last executing test programs: 12.755157127s ago: executing program 1 (id=930): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x99) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1, 0x0, 0xfffffffffffffff2}, 0x5}], 0x40000000000000d, 0x2000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000810a05"]) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x88031) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x1f, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000025c4000000000000f8c8000018110700", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001580)={@map, 0xe, 0x0, 0x7069, &(0x7f0000001480)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000014c0)=[0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002640)={0x0, 0x4}, 0xc) r4 = getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r5, 0x0, 0x5, &(0x7f00000002c0)='[&\'%\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, 0x0, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') 9.347597375s ago: executing program 1 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x2000000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x20}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.343150594s ago: executing program 3 (id=952): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x7, 0x0, 0x4}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dccf8040cd141661600100010902120001000000000904000000e338ab00000026fede65bacb1b72c56f0401811577d32c9048c0e405d77b06ea86418db7aebbd6a14d1f7bdeba6d67bd3825ae17a75933b3baa26183d09a3f"], 0x0) 9.182442084s ago: executing program 1 (id=953): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r0 = socket(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fbff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x4, r5, 0x0}]) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffe4}, {0xfff1, 0xfff1}, {0xe, 0x8}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x58840}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x5, 0xfc, 0x9, 0xe, 0x0, 0x70bd27, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81, 0x0, 0x0, 0xa0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 6.791387762s ago: executing program 2 (id=962): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x40200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000480)={0x9, [0x1, 0x8, 0x100], [{0x8, 0x3, 0x1, 0x0, 0x1}, {0x7, 0xb5, 0x1, 0x0, 0x0, 0x1}, {0x4, 0xe3, 0x1, 0x0, 0x0, 0x1}, {0x800, 0x6}, {0xde, 0x6, 0x1, 0x0, 0x1}, {0x8, 0xff, 0x0, 0x0, 0x1}, {0x0, 0xd62b, 0x0, 0x1, 0x1}, {0x1, 0x5, 0x1, 0x1, 0x1}, {0x4, 0xe147, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x5, 0xc10, 0x1, 0x1, 0x1, 0x1}, {0xfffffffb, 0x70, 0x1, 0x1}], 0x6}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f00000009c0)=0x5, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, r4, r6, 0x20008, 0x80000003, 0x1000, 0x400000, 0x7, 0x2, 0xffff, 0x200400, 0x31e}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x3, 0x4, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={r3, r7, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x20}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r10 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=g\xaa\xd5\xe9n\xd5\xeas\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9e\x86\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\x00\x00\x00\x00\x00\nj\x8c\xef\x90\x97X\x16:\xe2\xf08\xc0Z\xfa\x1a\xb3\xf0wV\x01\x00d\xf8N\x80\xd1g\xd8e\xc8\x16\xadba\x14\xb8O\xe3\x91\x93\x11\xf0\xc2!\x98\x1a\']\xe5\x1e\xa7\xa6\xcc\x9b\xc1R.\x8aGj+k', 0x2) ftruncate(r10, 0xffff) fcntl$addseals(r9, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r9, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000009000000", @ANYRES32=r10, @ANYBLOB="0000000000200000000000000080"]) r11 = dup(r8) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') lseek(r12, 0x36, 0x0) write$UHID_INPUT(r11, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_xfrm(0x10, 0x3, 0x6) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000440)='\x00\x00', 0x2, 0xfffffffffffffffe) 6.724587735s ago: executing program 4 (id=964): r0 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 6.522393885s ago: executing program 4 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x5c}}, 0x40080) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0x2}}}, 0x24}}, 0x0) 6.355546372s ago: executing program 2 (id=966): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00007dd000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x3, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0xa6}, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, &(0x7f00000001c0)='id_resolver\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x9d, @ib={0x1b, 0x66ec, 0x7fffffff, {"877235c90aa8e02cbd52aedd47933134"}, 0xffffffffffffffff, 0x7, 0x84}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="76ed92b40cda989eacdcb8c4b3b7a05b064d0a6d27e182ac237483806de7a9fbcdece4c28fda0529327c19678c4a54c64cf9568166accb3df2801167d62d8f10e989982715a1cc29b37cea487dfcda22ac160ead001bcf3ae049aa0aa0281d3a5dd9aad08101ad63d716378ad1081a56409423038a8153434b0798878eb84cf420e5409b423888ac31fcaffdfdc7494fd7782804fec809ec8b641bd38e66c99fcba9c61e91e6c4fecfe027c7d40180dccac966274032e1e44c21c2bc", @ANYRESHEX=r4, @ANYBLOB="f2f45b764e6c48bd0c16a7cc04d7fda94fd0158b8a73ea691eb460ce049f96a6880bc9934c21175e801695454b79cd24367ffb3a9f153d0f753ec69907ca79b62a98bfb0b8482ade5aa7ecdae5547f9e7ef0810dc31b568e1ff3db8269d159cf6d7d4eda4d15d2d106f88928bd2196c7701af92039fe25d791957206d71f14f6edecae77fb315ed282a8df48aa54fed9b4b3b3ff93d596f3a0a8db91f63b257153a89a06f1075e6986d82d5678d8862727188e1ef7691a47b5cb4831d8ef1ac87d2b000000", @ANYRESHEX=r3, @ANYRESDEC], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x80}}, 0x4814) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r6 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r7, 0x1000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.230739762s ago: executing program 3 (id=967): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"940de312c9be185c33394390ce360adcb8443d1ca2464ad29fe46c8717a823e29b12011e867516a9c1b63394e6b4922549ac2f98b0bafc013757371b5762e5b03b4c8cfcc5d34368b21917740955f80e80fa98a68cb052b102c03e72a4c6702778dfcc5bb74ce23d914f8b143bd94d7382a385be93f61eef509d6cbffa81afee0e3524b8b768a0ef0ae00ad2a23728722436d1c150b512b6c642cb2eeaecb085719014332015474a4ddf7098bb5ac398c0ce256e4dcfd4613dbe9a34b96439546a28db9ce97b344b6c97288b3854e127b4f533f56439a74fcffc41dfeffc5d7a99c01a0fedfd937af595c05a942216581f8efd1ffa1c23c6f08d6987be16bb52420c80bda5da46987fbf7209487defe0374226a526d3588660192d921bfe407f1d1833f390dd8b41b30c53b4deba5a086c516d9bc8ca572d8f0f875303c85bd16570e89f74d7c4ef547a07dd62f334fee76e2e0ca31cca1ad0528d7448ceecd4c9785c302a40bc114335dea8775958a3beff8eeb31afcb9a2c7561980f8554220769e5e90fdfb2f5a905518ef1667a91e2dd474383e4312ea219fe65d421006734fe04661f75e69ae825120b33fb74293e3b83e7f7f563b475cd6e08fd6878ee424fa141d3aee86d952c212c2e7730796510a463a8da486852b23a1d62b714a11301499029d9efb715a11b64f24cd2660c9a47573ce4dd042e333e433ee28b2bce545cf067040193057de290965c1d547fed137e5eb22f5c0a06ad4de6b78204bf053f37c5d96b8053ea445b640360da8fce3391514dc3d1f4e4b35047138cd8c2717bcba278a4f8c27bac01b469ee3fd04004f58287a18307b0ad4120f2c26b08c3267249bfbe1064a3f171e0cfe595f7ab146f3148c73228edf694dc0c400c36e3493b1aca5f85972dadb8d02bddb607b7a431750ca4863812b8020000000000000042db2971e280541cbfa446c6c6d85b77e3327a2d327c25b7619647374e76b1be266cb68959d2651d0c7438cb1b53982191858c66500d8536013701194a9f02dd77216f932e07a4c4b4558b2a38d7e5c39a453c8fb5fae0d00550a2d143f721cd676d842f2ae39ecbf99e027b4cf9f3c2a9bf3b663e51a0b29cf4cfb0877d5b89fdfa93fd9bf33392e6a2c8df36f9f2faa3716d293b7d94c93458c17df99aaadd218fe4c7b967b43f48725e6bac67bf9176e8c63f94862b036b1870bc314b51fea9d0c92020427abaf5be10d3faad2f684d46a2461f2a92350d6f204f03ad2a9fa54cbd8a7a3e7ba2d54f3615ac5ea47f120572f8ef941e81b0812bfc4227ef5719093afbf90040ef1a5eda64563eb7fd015ea54342340ec8648d911a8f3f358ca124ef8c70685bce2fbaeeebf54d059cefd53751b5cf33fe2d92c9df6a63821b6db5188210565e132768b192fb27e745605c529e3648060a98d656f35e36dc4be3102bd678db0ceb0301c5cb0f7f7a08c55cd038a5f751a7c96116f0bd9c9a349558a7a8fc6a73cce1132549169822bf32d742fc4f4e2e50f59eb669f2384282247c60253edc98f9bc802a288a94e1011a066ce9f6eca5f87d2afd893900c3aff87be959451269bc9ac735c43c1e5ecf5d5bff262a27f0c8a1ad401492ffec662e27b12399096fee9910d0fadfd1e1bcf1f20f8f7e5ff1cce9e8db0fd71dda6f228aa96bba6b4120361a6f6acc832be5daa1aabd03a9ae810f0d21466c1a652a47c11db6a8e52580a8347326113b54a4beeaeb21b45e5ef0aa3cfbfb22d99640b7b935bce8e37cebce586f7fe72208b491795a9fbb220ec9b98dd7811ced86292189ce351e8a64c6afde9c1dccbaaebf7e5e3d5e529e926e814b381342c13ea0757ce52a0b0a155d1c85c4108deffa719a22bef7b681a17504e22d6fe9197699e0a16a7104f412e3a681c8ee41d8fbddc8610c161f1fad9e4a5e526e20ac61496e9f3596cc94b79e9680a64a832dc26d6e33e127abe5c405b16978bc4297a85ccaf1599b195db9d66b698c770d84fa90d89b51eca02ed3a3465b8eca9589af034bd6b9c8f6329e393e4753887696ae5158e8ca3ef2e66fac38a6d6a1b61e81d5b6a3c1cb007d64a33f1fe01cf39b82b270e9083ce13b1a32f0c98376d43cdbf9f17b74655f3000343fe051a75ac658a84629b1245107652d6dfa54b1a7d77922becb74539ffb11292794f12ebfd3ea8888c7cd10692d52c85340f92c5d01464fe36deaaec6ad6cc22870372d61485e2d76accd9bf93e0842efe5652e73100a6727b3a4ce4d1594c8ddb5742897d05fd6f6333fa1b90afeaab9fc7426251d24deeef43784f12c0bb09f102962ee9ab427a53fd8da8e1e3c8000ac7164e61d6258c515dcdd911fb1a519d7b38e556457da330ceda8e948aeaf7421d37faf50071f0d38c08fc938278f247084195e778ac90ab7bfafb59c2a1c643cd18d883a46a6cc41410f505ba209746d6b12c015eddf31b6c9ebf2f04605518033721cdf02b1da210ca1465129b443c0c46247b5f8cceb000af2c551fcea1c1bef29c5859e95bcf0956b9092279b47dc652134d2bc54c3688978fd4d7c203749da5e4824fe314aa57e76f58fadfafcc7660b68b1a6043acf8f9f0c259d16fe236b5906f88816e7ab69b67f762ad79a5f654c507cc49be181525ff05cde4d56b53790151efa8060c4685e2b1dd0ad89551a41e0d3dda33c2b528922849a8dfcd7246c242c3b2aa38a69e3e5a37c5806c4bcff53e08ffc7a830d925e3394b688ffffffffcbfe387c9e7df19cfb2b54303c101557aa2ed080194fe0af76d672ed77dfa4c5c0c0f9693f4e8c446d3bc19c0a8654bb4ba8b4daae69edf414615473ec2aadaa6871b7d08a51e349acc7b16fddf741f71670da4c2b0eadcf19f46f0fd18b59ecf7b943a2a5c90125638a3b3270a366c074868e62fe2e8751ff3e60411d7e1b3fb6a873f7843489f661f1bc401765cdfacbd76e1b52e15fb10fc19dc4803d3a4743ab977fae35eed00d59ddf64fcbc61f5fa0cf4098d0babde4a397d2ef100c23ca9f836656d5f25b018606e148e3f66400a682472ed5d28b7de624ed838277432623c11027da18378e46c3fd340585b4835ab1d771266322eee56c3e6bf3300f5d48b6b01f515ba7f3fb726cfc6fdf6c07a2f46bbc3f36fc9ba6e551a46335337c881cc4b73e79e76638411adcaa81ee3b6d0e6e6c721da36dcab68bfb0ca6ba7b2c267b80120143a5c4be333b2cf85b3bd2425ca691ff367d130dbbd8e5f6a819e093eae9d176c1c3fb61557f9e5080ee7703fe2ca1061b52d0a40d7ee2f408b3ceac303e302d96d929c17026793c66423d748a81adfd7cb29027f327b0dac4055e88e385f0400f97988aa1fa40cdf776f9f07991fb55d9d4bf62ebefced240d821bd4fbba62c1b62320228c6a4ca613878e3eb538eea28e92b5d909fc7e63ed5a544e7698d0b7d3d99415d4028a5da4cc67fcba3b744acd4f92938027f42b785405228a38d85fd678703b9d41a6a54cd48303a6be64408101fc5471641c1c5a747244da684fef97aa48bf1a225007f26d9f4002a0dc14d01191ef1d749ea2ea05c42c173c3244c1039c04341b0cf37574d8b78e357b451bfcfb79762ed6a4fbc689690bf37afaa92702a0349ed9aecd9111df9fd57b97749bbf5003991029344497c9ff85adaa7a2e566647ba5bad341eed62034b581981dd7c9de9fd4c241a54ad4d6e9e1cf7ca984b13c628cc65eca0829e69d4d390581e43cd2ed5c56608b45c109f35350fb875316e71f79c433319462d4b589a1f7f2d14d43092655da23d63c63298ed62dd481ab0bc58e97f397b39c94b32fad6a1e0cd9da2dfbe6897ee4986fdbafdb0e4b575f800df5da43cf318ea7a5e83a0136b3bde3296b2bd230ed212f79500c6a4458522c3881532b7bfd170647ee65931760f35a1c1f95b8c93e4233f0de2a13c83f31522f2bee05a57c8378ac6bdd3c9e30dc188b30dadb936f35a3fa247732ebae6a8d762992f8a96c1d26981bda157f2b676ac9d61bb786ac8c349da94dbf75a21b786cdceb47a92597b6d2b22f7dc1187cdb4681ce9bebd69977bab9eabf2a68c1d3b3463d6c7f1392e12a17deb97f2ce5c9ef4021d3b4e0df6b3f4b693e136e3931837e91617cd85846f3019a74d2d65f36369e73a461753631d72f9e2834c446ae7e173d6b1935adc0ce65eb0eac830d442a0344f2cbaedf8d48cb0a6959d07f208fbb2dae434f4fdf35b265fbdbde4138b455b7941096d55808de601ddd8a41a70b12968862d0b4086d4ff55152aee65eaa761a9588bb25bce193b4e55ebb183807f118bff0ccbd85ea761e7c3b6cccb64f97b3f1bf7a96eecc7ab40e770a1620209b509f23aab0f769a16c9b8092326987f0cd1de94b911ea6bef5cf15a93829b7cbf03aa85ef577633e058f81e9653fc47d15ab8bead567ed2affbbf5a470302c065086324dc304c777228050ea9f717e45b6676fc9002ccd0428fcb27d839e4139fb17d4ee72e2fe8394e5de0cc814d92663f8c5f87e131a34ef7094078be0cf54763c82004af9727c7972ff1ea6162b279beea87bc2741e996d14f549d0474aabe780c5b80a35eed311cb734c23d01c160e439662c813126747c7d09068e32fa72605d71abc2a332cb59d81071818d5e0944194285f4cfc050392e505dd93c8c882f46fb6b70b4660784d543a6bf34653487840fdc298c8280241174805bf3cf38083224d213cd6076beac135ed3f8c4c6d808c45da2a47750cb0f4d2be6beada1c481a0152d80c0b520d2f090455494c83ba78eb91e6558d52ceceb23c956bb382bb280e6382d2cb679eecd2bcfb6107e2e4f568f1be293eaa0d2ebb77169b103d5fe74d745cf082c36022108b4c430a87fa8535f1c56d0c1d5dae50c549b1b08911e2d2619eef61131c7804b35c3ca4dac1f2595c68941b013b5ded8bfd52ed41da13c0886b7f9c61a5244a815711253aad7ea74eae788b1beea9bc15addb199d2fc79e81a34b887a0e4b935ad154e961c8b6972f124cae7742e82db1e714af15f34908960dbb4ea24e44ffd750c9d11dd45bfaae73028bc88fddf74b2d24de205980ba14f4889119f8a6291b3724497503ddf95222d5d050414e487a3dc65e5eda3169e10570a50440be346cc1f1b0c848410b46610c738636707c5d740a8e3a9b688c2c1ea54135bffd2ffd87d9dfa902f3dd97b2a6068fa65f5a5f95da2b9f6124fe07682e27ab65ab96573e762f5060439e18649798e0b9d7864f91dbc4f4ed3a4ab30671f8f7f3c49c7ac504a754f9420fd9b22421afd7203f7cd6dd8c8e7a33709e12d004e402672af2b3f9046bc57854f98482538ad48723cd153cf03103c157cdb1a63e839a02c3f0041d7020280f96f3f7e0ce89c408be10d344540808dee1bfcb01f5293ab606c71ffc09f9e63b93b37e8d8007ad8432d2e81c3d1d40a57711bdb798ee91a3f05f93f4f46f883db0613bf95fabd523d955d0d4a5518e1bb3dae7646af8af8d4a4d7dcfac633c6efa3164f9e05bbb4b05947ac0e6c4edd99a768eda4c7149cf38a460b522d6405aa47fada1c78f56fbd33669719b1496427f290532334b69d0a7cf6c46cefe5ecd0fd923b14929fd3db8a1a94ba63954b58ceb9b1e0f8471a02c13a160aa763083a5fd36c199075a769768e164f17911f5a416bb96198aa0954a7d27e30c480691ce80dc71a49100", 0x1000}}, 0x1006) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) (async) flock(r1, 0x2) 5.291884262s ago: executing program 1 (id=968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fcdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000040000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000004000000000000000000000000000000000000007f000001000000000000000000000000000000006c000000000000000a01010100000000000000000000000007350000000200000000000083f3"], 0x23c}}, 0x0) 5.175774715s ago: executing program 3 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0xff, 0xf3, 0xfffff004}, {0x6, 0x6, 0x4}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 4.980671158s ago: executing program 1 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x7ffffffc}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000100)={'veth0\x00', 0x42}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x0, 0x5, 0x0, 0xfffffffffffffdfc}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x4}, 0x0, 0x0) 4.78362059s ago: executing program 3 (id=972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="7c010000190001000000000003000000fe880000000000000000000000000001fe8000000000000000000000000000aa00020000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000200000000000000000000c400050020010000000000000000000000000002000004d63c0000000200000000000000000000000735000004030700080000000400000001000000fe80000000000000000000000000000c000004d32b00000002000000fc00000000000000000000000000000101350000020073000900000005"], 0x17c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x0) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x2, r5, 0x7f}, 0xc) syz_usb_control_io(r1, 0x0, 0x0) 4.344088007s ago: executing program 4 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x8, 0x136, 0x0, 0x1, [@typed={0x4, 0x2}]}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0x9d}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) splice(r2, 0x0, r1, 0x0, 0x6, 0x2) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40101}, 0xc0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYBLOB="8f"], 0x1c}}, 0x0) (async) fcntl$addseals(r3, 0x409, 0x4) 3.797836799s ago: executing program 4 (id=976): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) 3.67612533s ago: executing program 2 (id=977): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x28c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff692}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ef3cbc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100, @loopback, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xd3, @ipv4={'\x00', '\xff\xff', @remote}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9f613a0c39c349af1d144242b229d8ca37e9d762cf"}}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6d7}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2153ca7d9e2f3fc1a62b3c5d86b741fdc494cdef38c3c928dd53739b117606304352a9dd"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd2115a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x28c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x2, r5, 0xfffffffffffffffe, 0x0, 0xff}]) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r4, 0x10, 0x8000, 0xfffffff9, 0x8, {{0x3b, 0x4, 0x3, 0x4, 0xec, 0x68, 0x0, 0x7f, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xd0, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@empty, 0xfffffff7}, {@empty, 0x81}, {@empty}, {@rand_addr=0x64010102, 0x8}, {@remote, 0x1}, {@rand_addr=0x64010101, 0x6}]}, @timestamp_prespec={0x44, 0x44, 0x41, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x80}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x9}, {@remote, 0x89c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x1ff}]}, @end, @rr={0x7, 0x1f, 0x7d, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0xf}, @remote]}, @lsrr={0x83, 0x2b, 0x3f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @rand_addr=0x64010102, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@getqdisc={0x30, 0x26, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {0xb, 0xe}, {0x3, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x28c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff692}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ef3cbc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100, @loopback, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xd3, @ipv4={'\x00', '\xff\xff', @remote}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9f613a0c39c349af1d144242b229d8ca37e9d762cf"}}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6d7}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2153ca7d9e2f3fc1a62b3c5d86b741fdc494cdef38c3c928dd53739b117606304352a9dd"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd2115a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x28c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) io_setup(0x8, &(0x7f00000004c0)) (async) io_submit(r6, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x2, r5, 0xfffffffffffffffe, 0x0, 0xff}]) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r4, 0x10, 0x8000, 0xfffffff9, 0x8, {{0x3b, 0x4, 0x3, 0x4, 0xec, 0x68, 0x0, 0x7f, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xd0, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@empty, 0xfffffff7}, {@empty, 0x81}, {@empty}, {@rand_addr=0x64010102, 0x8}, {@remote, 0x1}, {@rand_addr=0x64010101, 0x6}]}, @timestamp_prespec={0x44, 0x44, 0x41, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x80}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x9}, {@remote, 0x89c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x1ff}]}, @end, @rr={0x7, 0x1f, 0x7d, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0xf}, @remote]}, @lsrr={0x83, 0x2b, 0x3f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @rand_addr=0x64010102, @broadcast]}]}}}}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@getqdisc={0x30, 0x26, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {0xb, 0xe}, {0x3, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) (async) 3.452878131s ago: executing program 0 (id=978): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="bad104b04bee660fd5fa66b9040300000f32660f38804100660f3880a5760066b8010000000f01d90f782b360f20a1360f00929708baa00066ed", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) getsockname$unix(r3, &(0x7f0000000480)=@abs, &(0x7f00000000c0)=0x6e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0xa6}, 0x0) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, &(0x7f00000001c0)='id_resolver\x00', 0x0) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x9d, @ib={0x1b, 0x66ec, 0xffff, {"877235c90aa8e02cbd52aedd47933134"}, 0x1, 0x7, 0x81}, @ib={0x1b, 0x401, 0xffff, {"8df8e11c079fe90e537675e92ef6b7f9"}, 0x1, 0x8, 0xc}}}, 0x118) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) 3.379679847s ago: executing program 2 (id=979): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 3.264928837s ago: executing program 0 (id=980): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0070f0a01"]) 2.948780743s ago: executing program 0 (id=981): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fcdbdf25fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000040000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000004000000000000000000000000000000000000007f000001000000000000000000000000000000006c000000000000000a01010100000000000000000000000007350000000200000000000083f3"], 0x23c}}, 0x0) 2.714524849s ago: executing program 0 (id=982): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007e00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@multicast1, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@dev, 0x4d6, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0xfffffffffffffffd, 0x0, 0xfff, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd}, {}, {0x8f}, 0x70bd29, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0xfffffffd, 0x101, 0xfff, 0xe15a, 0x3f, "c1d62bb4a76a15258d5bc81ee29ea66f74b6ae", 0x4, 0x100}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 2.675693721s ago: executing program 1 (id=983): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r3, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty, 0x3f01}}, 0xfffd}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000780)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 2.580770092s ago: executing program 0 (id=984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300000000000905020300"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) process_mrelease(r5, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32, @ANYBLOB="180008"], 0x40}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000001d00000000140071d10eda441d8dcd6e64000000000400028083a3b65a294970000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x14, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYRES64=r11, @ANYRESDEC=r12, @ANYBLOB="0212aa2b41ea498de1204ed50dc6ed815de53c1ea63ca5d86504351d2bc3aef9fbf909d4d125e248d51f0b707de0dcb04cb82ead49e4b74ae6c3bfdac2853db3adbf5672c92f247eff50eb4ca9e5705058c4b659bb5c52c9d45f5604c83cf73a3a9d86a9746ae917edbaf19d0a5f981710486535a8b320854d449e11d9b8951434d03ebf63b437509e905aeff694f75836ca703774e1cc9250354a75f2b256d72ec1053c787a7d026c7030512d17b60508ff9ac8a2c4c8e5f21fc06ef9004475d44ed3bbd3395f1a5e651a5faa1afdb4ac993954c57f38d3f1e758be02fdbc1ff3f7d01f3816d9edd7b93d24dec1fe6f6c03240af63c22e6afb9597b4e498861068132b8bc77120353df7829fac552302456f7f4d95665f97a42e6380980df006353f883cb8cfba45f0dbeb92a32a8899e609304c376da68ceff371dbc09bcc61361509981d14714b38414501b1c50e193ebb32ccb9fb265ce3271ec0c1c871ec420243b56503776ddc8366bbe97b2683ada0cbf68bf5a89db137b51c8fb1dc6d77ab3f5372017b9940cc7279304116031c4bb4a1a113043b7130e19a2ea95a606218160d8afe4abfbfbe725312fa352f235c35fb986ececbd4bb90f5653e0e5e99c5549d50aff1a3ee86c91d0cc1e019ee4b9b39e79326d8b1728a0ca2d2ae649ca477068c20f4a30f9a725acd986aeb34678217df07fca3796bad9a01be6cd84412d92b693ddf478d3cb88a0b29cda103bba8440f36bbc3a9a3d94607e975be54b66941ee41b565c9c023c4a7464d5dcfb46c659526f91a883b9729109747256b3d73b3e44678cf6b29e5fbba86dfa1d56d1a47c8092496982a18f5956d652f43d16f417152d94851c077eb3fa9de504013fcb77fc289c7b12e6612e6d91ad6244aedde44a0830a9e783f832a4ab6a7f0527fdd9ee6afd7c53e789acd0b7bf20883785793e903093a25fb8ff123aee6bbd7a3dbd2a79b80b51ffaf62286adef079de38c9a39edaa7aee9c36fef6af02d4ed1fefcf68f4c5fddfa454965e053d2dca31c67d5c9d0fde6061e34c28660b1b901bb523555607f7b6f99d802b0b46fb883f09bfaf3eb3b68e8e8f15721eecc1e09d0577f79cf133841c589e4287128e4f78dbea00ec92155f9e8af5e3243f41fa02c1457b70c3db45b043a069457cdad1a7fdc333f474ae6a898348f78e0757bbecd77612b1645502deda9440a747c4f0f8d1c8f83e528e1ab9b55ac86fba9eb32f04b7d0ea8d76b5510fe92fa0038fc840a5773a188aa39cc1094d6f6300ef6487254bfb2d630e0054001ee6bbeccd09fa8cf21031d8290a303a6fdb14baad3b403242ca35e62048f6bd48730fe0f8ff9d18df4a0568141bcbe471591a4b8fd3946f7232d7aed22ffb1bf8cb6426be144081e13af235926058d495bc611188e26be2e981881e30cffa908ca688d81321ad96a36e1505b66a1a0c97c55a3ea33173d7788e7b037f5773f3bd23c0a8b2267dfda5799b8b87fca1191a7e6c655e2979507f00e99e149f5c416d9457b0e3c9008ee23a2e806e4da07dec0b5479e45ce98705bfe77de05c048b31a5cfd21a30e75615455a4e910d8ce9f451e1bb036d45081874bbd8066760b19ec086c460f8050d467d36a44d9a89f856367d7fc7fc2de5dc7044a0c63ab5d1908484de4e53187b7bc4ba988ce3fc0e86fe889159d741c29616b6c9f2420fd597c50a588c1c8cc1852c1297a6a834265716c35ff4e5b71ceb6911c6868a2ea2bd8c3f3e867da1e910054d661711b32566af7354892de1df789112b7641b0b25d011be69a5013a0fdbec8ac2443c4ffbc43b8d34afc6fd704e3efeca25b1503c9335a451dc96ce1e116628e5e20b9e72ea6c26a585d2063d569a4f995b2c4147771fbb9a2f9fffe6bd0c00c80e76829879c3af6350ff7e23e43832164767eb2098f75250021366a9363473adfc6edb19fd408291c2b7365f4db2468dc2bd561b3c7b647ffa7c493f08f516d137a4e256a4c30fd8be63c94a88c74101fa0dee2a619ba348416ff9f129d0e4f30b4fcdfed92e8bec8a2b3a8e8e2d290f9b6bbe905f3e464d9242a90abad47934e4bc076aae078f991bab1134927fa9895cf7b82d46071a5318459b3e5703f3b55357936c12209d1e931d92fdd44d684b666b11d20c129c305e73bad3ffaa694bc1a4457af0f4cc5b94f5338cca11c2bb0b3af9886ec41c76343cefdcca539702d5f195c195bd71342571063050e9150b15ed17874e4e82d4b9c653f77858dfd209a400e703d831447c9b72d968352a418809170f3ef29bc294fe961191f94df880517472e5f325f59175faef27a147f2f57052983dcdf944c830a4dbc8e93dce8a73d6609998e0c29963ccb83fe2932b7083e64feafc73e391bef2bb84a747af5f9a7bca35c60587a53af6ffb1014ec54f0fdb0f94a900a61d61715fd3d86bca1d1845b2e230e949bad74ab18f76bc7f9c457da63b24dbe09120b857a1d913f723e6f00e53c376d25f462b67aeaba4b9f0193923f0a70edb71ab890eb29ed5f52f6279a8d094a3f607a03650faa6746b8dc189ed300b5d586821b6c8a8dca969634f51509f3224116beb59cb45ec1a2d9d0494535dc4ec07a1d75a16359e4f2c1cc9028e36b1930c029ba5dc888b0033fd04c9e108b231d645a69b4eb5f3077e8dd7f4db3acc374b89827ed45080b363a9e09e17a89a55029c5f840c55508729fe83e33cf464638f16ce7e0b76087298facbbb4d8055230062894a79c440aa91a1f32c60139a6fd4e30fe2d6f3c6cd8f173acb14b1881607ab0bd42d2424bf3b342a29d850273ac35d53c0cf022a663e776333723e56b0d3b5f40653b6a657e4247e9c12693afd8a545a7b411ef2db1df50211519a070bc84249474548939ea009be0802527c8388f6bc3a172beb9e6150edf2d8d716d24638b0aaf12573eb5927953c27f4cfa4790389665938526606611b7ca757b9953c570719a0cf49916d752070b673eae38f2544d53e53add9b5972e9b1e90d2e1e17fcd7fa586f1c6d1d8327fcad5c50dd6cb8923556088ae02a9776063af57427b78696f4927e79399653fb223c519de8a73929fd4e56a5b9d17161b218b77491d557ac5f66445ea7c4cfbb2bf25b199af9bd552b2befe92329ab9026b62af5cf4d3892174c031bf5dd08badb107e77db78d95fb0bce6c17b4ab86b25796496bf304023f99a84fe8e0a24dd3cd1b1f294a3782bc463649c1c8781ace871eed2e8f494715fff866923aa860dc4727af9eb1033938f8568768edbfe4cdacab5322a0fa780c1def97a5ab79a690e509c0609d2d83623a77d1f3779e953b674cc0a04599cbe118225c4989ed5119c06ade9be482727ec84c64038176ae44615d72c6653aae4397cd3993091810d77ba344c8e981b61e7a5bfb6d54a3622fbfd6332d76088241dc3209f201520ac80fa5c378ae66d234b525421520adf9831ff8b1218051dda8d57334966866299441d31e734bb90b475e717489e78116dcbb616797df46272418a5b66d101a9f844d2799eae687426d71f583a5694e6e93464b5cfa0a071192405c559616489ec3b6cc09d882c1721da5a22ad8e3bc6d9b64124e2f8bc3820c8096e0eb63cb947ad2117eb2119f2c1e09c6c5f5b96573759dcf4db749ccd7666d1d15c29d17d9bd1dd3e6268ff4cb470e3855d62d1ead18cf3bba94269133d728d0dfc617f63aa7a4a24a5b04a0050d000b0d6a4e8bfeb2b3d776a6de3dd9c7b75beb140d4f8eb0a6ede10bcd1174b57f735b9af3f71ae9ae92858b01aa3cb733ee374484f9df8a147f8aac210f6edb7a2ea810531cceb22fb93b0fcfa5807303fec6af8a412ea0070adc3046c5370c0c734cea2d9701383514c50ff30938a0ce404846621a00e1b2807f4e6358798c94a153c916877af333a46a15635fe69b8569992d0aa8f092686029d76daca6e687aab7f2bd3c53c04f2e05272dfd976881fb9ca725ef7f1cb125abedcb612644cb7f2923862ccdffdd816e63859ab090ee3b8613c64503248d754cf534dfb7e334c934ca7e23da2153674fe92a922454ef4e2146786af27a33ee5504dbb94d7a1d72a2983e22b4b1b691d0d9944bb6050566ad3802af6835da636627aa1776c22e3eb4c8c3e20d3b5c0a0081f6351d92a507290714aa87fff36ef312b8850c773f15d1aee31a3546d6d52fc035fce076fdd67821fda4369f1cfe552f92422448cf67f258263895900d89c1317af508cec9361656024e6e7cdb89ddbe91b917b2fcc9adace9c449b0c7f5bdf546e59a45ce9e93651b115f7aa8f71d187c45849bc0c77eb9cb043c108b1981aa394b557c69bc312068d6d095936da140d02944e5e9f67574284cbc3a8e28bd7b23f2954efa71dc393e15b11b17777c44ead7f8329661e0ef5234d8497fea6f570c4671f84f8a6f5b030cf780ed5d3fc2ba9cbfd9f71a2714f2e606568c720dd0d86db5de010e5e0663c29d96c32543e278c059bfcbcb5c569d8624f5f5281aafe4818dd3ef33f151e09daf2b0f42209086c17c2bdb0aed4625c1c3573bbe0329a3ec5c35580edbe9951dc1d9e9212024604b09e081fb30b6bdfc66fa669395236d6c09dba4aa8c0f97a4e94c7dee858e52ffaa783224d11a4d2d281d0f6114ef58de605b91341e3296b95e5e304291eef4b5b1146466aee681e9c37f33d3f6dccdfcb8889a8776f90ae9b4331b6759c86f604751ffb6a66ec76a1f15ba686d945a18da1326323cd79e292e7ecb0d6720d3ad8f29e04e4ae2c0a918e4bf818cef94c1738d9c2f8eeb8852d730b999b1dcf3a33d09a2f78d1c9756cd36bef2745dc0420531c583b15cf461f2c77c386fc9420ea2714d2a21d43331b26b283188d98d395147fb41ef229ba0aab26b421d5f8fac64b2ad13fe7f75bacef2825f2b4b22bb166b79fc4165b1183bf73590b2eed2f15679a7fa970a1c59cf886bb9fac47026400f472f2343661632415ddcbb3f4ad42e381a69634ff1a4d045468e708bc360825f8f6b3be5b4d52d2b8c0273cd6465459f6172d2f14cdc0025336002d7dbd53cbeeadc98ac9ab878e06d8903892ee24577f09cdfad31a089b1ccdca8c4bd682f0098160cb8ad35e6ea9f98170f4d71cbd6dcd3ef26abd7e9e66478f2be066de34db873a366041023b1dbcc99f925296d34550ae959ffc463525a3b33fb18492f96b5d427e5f377fc60a4504354870527ff284af7d999b0ac80e039b393cbd74dacf329635ff9e44cd9d2948673a1856bf7a9dc21416773fa1a9cda9929960194b44d0c7ef17c6d3bbc5fb211d5e7d2850d759111344bb77ec87943718b4c98cf677806010acca9f092bdbfac6384d9d60bdaa385c0c99b0c2769788cafc0c8a80d6c1bbb53eda0cfef87771ef74d4f8c5d5a6cb151a7783c58d98f3c17a9c09aad9e3d6c780f1ea5e94663947312d5c5beaa1b834698f1b2ef7402bc60e538bdea127c9c77421aecf7a0426afbb467e06135692059d5d542f64bb4776fddbdcd5d0aeb0685effa361a390657f763b78247b4676a354fd79f6785d2a957e5edb207cbdc03f443a4078ec9a403a35b6fab1f5d6c42ef50028da6c911e49d6d51185e3165228602c82f678e575a87314af13deb3e1c340902c90c5b5f842b351513082738c7b9a43eb4a3b45eb78cccd30b47bbca29065849a3eaaed41fd227fd045a9136fe05a64e7eeb00d91cb389ff0a0c9199da343c8f1518c44689299ce611d14db9c62161644d777976c81c4c258b45215a8b210eac93423eb2b241b"], 0x3c}, 0x1, 0x0, 0x0, 0x40805}, 0x4004840) r13 = accept4$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r13, 0x8982, &(0x7f00000002c0)) 1.57947969s ago: executing program 2 (id=985): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.578887221s ago: executing program 3 (id=986): r0 = io_uring_setup(0x36dc, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x3, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r4) (async, rerun: 32) r5 = socket$kcm(0x21, 0x2, 0xa) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1b, {0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fa) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r3, 0xb}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x34b400, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 64) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) close_range(r0, r2, 0x0) 1.342399733s ago: executing program 0 (id=987): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00007dd000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x3, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0xa6}, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, &(0x7f00000001c0)='id_resolver\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x9d, @ib={0x1b, 0x66ec, 0x7fffffff, {"877235c90aa8e02cbd52aedd47933134"}, 0xffffffffffffffff, 0x7, 0x84}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="76ed92b40cda989eacdcb8c4b3b7a05b064d0a6d27e182ac237483806de7a9fbcdece4c28fda0529327c19678c4a54c64cf9568166accb3df2801167d62d8f10e989982715a1cc29b37cea487dfcda22ac160ead001bcf3ae049aa0aa0281d3a5dd9aad08101ad63d716378ad1081a56409423038a8153434b0798878eb84cf420e5409b423888ac31fcaffdfdc7494fd7782804fec809ec8b641bd38e66c99fcba9c61e91e6c4fecfe027c7d40180dccac966274032e1e44c21c2bc", @ANYRESHEX=r4, @ANYBLOB="f2f45b764e6c48bd0c16a7cc04d7fda94fd0158b8a73ea691eb460ce049f96a6880bc9934c21175e801695454b79cd24367ffb3a9f153d0f753ec69907ca79b62a98bfb0b8482ade5aa7ecdae5547f9e7ef0810dc31b568e1ff3db8269d159cf6d7d4eda4d15d2d106f88928bd2196c7701af92039fe25d791957206d71f14f6edecae77fb315ed282a8df48aa54fed9b4b3b3ff93d596f3a0a8db91f63b257153a89a06f1075e6986d82d5678d8862727188e1ef7691a47b5cb4831d8ef1ac87d2b000000", @ANYRESHEX=r3, @ANYRESDEC], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x80}}, 0x4814) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r6 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r7, 0x1000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.308693436s ago: executing program 2 (id=988): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x3, 0x120, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x1, 0x1, 0x2, 0xe8, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xc, {{0xa, 0x24, 0x6, 0x0, 0x0, "d15885c5d9"}, {0x5, 0x24, 0x0, 0x856a}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x1}, @obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0x9, 0x8}, @mdlm_detail={0xb3, 0x24, 0x13, 0xc, "5af35adc92fef20d0d368c081d346b4291a7ae693761b63b64b43289d336c88e170bed253f71a119568ef76cf265222f5d244b91b2d5706b5bc8fd8443f568026cb19b617d6b4ff2a50b6334d53a18f4dbe5a34e10523b5c9ffa900e9442245c03b633522960de65cf2b4767e27bff0154c4041e29fe889244a99aa7d05227b8aac13f0610344180415d4c53c53361cf29e1cc88474ea695dbdf3dd6244cbb75e1a8325dc9fd5a90abb4affa73ff65"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x7f, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0xc, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x2, 0x2, 0x7f, 0x10, 0x6}, 0x36, &(0x7f0000000180)={0x5, 0xf, 0x36, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x0, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x9b, 0x5, 0x200, 0x0, 0x7, [0xff0000, 0x3f30, 0x3f30, 0xc000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x4a, 0x7, 0x7}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) 835.581239ms ago: executing program 3 (id=989): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0xec44b000) (async) madvise(&(0x7f0000a37000/0x1000)=nil, 0x1000, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0xffffffff, 0x2001) (async) mmap(&(0x7f00003e3000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x88bac000) 357.778957ms ago: executing program 4 (id=990): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004900010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200fffeffff1400010000000000000000000000000000000001"], 0x38}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{@in6=@private0, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x8}}, 0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d80", @ANYRES16=r2, @ANYRES32=r6], 0x44}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x51) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0xfffffffc}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x4200, 0x11cfa, 0x0, 0x7, 0x9ef8, 0x4000004, 0x1, 0x0, 0x7cce8c743ee810df}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RVERSION(r12, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0xfff, 0x6, '9P2000'}, 0x13) fgetxattr(r11, &(0x7f0000000040)=ANY=[@ANYBLOB='security.wg2\x00'], 0x0, 0x0) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'dvmrp1\x00', &(0x7f0000000400)=@ethtool_gstrings={0x1b, 0x5, 0xe, "83b5a29b93aee82a6a7a16d2fa0d"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) msgget$private(0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r14, r15], 0x2}) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001a00000425bd700002ff030003000000000000000000000072b4cece64cbcfa57e57a6ec2808d0aebb2b30971901d523120465236b1c061851a055a02b53979384d16fc36e00cc93"], 0x1c}, 0x1, 0x0, 0x0, 0x300480c5}, 0x40810) 0s ago: executing program 4 (id=991): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0070f7002"]) kernel console output (not intermixed with test programs): tor?? [ 238.674288][ T5886] usb 5-1: reset high-speed USB device number 34 using dummy_hcd [ 238.732203][ T7694] netlink: 'syz.3.477': attribute type 3 has an invalid length. [ 238.743466][ T7694] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.477'. [ 239.020642][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 239.598424][ T7697] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 239.673687][ T7724] fuse: Unknown parameter '' [ 239.870649][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 239.895185][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.912711][ T24] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 239.987642][ T24] usb 2-1: config 127 has no interface number 0 [ 240.013313][ T24] usb 2-1: config 127 interface 25 has no altsetting 0 [ 240.049930][ T24] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 240.075878][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.104048][ T24] usb 2-1: Product: syz [ 240.118698][ T24] usb 2-1: Manufacturer: syz [ 240.132122][ T24] usb 2-1: SerialNumber: syz [ 240.301211][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.313916][ T5886] usb 5-1: device firmware changed [ 240.333914][ T5886] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 240.372974][ T5886] usb 5-1: USB disconnect, device number 34 [ 240.450131][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.475540][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.653108][ T24] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 240.921370][ T5890] usb 4-1: USB disconnect, device number 41 [ 241.291662][ T24] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 241.392151][ T30] audit: type=1800 audit(1747195722.215:33): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.489" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 242.818302][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.829836][ T24] usb 2-1: device firmware changed [ 242.844067][ T24] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 242.885592][ T24] usb 2-1: USB disconnect, device number 26 [ 243.117454][ T7762] loop6: detected capacity change from 0 to 7 [ 243.140824][ T7762] Dev loop6: unable to read RDB block 7 [ 243.146503][ T7762] loop6: unable to read partition table [ 243.173112][ T7762] loop6: partition table beyond EOD, truncated [ 243.182453][ T7762] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.363539][ T7768] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 243.390613][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.495'. [ 243.407624][ T7768] fuse: Bad value for 'fd' [ 243.446025][ T7769] loop2: detected capacity change from 0 to 7 [ 243.455962][ T7769] Dev loop2: unable to read RDB block 7 [ 243.461861][ T7769] loop2: unable to read partition table [ 243.467657][ T7769] loop2: partition table beyond EOD, truncated [ 243.499361][ T7769] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.151038][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 244.302664][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.313060][ T24] usb 4-1: config 0 has no interfaces? [ 244.318677][ T24] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 244.384128][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.443973][ T24] usb 4-1: config 0 descriptor?? [ 244.684810][ T24] usb 4-1: USB disconnect, device number 42 [ 244.983652][ T7779] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20003 [ 245.372562][ T7790] trusted_key: encrypted_key: insufficient parameters specified [ 245.725855][ T7800] macvlan0: entered promiscuous mode [ 245.762449][ T7800] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 245.789430][ T7800] netlink: 'syz.3.508': attribute type 2 has an invalid length. [ 246.489617][ T7814] program syz.3.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.503118][ T7814] program syz.3.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.900683][ T5886] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 248.060636][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 248.087912][ T5886] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 248.096264][ T5886] usb 2-1: config 0 has no interface number 0 [ 248.105125][ T5886] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 248.130670][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.138764][ T5886] usb 2-1: Product: syz [ 248.160657][ T5886] usb 2-1: Manufacturer: syz [ 248.165507][ T5886] usb 2-1: SerialNumber: syz [ 248.255595][ T5886] usb 2-1: config 0 descriptor?? [ 248.328861][ T5886] smsc95xx v2.0.0 [ 248.733858][ T5886] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 248.772445][ T5886] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.279186][ T5886] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 249.308337][ T5886] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 249.339753][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.384191][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.435329][ T5886] usb 2-1: USB disconnect, device number 27 [ 250.520646][ T5886] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 251.038259][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 251.063425][ T10] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 251.154052][ T5886] usb 2-1: too many configurations: 41, using maximum allowed: 8 [ 251.174428][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 251.208029][ T5886] usb 2-1: can't read configurations, error -22 [ 251.249785][ T10] usb 3-1: USB disconnect, device number 16 [ 251.390664][ T5886] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 251.555779][ T5886] usb 2-1: too many configurations: 41, using maximum allowed: 8 [ 251.593061][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 251.604257][ T5886] usb 2-1: can't read configurations, error -22 [ 251.637426][ T5886] usb usb2-port1: attempt power cycle [ 251.673081][ T7868] loop6: detected capacity change from 0 to 7 [ 251.739871][ T5835] Dev loop6: unable to read RDB block 7 [ 251.763375][ T5835] loop6: unable to read partition table [ 251.784895][ T5835] loop6: partition table beyond EOD, truncated [ 251.824781][ T7868] Dev loop6: unable to read RDB block 7 [ 251.833020][ T7868] loop6: unable to read partition table [ 251.866385][ T7868] loop6: partition table beyond EOD, truncated [ 251.963716][ T7868] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 252.020751][ T5886] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 252.035070][ T7872] loop2: detected capacity change from 0 to 7 [ 252.062191][ T5886] usb 2-1: too many configurations: 41, using maximum allowed: 8 [ 252.079307][ T7872] Dev loop2: unable to read RDB block 7 [ 252.090736][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 252.101003][ T7872] loop2: unable to read partition table [ 252.167650][ T5886] usb 2-1: can't read configurations, error -22 [ 252.189092][ T7872] loop2: partition table beyond EOD, truncated [ 252.241375][ T7872] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 252.353740][ T5886] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 252.441543][ T5886] usb 2-1: too many configurations: 41, using maximum allowed: 8 [ 252.479273][ T5886] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 252.510669][ T5886] usb 2-1: can't read configurations, error -22 [ 252.539028][ T5886] usb usb2-port1: unable to enumerate USB device [ 253.031412][ T7896] loop6: detected capacity change from 0 to 7 [ 253.385644][ T7896] Dev loop6: unable to read RDB block 7 [ 253.391828][ T7896] loop6: AHDI p1 p2 p3 p4 [ 253.413607][ T7896] loop6: partition table partially beyond EOD, truncated [ 253.460203][ T7896] loop6: p1 start 926365495 is beyond EOD, truncated [ 253.546610][ T7896] loop6: p2 start 744947712 is beyond EOD, truncated [ 253.677433][ T7896] loop6: p3 start 1886353253 is beyond EOD, truncated [ 254.396119][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 254.657034][ T7915] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 254.664949][ T7915] netlink: 2 bytes leftover after parsing attributes in process `syz.2.536'. [ 254.677680][ T7915] team0: entered promiscuous mode [ 254.686793][ T7915] team_slave_0: entered promiscuous mode [ 254.696085][ T7915] team_slave_1: entered promiscuous mode [ 254.714402][ T7915] bridge0: port 3(team0) entered blocking state [ 254.732380][ T7915] bridge0: port 3(team0) entered disabled state [ 254.755686][ T7915] team0: entered allmulticast mode [ 254.774752][ T7915] team_slave_0: entered allmulticast mode [ 254.795356][ T7915] team_slave_1: entered allmulticast mode [ 254.905710][ T7915] bridge0: port 3(team0) entered blocking state [ 254.912184][ T7915] bridge0: port 3(team0) entered forwarding state [ 255.463203][ T7921] loop6: detected capacity change from 0 to 7 [ 255.479678][ T7921] Dev loop6: unable to read RDB block 7 [ 255.549187][ T7921] loop6: unable to read partition table [ 256.114364][ T7921] loop6: partition table beyond EOD, truncated [ 256.143682][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.153011][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.434222][ T7921] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 257.385592][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 257.764361][ T5886] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 257.834603][ T7957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.881389][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 258.020949][ T10] usb 3-1: device descriptor read/64, error -71 [ 258.036673][ T5886] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.049218][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.074198][ T5886] usb 5-1: config 0 descriptor?? [ 258.240210][ T5886] cp210x 5-1:0.0: cp210x converter detected [ 258.331096][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 258.480997][ T10] usb 3-1: device descriptor read/64, error -71 [ 258.601079][ T10] usb usb3-port1: attempt power cycle [ 258.651001][ T5884] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 258.679710][ T5886] usb 5-1: cp210x converter now attached to ttyUSB0 [ 258.716342][ T5886] usb 5-1: USB disconnect, device number 35 [ 258.736127][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.819569][ T5886] cp210x 5-1:0.0: device disconnected [ 258.826869][ T5884] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 258.864028][ T5884] usb 4-1: config 0 has no interface number 0 [ 258.917402][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.942204][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 258.980365][ T5884] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 259.003319][ T10] usb 3-1: device descriptor read/8, error -71 [ 259.045978][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 259.098372][ T5884] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 259.142700][ T5884] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 259.179964][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.249721][ T5884] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 259.268640][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.297124][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 259.304967][ T5884] usb 4-1: config 0 descriptor?? [ 259.341482][ T7961] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 259.360988][ T7961] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 259.377615][ T10] usb 3-1: device descriptor read/8, error -71 [ 259.385652][ T5884] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 259.511893][ T10] usb usb3-port1: unable to enumerate USB device [ 259.588205][ T5884] usb 4-1: USB disconnect, device number 43 [ 259.603217][ T5884] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 259.930703][ T5889] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 260.091509][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 260.103676][ T5889] usb 5-1: config 0 has no interfaces? [ 260.113975][ T5889] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.147828][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.172420][ T5889] usb 5-1: Product: syz [ 260.198233][ T5889] usb 5-1: Manufacturer: syz [ 260.234824][ T5889] usb 5-1: SerialNumber: syz [ 260.281427][ T5889] usb 5-1: config 0 descriptor?? [ 260.496983][ T30] audit: type=1326 audit(1747195741.315:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 260.617568][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.634894][ T30] audit: type=1326 audit(1747195741.315:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 260.651973][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.773569][ T5890] usb 5-1: USB disconnect, device number 36 [ 260.815322][ T30] audit: type=1326 audit(1747195741.315:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 260.903682][ T30] audit: type=1326 audit(1747195741.315:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 261.005021][ T30] audit: type=1326 audit(1747195741.315:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 261.303270][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 261.661329][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 261.681927][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.701384][ T30] audit: type=1326 audit(1747195741.315:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 261.703839][ T10] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 262.222363][ T30] audit: type=1326 audit(1747195741.315:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 262.272252][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.276095][ T30] audit: type=1326 audit(1747195741.315:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 262.280299][ T10] usb 3-1: Product: syz [ 262.361144][ T30] audit: type=1326 audit(1747195741.315:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 262.449083][ T30] audit: type=1326 audit(1747195741.315:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 262.573708][ T10] usb 3-1: Manufacturer: syz [ 262.604675][ T10] usb 3-1: SerialNumber: syz [ 262.641288][ T10] usb 3-1: config 0 descriptor?? [ 262.668913][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 262.701969][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 262.743654][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.761930][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.762898][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 262.839894][ T8011] loop8: detected capacity change from 0 to 1 [ 262.862880][ T5835] Dev loop8: unable to read RDB block 1 [ 262.902608][ T5835] loop8: unable to read partition table [ 262.934843][ T5835] loop8: partition table beyond EOD, truncated [ 262.975060][ T8011] Dev loop8: unable to read RDB block 1 [ 262.981176][ T8011] loop8: unable to read partition table [ 262.995514][ T10] input: failed to attach handler mousedev to device input17, error: -5 [ 262.997991][ T8011] loop8: partition table beyond EOD, truncated [ 263.025709][ T8011] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 264.324993][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.572'. [ 264.533186][ T5889] hid (null): unknown global tag 0xe [ 264.539400][ T5889] hid (null): unknown global tag 0xe [ 264.549000][ T5889] hid (null): unknown global tag 0xe [ 264.565685][ T8050] loop6: detected capacity change from 0 to 7 [ 264.576089][ T8050] Dev loop6: unable to read RDB block 7 [ 264.587036][ T8050] loop6: unable to read partition table [ 264.615889][ T5889] hid-generic 0006:0401:0724.0005: unknown main item tag 0x2 [ 264.627570][ T8050] loop6: partition table beyond EOD, truncated [ 264.639304][ T5889] hid-generic 0006:0401:0724.0005: unknown global tag 0xe [ 264.665823][ T8050] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 264.678126][ T5889] hid-generic 0006:0401:0724.0005: item 0 1 1 14 parsing failed [ 264.696741][ T5889] hid-generic 0006:0401:0724.0005: probe with driver hid-generic failed with error -22 [ 264.817321][ T8053] FAULT_INJECTION: forcing a failure. [ 264.817321][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.859720][ T8056] syz.0.575 uses obsolete (PF_INET,SOCK_PACKET) [ 264.887533][ T8053] CPU: 0 UID: 0 PID: 8053 Comm: syz.3.574 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 264.887564][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.887577][ T8053] Call Trace: [ 264.887587][ T8053] [ 264.887596][ T8053] dump_stack_lvl+0x189/0x250 [ 264.887630][ T8053] ? __lock_acquire+0xaac/0xd20 [ 264.887665][ T8053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.887696][ T8053] ? __pfx__printk+0x10/0x10 [ 264.887717][ T8053] ? __might_fault+0xb0/0x130 [ 264.887757][ T8053] should_fail_ex+0x414/0x560 [ 264.887786][ T8053] _copy_from_user+0x2d/0xb0 [ 264.887818][ T8053] kvm_arch_vcpu_ioctl+0x4ae/0x2a10 [ 264.887845][ T8053] ? kvm_arch_vcpu_ioctl+0x46e/0x2a10 [ 264.887865][ T8053] ? __lock_acquire+0xaac/0xd20 [ 264.887894][ T8053] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 264.887925][ T8053] ? __lock_acquire+0xaac/0xd20 [ 264.887975][ T8053] ? is_bpf_text_address+0x26/0x2b0 [ 264.888012][ T8053] ? is_bpf_text_address+0x292/0x2b0 [ 264.888041][ T8053] ? is_bpf_text_address+0x26/0x2b0 [ 264.888085][ T8053] ? kernel_text_address+0xa5/0xe0 [ 264.888117][ T8053] ? __kernel_text_address+0xd/0x40 [ 264.888146][ T8053] ? unwind_get_return_address+0x4d/0x90 [ 264.888173][ T8053] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 264.888197][ T8053] ? arch_stack_walk+0xfc/0x150 [ 264.888239][ T8053] ? stack_trace_save+0x9c/0xe0 [ 264.888267][ T8053] ? stack_depot_save_flags+0x40/0x910 [ 264.888312][ T8053] ? __lock_acquire+0xaac/0xd20 [ 264.888350][ T8053] ? __mutex_trylock_common+0x153/0x260 [ 264.888378][ T8053] ? __pfx___mutex_trylock_common+0x10/0x10 [ 264.888406][ T8053] ? rcu_is_watching+0x15/0xb0 [ 264.888426][ T8053] ? trace_contention_end+0x39/0x120 [ 264.888449][ T8053] ? __mutex_lock+0x330/0xe80 [ 264.888484][ T8053] ? kasan_quarantine_put+0xdd/0x220 [ 264.888510][ T8053] ? kvm_vcpu_ioctl+0x22c/0xe90 [ 264.888545][ T8053] ? __pfx___mutex_lock+0x10/0x10 [ 264.888573][ T8053] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 264.888602][ T8053] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 264.888622][ T8053] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 264.888645][ T8053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.888673][ T8053] kvm_vcpu_ioctl+0x74b/0xe90 [ 264.888711][ T8053] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.888739][ T8053] ? __lock_acquire+0xaac/0xd20 [ 264.888784][ T8053] ? __fget_files+0x2a/0x420 [ 264.888819][ T8053] ? __fget_files+0x3a0/0x420 [ 264.888845][ T8053] ? __fget_files+0x2a/0x420 [ 264.888878][ T8053] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.888907][ T8053] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.888936][ T8053] __se_sys_ioctl+0xfc/0x170 [ 264.888961][ T8053] do_syscall_64+0xf6/0x210 [ 264.888990][ T8053] ? clear_bhb_loop+0x60/0xb0 [ 264.889015][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.889035][ T8053] RIP: 0033:0x7fc43178e969 [ 264.889055][ T8053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.889087][ T8053] RSP: 002b:00007fc4325f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.889110][ T8053] RAX: ffffffffffffffda RBX: 00007fc4319b5fa0 RCX: 00007fc43178e969 [ 264.889124][ T8053] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 264.889138][ T8053] RBP: 00007fc4325f3090 R08: 0000000000000000 R09: 0000000000000000 [ 264.889151][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.889162][ T8053] R13: 0000000000000000 R14: 00007fc4319b5fa0 R15: 00007fc431adfa28 [ 264.889195][ T8053] [ 265.566627][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 265.850896][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 265.971880][ T5884] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 266.032348][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.050168][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.068592][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.079115][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.092527][ T24] usb 4-1: SerialNumber: syz [ 266.121713][ T6040] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 266.136069][ T6040] usb 3-1: device reset changed ep0 maxpacket size! [ 266.145628][ T10] usb 3-1: USB disconnect, device number 21 [ 266.157854][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.210202][ T5884] usb 5-1: not running at top speed; connect to a high speed hub [ 266.256188][ T5884] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 266.313279][ T5884] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 266.369817][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.390784][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 266.418841][ T5884] usb 5-1: Product: syz [ 266.435048][ T24] usb 4-1: 0:2 : does not exist [ 266.457514][ T5884] usb 5-1: Manufacturer: syz [ 266.489372][ T5884] usb 5-1: SerialNumber: syz [ 266.525533][ T24] usb 4-1: USB disconnect, device number 44 [ 266.609155][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.661503][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 266.690738][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 266.701575][ T10] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 266.709825][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 266.729669][ T5884] usbsevseg 5-1:129.0: USB 7 Segment device now attached [ 266.774093][ T10] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 266.832151][ T5884] usb 5-1: USB disconnect, device number 37 [ 266.847058][ T10] usb 3-1: config 8 has no interface number 0 [ 266.873270][ T5884] usbsevseg 5-1:129.0: USB 7 Segment now disconnected [ 266.887557][ T10] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 266.963586][ T10] usb 3-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.048673][ T10] usb 3-1: config 8 interface 24 has no altsetting 0 [ 267.253947][ T10] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 267.312605][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.380427][ T10] usb 3-1: Product: syz [ 267.432721][ T10] usb 3-1: Manufacturer: syz [ 267.478733][ T8105] loop2: detected capacity change from 0 to 7 [ 267.517071][ T8105] Dev loop2: unable to read RDB block 7 [ 267.542936][ T8105] loop2: unable to read partition table [ 267.552901][ T10] usb 3-1: SerialNumber: syz [ 267.565721][ T8105] loop2: partition table beyond EOD, truncated [ 267.593682][ T8105] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 267.892777][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 267.927749][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.937767][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.446052][ T8117] FAULT_INJECTION: forcing a failure. [ 268.446052][ T8117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.580848][ T8117] CPU: 1 UID: 0 PID: 8117 Comm: syz.1.592 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 268.580882][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.580896][ T8117] Call Trace: [ 268.580904][ T8117] [ 268.580913][ T8117] dump_stack_lvl+0x189/0x250 [ 268.580954][ T8117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.580984][ T8117] ? __pfx__printk+0x10/0x10 [ 268.581013][ T8117] should_fail_ex+0x414/0x560 [ 268.581033][ T8117] _copy_to_user+0x31/0xb0 [ 268.581067][ T8117] simple_read_from_buffer+0xe1/0x170 [ 268.581101][ T8117] proc_fail_nth_read+0x1df/0x250 [ 268.581134][ T8117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.581164][ T8117] ? rw_verify_area+0x258/0x650 [ 268.581180][ T8117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.581204][ T8117] vfs_read+0x200/0x980 [ 268.581228][ T8117] ? fdget+0x13a/0x1e0 [ 268.581265][ T8117] ? __pfx_vfs_read+0x10/0x10 [ 268.581288][ T8117] ? __sys_bpf+0x46b/0x860 [ 268.581318][ T8117] ? __pfx___sys_bpf+0x10/0x10 [ 268.581347][ T8117] ksys_read+0x145/0x250 [ 268.581367][ T8117] ? rcu_is_watching+0x15/0xb0 [ 268.581390][ T8117] ? __pfx_ksys_read+0x10/0x10 [ 268.581418][ T8117] ? do_syscall_64+0xba/0x210 [ 268.581449][ T8117] do_syscall_64+0xf6/0x210 [ 268.581474][ T8117] ? clear_bhb_loop+0x60/0xb0 [ 268.581493][ T8117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.581507][ T8117] RIP: 0033:0x7fab6398d37c [ 268.581528][ T8117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 268.581547][ T8117] RSP: 002b:00007fab648bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.581570][ T8117] RAX: ffffffffffffffda RBX: 00007fab63bb5fa0 RCX: 00007fab6398d37c [ 268.581586][ T8117] RDX: 000000000000000f RSI: 00007fab648bc0a0 RDI: 0000000000000004 [ 268.581599][ T8117] RBP: 00007fab648bc090 R08: 0000000000000000 R09: 0000000000000000 [ 268.581613][ T8117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.581622][ T8117] R13: 0000000000000000 R14: 00007fab63bb5fa0 R15: 00007fab63cdfa28 [ 268.581644][ T8117] [ 269.154030][ T8125] loop6: detected capacity change from 0 to 7 [ 269.189108][ T8125] Dev loop6: unable to read RDB block 7 [ 269.201309][ T8125] loop6: AHDI p1 p2 p3 p4 [ 269.206535][ T8125] loop6: partition table partially beyond EOD, truncated [ 269.219361][ T8125] loop6: p1 start 926365495 is beyond EOD, truncated [ 269.228249][ T8125] loop6: p2 start 744947712 is beyond EOD, truncated [ 269.238194][ T8125] loop6: p3 start 1886353253 is beyond EOD, truncated [ 270.320438][ T8139] loop2: detected capacity change from 0 to 7 [ 270.330116][ T8139] Dev loop2: unable to read RDB block 7 [ 270.339741][ T8139] loop2: unable to read partition table [ 270.348212][ T8139] loop2: partition table beyond EOD, truncated [ 270.355504][ T8139] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.450688][ T5884] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 270.641486][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 270.651703][ T5884] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 270.702059][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.710914][ T5884] usb 5-1: config 8 has no interface number 0 [ 270.717764][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.735893][ T5884] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 270.800988][ T8143] atomic_op ffff88807cc19998 conn xmit_atomic 0000000000000000 [ 270.817009][ T5884] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 270.887719][ T5884] usb 5-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 270.998758][ T5884] usb 5-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.023196][ T5884] usb 5-1: config 8 interface 206 has no altsetting 0 [ 271.030830][ T10] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 271.061545][ T5884] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 271.072235][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.087559][ T10] usb 3-1: USB disconnect, device number 22 [ 271.121420][ T5884] usb 5-1: Product: syz [ 271.132542][ T5884] usb 5-1: Manufacturer: syz [ 271.140039][ T5884] usb 5-1: SerialNumber: syz [ 271.482895][ T5886] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 271.642606][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 271.655511][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.686195][ T8135] block device autoloading is deprecated and will be removed. [ 271.714611][ T5886] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 271.724997][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.762952][ T5886] usb 4-1: Product: syz [ 271.778877][ T5886] usb 4-1: Manufacturer: syz [ 271.793956][ T5886] usb 4-1: SerialNumber: syz [ 271.834079][ T5886] usb 4-1: config 0 descriptor?? [ 271.871181][ T5886] hub 4-1:0.0: bad descriptor, ignoring hub [ 271.919285][ T5886] hub 4-1:0.0: probe with driver hub failed with error -5 [ 271.959074][ T5886] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 272.266776][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 272.373554][ T8160] team0: left allmulticast mode [ 272.437033][ T8160] team_slave_0: left allmulticast mode [ 272.480166][ T8160] team_slave_1: left allmulticast mode [ 272.516464][ T8160] bridge0: port 3(team0) entered disabled state [ 272.609835][ T8160] bridge_slave_0: left allmulticast mode [ 272.639824][ T8160] bridge_slave_0: left promiscuous mode [ 272.676311][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.691463][ T10] usb 4-1: USB disconnect, device number 45 [ 273.340826][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 273.514312][ T10] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 273.542846][ T10] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 273.591408][ T10] usb 2-1: config 0 has no interface number 0 [ 273.615341][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=1146, bcdDevice=7f.34 [ 273.630474][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.632447][ T8160] bridge_slave_1: left allmulticast mode [ 273.683558][ T8171] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 273.741299][ T8160] bridge_slave_1: left promiscuous mode [ 273.769381][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.781145][ T10] usb 2-1: Product: syz [ 273.831761][ T10] usb 2-1: Manufacturer: syz [ 273.836466][ T10] usb 2-1: SerialNumber: syz [ 273.900421][ T10] usb 2-1: config 0 descriptor?? [ 273.925149][ T10] option 2-1:0.205: GSM modem (1-port) converter detected [ 274.017886][ T8160] bond0: (slave bond_slave_0): Releasing backup interface [ 274.035548][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.071625][ T8160] bond0: (slave bond_slave_1): Releasing backup interface [ 274.079272][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.112812][ T8160] team_slave_0: left promiscuous mode [ 274.160744][ T8160] team0: Port device team_slave_0 removed [ 274.173180][ T8160] team_slave_1: left promiscuous mode [ 274.212850][ T8160] team0: Port device team_slave_1 removed [ 274.226273][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.238199][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.246297][ T5825] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 274.263336][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.280992][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.407260][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 274.415693][ T5825] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 274.431253][ T5825] usb 4-1: config 0 has no interface number 0 [ 274.454860][ T5825] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 274.483811][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.494408][ T5825] usb 4-1: Product: syz [ 274.498629][ T5825] usb 4-1: Manufacturer: syz [ 274.509915][ T5825] usb 4-1: SerialNumber: syz [ 274.539143][ T5825] usb 4-1: config 0 descriptor?? [ 274.552044][ T5825] igorplugusb 4-1:0.110: endpoint incorrect [ 274.756152][ T5841] usb 4-1: USB disconnect, device number 46 [ 275.771450][ T5886] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 276.144598][ T5889] usb 2-1: USB disconnect, device number 32 [ 276.158892][ T5889] option 2-1:0.205: device disconnected [ 276.388936][ T8211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.485920][ T5884] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 276.557507][ T5884] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 276.608155][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.651848][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.696618][ T8224] netlink: 'syz.4.622': attribute type 11 has an invalid length. [ 276.707256][ T5825] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 276.727649][ T5841] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 276.921837][ T5886] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 277.042422][ T5825] usb 3-1: config 0 has no interfaces? [ 277.087485][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.101787][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 277.124004][ T5886] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 277.134881][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.174799][ T5841] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 277.189187][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.205165][ T5825] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 277.229821][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.236565][ T5886] usb 4-1: config 0 descriptor?? [ 277.238272][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.274821][ T5886] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 277.286712][ T5841] usb 2-1: config 0 descriptor?? [ 277.333104][ T5825] usb 3-1: Product: syz [ 277.354231][ T5825] usb 3-1: Manufacturer: syz [ 277.358906][ T5825] usb 3-1: SerialNumber: syz [ 277.432775][ T5825] usb 3-1: config 0 descriptor?? [ 277.476450][ T5886] gspca_nw80x: reg_w err -71 [ 277.494282][ T5886] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 277.519310][ T5886] usb 4-1: USB disconnect, device number 48 [ 277.608682][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.621373][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.644204][ T8225] netlink: 'syz.0.624': attribute type 3 has an invalid length. [ 277.685799][ T8225] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.624'. [ 277.752629][ T5841] usbhid 2-1:0.0: can't add hid device: -71 [ 277.758829][ T5841] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.821570][ T8225] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.844609][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.896036][ T5841] usb 2-1: USB disconnect, device number 33 [ 277.909391][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.153942][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.163149][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.789843][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.838702][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.130913][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.206513][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.959124][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.973553][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.993677][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.000725][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 280.002682][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.352819][ T8259] wg1: entered promiscuous mode [ 280.360870][ T8259] wg1: entered allmulticast mode [ 280.462303][ T10] usb 4-1: config 0 has no interfaces? [ 280.482490][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.491751][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.502113][ T10] usb 4-1: Product: syz [ 280.506396][ T10] usb 4-1: Manufacturer: syz [ 280.523379][ T10] usb 4-1: SerialNumber: syz [ 280.589990][ T10] usb 4-1: config 0 descriptor?? [ 280.655524][ T5841] usb 3-1: USB disconnect, device number 24 [ 280.924645][ T8255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.565881][ T8262] GUP no longer grows the stack in syz.2.633 (8262): 200000004000-20000000a000 (200000001000) [ 281.645435][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.2.633 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 281.645467][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.645481][ T8262] Call Trace: [ 281.645489][ T8262] [ 281.645500][ T8262] dump_stack_lvl+0x189/0x250 [ 281.645540][ T8262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.645573][ T8262] ? __pfx__printk+0x10/0x10 [ 281.645592][ T8262] ? find_vma+0xe7/0x160 [ 281.645634][ T8262] __get_user_pages+0x24e4/0x2a40 [ 281.645698][ T8262] ? __pfx___get_user_pages+0x10/0x10 [ 281.645724][ T8262] ? __gup_longterm_locked+0xbf7/0x15b0 [ 281.645751][ T8262] ? down_read_killable+0x1d1/0x350 [ 281.645781][ T8262] ? try_get_folio+0x633/0x660 [ 281.645813][ T8262] __gup_longterm_locked+0xd66/0x15b0 [ 281.645884][ T8262] ? try_grab_folio_fast+0x19a/0x4d0 [ 281.645925][ T8262] ? gup_fast_fallback+0x1672/0x1d60 [ 281.645957][ T8262] gup_fast_fallback+0x1843/0x1d60 [ 281.646023][ T8262] ? __pfx_gup_fast_fallback+0x10/0x10 [ 281.646047][ T8262] ? __mutex_lock+0x330/0xe80 [ 281.646086][ T8262] ? is_valid_gup_args+0x11f/0x200 [ 281.646117][ T8262] ? get_user_pages_fast+0x4d/0xb0 [ 281.646147][ T8262] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 281.646187][ T8262] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 281.646216][ T8262] ? wait_for_space+0x24d/0x2d0 [ 281.646246][ T8262] iov_iter_get_pages2+0x5e/0xa0 [ 281.646281][ T8262] __se_sys_vmsplice+0x548/0x10e0 [ 281.646332][ T8262] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 281.646360][ T8262] ? __pfx_futex_wait+0x10/0x10 [ 281.646403][ T8262] ? __lock_acquire+0xaac/0xd20 [ 281.646477][ T8262] ? rcu_is_watching+0x15/0xb0 [ 281.646507][ T8262] ? do_syscall_64+0xba/0x210 [ 281.646541][ T8262] do_syscall_64+0xf6/0x210 [ 281.646570][ T8262] ? clear_bhb_loop+0x60/0xb0 [ 281.646597][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.646618][ T8262] RIP: 0033:0x7f3b15f8e969 [ 281.646637][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.646656][ T8262] RSP: 002b:00007f3b16e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 281.646680][ T8262] RAX: ffffffffffffffda RBX: 00007f3b161b5fa0 RCX: 00007f3b15f8e969 [ 281.646696][ T8262] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 281.646710][ T8262] RBP: 00007f3b16010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 281.646723][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.646736][ T8262] R13: 0000000000000000 R14: 00007f3b161b5fa0 R15: 00007f3b162dfa28 [ 281.646769][ T8262] [ 282.221640][ T24] usb 5-1: USB disconnect, device number 38 [ 282.235978][ T24] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 282.391044][ T24] garmin_gps 5-1:8.206: device disconnected [ 282.662018][ T5841] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 283.252191][ T5841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.252223][ T5841] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.252270][ T5841] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.262096][ T5841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.262129][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.262151][ T5841] usb 3-1: Product: syz [ 283.262167][ T5841] usb 3-1: Manufacturer: syz [ 283.262184][ T5841] usb 3-1: SerialNumber: syz [ 283.269480][ T5841] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 283.269516][ T5841] cdc_ncm 3-1:1.0: bind() failure [ 283.465408][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 283.748151][ T5886] usb 4-1: USB disconnect, device number 49 [ 283.967940][ T5886] usb 3-1: USB disconnect, device number 25 [ 284.112998][ T8282] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[8282] [ 285.059978][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.642'. [ 285.216684][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.335429][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.345828][ T8291] netlink: 'syz.0.639': attribute type 3 has an invalid length. [ 285.353814][ T8291] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.639'. [ 285.368340][ T8291] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 285.416411][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 285.416430][ T30] audit: type=1326 audit(1747195766.245:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 285.553755][ T30] audit: type=1326 audit(1747195766.245:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 285.611766][ T30] audit: type=1326 audit(1747195766.245:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 285.679402][ T30] audit: type=1326 audit(1747195766.305:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 285.876600][ T30] audit: type=1326 audit(1747195766.305:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 285.943656][ T30] audit: type=1326 audit(1747195766.315:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab639c1225 code=0x7ffc0000 [ 285.998188][ T30] audit: type=1326 audit(1747195766.345:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 286.021434][ T30] audit: type=1326 audit(1747195766.345:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 286.044667][ T30] audit: type=1326 audit(1747195766.345:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 286.070735][ T30] audit: type=1326 audit(1747195766.345:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.1.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fab6398e969 code=0x7ffc0000 [ 286.126413][ T8310] ipt_REJECT: TCP_RESET invalid for non-tcp [ 286.322608][ T5841] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 286.381793][ T5825] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 286.472816][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 286.495602][ T5841] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 286.510731][ T5841] usb 2-1: config 0 has no interface number 0 [ 286.511591][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 286.516893][ T5841] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.516923][ T5841] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 286.516951][ T5841] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 286.560092][ T5825] usb 4-1: device descriptor read/64, error -71 [ 286.575771][ T5841] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.638761][ T5841] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 286.649808][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.661484][ T5841] usb 2-1: Product: syz [ 286.719812][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.720370][ T5841] usb 2-1: Manufacturer: syz [ 286.729901][ T10] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 286.736756][ T5841] usb 2-1: SerialNumber: syz [ 286.741337][ T10] usb 5-1: config 129 has an invalid interface descriptor of length 2, skipping [ 286.741365][ T10] usb 5-1: config 129 has an invalid descriptor of length 150, skipping remainder of the config [ 286.741388][ T10] usb 5-1: config 129 has no interface number 0 [ 286.741430][ T10] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 286.741461][ T10] usb 5-1: config 129 interface 135 has no altsetting 0 [ 286.745113][ T10] usb 5-1: string descriptor 0 read error: -22 [ 286.830818][ T5825] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 286.870088][ T5841] usb 2-1: config 0 descriptor?? [ 286.930313][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 286.961880][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.991318][ T5825] usb 4-1: device descriptor read/64, error -71 [ 287.117900][ T5825] usb usb4-port1: attempt power cycle [ 287.140183][ T5841] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 287.196196][ T5886] usb 5-1: USB disconnect, device number 39 [ 287.325165][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.429647][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.477202][ T5841] usb 2-1: USB disconnect, device number 34 [ 287.521188][ T5825] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 287.563517][ T5825] usb 4-1: device descriptor read/8, error -71 [ 287.805268][ T8330] loop6: detected capacity change from 0 to 7 [ 287.811641][ T5825] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 287.841419][ T5825] usb 4-1: device descriptor read/8, error -71 [ 287.850024][ T8330] Dev loop6: unable to read RDB block 7 [ 287.886016][ T8330] loop6: AHDI p1 p2 p3 p4 [ 287.914790][ T8330] loop6: partition table partially beyond EOD, truncated [ 287.951517][ T5825] usb usb4-port1: unable to enumerate USB device [ 287.959022][ T8330] loop6: p1 start 926365495 is beyond EOD, truncated [ 287.980688][ T8330] loop6: p2 start 744947712 is beyond EOD, truncated [ 287.987742][ T8330] loop6: p3 start 1886353253 is beyond EOD, truncated [ 288.532091][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 288.627419][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 288.701300][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 288.712259][ T10] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 288.729728][ T10] usb 5-1: config 0 has no interface number 0 [ 288.740785][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 288.759315][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 288.773132][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 288.787623][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.798649][ T10] usb 5-1: Product: syz [ 288.806478][ T10] usb 5-1: Manufacturer: syz [ 288.812324][ T10] usb 5-1: SerialNumber: syz [ 288.825146][ T10] usb 5-1: config 0 descriptor?? [ 288.831270][ T8336] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 288.840307][ T8336] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 289.169775][ T10] asix 5-1:0.251: probe with driver asix failed with error -71 [ 289.218527][ T10] usb 5-1: USB disconnect, device number 40 [ 289.575350][ T8357] netlink: 104 bytes leftover after parsing attributes in process `syz.3.662'. [ 289.726384][ T8363] lo: entered promiscuous mode [ 289.731433][ T8363] lo: entered allmulticast mode [ 289.739428][ T8363] tunl0: entered promiscuous mode [ 289.775547][ T8363] tunl0: entered allmulticast mode [ 289.790472][ T8365] loop6: detected capacity change from 0 to 7 [ 289.791103][ T8363] gre0: entered promiscuous mode [ 289.791124][ T8363] gre0: entered allmulticast mode [ 289.791298][ T8363] gretap0: entered promiscuous mode [ 289.791315][ T8363] gretap0: entered allmulticast mode [ 289.791440][ T8363] erspan0: entered promiscuous mode [ 289.824051][ T8363] erspan0: entered allmulticast mode [ 289.830383][ T8363] ip_vti0: entered promiscuous mode [ 289.836356][ T8363] ip_vti0: entered allmulticast mode [ 289.845066][ T8363] ip6_vti0: entered promiscuous mode [ 289.851132][ T8363] ip6_vti0: entered allmulticast mode [ 289.856730][ T8363] sit0: entered promiscuous mode [ 289.857822][ T8365] Dev loop6: unable to read RDB block 7 [ 289.868024][ T8363] sit0: entered allmulticast mode [ 289.873401][ T8365] loop6: AHDI p1 p2 p3 p4 [ 289.873439][ T8365] loop6: partition table partially beyond EOD, truncated [ 289.937392][ T8363] ip6tnl0: entered promiscuous mode [ 289.944271][ T8363] ip6tnl0: entered allmulticast mode [ 289.953165][ T8363] ip6gre0: entered promiscuous mode [ 289.958498][ T8363] ip6gre0: entered allmulticast mode [ 289.966072][ T8363] syz_tun: entered promiscuous mode [ 289.971709][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 289.983164][ T8365] loop6: p1 start 926365495 is beyond EOD, truncated [ 289.993144][ T8365] loop6: p2 start 744947712 is beyond EOD, truncated [ 289.999957][ T8363] syz_tun: entered allmulticast mode [ 290.005585][ T8365] loop6: p3 start 1886353253 is beyond EOD, truncated [ 290.044797][ T8363] ip6gretap0: entered promiscuous mode [ 290.052615][ T8363] ip6gretap0: entered allmulticast mode [ 290.069332][ T8363] bridge0: entered promiscuous mode [ 290.075979][ T8363] bridge0: entered allmulticast mode [ 290.138968][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 290.158043][ T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 290.168553][ T8363] vcan0: entered promiscuous mode [ 290.181244][ T8363] vcan0: entered allmulticast mode [ 290.191113][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.212713][ T10] usb 4-1: config 0 has no interface number 0 [ 290.220140][ T8363] bond0: entered promiscuous mode [ 290.226340][ T8363] bond_slave_0: entered promiscuous mode [ 290.239745][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 290.253197][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.263687][ T10] usb 4-1: Product: syz [ 290.268428][ T8363] bond_slave_1: entered promiscuous mode [ 290.274835][ T10] usb 4-1: Manufacturer: syz [ 290.279497][ T10] usb 4-1: SerialNumber: syz [ 290.291470][ T8363] bond0: entered allmulticast mode [ 290.296863][ T8363] bond_slave_0: entered allmulticast mode [ 290.304235][ T8363] bond_slave_1: entered allmulticast mode [ 290.317174][ T10] usb 4-1: config 0 descriptor?? [ 290.331338][ T8363] team0: entered promiscuous mode [ 290.338385][ T8363] team_slave_0: entered promiscuous mode [ 290.347075][ T8363] team_slave_1: entered promiscuous mode [ 290.355054][ T8363] team0: entered allmulticast mode [ 290.360477][ T8363] team_slave_0: entered allmulticast mode [ 290.421632][ T8363] team_slave_1: entered allmulticast mode [ 290.452096][ T8363] dummy0: entered promiscuous mode [ 290.458536][ T8363] dummy0: entered allmulticast mode [ 290.466216][ T8363] nlmon0: entered promiscuous mode [ 290.505149][ T8363] nlmon0: entered allmulticast mode [ 290.518699][ T8363] caif0: entered promiscuous mode [ 290.529263][ T8363] caif0: entered allmulticast mode [ 290.535882][ T8363] batadv0: entered promiscuous mode [ 290.562022][ T5884] usb 4-1: USB disconnect, device number 54 [ 290.598386][ T8367] netlink: 'syz.0.666': attribute type 3 has an invalid length. [ 290.635768][ T8367] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.666'. [ 290.640877][ T8363] batadv0: entered allmulticast mode [ 290.654634][ T8363] vxcan0: entered promiscuous mode [ 290.659788][ T8363] vxcan0: entered allmulticast mode [ 290.665334][ T8363] vxcan1: entered promiscuous mode [ 290.670459][ T8363] vxcan1: entered allmulticast mode [ 290.694466][ T8363] veth0: entered promiscuous mode [ 290.700304][ T8363] veth0: entered allmulticast mode [ 290.708180][ T8367] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 290.728666][ T8363] veth1: entered promiscuous mode [ 290.742337][ T8363] veth1: entered allmulticast mode [ 290.747658][ T8363] wg0: entered promiscuous mode [ 290.779696][ T8363] wg0: entered allmulticast mode [ 290.799094][ T8363] wg1: entered promiscuous mode [ 290.871709][ T8363] wg1: entered allmulticast mode [ 290.877515][ T8363] wg2: entered promiscuous mode [ 290.885772][ T8363] wg2: entered allmulticast mode [ 290.891445][ T8363] veth0_to_bridge: entered promiscuous mode [ 290.950748][ T8363] veth0_to_bridge: entered allmulticast mode [ 290.957170][ T8363] veth1_to_bridge: entered promiscuous mode [ 290.964092][ T8363] veth1_to_bridge: entered allmulticast mode [ 290.970443][ T8363] veth0_to_bond: entered promiscuous mode [ 290.978029][ T8363] veth0_to_bond: entered allmulticast mode [ 291.019941][ T8363] veth1_to_bond: entered promiscuous mode [ 291.034967][ T8363] veth1_to_bond: entered allmulticast mode [ 291.056135][ T8363] veth0_to_team: entered promiscuous mode [ 291.071173][ T8363] veth0_to_team: entered allmulticast mode [ 291.143469][ T8363] veth1_to_team: entered promiscuous mode [ 291.162930][ T8363] veth1_to_team: entered allmulticast mode [ 291.177150][ T8363] veth0_to_batadv: entered promiscuous mode [ 291.196073][ T8363] veth0_to_batadv: entered allmulticast mode [ 291.211870][ T8363] batadv_slave_0: entered promiscuous mode [ 291.230314][ T8363] batadv_slave_0: entered allmulticast mode [ 291.272963][ T8363] veth1_to_batadv: entered promiscuous mode [ 291.280833][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 291.360147][ T8363] veth1_to_batadv: entered allmulticast mode [ 291.373779][ T8363] batadv_slave_1: entered promiscuous mode [ 291.419702][ T8363] batadv_slave_1: entered allmulticast mode [ 291.443011][ T8363] xfrm0: entered promiscuous mode [ 291.448111][ T8363] xfrm0: entered allmulticast mode [ 291.477506][ T8363] veth0_to_hsr: entered promiscuous mode [ 291.525515][ T8363] veth0_to_hsr: entered allmulticast mode [ 291.537927][ T8363] hsr_slave_0: entered allmulticast mode [ 291.564659][ T8363] veth1_to_hsr: entered promiscuous mode [ 291.570331][ T8363] veth1_to_hsr: entered allmulticast mode [ 291.615282][ T8363] hsr_slave_1: entered allmulticast mode [ 291.659521][ T8363] hsr0: entered promiscuous mode [ 291.667708][ T8363] hsr0: entered allmulticast mode [ 291.678119][ T8363] veth1_virt_wifi: entered promiscuous mode [ 291.686867][ T8363] veth1_virt_wifi: entered allmulticast mode [ 291.700369][ T8363] veth0_virt_wifi: entered promiscuous mode [ 291.709677][ T8363] veth0_virt_wifi: entered allmulticast mode [ 291.734480][ T8363] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 291.751750][ T8363] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 291.781869][ T8363] veth1_vlan: entered allmulticast mode [ 291.787581][ T8363] veth0_vlan: entered allmulticast mode [ 291.819004][ T8363] vlan0: entered promiscuous mode [ 291.837488][ T8363] vlan0: entered allmulticast mode [ 291.843245][ T8363] vlan1: entered promiscuous mode [ 291.848764][ T8363] vlan1: entered allmulticast mode [ 291.858207][ T8363] macvlan0: entered promiscuous mode [ 291.886378][ T8363] macvlan0: entered allmulticast mode [ 291.895601][ T8363] macvlan1: entered promiscuous mode [ 291.904886][ T8363] macvlan1: entered allmulticast mode [ 291.910427][ T8363] ipvlan1: entered promiscuous mode [ 291.920464][ T8363] ipvlan1: entered allmulticast mode [ 291.927472][ T8363] veth1_macvtap: entered allmulticast mode [ 291.938534][ T8392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.673'. [ 291.946952][ T8363] veth0_macvtap: entered allmulticast mode [ 291.969814][ T8363] macvtap0: entered promiscuous mode [ 291.980615][ T8363] macvtap0: entered allmulticast mode [ 291.985986][ T8394] netlink: 104 bytes leftover after parsing attributes in process `syz.0.674'. [ 292.003688][ T8395] sctp: [Deprecated]: syz.3.673 (pid 8395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.003688][ T8395] Use struct sctp_sack_info instead [ 292.045833][ T8363] macsec0: entered promiscuous mode [ 292.065270][ T8363] macsec0: entered allmulticast mode [ 292.086477][ T8363] geneve0: entered promiscuous mode [ 292.202001][ T8363] geneve0: entered allmulticast mode [ 292.212623][ T8363] geneve1: entered promiscuous mode [ 292.222951][ T8363] geneve1: entered allmulticast mode [ 292.241535][ T8363] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 292.257654][ T8363] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 292.285037][ T8363] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 292.295355][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.307438][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.320868][ T8363] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 292.329729][ T8363] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 292.343737][ T8363] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 292.352813][ T8363] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 292.365017][ T8363] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 292.377316][ T8363] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 292.391118][ T8363] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 292.407804][ T8363] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 292.425291][ T8363] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 292.434292][ T8363] ip6tnl1: entered promiscuous mode [ 292.441568][ T8363] ip6tnl1: entered allmulticast mode [ 292.453986][ T8363] bridge1: entered promiscuous mode [ 292.461823][ T8363] bridge1: entered allmulticast mode [ 292.479865][ T8363] bridge2: entered promiscuous mode [ 292.487497][ T8363] bridge2: entered allmulticast mode [ 292.494607][ T8363] bridge3: entered promiscuous mode [ 292.501347][ T8363] bridge3: entered allmulticast mode [ 292.997366][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 293.921254][ T5884] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 294.090630][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 294.102594][ T5884] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 294.113789][ T5884] usb 3-1: config 0 has no interface number 0 [ 294.120176][ T5884] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.132606][ T5884] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 294.145446][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.685'. [ 294.155120][ T5884] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 294.169488][ T5884] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 294.181173][ T5884] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 294.201589][ T5884] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 294.217962][ T5884] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 294.228044][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.237528][ T5884] usb 3-1: Product: syz [ 294.248071][ T5884] usb 3-1: Manufacturer: syz [ 294.258204][ T5884] usb 3-1: SerialNumber: syz [ 294.419052][ T5884] usb 3-1: config 0 descriptor?? [ 294.452720][ T8411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.515418][ T8411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.532368][ T8433] netlink: 104 bytes leftover after parsing attributes in process `syz.3.686'. [ 294.783041][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.833262][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.979939][ T5884] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 295.068358][ T5884] etas_es58x 3-1:0.219: could not retrieve the product info string [ 295.148072][ T5884] usb 3-1: USB disconnect, device number 26 [ 295.218252][ T5884] etas_es58x 3-1:0.219: Disconnecting syz syz [ 295.670748][ T5886] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 295.678449][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 295.873165][ T5886] usb 4-1: device descriptor read/64, error -71 [ 295.933695][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 295.951320][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 295.980332][ T10] usb 2-1: config 0 has no interface number 0 [ 295.988821][ T10] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 296.165228][ T10] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 296.201441][ T5886] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 296.214386][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 296.249353][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 296.292232][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.315211][ T10] usb 2-1: Product: syz [ 296.322090][ T10] usb 2-1: Manufacturer: syz [ 296.329717][ T10] usb 2-1: SerialNumber: syz [ 296.334516][ T5886] usb 4-1: device descriptor read/64, error -71 [ 296.355727][ T10] usb 2-1: config 0 descriptor?? [ 296.368837][ T8439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 296.379633][ T8439] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 296.462071][ T5886] usb usb4-port1: attempt power cycle [ 296.607203][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.617506][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.629366][ T8439] binder: 8438:8439 ioctl c0306201 200000000c00 returned -14 [ 296.638751][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.660612][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.743274][ T10] dm9601 2-1:0.41: probe with driver dm9601 failed with error -71 [ 296.783176][ T10] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 296.825306][ T10] usb 2-1: USB disconnect, device number 35 [ 296.831673][ T5886] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 296.902780][ T5886] usb 4-1: device descriptor read/8, error -71 [ 296.991107][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.999567][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.021257][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.029163][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.070924][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 297.160832][ T5886] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 297.195727][ T5886] usb 4-1: device descriptor read/8, error -71 [ 297.246281][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.255007][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 297.264584][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.264990][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.299340][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.313079][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.326334][ T24] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 297.326521][ T5886] usb usb4-port1: unable to enumerate USB device [ 297.345427][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.362382][ T24] usb 3-1: Product: syz [ 297.366772][ T24] usb 3-1: Manufacturer: syz [ 297.372637][ T24] usb 3-1: SerialNumber: syz [ 297.383490][ T24] usb 3-1: config 0 descriptor?? [ 297.388707][ T8461] input: syz0 as /devices/virtual/input/input19 [ 297.402402][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 297.410719][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 297.428344][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 297.613642][ T8468] sg_read: process 452 (syz.1.697) changed security contexts after opening file descriptor, this is not allowed. [ 299.015168][ T8494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 299.085220][ T8496] FAULT_INJECTION: forcing a failure. [ 299.085220][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.104671][ T8496] CPU: 1 UID: 0 PID: 8496 Comm: syz.0.706 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 299.104704][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.104717][ T8496] Call Trace: [ 299.104725][ T8496] [ 299.104735][ T8496] dump_stack_lvl+0x189/0x250 [ 299.104770][ T8496] ? __lock_acquire+0xaac/0xd20 [ 299.104803][ T8496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.104834][ T8496] ? __pfx__printk+0x10/0x10 [ 299.104855][ T8496] ? __might_fault+0xb0/0x130 [ 299.104895][ T8496] should_fail_ex+0x414/0x560 [ 299.104922][ T8496] _copy_from_user+0x2d/0xb0 [ 299.104953][ T8496] do_sock_getsockopt+0x1cd/0x650 [ 299.104986][ T8496] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 299.105015][ T8496] ? __fget_files+0x2a/0x420 [ 299.105043][ T8496] ? __fget_files+0x3a0/0x420 [ 299.105070][ T8496] ? __fget_files+0x2a/0x420 [ 299.105106][ T8496] __x64_sys_getsockopt+0x1a5/0x250 [ 299.105144][ T8496] do_syscall_64+0xf6/0x210 [ 299.105174][ T8496] ? clear_bhb_loop+0x60/0xb0 [ 299.105200][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.105220][ T8496] RIP: 0033:0x7f8384f8e969 [ 299.105238][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.105257][ T8496] RSP: 002b:00007f8382df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 299.105279][ T8496] RAX: ffffffffffffffda RBX: 00007f83851b5fa0 RCX: 00007f8384f8e969 [ 299.105295][ T8496] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000003 [ 299.105308][ T8496] RBP: 00007f8382df6090 R08: 0000200000000040 R09: 0000000000000000 [ 299.105322][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.105335][ T8496] R13: 0000000000000000 R14: 00007f83851b5fa0 R15: 00007f83852dfa28 [ 299.105367][ T8496] [ 299.450595][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 299.567300][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 299.590385][ T5841] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 300.021746][ T8506] FAULT_INJECTION: forcing a failure. [ 300.021746][ T8506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.063956][ T8506] CPU: 0 UID: 0 PID: 8506 Comm: syz.1.710 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 300.063989][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.064002][ T8506] Call Trace: [ 300.064010][ T8506] [ 300.064019][ T8506] dump_stack_lvl+0x189/0x250 [ 300.064055][ T8506] ? __lock_acquire+0xaac/0xd20 [ 300.064091][ T8506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.064121][ T8506] ? __pfx__printk+0x10/0x10 [ 300.064138][ T8506] ? __might_fault+0xb0/0x130 [ 300.064168][ T8506] should_fail_ex+0x414/0x560 [ 300.064189][ T8506] _copy_from_user+0x2d/0xb0 [ 300.064213][ T8506] __sys_bpf+0x1ed/0x860 [ 300.064245][ T8506] ? __pfx___sys_bpf+0x10/0x10 [ 300.064279][ T8506] ? ksys_write+0x1e1/0x250 [ 300.064303][ T8506] ? rcu_is_watching+0x15/0xb0 [ 300.064335][ T8506] __x64_sys_bpf+0x7c/0x90 [ 300.064371][ T8506] do_syscall_64+0xf6/0x210 [ 300.064404][ T8506] ? clear_bhb_loop+0x60/0xb0 [ 300.064424][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.064439][ T8506] RIP: 0033:0x7fab6398e969 [ 300.064454][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.064467][ T8506] RSP: 002b:00007fab648bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.064484][ T8506] RAX: ffffffffffffffda RBX: 00007fab63bb5fa0 RCX: 00007fab6398e969 [ 300.064499][ T8506] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000001 [ 300.064510][ T8506] RBP: 00007fab648bc090 R08: 0000000000000000 R09: 0000000000000000 [ 300.064519][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.064528][ T8506] R13: 0000000000000000 R14: 00007fab63bb5fa0 R15: 00007fab63cdfa28 [ 300.064551][ T8506] [ 300.940675][ T5889] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 301.014974][ T8519] netlink: 'syz.3.714': attribute type 11 has an invalid length. [ 301.100675][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 301.108924][ T5889] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 301.122165][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.134921][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.211799][ T5889] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.225038][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.234005][ T5889] usb 2-1: Product: syz [ 301.238336][ T5889] usb 2-1: Manufacturer: syz [ 301.249196][ T5889] usb 2-1: SerialNumber: syz [ 301.509745][ T5889] usb 2-1: 0:2 : does not exist [ 301.721183][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 301.728243][ T5841] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 301.780784][ T5841] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 301.792888][ T24] usb 3-1: USB disconnect, device number 27 [ 302.081628][ T5842] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 302.257862][ T8534] FAULT_INJECTION: forcing a failure. [ 302.257862][ T8534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.280380][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.0.718 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 302.280412][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.280434][ T8534] Call Trace: [ 302.280447][ T8534] [ 302.280456][ T8534] dump_stack_lvl+0x189/0x250 [ 302.280502][ T8534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.280533][ T8534] ? __pfx__printk+0x10/0x10 [ 302.280566][ T8534] should_fail_ex+0x414/0x560 [ 302.280603][ T8534] _copy_to_user+0x31/0xb0 [ 302.280637][ T8534] simple_read_from_buffer+0xe1/0x170 [ 302.280669][ T8534] proc_fail_nth_read+0x1df/0x250 [ 302.280704][ T8534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.280739][ T8534] ? rw_verify_area+0x258/0x650 [ 302.280762][ T8534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.280795][ T8534] vfs_read+0x200/0x980 [ 302.280825][ T8534] ? __pfx___mutex_lock+0x10/0x10 [ 302.280854][ T8534] ? __pfx_vfs_read+0x10/0x10 [ 302.280880][ T8534] ? __fget_files+0x2a/0x420 [ 302.280914][ T8534] ? __fget_files+0x3a0/0x420 [ 302.280942][ T8534] ? __fget_files+0x2a/0x420 [ 302.280981][ T8534] ksys_read+0x145/0x250 [ 302.281009][ T8534] ? __pfx_ksys_read+0x10/0x10 [ 302.281030][ T8534] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 302.281057][ T8534] ? syscall_user_dispatch+0x4f/0x90 [ 302.281095][ T8534] do_syscall_64+0xf6/0x210 [ 302.281124][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 302.281151][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.281171][ T8534] RIP: 0033:0x7f8384f8d37c [ 302.281191][ T8534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.281209][ T8534] RSP: 002b:00007f8382df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.281231][ T8534] RAX: ffffffffffffffda RBX: 00007f83851b5fa0 RCX: 00007f8384f8d37c [ 302.281246][ T8534] RDX: 000000000000000f RSI: 00007f8382df60a0 RDI: 0000000000000004 [ 302.281258][ T8534] RBP: 00007f8382df6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.281270][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.281282][ T8534] R13: 0000000000000000 R14: 00007f83851b5fa0 R15: 00007f83852dfa28 [ 302.281314][ T8534] [ 302.510308][ T5842] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 302.556277][ T5842] usb 4-1: config 7 has no interface number 0 [ 302.570875][ T5842] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 302.580182][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.600630][ T5842] usb 4-1: Product: syz [ 302.609384][ T5842] usb 4-1: Manufacturer: syz [ 302.670211][ T5842] usb 4-1: SerialNumber: syz [ 302.725946][ T8539] libceph: resolve '0..' (ret=-3): failed [ 302.791447][ T24] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 302.803881][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.816071][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.966108][ T24] usb 5-1: device descriptor read/64, error -71 [ 303.144819][ T8551] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 303.223898][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 303.360724][ T24] usb 5-1: device descriptor read/64, error -71 [ 303.411271][ T5890] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 303.473115][ T24] usb usb5-port1: attempt power cycle [ 303.491276][ T5842] as10x_usb: device has been detected [ 303.497624][ T5842] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 303.537136][ T5842] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 303.558999][ T5842] as10x_usb: error during firmware upload part1 [ 303.566171][ T5890] usb 3-1: device descriptor read/64, error -71 [ 303.574681][ T5842] Registered device Elgato EyeTV DTT Deluxe [ 303.676371][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.695131][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.729482][ T5889] usb 2-1: USB disconnect, device number 36 [ 303.810722][ T5890] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 303.840687][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 303.863622][ T24] usb 5-1: device descriptor read/8, error -71 [ 303.961058][ T5890] usb 3-1: device descriptor read/64, error -71 [ 303.964028][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 303.967616][ T5841] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 304.002287][ T5841] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 304.077636][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.081838][ T5890] usb usb3-port1: attempt power cycle [ 304.089034][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.120955][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 304.141556][ T24] usb 5-1: device descriptor read/8, error -71 [ 304.253071][ T24] usb usb5-port1: unable to enumerate USB device [ 304.450668][ T5890] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 304.491875][ T5890] usb 3-1: device descriptor read/8, error -71 [ 304.716196][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.729705][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.738536][ T5890] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 304.768094][ T5890] usb 3-1: device descriptor read/8, error -71 [ 304.845905][ T5886] usb 4-1: USB disconnect, device number 59 [ 304.877357][ T5886] Unregistered device Elgato EyeTV DTT Deluxe [ 304.882262][ T5890] usb usb3-port1: unable to enumerate USB device [ 304.889010][ T5886] as10x_usb: device has been disconnected [ 305.446410][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 305.531657][ T5886] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 305.541849][ T8599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.737'. [ 305.743163][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.752891][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.007279][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.071540][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 306.081206][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.101953][ T5841] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 306.108105][ T5841] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 308.100769][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 308.280762][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 308.289803][ T5841] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 308.301294][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 308.307978][ T5841] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 308.327802][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.375829][ T10] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 308.396772][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.429830][ T10] usb 2-1: Product: syz [ 308.450086][ T10] usb 2-1: Manufacturer: syz [ 308.462572][ T10] usb 2-1: SerialNumber: syz [ 308.498282][ T10] usb 2-1: config 0 descriptor?? [ 308.526632][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 308.537498][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 308.550098][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 308.820624][ T5890] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 308.986586][ T5890] usb 5-1: config 0 has no interfaces? [ 309.022332][ T5890] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.051628][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.060582][ T5890] usb 5-1: Product: syz [ 309.065347][ T5890] usb 5-1: Manufacturer: syz [ 309.070200][ T5890] usb 5-1: SerialNumber: syz [ 309.085441][ T5890] usb 5-1: config 0 descriptor?? [ 309.370967][ T5825] usb 2-1: USB disconnect, device number 37 [ 309.409511][ T5890] usb 5-1: USB disconnect, device number 45 [ 309.666871][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 309.676584][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 309.689352][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 309.722635][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 310.028269][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 310.108815][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 310.791696][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.755'. [ 310.941698][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.755'. [ 311.283187][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.341070][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.017814][ T8686] netlink: 44 bytes leftover after parsing attributes in process `syz.1.760'. [ 312.305259][ T8694] gre1: entered promiscuous mode [ 312.560691][ T5888] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 312.711064][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 312.728036][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.757751][ T5888] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 312.780094][ T5888] usb 2-1: config 127 has no interface number 0 [ 312.807891][ T5888] usb 2-1: config 127 interface 25 has no altsetting 0 [ 312.831009][ T5888] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 312.854792][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.927803][ T5888] usb 2-1: Product: syz [ 312.944428][ T5888] usb 2-1: Manufacturer: syz [ 312.954130][ T5888] usb 2-1: SerialNumber: syz [ 312.979731][ T8703] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 313.229780][ T5888] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 313.336081][ T8703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.631834][ T5825] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 313.770802][ T5825] usb 4-1: device descriptor read/64, error -71 [ 313.883169][ T5888] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 313.911745][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 314.052853][ T5825] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 314.180722][ T5889] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 314.191057][ T5825] usb 4-1: device descriptor read/64, error -71 [ 314.241451][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 314.301715][ T5825] usb usb4-port1: attempt power cycle [ 314.309594][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'. [ 314.341500][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 314.350002][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 314.358284][ T5889] usb 5-1: can't read configurations, error -61 [ 314.381534][ T10] usb 3-1: device descriptor read/64, error -71 [ 314.490734][ T5889] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 314.620830][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 314.650959][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 314.662332][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 314.671399][ T5825] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 314.679159][ T5889] usb 5-1: can't read configurations, error -61 [ 314.691855][ T5825] usb 4-1: device descriptor read/8, error -71 [ 314.691958][ T5889] usb usb5-port1: attempt power cycle [ 314.761639][ T10] usb 3-1: device descriptor read/64, error -71 [ 314.871231][ T10] usb usb3-port1: attempt power cycle [ 314.940722][ T5825] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 314.962014][ T5825] usb 4-1: device descriptor read/8, error -71 [ 315.062209][ T5889] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 315.071196][ T5825] usb usb4-port1: unable to enumerate USB device [ 315.102175][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 315.109537][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 315.117658][ T5889] usb 5-1: can't read configurations, error -61 [ 315.220694][ T10] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 315.261490][ T5889] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 315.277058][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.297893][ T5888] usb 2-1: device firmware changed [ 315.312240][ T10] usb 3-1: device descriptor read/8, error -71 [ 315.318812][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 315.333261][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 315.348197][ T5888] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 315.356898][ T5889] usb 5-1: can't read configurations, error -61 [ 315.378018][ T5889] usb usb5-port1: unable to enumerate USB device [ 315.385325][ T5888] usb 2-1: USB disconnect, device number 38 [ 315.561752][ T10] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 315.596581][ T10] usb 3-1: device descriptor read/8, error -71 [ 315.722533][ T10] usb usb3-port1: unable to enumerate USB device [ 315.781288][ T5888] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 315.930745][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 315.937930][ T5888] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 315.947082][ T5888] usb 2-1: config 0 has no interface number 0 [ 315.953328][ T5888] usb 2-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 315.964694][ T5888] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 315.975474][ T5888] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 315.985800][ T5888] usb 2-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 315.999379][ T5888] usb 2-1: config 0 interface 12 has no altsetting 0 [ 316.009141][ T5888] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 316.018555][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.026661][ T5888] usb 2-1: Product: syz [ 316.031819][ T5888] usb 2-1: Manufacturer: syz [ 316.036481][ T5888] usb 2-1: SerialNumber: syz [ 316.044631][ T5888] usb 2-1: config 0 descriptor?? [ 316.055714][ T5888] f81534 2-1:0.12: unsupported endpoint max packet size [ 316.282066][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 316.357671][ T5888] usb 2-1: USB disconnect, device number 39 [ 317.326870][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333401][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.933555][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.948153][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.246033][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 318.706149][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'. [ 319.142628][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.152403][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.520775][ T5889] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 319.693537][ T5889] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 319.702650][ T5889] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 319.769109][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.204432][ T5944] usb 2-1: USB disconnect, device number 40 [ 320.713040][ T8822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.798'. [ 322.902679][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'. [ 323.398386][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 323.530790][ T5825] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 323.793963][ T5825] usb 2-1: config 0 has no interfaces? [ 323.805855][ T5825] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 323.815902][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.826023][ T5825] usb 2-1: Product: syz [ 323.830249][ T5825] usb 2-1: Manufacturer: syz [ 324.063271][ T5825] usb 2-1: SerialNumber: syz [ 324.104625][ T5825] usb 2-1: config 0 descriptor?? [ 324.511133][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.526827][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.179860][ T8770] syz.4.784 (8770): drop_caches: 1 [ 325.221382][ T5944] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 325.380604][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 325.458237][ T5944] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 325.475227][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.505078][ T5944] usb 4-1: config 0 has no interface number 0 [ 325.519909][ T5944] usb 4-1: config 0 interface 253 has no altsetting 0 [ 325.577737][ T5944] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 325.588555][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.598647][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 325.615077][ T5944] usb 4-1: Product: syz [ 325.628458][ T5944] usb 4-1: Manufacturer: syz [ 325.634089][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 325.659945][ T5944] usb 4-1: SerialNumber: syz [ 325.735674][ T8866] input: syz0 as /devices/virtual/input/input23 [ 325.799839][ T5944] usb 4-1: config 0 descriptor?? [ 325.823936][ T8866] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 325.884629][ T8866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.943313][ T8867] bond1: (slave veth3): Enslaving as an active interface with a down link [ 326.086246][ T8866] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 326.411431][ T5889] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 326.631413][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 326.643056][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.668635][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.684486][ T5889] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.695168][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.703515][ T5889] usb 5-1: Product: syz [ 326.708336][ T5889] usb 5-1: Manufacturer: syz [ 326.713181][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 326.722508][ T5889] usb 5-1: SerialNumber: syz [ 326.887949][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.902638][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 326.928698][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 326.944839][ T5889] usb 5-1: 0:2 : does not exist [ 326.959426][ T5889] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 326.967358][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.009132][ T8880] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 327.061268][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.085273][ T5889] usb 5-1: USB disconnect, device number 50 [ 327.293925][ T8883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'. [ 327.310340][ T8883] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 327.317037][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 327.325924][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 327.752708][ T5825] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 327.928331][ T5890] usb 2-1: USB disconnect, device number 41 [ 329.151207][ T5889] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 329.327114][ T6205] udevd[6205]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.353927][ T5889] usb 5-1: config 0 has no interfaces? [ 329.373024][ T5889] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 329.382651][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.446408][ T5889] usb 5-1: Product: syz [ 329.459161][ T5889] usb 5-1: Manufacturer: syz [ 329.478133][ T5889] usb 5-1: SerialNumber: syz [ 329.507628][ T5889] usb 5-1: config 0 descriptor?? [ 329.571059][ T5944] usbhid 4-1:0.253: couldn't find an input interrupt endpoint [ 329.612896][ T8884] vhci_hcd: connection reset by peer [ 329.624573][ T13] vhci_hcd: stop threads [ 329.665146][ T13] vhci_hcd: release socket [ 329.684107][ T13] vhci_hcd: disconnect device [ 329.812190][ T5944] usb 4-1: USB disconnect, device number 65 [ 329.874271][ T5890] usb 3-1: USB disconnect, device number 36 [ 329.935878][ T8904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.821'. [ 330.554676][ T5890] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 330.761715][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 330.789934][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.829728][ T5890] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 330.855688][ T5890] usb 3-1: config 127 has no interface number 0 [ 330.870213][ T5890] usb 3-1: config 127 interface 25 has no altsetting 0 [ 330.905341][ T5890] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 330.934858][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.958110][ T5890] usb 3-1: Product: syz [ 330.968157][ T5890] usb 3-1: Manufacturer: syz [ 330.977652][ T5890] usb 3-1: SerialNumber: syz [ 331.178530][ T8925] netlink: 52 bytes leftover after parsing attributes in process `syz.1.825'. [ 331.264012][ T5890] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 331.467578][ T8933] loop6: detected capacity change from 0 to 7 [ 331.528904][ T8933] Dev loop6: unable to read RDB block 7 [ 331.561545][ T8933] loop6: AHDI p1 p2 p3 p4 [ 331.567060][ T8933] loop6: partition table partially beyond EOD, truncated [ 331.662967][ T8933] loop6: p1 start 926365495 is beyond EOD, truncated [ 331.682912][ T8933] loop6: p2 start 744947712 is beyond EOD, truncated [ 331.690679][ T8933] loop6: p3 start 1886353253 is beyond EOD, truncated [ 331.732223][ T5890] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 331.973956][ T8940] vivid-001: disconnect [ 332.056726][ T8939] vivid-001: reconnect [ 332.314886][ T8947] futex_wake_op: syz.1.832 tries to shift op by -1; fix this program [ 332.324361][ T8948] futex_wake_op: syz.1.832 tries to shift op by -1; fix this program [ 332.521479][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 332.710579][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 332.735826][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 332.795736][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.828827][ T10] usb 4-1: Product: syz [ 332.911464][ T5825] vhci_hcd: vhci_device speed not set [ 332.999211][ T10] usb 4-1: Manufacturer: syz [ 333.037093][ T10] usb 4-1: SerialNumber: syz [ 333.071319][ T10] usb 4-1: config 0 descriptor?? [ 333.103796][ T10] rtl8150 4-1:0.0: couldn't find required endpoints [ 333.130824][ T10] rtl8150 4-1:0.0: probe with driver rtl8150 failed with error -5 [ 333.421195][ T10] usb 4-1: USB disconnect, device number 66 [ 333.747253][ T5889] usb 5-1: USB disconnect, device number 51 [ 333.951262][ T5944] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 334.582339][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.633598][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.699060][ T5944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 334.711190][ T5944] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 334.733851][ T5944] usb 2-1: can't read configurations, error -71 [ 334.825664][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 334.891256][ T5890] usb 3-1: device firmware changed [ 334.900439][ T5890] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 334.936358][ T5890] usb 3-1: USB disconnect, device number 37 [ 335.013719][ T8966] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 335.455294][ T5890] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 335.623123][ T5890] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 335.681080][ T5890] usb 3-1: config 1 interface 0 has no altsetting 0 [ 335.730442][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 335.755748][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.774909][ T5890] usb 3-1: Product: syz [ 335.798759][ T5890] usb 3-1: Manufacturer: syz [ 335.821652][ T5890] usb 3-1: SerialNumber: syz [ 335.849328][ T8977] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 336.001270][ T5944] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 336.187781][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 336.228504][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0 [ 336.235265][ T5944] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 336.245022][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.260693][ T5890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 336.291796][ T5944] usb 2-1: config 0 descriptor?? [ 336.299430][ T5890] usb 3-1: USB disconnect, device number 38 [ 336.330444][ T5890] usblp0: removed [ 336.925612][ T5944] nzxt-smart2 0003:1E71:2011.0006: unknown main item tag 0x0 [ 336.941342][ T5944] nzxt-smart2 0003:1E71:2011.0006: item fetching failed at offset 3/5 [ 337.027199][ T5944] nzxt-smart2 0003:1E71:2011.0006: probe with driver nzxt-smart2 failed with error -22 [ 337.110476][ T5890] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 337.412974][ T5890] usb 3-1: config 0 has no interfaces? [ 337.427672][ T5890] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 337.437231][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.449802][ T5890] usb 3-1: Product: syz [ 337.455156][ T5890] usb 3-1: Manufacturer: syz [ 337.460006][ T5890] usb 3-1: SerialNumber: syz [ 337.476604][ T5890] usb 3-1: config 0 descriptor?? [ 337.476665][ T9003] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.847'. [ 337.567020][ T9003] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.847'. [ 337.677057][ T9003] netlink: 332 bytes leftover after parsing attributes in process `syz.4.847'. [ 338.013297][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.035576][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.135334][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.145161][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.444721][ T5841] usb 3-1: USB disconnect, device number 39 [ 338.463285][ T9019] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 338.531337][ T5890] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 338.668582][ T5841] usb 2-1: USB disconnect, device number 44 [ 338.760908][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 338.797256][ T5890] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 338.824875][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.858483][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.881285][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.910606][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.973771][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.986131][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.995156][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.057216][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.185984][ T9031] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.344369][ T5886] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 339.389075][ T5890] usb 5-1: GET_CAPABILITIES returned 0 [ 339.398917][ T5890] usbtmc 5-1:16.0: can't read capabilities [ 339.606778][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 339.630794][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.655013][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.675990][ T5886] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 339.691144][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.703821][ T10] usb 5-1: USB disconnect, device number 52 [ 339.731431][ T5886] usb 4-1: config 0 descriptor?? [ 340.155034][ T9017] tipc: Started in network mode [ 340.164233][ T9017] tipc: Node identity 6, cluster identity 4711 [ 340.174507][ T9017] tipc: Node number set to 6 [ 340.461410][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 340.637157][ T10] usb 5-1: device descriptor read/64, error -71 [ 340.820879][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 340.826946][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.884612][ T5886] usb 4-1: USB disconnect, device number 67 [ 340.911222][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 341.061207][ T10] usb 5-1: device descriptor read/64, error -71 [ 341.171130][ T10] usb usb5-port1: attempt power cycle [ 343.329087][ T9075] netlink: 'syz.0.869': attribute type 2 has an invalid length. [ 343.362366][ T9078] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 343.414619][ T9075] þ: entered promiscuous mode [ 343.423965][ T9075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.432805][ T9075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.065435][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.081599][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.105486][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.115577][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.400840][ T9105] fuse: Bad value for 'user_id' [ 344.416034][ T9105] fuse: Bad value for 'user_id' [ 344.557624][ T9106] dvmrp0: entered allmulticast mode [ 344.596716][ T9107] fuse: Unknown parameter 'fowner' [ 344.782236][ T9109] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 344.866904][ T9111] fuse: Invalid rootmode [ 346.180864][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 346.210690][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 346.238494][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 346.353267][ T9123] input: syz1 as /devices/virtual/input/input24 [ 348.256127][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 348.521294][ T5841] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 348.671316][ T5886] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 348.747540][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.756571][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.823809][ T5841] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 348.840818][ T5886] usb 4-1: device descriptor read/64, error -71 [ 348.848051][ T5841] usb 5-1: config 0 has no interface number 0 [ 348.869488][ T5841] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 348.899459][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.932466][ T5841] usb 5-1: Product: syz [ 348.938449][ T5841] usb 5-1: Manufacturer: syz [ 348.949385][ T5841] usb 5-1: SerialNumber: syz [ 348.965715][ T5841] usb 5-1: config 0 descriptor?? [ 349.031647][ T5888] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 349.080955][ T5886] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 349.183381][ T5841] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 349.194448][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.206767][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 349.221779][ T5886] usb 4-1: device descriptor read/64, error -71 [ 349.222446][ T5841] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 349.235038][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.253879][ T5888] usb 3-1: config 0 descriptor?? [ 349.266215][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 349.280247][ T5841] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 349.310467][ T5841] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 349.340991][ T5886] usb usb4-port1: attempt power cycle [ 349.347161][ T5841] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 349.389072][ T5841] usb 5-1: USB disconnect, device number 56 [ 349.468406][ T5841] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 349.484641][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.507556][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.519054][ T5841] keyspan 5-1:0.133: device disconnected [ 349.546538][ T5888] pwc: send_video_command error -71 [ 349.560734][ T5888] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 349.580350][ T5888] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 349.663186][ T5888] usb 3-1: USB disconnect, device number 40 [ 349.722456][ T5886] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 349.751915][ T5886] usb 4-1: device descriptor read/8, error -71 [ 349.990686][ T5886] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 350.080648][ T5888] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 350.095588][ T5886] usb 4-1: device descriptor read/8, error -71 [ 350.286185][ T5886] usb usb4-port1: unable to enumerate USB device [ 350.313136][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.323589][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 350.333076][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.346041][ T5888] usb 3-1: config 0 descriptor?? [ 350.359160][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 350.760327][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 350.970134][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 350.977512][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 350.986457][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 350.994767][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 351.002597][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 351.288635][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 351.305960][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 351.426230][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 351.493814][ T5888] pwc: recv_control_msg error -32 req 02 val 2400 [ 351.506628][ T5888] pwc: recv_control_msg error -32 req 02 val 2600 [ 351.804240][ T5888] pwc: recv_control_msg error -32 req 02 val 2800 [ 351.859012][ T5888] pwc: recv_control_msg error -32 req 04 val 1100 [ 351.876159][ T5888] pwc: Registered as video103. [ 351.887124][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 352.091723][ T5841] usb 3-1: USB disconnect, device number 41 [ 352.630645][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 353.013358][ T24] usb 2-1: config 0 has no interfaces? [ 353.066536][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 353.206793][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.233624][ T24] usb 2-1: Product: syz [ 353.259992][ T24] usb 2-1: Manufacturer: syz [ 353.288849][ T24] usb 2-1: SerialNumber: syz [ 353.308786][ T24] usb 2-1: config 0 descriptor?? [ 353.827491][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.838610][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.880816][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.891227][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.908419][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.918572][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.072890][ T9246] Cannot find add_set index 0 as target [ 355.837698][ T5888] usb 2-1: USB disconnect, device number 45 [ 357.282589][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.315473][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.370696][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 357.521792][ T9290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.934'. [ 357.576290][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 357.620839][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.642067][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.681252][ T24] usb 2-1: config 0 has no interfaces? [ 357.709503][ T24] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 357.729942][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.750262][ T24] usb 2-1: Product: syz [ 357.755675][ T24] usb 2-1: Manufacturer: syz [ 357.766251][ T24] usb 2-1: SerialNumber: syz [ 357.802503][ T24] usb 2-1: config 0 descriptor?? [ 357.911712][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'. [ 358.037438][ T9301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.940'. [ 358.063409][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.075887][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.092374][ T9304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.135577][ T9307] loop7: detected capacity change from 0 to 16384 [ 358.574811][ T9312] netlink: 'syz.3.941': attribute type 3 has an invalid length. [ 358.660627][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 358.901494][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 358.952660][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 358.968732][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.970665][ T24] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 358.970694][ T24] usb 5-1: config 127 has no interface number 0 [ 358.970725][ T24] usb 5-1: config 127 interface 25 has no altsetting 0 [ 358.974831][ T24] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 358.974863][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.974886][ T24] usb 5-1: Product: syz [ 358.974902][ T24] usb 5-1: Manufacturer: syz [ 358.974919][ T24] usb 5-1: SerialNumber: syz [ 359.069184][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 359.072377][ T10] usb 4-1: config 0 has an invalid interface number: 29 but max is 2 [ 359.072408][ T10] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 359.072429][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 359.072451][ T10] usb 4-1: config 0 has no interface number 0 [ 359.072492][ T10] usb 4-1: config 0 interface 29 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 359.072521][ T10] usb 4-1: config 0 interface 29 has no altsetting 0 [ 359.075697][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=f3c1, bcdDevice=16.dc [ 359.075731][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.075753][ T10] usb 4-1: Product: syz [ 359.075770][ T10] usb 4-1: Manufacturer: syz [ 359.075786][ T10] usb 4-1: SerialNumber: syz [ 359.078717][ T10] usb 4-1: config 0 descriptor?? [ 359.199166][ T24] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 359.286849][ T10] ftdi_sio 4-1:0.29: FTDI USB Serial Device converter detected [ 359.325910][ T10] ftdi_sio ttyUSB0: unknown device type: 0x16dc [ 359.333732][ T10] usb 4-1: USB disconnect, device number 72 [ 359.343223][ T10] ftdi_sio 4-1:0.29: device disconnected [ 359.734932][ T24] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 360.247097][ T5890] usb 2-1: USB disconnect, device number 46 [ 360.511953][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.524614][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.550472][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.584372][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.690741][ T5890] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 360.701297][ T5841] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 360.895955][ T5890] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 360.904445][ T5890] usb 4-1: can't read configurations, error -61 [ 360.920654][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 360.928023][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.943207][ T5841] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 360.956597][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.978285][ T5841] usb 3-1: config 0 descriptor?? [ 361.040689][ T5890] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 361.070635][ T5944] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 361.194141][ T5890] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 361.203639][ T5890] usb 4-1: can't read configurations, error -61 [ 361.218408][ T5890] usb usb4-port1: attempt power cycle [ 361.283682][ T5944] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 361.297692][ T5944] usb 2-1: config 0 has no interface number 0 [ 361.314055][ T5944] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 361.326989][ T5944] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 361.339946][ T5944] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 361.410701][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.433832][ T5841] logitech 0003:046D:C24F.0007: ignoring exceeding usage max [ 361.446724][ T24] usb 5-1: device firmware changed [ 361.453220][ T24] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 361.466095][ T5944] usb 2-1: config 0 interface 200 has no altsetting 0 [ 361.474787][ T5841] logitech 0003:046D:C24F.0007: hidraw0: USB HID v10.00 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 361.490098][ T24] usb 5-1: USB disconnect, device number 57 [ 361.505808][ T5944] usb 2-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 361.527919][ T5841] logitech 0003:046D:C24F.0007: no inputs found [ 361.535758][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.550855][ T5944] usb 2-1: Product: syz [ 361.568913][ T5944] usb 2-1: Manufacturer: syz [ 361.580954][ T5890] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 361.591463][ T5944] usb 2-1: SerialNumber: syz [ 361.637869][ T5944] usb 2-1: config 0 descriptor?? [ 361.645196][ T5890] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 361.674541][ T5890] usb 4-1: can't read configurations, error -61 [ 361.820895][ T5890] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 361.892560][ T5890] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 361.926680][ T5890] usb 4-1: can't read configurations, error -61 [ 361.938499][ T5890] usb usb4-port1: unable to enumerate USB device [ 361.941558][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.963709][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.249258][ T5890] usb 3-1: USB disconnect, device number 42 [ 362.536992][ T9374] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 362.547659][ T9374] netlink: 'syz.2.959': attribute type 30 has an invalid length. [ 362.562136][ T9374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.959'. [ 363.456756][ T9392] Cannot find set identified by id 0 to match [ 363.625294][ T9399] loop8: detected capacity change from 0 to 7 [ 363.639842][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 363.830797][ T9399] Dev loop8: unable to read RDB block 7 [ 363.836733][ T9399] loop8: unable to read partition table [ 363.871286][ T9399] loop8: partition table beyond EOD, truncated [ 363.937671][ T9399] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 364.444738][ T5944] usb 2-1: USB disconnect, device number 47 [ 364.690073][ T9407] netlink: 'syz.3.969': attribute type 11 has an invalid length. [ 365.210357][ T9417] B: renamed from veth0 [ 365.421484][ T5888] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 365.520848][ T9421] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 365.654888][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 365.740449][ T5888] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 365.749750][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.807913][ T5888] usb 4-1: config 0 descriptor?? [ 365.839287][ T5888] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 366.523188][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 366.604695][ T5888] gspca_nw80x: reg_r err -110 [ 366.609914][ T5888] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 367.063602][ T5890] usb 4-1: USB disconnect, device number 77 [ 367.158252][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.168989][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.194258][ T9454] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 367.262129][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 367.285825][ T9454] bond1: (slave gretap1): making interface the new active one [ 367.294618][ T9454] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 367.300645][ T5888] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 367.460779][ T9461] fuse: Unknown parameter '' [ 367.581987][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 368.023569][ T5888] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 368.043366][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 368.093497][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 368.155167][ T5888] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 368.210918][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.297956][ T5888] usb 5-1: Product: syz [ 368.369780][ T5888] usb 5-1: Manufacturer: syz [ 368.382618][ T9471] fuse: Bad value for 'fd' [ 368.395699][ T5888] usb 5-1: SerialNumber: syz [ 368.423949][ T5888] usb 5-1: config 0 descriptor?? [ 368.461715][ T9429] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 368.488408][ T5888] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 368.495860][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 368.495995][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 368.692364][ T5944] usb 5-1: USB disconnect, device number 58 [ 368.700367][ T5944] mcba_usb 5-1:0.0 can0: device disconnected [ 368.822579][ T5886] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 369.040739][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 369.097954][ T5886] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 369.118916][ T5886] usb 3-1: config 0 has no interface number 0 [ 369.129461][ T5886] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.165247][ T5886] usb 3-1: config 0 interface 85 has no altsetting 0 [ 369.240234][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 369.259356][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.291800][ T5886] usb 3-1: Product: syz [ 369.308800][ T5886] usb 3-1: Manufacturer: syz [ 369.326333][ T5886] usb 3-1: SerialNumber: syz [ 369.358160][ T5886] usb 3-1: config 0 descriptor?? [ 369.615117][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.648509][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.811394][ T31] INFO: task kworker/0:4:5885 blocked for more than 143 seconds. [ 369.823999][ T5886] appletouch 3-1:0.85: Failed to request geyser raw mode [ 369.846896][ T5886] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 369.872460][ T31] Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 [ 369.894009][ T5886] usb 3-1: USB disconnect, device number 43 [ 369.908973][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.935553][ T31] task:kworker/0:4 state:D stack:21672 pid:5885 tgid:5885 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 369.964293][ T31] Workqueue: usb_hub_wq hub_event [ 369.973937][ T31] Call Trace: [ 369.982260][ T31] [ 369.989819][ T31] __schedule+0x16e2/0x4cd0 [ 370.004910][ T31] ? schedule+0x165/0x360 [ 370.018136][ T31] ? __pfx___schedule+0x10/0x10 [ 370.032260][ T31] ? schedule+0x91/0x360 [ 370.044803][ T31] schedule+0x165/0x360 [ 370.055858][ T31] schedule_timeout+0x9a/0x270 [ 370.068921][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 370.083133][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.118188][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.204619][ T31] ? wait_for_completion+0x267/0x5d0 [ 370.300551][ T31] wait_for_completion+0x2bf/0x5d0 [ 370.357826][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 370.429567][ T31] i2c_del_adapter+0x581/0x6e0 [ 370.467698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.505391][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 370.534845][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 370.541514][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 370.546642][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 370.575778][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 370.598197][ T31] usb_probe_interface+0x641/0xbc0 [ 370.615090][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 370.622989][ T31] really_probe+0x26a/0x9a0 [ 370.628570][ T31] __driver_probe_device+0x18c/0x2f0 [ 370.653597][ T31] driver_probe_device+0x4f/0x430 [ 370.658858][ T31] __device_attach_driver+0x2ce/0x530 [ 370.665881][ T31] bus_for_each_drv+0x251/0x2e0 [ 370.671274][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 370.678105][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 370.687085][ T31] __device_attach+0x2b8/0x400 [ 370.692296][ T31] ? __pfx___device_attach+0x10/0x10 [ 370.697787][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 370.703387][ T31] bus_probe_device+0x185/0x260 [ 370.708403][ T31] device_add+0x7b6/0xb50 [ 370.713921][ T31] usb_set_configuration+0x1a87/0x20e0 [ 370.720791][ T31] usb_generic_driver_probe+0x8d/0x150 [ 370.727519][ T31] usb_probe_device+0x1c4/0x390 [ 370.733043][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 370.739098][ T31] really_probe+0x26a/0x9a0 [ 370.745200][ T31] __driver_probe_device+0x18c/0x2f0 [ 370.750995][ T31] driver_probe_device+0x4f/0x430 [ 370.756113][ T31] __device_attach_driver+0x2ce/0x530 [ 370.762808][ T31] bus_for_each_drv+0x251/0x2e0 [ 370.767718][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 370.773728][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 370.779147][ T31] __device_attach+0x2b8/0x400 [ 370.784066][ T31] ? __pfx___device_attach+0x10/0x10 [ 370.789410][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 370.795268][ T31] bus_probe_device+0x185/0x260 [ 370.800147][ T31] device_add+0x7b6/0xb50 [ 370.804573][ T31] usb_new_device+0xa39/0x16c0 [ 370.809386][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 370.814684][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.819919][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.825807][ T31] hub_event+0x2941/0x4a00 [ 370.830320][ T31] ? __pfx_hub_event+0x10/0x10 [ 370.835196][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 370.841024][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.846259][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 370.852809][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 370.858577][ T31] process_scheduled_works+0xade/0x17a0 [ 370.864313][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.870357][ T31] worker_thread+0x8a0/0xda0 [ 370.875101][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.882187][ T31] ? __kthread_parkme+0x7b/0x200 [ 370.887192][ T31] kthread+0x711/0x8a0 [ 370.891381][ T31] ? __pfx_worker_thread+0x10/0x10 [ 370.896543][ T31] ? __pfx_kthread+0x10/0x10 [ 370.901395][ T31] ? __pfx_kthread+0x10/0x10 [ 370.906035][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.914821][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.920093][ T31] ? __pfx_kthread+0x10/0x10 [ 370.924839][ T31] ret_from_fork+0x4b/0x80 [ 370.929293][ T31] ? __pfx_kthread+0x10/0x10 [ 370.936645][ T31] ret_from_fork_asm+0x1a/0x30 [ 370.942093][ T31] [ 370.945189][ T31] [ 370.945189][ T31] Showing all locks held in the system: [ 370.962709][ T31] 1 lock held by khungtaskd/31: [ 370.967653][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 370.982489][ T31] 2 locks held by getty/5594: [ 370.987221][ T31] #0: ffff88803047f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 371.012214][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 371.025799][ T31] 4 locks held by udevd/5831: [ 371.032244][ T31] #0: ffff88802effd8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 371.041339][ T31] #1: ffff888030ed2888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 371.053567][ T31] #2: ffff88802408b698 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 371.063754][ T31] #3: ffff88805668c198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 371.076389][ T31] 5 locks held by kworker/0:4/5885: [ 371.081781][ T31] #0: ffff8881446c7948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 371.094029][ T31] #1: ffffc9000a77fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 371.106106][ T31] #2: ffff8880275e4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 371.115117][ T31] #3: ffff88805668c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 371.125206][ T31] #4: ffff88806765f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 371.135495][ T31] 1 lock held by syz.4.991/9498: [ 371.140454][ T31] #0: ffffffff8df43680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 371.154486][ T31] [ 371.156842][ T31] ============================================= [ 371.156842][ T31] [ 371.211861][ T31] NMI backtrace for cpu 1 [ 371.211890][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 371.211916][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.211929][ T31] Call Trace: [ 371.211938][ T31] [ 371.211947][ T31] dump_stack_lvl+0x189/0x250 [ 371.211981][ T31] ? __wake_up_klogd+0xd9/0x110 [ 371.212010][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.212040][ T31] ? __pfx__printk+0x10/0x10 [ 371.212075][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 371.212100][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 371.212120][ T31] ? _printk+0xcf/0x120 [ 371.212145][ T31] ? __pfx__printk+0x10/0x10 [ 371.212169][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 371.212194][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 371.212232][ T31] watchdog+0xfee/0x1030 [ 371.212261][ T31] ? watchdog+0x1de/0x1030 [ 371.212296][ T31] kthread+0x711/0x8a0 [ 371.212325][ T31] ? __pfx_watchdog+0x10/0x10 [ 371.212350][ T31] ? __pfx_kthread+0x10/0x10 [ 371.212376][ T31] ? __pfx_kthread+0x10/0x10 [ 371.212400][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.212424][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.212450][ T31] ? __pfx_kthread+0x10/0x10 [ 371.212474][ T31] ret_from_fork+0x4b/0x80 [ 371.212494][ T31] ? __pfx_kthread+0x10/0x10 [ 371.212538][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.212572][ T31] [ 371.212580][ T31] Sending NMI from CPU 1 to CPUs 0: [ 371.366211][ C0] NMI backtrace for cpu 0 [ 371.366228][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 371.366249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.366261][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 371.366288][ C0] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 cf 11 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 371.366303][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 371.366319][ C0] RAX: cc525ea66f35df00 RBX: ffffffff81977128 RCX: cc525ea66f35df00 [ 371.366333][ C0] RDX: 0000000000000001 RSI: ffffffff8d74c03c RDI: ffffffff8bc1d820 [ 371.366346][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 371.366359][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7efb70 [ 371.366372][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 371.366384][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 371.366399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.366411][ C0] CR2: 00007fce9cb80178 CR3: 000000001e774000 CR4: 00000000003526f0 [ 371.366426][ C0] DR0: 0000000000000680 DR1: 0000000000000003 DR2: 0000000000000007 [ 371.366444][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 371.366454][ C0] Call Trace: [ 371.366462][ C0] [ 371.366469][ C0] default_idle+0x13/0x20 [ 371.366494][ C0] default_idle_call+0x74/0xb0 [ 371.366519][ C0] do_idle+0x1e8/0x510 [ 371.366539][ C0] ? __pfx_do_idle+0x10/0x10 [ 371.366565][ C0] cpu_startup_entry+0x44/0x60 [ 371.366582][ C0] rest_init+0x2de/0x300 [ 371.366608][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 371.366628][ C0] start_kernel+0x470/0x4f0 [ 371.366653][ C0] x86_64_start_reservations+0x2a/0x30 [ 371.366670][ C0] x86_64_start_kernel+0x66/0x70 [ 371.366685][ C0] common_startup_64+0x13e/0x147 [ 371.366720][ C0] [ 371.367253][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 371.572252][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 371.584062][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.594156][ T31] Call Trace: [ 371.597450][ T31] [ 371.600396][ T31] dump_stack_lvl+0x99/0x250 [ 371.605011][ T31] ? __asan_memcpy+0x40/0x70 [ 371.609611][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.614826][ T31] ? __pfx__printk+0x10/0x10 [ 371.619437][ T31] panic+0x2db/0x790 [ 371.623356][ T31] ? __pfx_panic+0x10/0x10 [ 371.627790][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 371.633616][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 371.639002][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 371.645183][ T31] watchdog+0x102d/0x1030 [ 371.649550][ T31] ? watchdog+0x1de/0x1030 [ 371.653995][ T31] kthread+0x711/0x8a0 [ 371.658119][ T31] ? __pfx_watchdog+0x10/0x10 [ 371.662828][ T31] ? __pfx_kthread+0x10/0x10 [ 371.667457][ T31] ? __pfx_kthread+0x10/0x10 [ 371.672068][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.677311][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.682525][ T31] ? __pfx_kthread+0x10/0x10 [ 371.687133][ T31] ret_from_fork+0x4b/0x80 [ 371.691563][ T31] ? __pfx_kthread+0x10/0x10 [ 371.696166][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.701041][ T31] [ 371.704711][ T31] Kernel Offset: disabled [ 371.709043][ T31] Rebooting in 86400 seconds..