134.298227][ T6880] ? __pfx___video_do_ioctl+0x10/0x10 [ 134.298243][ T6880] ? __pfx_video_usercopy+0x10/0x10 [ 134.298273][ T6880] ? __fget_files+0x2a/0x420 [ 134.298292][ T6880] ? __fget_files+0x2a/0x420 [ 134.298310][ T6880] v4l2_ioctl+0x189/0x1e0 [ 134.298341][ T6880] ? __pfx_v4l2_ioctl+0x10/0x10 [ 134.298381][ T6880] __se_sys_ioctl+0xf1/0x160 [ 134.298407][ T6880] do_syscall_64+0xf3/0x230 [ 134.298429][ T6880] ? clear_bhb_loop+0x45/0xa0 [ 134.298447][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.298463][ T6880] RIP: 0033:0x7f6baa38d169 [ 134.298479][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.298493][ T6880] RSP: 002b:00007f6bab2c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.298512][ T6880] RAX: ffffffffffffffda RBX: 00007f6baa5a5fa0 RCX: 00007f6baa38d169 [ 134.298525][ T6880] RDX: 0000200000000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 134.298536][ T6880] RBP: 00007f6bab2c8090 R08: 0000000000000000 R09: 0000000000000000 [ 134.298547][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.298557][ T6880] R13: 0000000000000000 R14: 00007f6baa5a5fa0 R15: 00007f6baa6cfa28 [ 134.298584][ T6880] [ 134.498903][ T5874] usb 2-1: USB disconnect, device number 19 [ 134.650438][ T6887] tipc: Can't bind to reserved service type 2 [ 134.790210][ T6890] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 134.939241][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 134.988340][ T5916] usb 4-1: USB disconnect, device number 26 [ 135.112475][ T6898] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.128915][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 135.155305][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.200145][ T9] usb 3-1: config 8 has an invalid interface number: 137 but max is 0 [ 135.222405][ T9] usb 3-1: config 8 has no interface number 0 [ 135.239987][ T9] usb 3-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 135.253714][ T9] usb 3-1: config 8 interface 137 has no altsetting 0 [ 135.264126][ T9] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 135.290652][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.306452][ T9] usb 3-1: Product: syz [ 135.311697][ T9] usb 3-1: Manufacturer: syz [ 135.316431][ T9] usb 3-1: SerialNumber: syz [ 135.335469][ T6887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 135.458342][ T6909] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 135.590697][ T6914] dummy0: entered allmulticast mode [ 135.639807][ T6887] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 135.647945][ T6887] syzkaller0: owner set to 0 [ 135.780656][ T9] cyberjack 3-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 135.799974][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 135.825388][ T9] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 135.848140][ T5874] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 135.867051][ T9] usb 3-1: USB disconnect, device number 14 [ 135.897194][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 135.914332][ T9] cyberjack 3-1:8.137: device disconnected [ 135.997999][ T5874] usb 5-1: device descriptor read/64, error -71 [ 136.042357][ T6919] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9830527 (19661054 ns) > initial count (15392460 ns). Using initial count to start timer. [ 136.237976][ T5874] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 136.267481][ T6922] FAULT_INJECTION: forcing a failure. [ 136.267481][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.288526][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.1.352 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 136.288552][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.288561][ T6922] Call Trace: [ 136.288567][ T6922] [ 136.288575][ T6922] dump_stack_lvl+0x241/0x360 [ 136.288603][ T6922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.288624][ T6922] ? __pfx__printk+0x10/0x10 [ 136.288656][ T6922] should_fail_ex+0x424/0x570 [ 136.288680][ T6922] fpu__restore_sig+0x1c3/0x11d0 [ 136.288703][ T6922] ? __lock_acquire+0xad5/0xd80 [ 136.288721][ T6922] ? __pfx_fpu__restore_sig+0x10/0x10 [ 136.288763][ T6922] restore_sigcontext+0x685/0x7d0 [ 136.288786][ T6922] ? __pfx_restore_sigcontext+0x10/0x10 [ 136.288841][ T6922] __do_sys_rt_sigreturn+0x1bf/0x290 [ 136.288860][ T6922] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 136.288889][ T6922] ? do_syscall_64+0xb6/0x230 [ 136.288912][ T6922] do_syscall_64+0xf3/0x230 [ 136.288932][ T6922] ? clear_bhb_loop+0x45/0xa0 [ 136.288952][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.288968][ T6922] RIP: 0033:0x7fd1b238d167 [ 136.288983][ T6922] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 136.288997][ T6922] RSP: 002b:00007fd1b3174038 EFLAGS: 00000246 [ 136.289013][ T6922] RAX: 0000000000000013 RBX: 00007fd1b25a5fa0 RCX: 00007fd1b238d169 [ 136.289024][ T6922] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 136.289035][ T6922] RBP: 00007fd1b3174090 R08: 0000000000000000 R09: 0000000000000000 [ 136.289044][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.289053][ T6922] R13: 0000000000000000 R14: 00007fd1b25a5fa0 R15: 00007fd1b26cfa28 [ 136.289078][ T6922] [ 136.578309][ T5874] usb 5-1: device descriptor read/64, error -71 [ 136.635251][ T6936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 136.688344][ T5874] usb usb5-port1: attempt power cycle [ 137.094833][ T5874] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 137.139736][ T5874] usb 5-1: device descriptor read/8, error -71 [ 137.378080][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 137.921702][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 137.942543][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 137.951663][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.962875][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.995030][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.013691][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.025171][ T9] usb 3-1: Product: syz [ 138.036242][ T9] usb 3-1: Manufacturer: syz [ 138.044250][ T9] usb 3-1: SerialNumber: syz [ 138.068016][ T5874] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 138.098677][ T5874] usb 5-1: device descriptor read/8, error -71 [ 138.163283][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 138.180344][ T6953] syzkaller1: entered promiscuous mode [ 138.209804][ T6953] syzkaller1: entered allmulticast mode [ 138.218330][ T5874] usb usb5-port1: unable to enumerate USB device [ 138.261891][ T9] usb 3-1: 0:2 : does not exist [ 138.293742][ T9] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 138.326250][ T9] usb 3-1: USB disconnect, device number 15 [ 138.617563][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.655712][ T6914] dummy0: left allmulticast mode [ 138.803815][ T6965] ipip0: entered promiscuous mode [ 139.090219][ T6973] netlink: 668 bytes leftover after parsing attributes in process `syz.4.366'. [ 139.101806][ T6973] netlink: 668 bytes leftover after parsing attributes in process `syz.4.366'. [ 139.798233][ T5874] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 139.927980][ T5874] usb 4-1: device descriptor read/64, error -71 [ 140.178033][ T5888] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 140.187352][ T5874] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 140.338024][ T5874] usb 4-1: device descriptor read/64, error -71 [ 140.344435][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 140.362620][ T5888] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.375348][ T5888] usb 5-1: config 0 has no interface number 0 [ 140.381919][ T5888] usb 5-1: config 0 interface 184 has no altsetting 0 [ 140.396277][ T5888] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.406028][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.407990][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 140.418135][ T5888] usb 5-1: Product: syz [ 140.425863][ T5888] usb 5-1: Manufacturer: syz [ 140.434949][ T5888] usb 5-1: SerialNumber: syz [ 140.442948][ T5888] usb 5-1: config 0 descriptor?? [ 140.459585][ T5874] usb usb4-port1: attempt power cycle [ 140.466538][ T5888] smsc75xx v1.0.0 [ 140.566571][ T9] usb 3-1: device descriptor read/64, error -71 [ 140.808161][ T5874] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 140.838019][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 140.850193][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.861020][ T5874] usb 4-1: device descriptor read/8, error -71 [ 140.868924][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.888409][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.988133][ T9] usb 3-1: device descriptor read/64, error -71 [ 141.036073][ T24] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 141.049165][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.064033][ T24] usb 1-1: config 0 descriptor?? [ 141.073318][ T24] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 141.089470][ T24] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 141.108177][ T5874] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 141.111609][ T9] usb usb3-port1: attempt power cycle [ 141.152223][ T5874] usb 4-1: device descriptor read/8, error -71 [ 141.281305][ T5874] usb usb4-port1: unable to enumerate USB device [ 141.283049][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 141.301019][ T5874] usb 1-1: USB disconnect, device number 15 [ 141.468054][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 141.488768][ T9] usb 3-1: device descriptor read/8, error -71 [ 141.618142][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.728303][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 141.759932][ T9] usb 3-1: device descriptor read/8, error -71 [ 141.768023][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 141.776330][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 141.787117][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.795191][ T24] usb 2-1: Product: syz [ 141.799595][ T24] usb 2-1: Manufacturer: syz [ 141.804281][ T24] usb 2-1: SerialNumber: syz [ 141.821869][ T24] usb 2-1: config 0 descriptor?? [ 141.835967][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 141.868613][ T9] usb usb3-port1: unable to enumerate USB device [ 142.188052][ T5874] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.358011][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 142.364606][ T5874] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 142.374020][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.384740][ T5874] usb 1-1: config 0 descriptor?? [ 142.396113][ T5874] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 142.607317][ T7011] input: syz0 as /devices/virtual/input/input11 [ 142.731677][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 142.741856][ T7016] program syz.3.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.794232][ T5874] gspca_sunplus: reg_r err -71 [ 142.809188][ T5874] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 142.826736][ T5874] usb 1-1: USB disconnect, device number 16 [ 142.852615][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.868374][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.926634][ T5888] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 142.965952][ T5888] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 142.989792][ T5888] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 143.000331][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 143.015009][ T5888] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 143.040331][ T5888] usb 5-1: USB disconnect, device number 20 [ 143.077999][ T917] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 143.101203][ T24] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 143.219578][ T917] usb 4-1: device descriptor read/64, error -71 [ 143.478236][ T917] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 143.638367][ T7043] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.646300][ T7043] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.697986][ T917] usb 4-1: device descriptor read/64, error -71 [ 143.808459][ T917] usb usb4-port1: attempt power cycle [ 144.195625][ T7050] fuse: Unknown parameter '' [ 144.208292][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 144.217987][ T917] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 144.311115][ T917] usb 4-1: device descriptor read/8, error -71 [ 144.397820][ T5916] usb 2-1: USB disconnect, device number 20 [ 144.579356][ T917] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 144.651944][ T917] usb 4-1: device descriptor read/8, error -71 [ 144.667649][ T24] usb 5-1: config 0 has no interfaces? [ 144.690331][ T7055] kvm: apic: phys broadcast and lowest prio [ 144.756552][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.776221][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.792058][ T917] usb usb4-port1: unable to enumerate USB device [ 144.808089][ T24] usb 5-1: Product: syz [ 144.856956][ T24] usb 5-1: Manufacturer: syz [ 144.934379][ T24] usb 5-1: SerialNumber: syz [ 144.967303][ T24] usb 5-1: config 0 descriptor?? [ 148.966355][ T0] sched: DL replenish lagged too much [ 153.210168][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 153.334432][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 153.798019][ T5916] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 244.644506][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.663137][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.250086][ T5212] udevd[5212]: worker [7073] /devices/virtual/block/loop1 is taking a long time [ 251.987531][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 252.002041][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 252.016612][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 252.031119][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 252.037205][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 256.328521][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.342049][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.417767][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 394.424783][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P90/1:b..l P5212/1:b..l P2/1:b..l [ 394.434809][ C0] rcu: (detected by 0, t=10503 jiffies, g=19405, q=396778 ncpus=2) [ 394.442798][ C0] task:kthreadd state:R running task stack:25288 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 394.456968][ C0] Call Trace: [ 394.460264][ C0] [ 394.463197][ C0] __schedule+0x1b88/0x5240 [ 394.467689][ C0] ? __switch_to+0xdc0/0x1c30 [ 394.472373][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 394.477676][ C0] ? __pfx___schedule+0x10/0x10 [ 394.482527][ C0] ? __lock_acquire+0xad5/0xd80 [ 394.487361][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 394.492638][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 394.497761][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 394.503507][ C0] irqentry_exit+0x5e/0x90 [ 394.507930][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.513915][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 394.519225][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 394.538843][ C0] RSP: 0018:ffffc90000077168 EFLAGS: 00000206 [ 394.544924][ C0] RAX: 55079b0926cc7b00 RBX: ffffffff8ed3dfe0 RCX: 55079b0926cc7b00 [ 394.552932][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fd53d RDI: ffffffff8ca1b6a0 [ 394.560900][ C0] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 394.568878][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 394.576850][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 394.584847][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 394.589978][ C0] ? __kmalloc_noprof+0x28e/0x4d0 [ 394.595009][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 394.600116][ C0] unwind_next_frame+0xd5/0x23b0 [ 394.605071][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 394.610201][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 394.615318][ C0] ? __kmalloc_noprof+0x28e/0x4d0 [ 394.620338][ C0] ? __kmalloc_noprof+0x28e/0x4d0 [ 394.625381][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 394.631551][ C0] arch_stack_walk+0x11e/0x150 [ 394.636320][ C0] ? __kmalloc_noprof+0x28e/0x4d0 [ 394.641349][ C0] stack_trace_save+0x11a/0x1d0 [ 394.646218][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 394.651603][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 394.657497][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.663825][ C0] save_stack+0xfc/0x1f0 [ 394.668088][ C0] ? __pfx_save_stack+0x10/0x10 [ 394.672942][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 394.678301][ C0] ? __put_partials+0x160/0x1c0 [ 394.683160][ C0] ? put_cpu_partial+0x17e/0x250 [ 394.688116][ C0] ? __slab_free+0x294/0x390 [ 394.692725][ C0] ? qlist_free_all+0x9a/0x140 [ 394.697469][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 394.703091][ C0] ? __kasan_kmalloc+0x23/0xb0 [ 394.707868][ C0] ? __kmalloc_noprof+0x28e/0x4d0 [ 394.712904][ C0] __reset_page_owner+0x76/0x1e0 [ 394.717837][ C0] __free_frozen_pages+0xde8/0x10a0 [ 394.723061][ C0] __put_partials+0x160/0x1c0 [ 394.727752][ C0] put_cpu_partial+0x17e/0x250 [ 394.732518][ C0] ? put_cpu_partial+0x72/0x250 [ 394.737351][ C0] __slab_free+0x294/0x390 [ 394.741775][ C0] ? __phys_addr+0xba/0x170 [ 394.746294][ C0] qlist_free_all+0x9a/0x140 [ 394.750897][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 394.756359][ C0] __kasan_kmalloc+0x23/0xb0 [ 394.760949][ C0] __kmalloc_noprof+0x28e/0x4d0 [ 394.765812][ C0] ? security_prepare_creds+0x53/0x360 [ 394.771279][ C0] security_prepare_creds+0x53/0x360 [ 394.776548][ C0] prepare_creds+0x4b4/0x6f0 [ 394.781142][ C0] copy_creds+0x109/0x9c0 [ 394.785493][ C0] copy_process+0x9ec/0x3d10 [ 394.790089][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 394.795468][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.801804][ C0] ? wake_up_new_task+0x8d3/0xda0 [ 394.806850][ C0] ? __pfx_copy_process+0x10/0x10 [ 394.812145][ C0] ? __pfx_wake_up_new_task+0x10/0x10 [ 394.817510][ C0] kernel_clone+0x242/0x930 [ 394.822015][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 394.827082][ C0] kernel_thread+0x1c2/0x250 [ 394.831687][ C0] ? __pfx_kthread+0x10/0x10 [ 394.836272][ C0] ? __pfx_kernel_thread+0x10/0x10 [ 394.841385][ C0] ? __pfx_kthread+0x10/0x10 [ 394.845994][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 394.851224][ C0] kthreadd+0x621/0x850 [ 394.855384][ C0] ? kthreadd+0x3ac/0x850 [ 394.859711][ C0] ? __pfx_kthreadd+0x10/0x10 [ 394.864404][ C0] ? __pfx_kthreadd+0x10/0x10 [ 394.869093][ C0] ? __pfx_kthreadd+0x10/0x10 [ 394.873773][ C0] ? __pfx_kthreadd+0x10/0x10 [ 394.878446][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.883657][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.888866][ C0] ? __pfx_kthreadd+0x10/0x10 [ 394.893547][ C0] ret_from_fork+0x4b/0x80 [ 394.897954][ C0] ? __pfx_kthreadd+0x10/0x10 [ 394.902641][ C0] ret_from_fork_asm+0x1a/0x30 [ 394.907427][ C0] [ 394.910449][ C0] task:udevd state:R running task stack:23176 pid:5212 tgid:5212 ppid:1 task_flags:0x400140 flags:0x00000002 [ 394.923943][ C0] Call Trace: [ 394.927222][ C0] [ 394.930152][ C0] __schedule+0x1b88/0x5240 [ 394.934671][ C0] ? __lock_acquire+0xad5/0xd80 [ 394.939542][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 394.944861][ C0] ? __pfx___schedule+0x10/0x10 [ 394.949728][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 394.954960][ C0] ? is_bpf_text_address+0x288/0x2a0 [ 394.960276][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 394.965507][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 394.970801][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 394.975924][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 394.981643][ C0] ? __lock_acquire+0xad5/0xd80 [ 394.986480][ C0] irqentry_exit+0x5e/0x90 [ 394.990890][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.996881][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 395.002172][ C0] Code: 60 16 98 03 eb cd 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 10 eb bf 11 e8 3b ea 87 0a 89 c3 83 f8 08 73 7a [ 395.021770][ C0] RSP: 0018:ffffc90003017698 EFLAGS: 00000202 [ 395.027831][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88807d9b0000 [ 395.035806][ C0] RDX: ffff88807d9b0000 RSI: 0000000000000001 RDI: 0000000000000000 [ 395.043781][ C0] RBP: 0000000000000001 R08: ffffffff81d3035a R09: 0000000000000000 [ 395.051754][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807d9b0000 [ 395.059740][ C0] R13: ffffffff81aee970 R14: 0000000000000001 R15: 00007ffa501165f4 [ 395.067724][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.073909][ C0] ? is_bpf_text_address+0x5a/0x2a0 [ 395.079130][ C0] is_bpf_text_address+0x63/0x2a0 [ 395.084159][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 395.089356][ C0] ? is_module_text_address+0x199/0x1f0 [ 395.094920][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.101106][ C0] kernel_text_address+0xa7/0xe0 [ 395.106028][ C0] __kernel_text_address+0xd/0x40 [ 395.111043][ C0] unwind_get_return_address+0x4d/0x90 [ 395.116517][ C0] arch_stack_walk+0xff/0x150 [ 395.121205][ C0] stack_trace_save+0x11a/0x1d0 [ 395.126040][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 395.131407][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 395.137309][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.143642][ C0] ? __lock_acquire+0xad5/0xd80 [ 395.148497][ C0] save_stack+0xfc/0x1f0 [ 395.152756][ C0] ? __pfx_save_stack+0x10/0x10 [ 395.157623][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 395.162998][ C0] ? __put_partials+0x160/0x1c0 [ 395.167837][ C0] ? put_cpu_partial+0x17e/0x250 [ 395.172785][ C0] ? __slab_free+0x294/0x390 [ 395.178948][ C0] ? qlist_free_all+0x9a/0x140 [ 395.183713][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 395.189336][ C0] ? __kasan_slab_alloc+0x23/0x80 [ 395.194371][ C0] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 395.200103][ C0] ? getname_flags+0xb6/0x530 [ 395.204789][ C0] ? vfs_fstatat+0x43/0x150 [ 395.209285][ C0] ? __x64_sys_newfstatat+0x11f/0x1a0 [ 395.214662][ C0] ? do_syscall_64+0xf3/0x230 [ 395.219347][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.225413][ C0] ? page_ext_put+0x97/0xc0 [ 395.229916][ C0] __reset_page_owner+0x76/0x1e0 [ 395.234872][ C0] __free_frozen_pages+0xde8/0x10a0 [ 395.240093][ C0] __put_partials+0x160/0x1c0 [ 395.244775][ C0] ? put_cpu_partial+0x14e/0x250 [ 395.249711][ C0] put_cpu_partial+0x17e/0x250 [ 395.254479][ C0] ? put_cpu_partial+0x72/0x250 [ 395.259345][ C0] __slab_free+0x294/0x390 [ 395.263776][ C0] ? __phys_addr+0xba/0x170 [ 395.268282][ C0] qlist_free_all+0x9a/0x140 [ 395.272889][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 395.278361][ C0] __kasan_slab_alloc+0x23/0x80 [ 395.283213][ C0] kmem_cache_alloc_noprof+0x1e1/0x390 [ 395.288669][ C0] ? getname_flags+0xb6/0x530 [ 395.293361][ C0] getname_flags+0xb6/0x530 [ 395.297878][ C0] vfs_fstatat+0x43/0x150 [ 395.302230][ C0] __x64_sys_newfstatat+0x11f/0x1a0 [ 395.307408][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 395.313114][ C0] ? __rseq_handle_notify_resume+0x3c8/0x15d0 [ 395.319222][ C0] ? do_syscall_64+0xb6/0x230 [ 395.323915][ C0] do_syscall_64+0xf3/0x230 [ 395.328430][ C0] ? clear_bhb_loop+0x45/0xa0 [ 395.333114][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.339014][ C0] RIP: 0033:0x7ffa501165f4 [ 395.343436][ C0] RSP: 002b:00007ffedcda8258 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 395.351857][ C0] RAX: ffffffffffffffda RBX: 00005621f0d276d8 RCX: 00007ffa501165f4 [ 395.359823][ C0] RDX: 00007ffedcda8268 RSI: 00005621f0d17897 RDI: 00000000ffffff9c [ 395.367799][ C0] RBP: 00005621fd05e448 R08: 00063251b510f24b R09: 7fffffffffffffff [ 395.375772][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.383738][ C0] R13: 0000000000000001 R14: 00063251b510f24b R15: 00005621f0d1bdca [ 395.391757][ C0] [ 395.394775][ C0] task:kswapd0 state:R running task stack:24296 pid:90 tgid:90 ppid:2 task_flags:0x220840 flags:0x00004000 [ 395.408250][ C0] Call Trace: [ 395.411530][ C0] [ 395.414447][ C0] __schedule+0x1b88/0x5240 [ 395.418966][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 395.424260][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 395.429474][ C0] ? __pfx___schedule+0x10/0x10 [ 395.434328][ C0] ? xfd_validate_state+0x6e/0x150 [ 395.439445][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 395.444747][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 395.449871][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 395.455598][ C0] irqentry_exit+0x5e/0x90 [ 395.460014][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.466003][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 395.471299][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 395.490910][ C0] RSP: 0018:ffffc900015c69a8 EFLAGS: 00000206 [ 395.496959][ C0] RAX: 616688faaf939a00 RBX: ffffffff8ed3dfe0 RCX: 616688faaf939a00 [ 395.504923][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fd53d RDI: ffffffff8ca1b6a0 [ 395.512894][ C0] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 395.520860][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 395.528840][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 395.536819][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 395.541931][ C0] ? call_rcu+0x172/0xad0 [ 395.546274][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 395.551403][ C0] unwind_next_frame+0xd5/0x23b0 [ 395.556340][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 395.561451][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 395.566574][ C0] ? call_rcu+0x172/0xad0 [ 395.570911][ C0] ? call_rcu+0x172/0xad0 [ 395.575267][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.581420][ C0] arch_stack_walk+0x11e/0x150 [ 395.586201][ C0] ? call_rcu+0x172/0xad0 [ 395.590550][ C0] stack_trace_save+0x11a/0x1d0 [ 395.595404][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 395.600511][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 395.605900][ C0] ? __lock_acquire+0xad5/0xd80 [ 395.610766][ C0] kasan_save_stack+0x3f/0x60 [ 395.615439][ C0] ? kasan_save_stack+0x3f/0x60 [ 395.620279][ C0] ? kasan_record_aux_stack+0xbf/0xd0 [ 395.625655][ C0] ? call_rcu+0x172/0xad0 [ 395.630041][ C0] ? __phys_addr+0xba/0x170 [ 395.634548][ C0] kasan_record_aux_stack+0xbf/0xd0 [ 395.639747][ C0] call_rcu+0x172/0xad0 [ 395.643921][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 395.649134][ C0] ? __pfx_call_rcu+0x10/0x10 [ 395.653817][ C0] ? bpf_inode_storage_free+0x77/0x2b0 [ 395.659275][ C0] ? bpf_inode_storage_free+0x77/0x2b0 [ 395.664758][ C0] __destroy_inode+0x2d9/0x670 [ 395.669545][ C0] evict+0x78d/0x9b0 [ 395.673454][ C0] ? __pfx_evict+0x10/0x10 [ 395.677868][ C0] ? _raw_spin_unlock+0x28/0x50 [ 395.682734][ C0] ? iput+0x713/0xa50 [ 395.686737][ C0] __dentry_kill+0x20d/0x630 [ 395.691324][ C0] ? shrink_kill+0x8d/0x2c0 [ 395.695825][ C0] ? shrink_kill+0x8d/0x2c0 [ 395.700314][ C0] shrink_kill+0xa9/0x2c0 [ 395.704653][ C0] shrink_dentry_list+0x2c0/0x5b0 [ 395.709689][ C0] prune_dcache_sb+0x111/0x180 [ 395.714544][ C0] ? __pfx_prune_dcache_sb+0x10/0x10 [ 395.719826][ C0] ? list_lru_count_one+0x29/0x2e0 [ 395.724948][ C0] ? list_lru_count_one+0x281/0x2e0 [ 395.730153][ C0] ? list_lru_count_one+0x29/0x2e0 [ 395.735268][ C0] super_cache_scan+0x3a8/0x510 [ 395.740123][ C0] do_shrink_slab+0x715/0x1140 [ 395.744914][ C0] ? shrink_slab+0x132/0x14e0 [ 395.749602][ C0] shrink_slab+0x1097/0x14e0 [ 395.754201][ C0] ? shrink_slab+0x132/0x14e0 [ 395.758876][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 395.763845][ C0] shrink_one+0x43b/0x850 [ 395.768191][ C0] ? shrink_node+0x354c/0x3e10 [ 395.772958][ C0] shrink_node+0x37a1/0x3e10 [ 395.777529][ C0] ? shrink_node+0x354c/0x3e10 [ 395.782301][ C0] ? psi_memstall_enter+0x379/0x5c0 [ 395.787518][ C0] ? __lock_acquire+0xad5/0xd80 [ 395.792378][ C0] ? __pfx_shrink_node+0x10/0x10 [ 395.797297][ C0] ? percpu_ref_put+0x19/0x180 [ 395.802067][ C0] ? mem_cgroup_iter+0x3d/0x430 [ 395.806927][ C0] kswapd+0x210d/0x3b10 [ 395.811103][ C0] ? kswapd+0xbbd/0x3b10 [ 395.815348][ C0] ? __pfx_kswapd+0x10/0x10 [ 395.819842][ C0] ? do_raw_spin_lock+0x151/0x370 [ 395.824885][ C0] ? __lock_acquire+0xad5/0xd80 [ 395.829750][ C0] ? do_raw_spin_lock+0x151/0x370 [ 395.834812][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.841149][ C0] ? __wait_for_common+0x710/0x730 [ 395.846274][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 395.852363][ C0] ? __kthread_parkme+0x1a8/0x200 [ 395.857404][ C0] ? __pfx_kswapd+0x10/0x10 [ 395.861935][ C0] kthread+0x7b7/0x940 [ 395.865994][ C0] ? __pfx_kswapd+0x10/0x10 [ 395.870493][ C0] ? __pfx_kthread+0x10/0x10 [ 395.875097][ C0] ? __pfx_kthread+0x10/0x10 [ 395.879704][ C0] ? __pfx_kthread+0x10/0x10 [ 395.884297][ C0] ? __pfx_kthread+0x10/0x10 [ 395.888880][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.894082][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 395.899286][ C0] ? __pfx_kthread+0x10/0x10 [ 395.903917][ C0] ret_from_fork+0x4b/0x80 [ 395.908345][ C0] ? __pfx_kthread+0x10/0x10 [ 395.912953][ C0] ret_from_fork_asm+0x1a/0x30 [ 395.917747][ C0] [ 395.920808][ C0] rcu: rcu_preempt kthread starved for 7841 jiffies! g19405 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 395.932012][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 395.941987][ C0] rcu: RCU grace-period kthread stack dump: [ 395.947864][ C0] task:rcu_preempt state:R running task stack:26688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 395.961362][ C0] Call Trace: [ 395.964638][ C0] [ 395.967553][ C0] __schedule+0x1b88/0x5240 [ 395.972084][ C0] ? schedule+0x163/0x360 [ 395.976440][ C0] ? __pfx___schedule+0x10/0x10 [ 395.981320][ C0] ? schedule+0x90/0x360 [ 395.985567][ C0] ? schedule+0x90/0x360 [ 395.989821][ C0] schedule+0x163/0x360 [ 395.993994][ C0] schedule_timeout+0x15b/0x2b0 [ 395.998862][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 396.004242][ C0] ? __pfx_process_timeout+0x10/0x10 [ 396.009537][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 396.015101][ C0] ? prepare_to_swait_event+0x308/0x340 [ 396.020667][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 396.025528][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 396.031677][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 396.036993][ C0] ? finish_swait+0xdb/0x200 [ 396.041651][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.046831][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 396.051422][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.056641][ C0] ? __kthread_parkme+0x1a8/0x200 [ 396.061687][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.066901][ C0] kthread+0x7b7/0x940 [ 396.070969][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.076180][ C0] ? __pfx_kthread+0x10/0x10 [ 396.080783][ C0] ? __pfx_kthread+0x10/0x10 [ 396.085378][ C0] ? __pfx_kthread+0x10/0x10 [ 396.089965][ C0] ? __pfx_kthread+0x10/0x10 [ 396.094568][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.099779][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 396.104981][ C0] ? __pfx_kthread+0x10/0x10 [ 396.109568][ C0] ret_from_fork+0x4b/0x80 [ 396.113996][ C0] ? __pfx_kthread+0x10/0x10 [ 396.118597][ C0] ret_from_fork_asm+0x1a/0x30 [ 396.123373][ C0] [ 396.126371][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 396.132700][ C0] Sending NMI from CPU 0 to CPUs 1: [ 396.137910][ C1] NMI backtrace for cpu 1 [ 396.137928][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 396.137962][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 396.137980][ C1] RIP: 0010:__lock_acquire+0xab8/0xd80 [ 396.138001][ C1] Code: 03 85 c0 74 22 83 3d 1a 13 c1 0e 00 75 19 90 48 c7 c7 56 ce 4f 8e 48 c7 c6 e7 e2 4f 8e e8 10 7b e3 ff 90 0f 0b 90 90 90 31 c0 <48> 83 78 40 00 0f 84 b8 01 00 00 4c 89 ef 48 89 de 8b 54 24 10 48 [ 396.138013][ C1] RSP: 0018:ffffc90000a07c70 EFLAGS: 00000002 [ 396.138027][ C1] RAX: ffffffff94113788 RBX: ffff88801d6ce568 RCX: 000000005c37a3a3 [ 396.138038][ C1] RDX: 000000005c62bf56 RSI: 00000000334c999e RDI: 0000000000000003 [ 396.138048][ C1] RBP: b6eb7cf13c21aad1 R08: 0000000000000001 R09: 0000000000000001 [ 396.138057][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000a78124f4 [ 396.138066][ C1] R13: ffff88801d6cda00 R14: ffff88801d6ce588 R15: 000000007a03e46b [ 396.138078][ C1] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 396.138090][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.138100][ C1] CR2: 00002000001f3030 CR3: 0000000032b44000 CR4: 00000000003526f0 [ 396.138114][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.138122][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.138132][ C1] Call Trace: [ 396.138137][ C1] [ 396.138147][ C1] lock_acquire+0x116/0x2f0 [ 396.138162][ C1] ? alloc_object+0x5b/0x310 [ 396.138179][ C1] _raw_spin_trylock+0x46/0x80 [ 396.138193][ C1] ? alloc_object+0x5b/0x310 [ 396.138206][ C1] alloc_object+0x5b/0x310 [ 396.138221][ C1] debug_object_activate+0x266/0x5c0 [ 396.138244][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 396.138268][ C1] ? rcuref_put_slowpath+0x118/0x360 [ 396.138287][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 396.138303][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 396.138320][ C1] call_rcu+0x99/0xad0 [ 396.138340][ C1] ? rcuref_put+0x1e7/0x240 [ 396.138354][ C1] ? __pfx_call_rcu+0x10/0x10 [ 396.138372][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 396.138388][ C1] ? dst_release+0x125/0x1b0 [ 396.138403][ C1] skb_release_head_state+0x73/0x250 [ 396.138419][ C1] consume_skb+0x60/0xf0 [ 396.138432][ C1] nft_synproxy_eval_v4+0x3d4/0x610 [ 396.138448][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 396.138461][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 396.138481][ C1] ? nf_ip_checksum+0x13a/0x500 [ 396.138502][ C1] nft_synproxy_do_eval+0x36a/0xa90 [ 396.138525][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 396.138553][ C1] nft_do_chain+0x4b2/0x1db0 [ 396.138579][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 396.138599][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 396.138616][ C1] ? ktime_get+0x3e/0x200 [ 396.138641][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 396.138657][ C1] nft_do_chain_inet+0x41f/0x6b0 [ 396.138678][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 396.138697][ C1] ? ipt_do_table+0x314/0x1870 [ 396.138720][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 396.138738][ C1] nf_hook_slow+0xc8/0x220 [ 396.138757][ C1] NF_HOOK+0x29b/0x450 [ 396.138774][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 396.138792][ C1] ? NF_HOOK+0x9e/0x450 [ 396.138808][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 396.138825][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 396.138845][ C1] ? ip_rcv_finish+0x409/0x560 [ 396.138869][ C1] NF_HOOK+0x3a0/0x450 [ 396.138885][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 396.138902][ C1] ? NF_HOOK+0x9e/0x450 [ 396.138918][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 396.138934][ C1] ? ip_rcv_core+0x80c/0xd20 [ 396.138951][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 396.138971][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 396.138988][ C1] __netif_receive_skb+0x2c9/0x670 [ 396.139008][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 396.139033][ C1] process_backlog+0x664/0x15c0 [ 396.139053][ C1] ? process_backlog+0x33d/0x15c0 [ 396.139074][ C1] ? __pfx_process_backlog+0x10/0x10 [ 396.139096][ C1] __napi_poll+0xcb/0x480 [ 396.139115][ C1] net_rx_action+0x89d/0x1240 [ 396.139141][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 396.139160][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 396.139183][ C1] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 396.139206][ C1] handle_softirqs+0x2d6/0x9b0 [ 396.139223][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 396.139238][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 396.139253][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 396.139274][ C1] __irq_exit_rcu+0xfb/0x220 [ 396.139288][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 396.139306][ C1] irq_exit_rcu+0x9/0x30 [ 396.139318][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 396.139333][ C1] [ 396.139338][ C1] [ 396.139344][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.139359][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 396.139375][ C1] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 a1 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 396.139386][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c6 [ 396.139399][ C1] RAX: 48e7b579754a1d00 RBX: ffffffff8197af7e RCX: ffffffff8c30995c [ 396.139409][ C1] RDX: 0000000000000001 RSI: ffffffff8e69c6c2 RDI: ffffffff8ca1b6a0 [ 396.139419][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b [ 396.139430][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2 [ 396.139441][ C1] R13: 1ffff11003ad9b40 R14: 0000000000000001 R15: dffffc0000000000 [ 396.139452][ C1] ? do_idle+0x22e/0x5d0 [ 396.139469][ C1] ? ct_kernel_exit+0x12c/0x1a0 [ 396.139487][ C1] default_idle+0x13/0x20 [ 396.139504][ C1] default_idle_call+0x74/0xb0 [ 396.139521][ C1] do_idle+0x22e/0x5d0 [ 396.139539][ C1] ? __pfx_do_idle+0x10/0x10 [ 396.139562][ C1] cpu_startup_entry+0x42/0x60 [ 396.139577][ C1] start_secondary+0xfe/0x100 [ 396.139592][ C1] common_startup_64+0x13e/0x147 [ 396.139616][ C1] [ 399.504915][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.518720][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.992642][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.013400][ T1300] ieee802154 phy1 wpan1: encryption failed: -22