last executing test programs: 18.467036438s ago: executing program 0 (id=1919): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000003900)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @loopback, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x4, {0xff}}}], 0x30}}], 0x1, 0x8000) sendto$inet(r2, &(0x7f00000001c0)="a8ec6599e55c19c728ee280bfd9ff108e5c1a7c7b1d722a8185ed91dd21e14b74c6ac79dab1f5c5447683c5d36f27e7595c4672c3cac0868fa0574cb71515359fb0b11b50be5ac3e7f2509294dbc94760bd07dc9f3d47fcfa75219b29b2154d74b", 0x61, 0x4000080, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x2c400) pipe(&(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0xff) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/98, 0x62, 0x2003, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x202840, 0xa9) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000003c0)=@overlay={0x2, 0x3, 0x4, 0x4000, 0xffffffcd, {0x0, 0xea60}, {0x0, 0x0, 0xe, 0x5b, 0x8, 0x4, "720aa5f0"}, 0x254, 0x3, {}, 0x9, 0x0, r9}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200001700000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.890974162s ago: executing program 4 (id=1924): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="b75a28e01f0203d65c249e7f4226f8c2cebebc9ae1def584a2e69409648cf418f7ac75ca95edd01b152d88a4182aa772bd00099d6457bd1fbe2e1150a5e25ce5c5680dd867c022c06eaaef46bb84a057b7d5517534636e1580bbe8f1ccc629191df5e5d266e7c2669016008629277ad81fa1a657fb4f7b07fffc2c227efe844cc770776444a83e07f0c7dac8fe0e1eec02db119493944cbd33391c0abdea7b9c0b20abe23c5f0e7a03af0e02097b66876fd002eccd737e07b1ec7d454a115f878a30c55e0c6d41439b886baf6afcfbb728a3deda73246ae623a639eee05f889b09fcded46b1b7fccb93993f06da67354e4e3d34ec61c3001f0b8c9234228aa6eabf6a80ca36a4ca0581e19a80e611bb71715c190a9b51f35caf2649c4b71fac03585ba57e9e06461f89a43cba5dd7f5f66bd5f123bcc48bc51f560ca23f21b67369e5a5b6da95d55764041ed1b202488ca995df8144d570d581ed360229e3e08c6e2e8a0528ae3a6658722bd956b5a89f0a11e20b9934c9556976fe1e3e2ee454f2930759a2209b92cb19bfe89a5891443b0e6bd494e630aabbee61c94f25138c48b812a9818d24834e68916ec5956e0b99990d597c12a928143a01c054a46cf248d7e1fb9ea8a70163ae9d434cb7f47b3378c0659ba5915295fd948e70bf0c07755b184b4f2543e9362d4faff88c86a805467b50a5032362e5e608d3ff2cc6640be56e9ff13001647821febad678ec24e300278a224218b1c5beb550fa01d794579df6fdaba64611f0ccc6848d143e8097bf71d5180d4a28b2c4ae9e1c8ecd82c5865cf00ccffc76a2b7bef216bffddb15876160f11b11f5c3097fc9b9fcddbe2f37a7cfa1723b332f69d16871b600cc6827cca7f470f868df991874a89845135656cb30e8aae62c3df3c880b8b54ac4659c794cd5842c7e73d0241e1e68b4e7d50894d7e6c0ed1b49b05a1a0354a080d1500b58e062d52031dd756dd157373d69f6cf7bd5927baa882cac9447f236571cae47a6e34f2896d425c68d3b91847b82a9bd1af98c24add0428d75606f8f39b89e9451801b08778b06c91e47a24d38a2c36a41419ca36e53d606908a6793b3743ab245c7e1ab202c5c86afd0dee19f2148f0fe5e367bd14870b56520a58451d2453529345a1880758fbadc8d06c4de4e7506338d04d8edb1e1cb890551cd1bbffa72bec31cdef80344ebe17cbd9abd35a641a815bb1093d76d9a65db757e5f1a4842431194deea69692e88781db959281da66aae3a80721d0c53664cae9ea0e9478a7805747005724aa607b27f28a4aa1b4343d2baeb808292b1d61056e55e8db489d9ad57a66f087fb2840de3e11ebf6b6524071ad93da25da6dc1379e6315f4bf268a09ef7e521863aeab33c5738ea1407f9d78ee1e3b0941e60e5cce5bf79ee8e51f12a36e08c320bd", 0x3fc}], 0x1}}], 0x1, 0x240080a0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) 15.798104903s ago: executing program 4 (id=1927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0), 0x8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000008880), 0x483, 0x44000102, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x51, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100, @val=0x80}, "e8e6e165f722b6e15864d979b28b11d355ecc3bab7d6c6c1c77de6b30de1a0dd36ea8533e83fb8383e66f46564e5845e02afb7dff805233c41b3bb5c3aaf9f2600"}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1, 0xff, 0x1}, 0xfe}, 0x18) setsockopt$packet_tx_ring(r5, 0x10f, 0x8a, &(0x7f0000000580)=@req3, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000000), 0x0}, 0x20) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x3, [{0x5000000}, {}, {}]}, 0x58) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @string={0x4, 0x3, "5414"}}, 0x0, 0x0, 0x0}, 0x0) 14.61203382s ago: executing program 1 (id=1931): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x0, 0x0, 0x30314752}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c080280080008008ca800000a000100aa"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r6, &(0x7f0000001740)={0x2020}, 0x2020) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000010429bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0380000080000000050011000e00000008000500", @ANYRES32=r4, @ANYBLOB="01b73b3dbbdf1c4f5f15000080", @ANYRES32=r6, @ANYBLOB], 0x38}}, 0x0) 14.010439925s ago: executing program 0 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r1], 0x44}}, 0xfffffffffffffff3) 13.620804024s ago: executing program 0 (id=1935): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$full(0xffffff9c, &(0x7f00000003c0), 0x123300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x4000) 12.946534418s ago: executing program 1 (id=1936): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) shutdown(r4, 0x1) ppoll(&(0x7f0000000000)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r6}, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="6becfcf1f39f68b02afacfb2be84ad0d588db7a69c2111664aac3049b46a7fba322cd9c310c538528cf81a915c33bbd947d909419d0fcf2b7c5a3c50991adcbe4ec1a7c5a9d761818d88366996ba1fae12c52a60372ff80cf0f6413b8c80177c54b34d6a6d456e3b47927664b61f676c19baa2477124385ecee04a9b75e4095eb7a92c821555aebf6ba0df28a0bb039b942a3e473036bce80f6ceeb1166fabc29eb7b6e6826980e90fef7242f587df22be1344915aad04ec01cadf9d4609f2f01eaa190bcc2504d2efa7686b22e12e760c130a674fef9cb4ed22921aeb27", 0xde}, {&(0x7f0000000140)="25c51e26d400e92f5f97a23b5ab584f639531bf55c043cdd8f5b185b05dd56f83e8dc959f0cdb0860e13db020d318e821f8a479f169f7d9fbd34c200680aafb3e8d261adac33d2c87c339aaaf84cc38d11ea17fc6cab0b7fae0ca7545611aa9f599fcb4f72dacdb0ce2dfc11cf5074e2f4e403dfd14786fb7e0590583fe725de45d428cd26038a456b63c41110e5925ebd", 0x91}, {&(0x7f0000000400)="e5000f6dae911a02e895d647dc892046969df088e07008ed0a39f00a212fb84db4d11cbef1a7b47e4033a8d53eb077f84d219bf16a4ce1c0a7f5bab8d5afb4fb6eb7b26660243eeb2accda31d0b5bcbc697b605d81bb793fc57ecb590dd8d06fb06cfe556221ff03000048f850cf7cbbb23886f5ca7edfa31d4c644b003ed9362634d5bee174a59ef783901614b7725135d8db57b263b275360a2d0bfaae9022", 0xa0}, {&(0x7f00000004c0)="cbc20b81c240cf95ce90eb6d6fc72645e1044af66a29fd3eb12ba45b4df72b2f73c8260af82f33bfc346347c854a3b857b6907c892c23ba59710f3c31637c7609f95f61442d9c0759490dacf89b3d560a66c59bd6dadbc60dee6d7a247817181cb31c314064d40b396eb714adf8d4d3676b4182e91cb18bf3881f871c9378c088840ed4ebdc2ddaf501d273016c21a4ac4300a22c9c988b2b1e7d88c12355ea5f55a3d6e9eee466e009f", 0xaa}, {&(0x7f0000000580)="59119233a6d862d723496d06403dfa2bf8b00ed6c238dbe0abdf386ea17ffc08ce7e5149f1d70543c86d22747a66242a7b1dd8661e6a3ae33eb277a2923175951f35a0c36ff7e35161963b46fc9620f23a44c84d99a7eb9198f41e729c545b950f0f438969091473b35e79aed95c107141b6ceae4d272b24e0351148197a93f702e44ec28db34ebdd1c15885e26d097c6e7a9a1d1da4627d16b975f9b20650c8521556bcb7f0fcf198d1ff025ee9ca9d3a39e474816e66eefc2fdbeb2685ee42c5202eb58d322c1fb6002885f7991d7db156c96a105f117b555929a9507d641cd5b73b143094445f6761364f1c6d990ae3", 0xf1}, {&(0x7f0000000680)="c042d9733dac7c96b5c6a9d39931ddab86b37c55c4cc8c42296c0faa7b9e7df6f8b8e9476a820655b3d123fb3a665e9ff1c52071b7f2bbc18ee7159af9565fc151dee13f34d28f52292b1af6473a0f801a9dab6d8c14f0281a8b7e9731119feda4309ed80b196c0bfbb953896e9ba24a0913e7b00f634e", 0x77}], 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="10100000000000001701000078b700007e5518c2aac8ac982c2cca497145801287f2b1ba2bd7a32f363352454161d76d3c54be3e554ad24d81d01a998844c46fa743285d41fce019c739b33cc12ea08fedcb5891c3801be9be78d98fec3ae1069081d3e56ef593f6db972a5c5276c46eba741e68b837d13371d9f1d4b6fbf03a9d13939ce43656d00b44d71d20ddf6c729ebf74ce0431955d17db0872f9e8b626e580e2b451afc0e6f9bbac995776277b4734b9cf8b215310e2749b56029bb884d249b5a8843ee9f8d3f82e24e6743d9e8befed8b4441a90cb74a7aac7e684762ab63e5055ed2f6abd893b99b4fa148f10c27cd8a8c34446c60608c2227820ac49f6e44c3a7c716482e4f4929047d1f0ab4776928b5657567db1e63b390f70d130a28093e0832fca02671008fbe8e81343fc88d0efcc9a13261a84b3dc7ca8d3035d47f9831e976cf56c61b28ea6b661c403d8386d85864a22dcac669b3add79ebfe3d9a48912e6810ea9cb9c5fe82fa802479d5cabcb721aa2954fb1dabfba6dcc4f18de35355efd7d456088d2cf4a340eddce6b13af20ec1073670ef1fe054b0f4893186c5989bc4376cacb60b8ab1e75c9bd34c74cf8a409cba70cabefd5a10d1f0fdf2c21c269020a29f0e8ad30b05b1417112c3571e34d19fea4485b65f4781c9e14b9dbbdbd2a4e8e556447c3a3cd48ad7823299b61e3adf0066403d3dfc1f6cf77726b93cfeaf4e724529cdd37e6cf21fb2981c6329a356ab854b095fd8c0e16fe8ea18a8345ef01a0ec8619afd4b98c7ceef034a67add49c1cec10029ec293b9e18fb93f43c5f28fcd4888a48c57e7b5942568a17fdc1d7115dcd200ce880fde46d22b31ed95a89961f2055bce03c1e763f4295b95da330efe451009ed32dea5ac6debee55fd6f955df41838fb9b0347d7b5a1d6bff16dde4c529c9be6694b1ee39254ba477543f79e8faece1f09854cb1a2ae76139dc759e797111b33bb4209c8e06baa216af80de68f2db8ce2f39a934c3f58eff81f4599affc4711f994d25a7689462630befbfc83a4ce04b3fcea92565f38d59832b1884e1a7ea924bffcff17e410851d8047578c9b8f1b047bb64aa8c57c8634865af9c01b11bf81ac77a62a138aaa2ac86a413c825f11ed69896b3037be31ddb09b800923f8b503b9ceeb5fd59c1d4a3478996317b21c41b9a3c7d26d57f454b881408edf4d29a71a32132068aeb86736fadb9e7cc7d48451a9b359d28a8e2d3d0e1a8d1c436fe4f97a26b93be2cc2a5e32ff6e65954067502ce7146801208d9b04b1105c81c95429486656f21964321a3fb8503b3609fbfa2b8a369dc7697f4dbde327b099acc5ca4cddde00abf61b0578c576a929240ac900dc5800115d4756616b9e236097cbfbd1cfd8ab3cc63558982858ea2045efc80ff609a775569997bdfdea88ffdd4d570556fdd00b7c4c52fe2230e938f472e1e4c44c00982a50b48cf337523c9c2a145ae27c6b2e7e806e774396f0cb7cc398bda3eb9bf6c7c4297ca29c9286d73e7b7e4336fdf4e8806c160fd7dcd7c60db121e204eb477fbb3a3aecad46e7840311311623763d32f94bece3ed6c1733e8d9056ba4e6ab38edc1ff5f9c247a43e29b403854d465c07d3eedeaa096bc182961765916fde26da9741ff1b07e9f7179a2fe45d2b85c4d8fb697e939aa955737df729acce11a1736192b9d8570382e8ae9de98acf9bca0c3f8d3dd137d7d79e8e4408c2073ba09995be55d267737fc41f513c7ab16f5712430bc30ad21a31a47f0695d29e6172bed034d5d4222a896eaa1a6391b454becaad901a6e8d76af075a2122f71e5414558c1e177a342ac64a8a37e72caf6b2aed9d192f5e602ef2f9fc4b7a721c55b169dd5f8173fde12c501a5f3342d21c23776b015f0576aa74ac4191dc4926fc38d1b31e4542a4685fc760aa049d62570550ff281c7882c51fbffc96bd9eb9ffc71c94435acfeff1b98d0607f3f7f2f80c60158132be1fb3657bd7bf680700306437118cef71e995bcfd1e85cc63eb30b2ca2220d8309729ae12b1d6ac0b32aacb0f6110726b886c44c6169e2a3036ba9714e30f4ba1a5d54cc70349d286b2787d9ddc20360f956ed5263530b09b8133fe457cc5b53c2cbc7af4c7edc383fbc47730c38f1dc8d2eeb07439056c05f435a49362ccb9d88883c9481063becd6e2becb2a68cc2967827430cac28ff0302ddb5c5ac1976810cc76a73da97fd672ec43fa053b3d2119469aab2b619480425e8b807f25fe51016023f28d119bfcdb92886bcf34be00895737f491d9700ba4adec1fe01964254d533b08ee5aceec5a6e4fc1199ce5b929c4c88c004aabd8450a1e8cd03097dcadca6bef218e145adb75e744ff7dfabfce78c274d32bbf3d7e64eb86af971896c3e65f697103da51b17622b656ed0ebac9f0f69df26c339e36e06da60cd2f4e482dfcabd1576d59789ae9487333d8080ee84a13757c06cf1fcd0e80508cbbcb407b56f06c3d9ac11f7aa70e95877ce0bd2523d31424ac4aee09bf9c739a4122b77227612d6c62b13a1695a905261ba411dc0b6c78e6f9ed8d6838372b40e35dfa6d4fc6d250b4ea063ea2774b8402ecddf58c8b8ac51611afd685d783ab16bea42cc60d29b84cebe66598a7893bc834073aa070ea4334ab742278f2334c0eba6e7f447bd96b3f8f1e0e5e334d1d1810777e9c7e3ac5ccd99d30d1d19a2ac82dbcc08e45840b7e1dd9d9020ac62c857c7aab09f7d8524c2318c9dad6e05157e521a65b3868de0f0519d41e206c893eb42ed59e2c574214db07721db22b8d8a486d72becf6676e361f3e335226fa428fe3d3ae689b2d94a654b71a74a5ef5659628c24ec5ea35e40dd050324691dd7b2db4d637530ff10afead4f2c7130b660ad78e6d33684ebd0b77d99d4cffd830cadab23b6ee78cc9693e8f5adaa8c1572bd49e629d26fc2b880a006e6d6144c77f3f2684276fb0201506b3a3de8f410393e18996f815377889a0d734eb69b12c9df9193dc3a472f2552df1c0a2c0955f5a1bd8a04e8804d0102199f0e2b99c00fa53296c35027016a4292fcc424df6793991d3ee90f58d1c33407627071254dfddac2266a40fc9e548342c29209fc261195937ceb31c8f11119dd404f96ca2b31607a9525a55500dec94ff7951d2102cb938961852c120331d981eb6f2e4bfae91ce4b9fa7fd4113367b194cb03267821f3dbe4f8d9a2931ff81caae6f6413da0627db5e99bf7a628bcf41f099d400366e86c1acccf644c9625150f7b91e001a10c4d8850b35c4824b4258373359d2cd155daa7cf8845e6250e2dd13d21dd651e80a593fa9e4f7691d84eaf863762d017b76e4959aeb496c420ca1348d37070f1f7643c6d83a5ffc277a3cc0fc150dd358151b9f40aa6a9e1606874c50f5225f9077ec8f77cce7a3b8e6a51d63a6c7d1d0a12825c95a1dbeb7181357310a8e153718ea9ca73d56fe3720b8c3af31d3b0ca206893494f948893be8db691b45c55a19cf33edd574fd9c863b563383e3d8e5a0dfbe10ff11958ffdd8ae2be33a3913421125dfbff2dfdccf0952bd09591428a5ee73ff7f8a532e0d41b49f912fabf59c9ee4dbd02beeb737c2f781c7479923c108d9ed527a07ab4290123f75267eb794bd0b47231178279e9832c2a71f6a490f7f0b57b62940a917985ba6e3d9c52b0f8fc0318161904b7180d51c9b1643fb4642f458e5d43383622880f51814defdcb8ea69d689fbf947170f785798ad01e69dd3873f16f76b63f11789b0d445c8ae0a408a76dd63d3dc955161e5225c5e242eea79b663e87fadb945027eb86e370107355f95798a22c57acbf1d6720e2206b0afe2a1deb5d09f0e55942d605e71b9e35e2c47bc41e9a6957f20773713b6617a4d31c6e2376ffb6254a81cc44f37d1736a30e37007cd821f99cd20a4aced33080fb353890b614e4327ac4e25756eeeacb47b4fb1ddfd671cfd4be9cb7414089198a16a4c23d089477118e4bf279f99e572e7f435259d0fb3a26306078f11141f6423759274252a98a07610ea209872ec97a8b2cc85ca85bac635ecc5bfbb807f38799d4148189671b67cc5dd9b6a579fb2b90508bfcf07781311d361c7ac66ae65b7501b436e4aa81ec89657a2cdd6cf12eebcf39932adcc284ad383916b165887491ed53fc4c6b9b9338fcb7434588d6e846eadcd05f488a1b888abb9e9bdf59cc04adee5cc3f66af5928ed812d984a77882d01cadd5acbdf51b93b33a686d572aed6b25a67e03dd1c0259986a42e5e09b50ebe85e046a07fc84ee4961fe90999238b013eced59566cac7bec9e3f61da4a6f0aa774281f716c6de21e63f8f474ffdcad44a71abf4c39ef0361125a10bc06608ba25fc343ebaa957224d819d95c672d90d9e256a9aa650a6a9a8b342367d6012a3804115cfc4710ba22caae64a1c9f9167ff66ae90f4bf58e77519757ecce58c5c2cbb84b5f9d2e14f6fd78ae53e97d0a57373f808ac1a743b4d30f83752d7e8779dcd47ddd4493a8d0c43b5c7849e51510e3abc238696787fe65254026baf5f37e9f6ecc40b72f4e40b389887d2ecd1a1e603288c980339c68b96a2985f734a46d82ce33edef6e1c5ef67bb7bc1b69f146d3ede624590260ef3e1b0d76ff97c3a86270d419fc6e271e7bad318c7b018e73e23999bb2fe70bd1b97271e692ead0523f439a1874d4cd5d0c094a6005685a68b1650e79b44372c939012dd7387ba1ccdf1071b153ac603fc82afee4d9748301a116e98e6d76d966a2f04f7c6b9f2d0cb10450457c7054386dbbb51f9d0e92e04de943d6c029681111b57aac55c417f5566839bdcde7adcfb8dab0e102731b02ca60305dede8208df09bcfdcd22dd063273379a7ba221f35c61506c5ac86a6cacb855f843e5236b157f205d60375ad72b83e57269735c382b76d18c8bf8e0a74070689330d150905e62c85b40d7e59170ed8b4bae6b64f172f235084fbf8e9da522d4f207654e8483b626de5a8eba38471b0af6bd2923c76a1a3a38107edebc0f4cd0c6751f9266a64038319d365de5ed32bc4b543baa3a96d99cc3eea40d82d1536ad8fab02acdf3691b1c2e2d584083d5d22039447f6ac31a75957c5a3a0474be2ee8eb4ad45cb82ad0a9934c45de2060c1de6125bc03b64328ae2b51bb31afa0b5bbdf2f85cf278cf96008ea7b606096c5ab043a348cb0906297a880309be0f15b473add149c029c896b6428d157bc60e4cdaf25f0df9a7c9f8370a6306b2b9d0dddfb125bcaa6aea7ddcc7d7bfabdc2882a695f9750060bc94ced019f5a4dca14da31c25ad141a0f59e7218551d52d52662661210c067d95806e3217d591568f6275612a6b2326b2987d038272c6afcf0a94b41f24ac8498dbb6cbbdfb873034e919d35991a29be2c95e76fa6b8a2ec00ec496a03ad9f4ed80b2e7ed833e915bf444e8df225c13961ec3728ead5afb49249dd8c761a25bee4ecc2cd31b58f524827c06f43734c83e1d59ef884b02b81ffcebfddcccc079b33a859bc238401ba0c84dcd1d2d7aadd6191dcc856ef25e9524cf91c05569fcc22f9b68e910676b18e50ef4b66c81cd37de62f52acfe8cf80c7081f0e1011ea28ad702bc58fb791af9cb951ccc5afe9f74564d63870b8b60a165a4f065e2a661f0a1aeb59b80c941ffe42d0fd0a86b6db68ea93e70e4b0c155f1b8bcaf566efcaf05b5a3c881c365daf530f82affca24d71529c027afdc4cf361d97816032392c784404aa4d3e4c0e5449e6ead17c9f8a6fde2c782fb3c5885b804e97dc480fb3ab89ec806f58000000000000000e010000000100800491164516dbfa38f6527f631b1abb5c69ff884b699bf1e6109905c8d4f6b7cf588d09a58f55ff7f6ad8d86cbf2446db493fd0c4864de4234731c4fccd0debf92100000000000000b800000000000000090100000d000000b384290b24cfd23d9f8cfaae841170edf24dc58e1c7a55ea629d29278fa30595721acabd0e7bb564da93bff5c1e13589a795c4ae95af1411072ae273d9fb8089526bc312c70952acf8d6fafc1f99c1a260c279eed041e618c9148de055f1ed9ca61d60c0880cecd48a1f2e868132e970b74e2a8237a2b31c7c56c59a847bb6a2b534cea2afe843542bca1cb609401cc3552966ceb5e9425ceb323833593ff7211c0b551300000000e0fa7a497ab0e58c45e872480a226e8d1f2bdc46807f2c51982a3ac6a80b5881255346f97b5da46dc9c3368cfc63cc428bb500fb90a680ee7cb000e7e159c9a716f59929988783d10accdb5efdc4f7529a974c6b424b1bbd84769e28c9a81bfde57547dbf6adf8792748fec73b896e78cb654d0bff5bb3275b6c3ee4fcfeeea27e92ea26d0f59ad5d0e949641185e74ce2a20da11eec27066c2821b52eb6419c629bc148c5f50996598cf9764beed9ebe2487127d884d51f04982a579752"], 0x1120}, 0x0, 0x4040, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x2def, 0x3, 0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x5, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0x6}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000444000000000000000000000000000002e37200000200002000a000000fffffffcff0100000000000000000000000000130000000000cef87c3b1f77e27c4b3d4c4cf9e3fc0b87fb37e89a09a7d0e6c34f3f32803d1a4f8e029d1865d965f7979c6bc75a759168eec1148d2e9fb3e94f130766"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSETLED(r0, 0x4b32, 0x983f) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r13, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 10.736766845s ago: executing program 3 (id=1940): syz_clone(0x820000, &(0x7f0000000140)="14ad29621b49d7a6107a933c33540bcd783995f82712f2eae252a11a898539ec6bc37907fa1d4f4e856487db19ea43f16b9e6535ec42dc9e88415817402c6206c23fd5117caac849057f9bab9aa9a6c2badd74fd881eb4f8560f6c9bf101aa4fd42df63f987f226f37e1410e3e8fc08dced9b592b6e3865b7bfaab73e0abe43c969b6b18eefee5ea", 0x88, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x90f, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x9}], 0x2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 10.01649654s ago: executing program 1 (id=1943): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8d83}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000016c0), &(0x7f0000001700)={'fscrypt:', @desc1}, &(0x7f0000001740)={0x0, "99c4389460af2f8b232bbbbf3910a319ac3ff99b331212b9ada1f4fd50d3bcf651bf0af09bc38e36fdf143c43e4f4c8217b50093c05438a19ba7343eacd1155a", 0x20}, 0x48, 0xfffffffffffffffb) add_key$user(&(0x7f00000015c0), &(0x7f0000001600)={'syz', 0x0}, &(0x7f0000001640)="730bed6fd3b2eac5c1292183de1052866533f1f4f6ca1b2b6ef1596dff6d25edab4ccfc237778818d0f96fdf60e9c08e05d99bfa1740102f47428a492aff6b70d4104cd9bcd4bccd440a68876beb06b4bfae13157c94c63a775295f6a97ffd4cc3daf5e71b", 0x65, r2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x3, [0x2, 0xfff71337, 0x3], [{0x0, 0x2, 0x0, 0x1}, {0x35, 0x35}, {0x9, 0x131}, {0x2, 0x3}, {0x0, 0xa5}, {}, {0x80000000, 0xfffffffd}, {0x0, 0x7fff}, {0xe}, {0xfffffffd}, {0x0, 0x80000000}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}], 0xc}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r6, 0x0, 0xfffffdef) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x2, 0x0, 0x0, 0x0, 0x4}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) mprotect(&(0x7f000007d000/0x4000)=nil, 0x4000, 0x1000002) 10.015333743s ago: executing program 3 (id=1944): close(0xffffffffffffffff) r0 = socket(0x28, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00', @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = dup2(r2, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xd9}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000600)=""/130, 0x82}, {&(0x7f00000006c0)=""/182, 0xb6}, {&(0x7f0000000780)=""/156, 0x9c}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/87, 0xaf}], 0x8}}], 0x60}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x8, 0x8, 0x7ff, 0x10000, {{0x11, 0x4, 0x1, 0xe, 0x44, 0x68, 0x8, 0x5, 0x29, 0x0, @multicast1, @private=0xa010100, {[@generic={0x89, 0x9, "8847c3f181df45"}, @timestamp={0x44, 0x24, 0x60, 0x0, 0x8, [0x0, 0x2, 0x1ff, 0x2, 0x2, 0x12, 0x4, 0x800]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005e00000329bd7000ffdbdf3500000000", @ANYRES32=r10, @ANYBLOB="04000040"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008010) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) ioctl$TIOCPKT(r11, 0x5420, &(0x7f0000000480)=0x100) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x10, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10) r12 = syz_open_procfs(0x0, &(0x7f00000005c0)='attr\x00') fchown(r12, 0xee01, 0xee01) 9.364932748s ago: executing program 2 (id=1945): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x8, 0xff76}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 8.316925816s ago: executing program 0 (id=1946): syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="0332b2aebdc5", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @local}}}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x884, 0x0) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000100)='/dev/kvm\x00') (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 6.709711759s ago: executing program 2 (id=1947): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280080001400000000d0500030000000000080004400000008b08000240000000040900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000001600)=""/4119, 0x1017) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r7, 0x0, 0x7fff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000005c00)={0x35bc, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x20}}}}, [@NL80211_ATTR_NAN_FUNC={0x1514, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1ac, 0xe, 0x0, 0x1, [{0x1d, 0x0, "22f14e8948185feacf87ea839650acf31a41a8808385f47a4a"}, {0xb7, 0x0, "ea91bdbd77bf1c6b1ab65d499f3bcd7428b0aeb365d3c49d94f57248a44daa128701bf831151cf2b6dcd1b6821a34ee0e1da10d0c923671d94967ee9a6f6ab5a9acb9617b8b554b6a9f6e671179aa351eb5537c300a5796a668bcc8a28b8811cb70a34c693f2797cf00858b277269ed63d496b0b442aaa9971a7e3ae91aac0d48cd2ab2113d93381bc2f3a2766ae56f38af8103ad5fa9befc8320e46e6bcede56bb0bbaf0f400c1316978d4f9114b3edfaa6c4"}, {0xcf, 0x0, "5611f3772e12d057ef80692b25826f8e87c51cf429dfa10a8b3748a59cdc44bad20a1702a82b6934d2afc51aa253f53aa44ccae30217a581cc6dd6fc7812e9cf443cfcfc882c1315959358b6d3046ecf3d683c309b37739e7b217fa8e9c3a2a0d95c72e84606f21d995e485d80f68dc3c5c23965ccaa04903a68e1d2e19a3f471c8834da48468aaefcdfa6cdfd56c3809dc8d0d0a4581ea085cfd757db7b6d30552a66d4a4b0b1e66f7016c3ba6a1cbff1c0bf3c40f903745d4f538e4cf19e34ff7ab4491aa9912c3f3212"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf8, 0xb, "d17cddac16b5039285772b754c0dfb492e2646e8d27cf8327bda942f82c4f274e40095e37965cb7c76e5395be37231c21c3e5e1f4fed4f2c3c05129c3555c92c6a6c960a12f4c7fdf7ac8abc47dc3aeb71c6592e9d722c4ba67dda86ea6b7eb334f172885f77524eafeb546c3aeac4ec547b4bfb084971554adf50abeb56618931cdc8acd88f6b096276b6cb1637ba43e8ac8461fac6c285e8148afc698ebdb8473eceb8846684adf6ed0f209faf55f2889b16a95d5a305c2ab39f32ec0f1e5ddf9736a216214f4d80dbb8fae772055c6b0c0831428c4f16f7e788e6b27305107124da971e247c977e08b1b56309638aea0c8b76"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x124c, 0xe, 0x0, 0x1, [{0x77, 0x0, "075002dbfddd984ba197cda2afa02b17a9422d6eb8e73b21225cbe2495ed80129b1f967c9eace64120fb0cecabf600b8a0173ff9bef5f2d642b396e95760f27ba78b5a3179d6d577ba80e4e774ed3ff868b63307a1307868b9f76f42e9416450523ed74827e695460d9430513ba01a5c23430e"}, {0x6, 0x0, "ecf9"}, {0x46, 0x0, "76f2bfa9b93c6a1535629e6384745a88bd491604b4ee79f0fe7ce80a609ae4f238bbaaa0629fc9a2e694136c37e9227b107d7e9e08d8a330915cea82b16d970a6784"}, {0x49, 0x0, "faf7db2ee8984a71f42dcafbcdf553bc50192137180d3dcf09872ab0ea7613b998c0e5589ab90b028ebe38df7ba4722541ce74eec9d50e8f7a46f457efb5ff2063399436f5"}, {0x8a, 0x0, "52ae1dff32c05d3514726871fbcd40b1e6809a09ea2617914c883063d547d3f082b1e350e7bb6bd702df384de6af6b5d08f3a68bea5c2af250f6fcb093e88d32adba64d0ac30e1ee5bb638d8b8f0cbeb0e1eb9c68d195ceeb5c7f2b9700f884d23ce370ac3027ac5c8d187a5363c36fdd6880f8afd78951ee65e2b4b9817fe61c5df0fd5f542"}, {0x1004, 0x0, "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"}, {0xa4, 0x0, "1fe347f5ec8a1c9c0ceec8fa0cdb2266c750dd5103d5e32624314abeef132e9f535460e46da3759a549ab481c53fa8649f18dc2cc1f44437d27047ceb904a171e049ab8747bb98e3ca1ea324c2b39552ab6cb43c7a7361ba313b2c2cb6462e3ed9f7066191d6dde99ba4fd2a9f7374ab81f9cbe95db1c47685709e4d949c014875436f01f05106d92f2a8d831362bb085a88436f7311842e47b5a626cc077fe6"}]}]}, @NL80211_ATTR_NAN_FUNC={0x44, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x40, 0xd, 0x0, 0x1, [{0x3c, 0x0, "c70689550f3dcb19c83f8dfc1f336ece6dcb3a065e5e88af2d0e3714d3389357cb5ef9e3063068dbd6727fd7a0e352d3542fe78d3d5b88d4"}]}]}, @NL80211_ATTR_NAN_FUNC={0x894, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x88}, @NL80211_NAN_FUNC_SRF={0xc8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x7c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x13}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x498, 0xe, 0x0, 0x1, [{0xc6, 0x0, "02b061674f0c123001c16ae107d7be55f873a8ea11d44320c1938b17c1bf36aaa57fc363c805f3a4309b096de649d84ffe687dc04be69d37a03685f491406deaa6a9911f32ad24d2aa50467ac697d0c485f77ee9a9c95b3da266501957593a11180025790e16ce1c08a8250dec6ae2428cb2456b072714e051a1e4c9ff0262d5ab35e3cf9fe59c733c722b6c3613769bc01974855ec48b3e5f12cadcb75748e0d90b17cd4ba275be5c88c79004435ec52e019b38faf13c2532b5367a153459809cb9"}, {0xbe, 0x0, "64ee4a7447482ec1e98d4bf9fbb41f9bff7f5122f64206afb15599f80655db2133256856cb785fda76c5fd19f3c9297077afe3403e009df5079ab121e468c111c8a537c47856aa6579014eb7e69931eefa99534f0f947e6427f25c5c9eacdeb1846b532c666195371c02bdfa387e423c6764478102619a0ebea63a1787acd4570d4fd8f3d3080c4c31c1f25c91439ab3da6169f157e93e3e40978de22e"}, {0xb9, 0x0, "8b87bcfba11a4c32062ed6d3fdc5a5e6cd2ad0cd5f3d89cb08c75998f7f99161a3c144ed3e21c4ab3284c5d5ce6b2a0520e616d0455cf3a648080da56f3b3b494a2b4a1fc30eb62f752f92f76a807e70f6c9b0797ce7b35ad5913cdc3cf4496dfa6cc3987cde9e12657e7386a80bfc2d9f782e34a07e674c8f7b76d14c58e1c2db224148d4387b912dfb46fa7a4a5e837da5939fe87d9d46e42fcba2f23df2405b8ba95d7adc503bff46654ab8db23a996b493415b"}, {0x30, 0x0, "6402c2105dcabb4026d7b896a197244281b4dbfe6d58adf654b99f4aebf5cd64e14fc3d4930124813eb24eda"}, {0xa7, 0x0, "d7f08f4cc385894f41fece4fe2225aac9e56cbb59ccc4af82fa89337b44078f3023da18d9341a3487b314cc0cbf66af6dcc7a1f540f03a1019a6af3cf149c9133f362f99c8e69853855b29c86e3d51b672faa0167b4c9badada00ae2ea2431b2d601addda1996483a35ad426b655ef3da8c68789279503b61a5cbf74669f419864f01c45eb52c36bc6fb528ad4f5341e58231b476f590cae41aa3c3f80c015d93b5c8b"}, {0xde, 0x0, "9990b41287a9fa46e97038a7e64a0eaad7feaeac9ee11d29bcdf176fa777d6a0deb6fa7809f81309b8e71dc96e1eddfcc10344bfcd031ce0849dc28faeecb1832d876aeb3a902b975cd50f24d5ae796eb493150fe80ec02e0bbf3a8377416381dca85574d9efe02964e9b8358487fddffaa778d09e9a09f3dd8d506408ecdbdf7693cf859410de25d2b4c20ce1c0a704ddb24e4e7dc52fe838192f063cc1f29cab2865567609d175e796447e72bbbaa05fd28ceabacbce955026d502806ca384ebece1a170cc532c32a201626928555f24bda6072de42cc33b6d"}, {0x69, 0x0, "d11657e58b7d2ef9da8f5e827de9ad97b1aae8bffdbd58ba0aecc44e2168566fddf49e9de28789cebb487698d4021fd7d79da747e488b63cf2b16aefa89db0fa8827bfb20881301ef966b1298569143b6f1cbd540ddd886b9ab1c3e44b69e64c129d406a90"}, {0x31, 0x0, "dc7f846bd02efa576503fc1835d62611a73392a27b42195731315bf418d9632048b27bdf02ebc0fcb8f9907320"}, {0x11, 0x0, "62cb381b3f3b2b2882f1cafe0b"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2fc, 0xd, 0x0, 0x1, [{0xc2, 0x0, "00a5ea854f335237aca86677e30703fc0bfb9f2e216f0d14786ceb1cdb72cfcb65d22c7e2395e2e8c0556ad33095a30c70d191717e71fe97db098adc63ab5e92627f78c593d6d446413910bef74a6481001c0cd3b12e3a0f0e2d048ddbca6d03031d7dfe818807b93ba4bcf554396d66a27a3272cdfe3a78f4e4b839f3163ea16714e4e63418a8c2c883ea82f714d72d7f016a6e48290212a7c3bdcd0b53a476948ebcd980eb516321b64ab893731223abc78a0c788aa6137cbf974a4e1a"}, {0x1b, 0x0, "06ded03d1142954238b75af2b5a2ca76f7310289872a0d"}, {0x85, 0x0, "a835dd427febf5860eab82a9777d9807d1cc3f3b02f86ef7d66eee6910f6f7c93347c8f3b9378751dc11b23ee69024728d40dd4e3ff92923326111911fac678f01db06a217fec009160855f93c80e35eaaaadb65fc04b7a5c10d930a2de012554b114e83dfbffb372d801422bae3a06d512e0da7de1c0ae0a5bc29d0543d6a061f"}, {0xc2, 0x0, "6bfa09a45f54da905b361188ef095ea0f1555ae66e47be58bd61c3c6c738d979fbe3663b2f5223a74a68a3737d6bc972b146a19c58e16d00e0c26edf29ea2a6c0581bd1c93880cee73a91353882d5abc08751f1e6a2de28c9693eafb486ed1f10141e2052e2986f2eccbd7394dd9c90e5f005b0ba8476cbd216e2d24bf87cb040f8bf421dcd1f54b7361cdbad21ead10393d01fbd95f28fce96935cb23a53eff11a4cefd80959da299730b4c9ffa25152b9f2b3f31faf0616f265d4e3d95"}, {0x7d, 0x0, "5c44519e8277a0aa411631cb99f08b0822bd43e457a02d715e42e89a62af8e37540e652c489bea6aabb5762223dbdedeab2c21cfea0d5f6ef61892f7126e428c4e23a0b35c4166121ac18e1009cb8072758f7c304c5f269ce3b46e2df482da16b051417854fcc9d2945738b64a7792be6fc60cb5cf05dccb23"}, {0x4b, 0x0, "f888dbad17d9b76562c38bebfd9b58a71490eb212163d65b77ad31d187aee2c4c1b0c4db60811bfafc36652dba3ccf2b7935c6bd671d9d308e32eb1e340de1b722c9dff52b3e81"}]}, @NL80211_NAN_FUNC_SRF={0x0, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x0, 0x2, "a0dc6174862927d8bb87c59f7f9f6639e313b8b96b87cd322dff1890aeebfeae8e4edf69f471643c11c2e6071ac5175634477391a2e9f38934b99cc9020de498daed252482f14fc6886ad5849e75ee1baa4db961d9ae6ff0cd3516389733c5d01ee8988b417c8a0b54ff58f43ab47946ed4b3a5fcca8ea86f90e46457a663546aebbf6d58bc348f06cd85b42456152d60bbf0e5be8132a86b1368ac0d844c4d99d0304c0198580448247886c65d89c10caac2a9e9333e00fb74367ed8640f5cf13b3418498a6247125871eaead2dcb7057e67102ec9a2034f70121629f5311e79e9bd5e06859e3c4d18adeca99f16edc132b8881e3f656670a4c2f10814fc9"}, @NL80211_NAN_SRF_MAC_ADDRS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x6, @device_b}, {0x0, 0x6, @broadcast}, {0x0, 0x6, @device_b}, {0x0, 0x6, @device_b}, {0x0, 0x6, @broadcast}, {}, {0x0, 0x6, @device_b}, {}, {0x0, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x0, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x6, @broadcast}, {0x0, 0x6, @broadcast}, {0x0, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x0, 0x3, 0x24}, @NL80211_NAN_SRF_MAC_ADDRS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x6, @broadcast}, {}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x6, @broadcast}, {0x0, 0x6, @broadcast}, {}, {0x0, 0x6, @device_b}, {0x0, 0x6, @broadcast}, {}, {0x0, 0x6, @broadcast}, {0x0, 0x6, @device_b}, {}]}, @NL80211_NAN_SRF_INCLUDE, @NL80211_NAN_SRF_BF_IDX]}]}, @NL80211_ATTR_NAN_FUNC={0x152c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1520, 0xe, 0x0, 0x1, [{0xa2, 0x0, "99619d5fb74691f39b0f0c14fd56301ec9a524218d94cae4b77f4a992563a5d8f5523ce1c1826ab14b5425c927c534c74959f474866e445b190320d58783961dc020ff368bcb35c17c5e72f9b19945e1095a86fc25bd1e5b2411ce31339f6eada974b8f090ea12b1f45c9b9f4b44588c2135a0a49edf434d1bec434218bdd88dd012e288c86fcbfc14ab0ad07749b072e59943e7a9bb7e228aaa48db2018"}, {0xa9, 0x0, "12d29180ef563d560ad8cbca5f0980edb4b1ab025443be8485237a85bb0753b0b8f040fbb2be0d6cff9c3b2f27a0381fa81e0c9ab93f7dbec2fd9d073437b391b56519e10e6806d401b057e8a6be2859bf21c0622c1f43032d1719b99bd576c43ec640eb9750f3033d7f8ad268a60e81bbc9e4291e892ef9085d6c2821200a88294fb71bbdd0835684e6fe2db438f5ae488a08ee27d3b9814a89af9139d6d54d165057648f"}, {0xab, 0x0, "a531a756fe21fa0feaf332aae6943e1d57d844f2ad28837cba5ac1f4971d1bd02ec583d9489ff7228bdb74211bbae9dde18b28fa6baefde8f07ec5c4bb9684594a88727e5b1a04460c53229c411c681260e3132273d197f60fe7c7bd7515f490973a5ad49161513ef4616afcb5ab4d236bc2dccd4b0d3bd8525e5f96aad19f46b28b8f8687c526486c704811e5a950b30b6824a97a4ecff96084eeb6094f521a365452acca7101"}, {0x18, 0x0, "44d1f8eef35688edb6b1346d38991a9181068f19"}, {0xed, 0x0, "07b05fe7a3c1f3c7a1340e0639b52d68be46972a66441886645e3617a8f84c99404fe7b6d5b8ee5eb642a21b0b0f6b5bbf8d3db6466fbc21a7b0d9b77f8640f80705f5f934ad7fb9712e525343ca09f35ed941a1dd8f41b7fb91944d75a1ea16ceb617479e12403f30427f7607bad6162a607a8c3d26c847e4e2ae11a8d582efdf356b2d4b98c8e5901e07f06749937d92a6cf7bcdd0810e3bcd025841ec6da870f655156b0cd98ca64893fe44e3cf8c81f13b51a655c79855f6927bf7e4126eefab1b1b9f7a4bd9edea5d1f405ca1690f8d96136984f31cb52199647d4ebded62f78b78820f98fee4"}, {0xb, 0x0, "d451dd4493fc60"}, {0xae, 0x0, "c3b8525f09da6b63df6f8dddd916062a0a9fd0bd65f3a2f8f05b9962cf5fc63e6f3e2dd9ed4c11dc5231e3a6c2d74862fc3d4ce0abde4ea568c8c53dbec26066998ac1ca37c41ae04ea0e265b3bf4fbfca935355fc0437ce45e09084a082f7f0b825bcead88aaf28bd6ac066be3bbf58fdbc6f95ac72401e6d33046f9596c31741ac2a40b0855eb56969b310df49916d923f4a7fabd0052f8dd0bd1b139ac038c33897be47b478a290c3"}, {0x1004, 0x0, "5825da9c339a952bedb1b0d660a3f6a7777758821e2c6f84a37d16c6c770818132d81ea4f24fc16bd89b99e16435e15d4734e592bfb8bc6d559aea3605c60f84c8817d779fc18e855907723f4084adf27408a5ac039835a31c38f4665dda99b87315869520ab171644b53ece2487abb64ddd952e56442b1aea6460a4ab4778b07a49d862d7543b1b0a3dd72099af12296399518ff8ab1cdfca163779d98290ba4e59f013af81e9f88719e7bb74e7ba4f68d47fa5963e04b596b6e9a2834b42b605f7f2dae95397d1475224afd8ec2399f570a6b5bb2fecc127d543ebf2ce4cd866324cbb959b6f139c6bafd96f3187fa6b2511c68a78b3d6fa28c17d3cd585c8138c0703a0b2a58dba446e52f02fb2a8e1a69b7c874a684b433450c2179fd43927ed7f13593457d0fe30ba3c8f0e5564304480f427e12ef6d705e731aa49c6ff65379c2f253c4b633dd167bbb81401dd8720c369e5483185da6e727f18cc2bf686734c887b901a27de6ede4a2ef530904bee0d6aa78e9ac3315f55b81afd7595136d1df1d0c054b9b0fecde597c7fc9a4adfc62620c5b733a682bfe6b998938394b5c858644a886172c6775c6744d23a7e07ac501d8aed4cd7f7a7c4958aeee45908a43d0a89e1fca5f2504b71e31280264325cbc7356474237836ca71b035859533bc8760997e9229f09a80aab52eb272f1f417f359b650613d4d158c2f8046c4fe7966c38faf811cdab9451ebecc76813849f2db2b61cd4b2404d4102bef0ba69e153129f98a87b97639bf58ad63ec7ad318bfc4df920c3968e3ca1cd9a0c3f6708eff9ff7e65d84a7c203454409fec39ecf5a76dab5edf30080df72ce61590261bdf6037b731e368a45d2220f74a36edff56bb5ea14bea4f534a6bbb07762686993ffb969fa725fca41b9eefb5bbccaf9ffdcaa8d2daa539b35d3aba74cc51cc75766e8af4a103a19c2006b678a088b3a61ccf199eda599662dd43701fd454f049cccfb35a0310116c6cb4c40413bc1ee36fb8235a3cc610696fb92ea948cc9ffa6fd2003516eb1fb99cf7a84d9991fe6c2b5327d7849a9606a74033b707c0b6205a498dc523e6949f8c1fc467fe91a44a40fa5c7444537057d3d906075d16d7313334573fca92070d4ddc133c4e47c4d53d16016bbb25cfd622b8da486c91fc78ead5b33f22f77e84153fba3d30be90836197753cde1864525fed8ca0d1d8bcba16f0d1c676f316152700f257642009dde44416cc7b753874d5c72f7489b91edf24f9f0dba13ee5e32c4b51114a7a7e85ebae1e75fd27847fceb03b4fbc1f466282519f5f06a7cba56ede7ad85d3e6df303caf1934247fad98dacd965e117bd8c3dd5c0cc1cb1378b15bca679148345d6e435b96f8d19157cee0c9c1d554a9dfe006bbd6ef54ca2eeb2dc38f85de6b9026c6c2d736f8f171e252680d076e4ee73f26ffbbdeeb0f20bdd2b8d575ee84b7b2222f86282a35110d8d4cea2bd8f1bf81ae9887c3ea388850ef20a2e09c15933fda68a9e72022563a468df7b95a1839d4b36adfa8e5a3f77e0de1bc56f8ba13de82071183546cc5fdce837ce9970a626ff9a926d4e9bc3f8a43bda5418e55d4bd7d9a6feab3943636639bfe311de116ce073ecbf3812e8c46a50ad5e3c26fa9acb62e3219f47bd2294e9d55d40a1835e8feb1c845e3793a4a41300db3bf60c3c19effcfe3e36bfc9ac8bc49078735a4d634b823386bafc47fbbea4139ccf0714378c771ca65c1481e6d0c41cafab2c75d27ac5509579cd210bcdc247e9f4da8bb8b94e98142ef000297d51055a1a5c3f60e750ce77112b3714db9f21692a8afb430c0ec6078513cf4f4d3b51bc5f22084ae58cfb72a40fbdc5ace8d26ecc728ba03e43c5325f0ce84e3d9b52faa9bbc905fdeba18991bbb26b4ca6690d841daee0730e32851460e6b81485139625abfb8775e594fed9d6487fa15026604dcae7115c0ee6c0cef397c1ba43277af01680702f196180a236813f89660e3ad6a34e72f1dfa7e507e90b8d44a909e0289fd5608ea216191dcbd2524f27161bd124e4f60517fa9cb299e39230c3d2a3e8a0232cebb663e1445be6daaed338b072514e917a07fda8bf2fc21f1b232ddcab9e3c0e2858284b9c4f30cd47e20e971e210813e0f0c27819e98be1471d8e6730675ced4808454fefd45eeea445ae43b80d5ffa528a931661eaa8e3fe41803926a6b8d113c81b874f00398bf5b65fe4f226064df4450a148810fdba51ca3e2cfcba82f76dad3911e54dbfc47725f939b3ac182533714b2090afe0e8ec2d1d5dfc08001eec30ece377103e02357bd40bd190de2e7fd878384feabf2d4e540da57c45d5d0a9c84d8a5953f289dbe85ce8c42414370acd8b73a605eafa0f04fbbfbe73ee8520ec6df2147fc9d9991a089591667805e196e75cd56da8ca8a1dc096b208248f8872669650bb3e2f7c84dcc8013477fcd3ea51ad34b7c2109a81f506d1df41b27e39400081839a12cc695f44c746699ef149f76008bed42aa29522b01a7cb0e330754f0a1bbe9daee2124974636c814cda36368bffb980eaa334ce21ae0560ab8c96115e02b9e6678801ee4f403aee4548207e779bc0f70a400265fb016808811354ea83d1b92cbb7ca9a432f788733c35f5c16801e5673d158c700385e31d0f75f1f86c4bd7c4cc880d9647d8f74b1c1da2486207466f8b4d9728332dd9dbc3ab7b4b2c380db05c0620b2da2807e614247efaac87319220253ed2f6a49d3a0212ac471d2f5871379078127fcd6d54618363717252fb27de6ebca03e419cedfdfb7695c1232ddd5a1ab08e0e51a919708e6f433589f88cf87293ffdcee81b4a716456b03d3c5e74b7698bccbaa10524392161e57f99d00debbd65987d4aca6e8410763053beb112341b8b103e4ff62c60b3b0201a40f50ce62c4b6222486997cf34e278ad7d6842fcdebf53082ec96eaa37a3ed07dc4d9018ab5ee99ed7c49169d706c1ac6dc9e3eec5e99742c198be971e5dcf46d6d9a63c90b10d49a4465cb447b35a13c60c40b82c3c03800e5ed7f9a19185a46f4cbb30e0846bcfe91c85ee43939877240d255319d7c1a593417d018b58fd33d25c81216444dbf94aaff43c16d80dfea370619561e6896a2ccb26d736ddce7cd00315d64bdc60e77dd7c30927056f892910d6d5a42c871df2fcb5dd673bee5bbd24b2bae28660a443779b338dbf99c897c7268d0df8cc3f0f2c8bf6491b90119bebff65062487b3f9895733ff01832c7b376a9e8c46beaee5ca2888f38543872e4a5ab41024f730c097efb3871c162cce23ecd534f8cb766ac837d5754eb6c32a9e71ea1b2f2c71fd4af0513f38ac05407e7956ae9fab5d0571b3a5094e074d9aaf730d41f0eb3e0ed0ccc5ec0efe8b30b0c7c76027f74412b8130017af7355abd5b773040e56e3d71816a05ab671b143d5c53c4fc4786f7dcd7108f52a0c558794b2267a7988d8251c53b24f339618c69e144bbca77353817e7254982c592b541741b95d611fe89bfdc386f7bca28cf81ccc96afaf5aef5c2e999e2dae25e3f021c4b047275e65bbae366d9119ff6e36c3e514c60f28e023a4bae22338870de2baca797b3d631513b04eb6babbee8698ae6506e62e215d8940a28e6a1726b3dff91d55698f2ad77cc5aae0f14f98756503eb06bcf10a11c257a0d6a8ba74b5b59daa161431c6b491b4399b2b268bf3229f56db76e8eacd77218312b324b745d54e6937bc461df52874f5c41c39a2c5feace48f98522f3a353a307f760d293f803d97f413c34a40aea98848e3905df0beedd19533571685ac45c34e4347be4effd3ee709a38624f330e37490fb6d77a1e6a83781011bb4971e4b3710f1f7a6df16cdba4fccaf1189add32b907f23f203895cf6ef661e22d4772f665177d6111d8b44dac1a1b7e440ce21ddc31c62549f11675de8808ccf2a738afc2c58f4dd2cab7e44958a109738f18e0d0bb30362b7d43502c5f05a78fe1398884948938bf8aad84b0e346169e344d49c993d9a150c3b6cec181f1ad1cd332a2111bdfaa569a17bdce8c1c964d895e8b2e9541830c7ddb2ab80ee171d6e01dab83b7bc3727de21045c00fd9ce457cf5583143651327d3fedf67d7af502c051fce8495fc0d00f5961f4b38f83efd225eeb79b8c39f7626d12cbecdf3ab408e57efe969954878f2fd8edc45fc913cf9d970386ef4dfecc792a9d0f459668c0e7b44097160371299278c569fb50c91a3daaa0800eaaaa1db9343ccbf40e03d1aedd4a697b48ebf5ef09d37c4d44ba465d12511c892ea5e79ef09c70938afc117dea12073e1baddea43cef5710e1f20ffaeafff55ca71370de03a0f1ccf58af1016d78fc145c8a42bffdad8e7fed428ca4c07f41361531dc5644345f3e3672cdcdeb7777b9bd9171886615e8e05668ca0a9f342a1a4ee0197f2b84deb4fcbaf14340ae661d4f65c74855a6f572f684862ed4663fa543d0d54328ea8b215b2624f95dbf9b3be9312c9a955686a75271c86a31ee38e2d526d3fb5f1de6bea1454773fb96720f42ee940d8326fdb393cb694280aa24228d7626e50b4ed5af2d413553b04a283e35224c35b0e6e42d3bbedcb6abd07939dc021e0e211117983685044abc20ada94d2be7b4ad48001634bcac5af6c1dac66b06d9c6843c2b93d2f1000aac5698dad72e78d60e8bd5d3e3be0b48c6fac9deb83a18621c4c00135a52d7c26cfa1e70c999804c83006be2e58f6823bb746b3c349420112df40e70ac34b5820ad8fca347ede529025f4fde824255eaaa1d3e9d03afa7e666ee1eb5d3fea07acc65c377ec1898fec98425e7278bd2d214fcde9d48cca81774b5ab9c01d7be0eb368ef7764ce7e5af40b31a1c08f736dc2f0993c8bace7fa5c174733c425a46a7c4dcde2396f3d91c9eb3a7c0b2ba3d2a291d8f51cc0cabfc592076e8a74e914c537675c496b972a420b4c729384108ad7c4807970b262392c2d61d92ffc0fd89ff5303a0aeb5c7f02d5a19a8809aaf20258ade7a0af98f97f9a273aca3da12b588c5b2e4efb36b1b4499bf5a6a18f970d3346e6d9a3a7a3731ed16c3ba4a5bf885e10cd4fe2cc9027854750dc748f8163ec08c81ae652b4884ef479e6b63d466e24f0b3282a8329e5a941532bf392c7d426612a482f8bd6c673f2dada94c040fdb15c594ae153e3d5beff00a8e2f98b7ac2c16b8b5df79c9fba511a72198d3f4b11103b288a8ba6c5023499df8d7c7f8df59e04a84025c28e534a68148e5d5fe53aaa57cefc354e1045f79e9b8f30449ea6671cc352ef6915a8a03636fd6fe48009ae275ae3091f65ba04fef310a3bd7a05dcaa2c1fafbf15cd2da798b77d6d4a72ff6aab9d4df890b2d5b34bf86741c6d7d70561dee7bb9de89342e0cf7ca6897468f0d634bc1c207d4ebb05337f22d57cafe8a575e0410089f8c836dcf53fe135717b0826d95789584b0c2a175a51900297ecd06ef1eda13f1e7dd6e0bf4ca2119556f4029b00fd886429369210330748eb5bba01f10865103c13452bfd3f1e6d013959c1059a619c47d598e6dc863ac790159363436f30d5d159527fa5658698328b040ba97a9c0a9d36aada3d48b4b64d45d0489cb99ad473e0cd951086578998e6f18e6a2821de32ccaa6979087d23d8ad0675e29c3c2ffacb9c3c09fda9621e54345c51b9ee3b8fc8c209cf83e05fa6f7f403fb7dd4115706d6b21f5725697c4179aa7aa4cb466fee370b25405ee3af8a169397a90fd7e699d9f062e38e94b911759e6fb1a7d7659f6e83"}, {0x6d, 0x0, "84b1a1f482ae28ebd930ef4745593cd8f8543da0224d4cfb8b4c4666cc0462afe12e6b5f0585eb327b093af0fa46c13da1d82cedf3c243daa68781d3c1a450f835058cfc1b9b24c22f67d8bd68c062773a56f0b2a5520005e3b5d4c20a726453dadc006479b9320882"}, {0xe8, 0x0, "4a94dff860f36bf57826aecde20109518f614d7257c031c9918483ede720ab6da46a767054718163db279ed3605de4adb9b4e1157d64319b14b80d616ba976b9d97d238f5959b75a3b2fa2ad95c784bf6bcda9b12cf8f0743f5602e150491b94f19ace8280aac08008aa37945231ac4cc46d25829e6d08f716af837d956b0a7a083a7d874ce1a8ee067682280a340189f5b07d6365088559480d9c9cdd672229e789c467bac0593db326dfe9d4acc24b36e7051804fdb5f07bf49342cab4b13f04cc5a7f7b63efb85a9e7d73707bb7d11ec69e7fc0e88adc5686ba7503285c350c41cf6a"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf0}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xd6e3}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x264, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x254, 0xd, 0x0, 0x1, [{0xf7, 0x0, "59002577615cd7929fef6dc9d19f7b52aef20da21b18c6cde3ea50f33ef1e33e4aee1186d3c9898d2c95822253fb4d1cf2f6d2b45ba795fa117600dd1f99fed1e2376a171f394494f3e978cca5d98936e4aa5fb4ecc68ee729e359edf69de82e53b641f369e81dd7e9d213be3207dd63a84ae5d9b41ef6c1e910d0a66c614881cfde7ec86338956b94b9fc91092bd22bc77860b092a8c8fc5f6a2b9f680a1295ee8fe3ed162572c79ff3786dd653094b8b2f3c3def71906142f5f43e172360be9f90f2705e45574584c311b7aa2c54d0be689e594f5980ff2ad6168126761806efc50ec760bbdcd90480486d8aced6f7a61e10"}, {0xdc, 0x0, "85b97d7e624ed3f4131cebe24c29f3e27d5e2293d466db8a6b9357152a06aed89783a5418cdb11dfa589ce0d0795d1f9d565648f99a4d62ed32ae671793ebe01b3da6365235c4cdc7e3f6829748d71277e9563e7fdca06a33c58a7bf89a09c20bc92bdd9298a8642ebc6c0dd181e62a39f3744c4976d57c2ab76459a4c214259078c80a885b6c6483151fc12d1a5923617ebf220ef87f6391c9e60fe7223b99e15cc4e4fc3b5779699edfaff1d9ba0deabe3e7c00b73851bcf6c162fcfbf14793e211c82a1d7ddfffc0893a14575cbd86fde91d2a63a4c47"}, {0x35, 0x0, "b8820b6c63ace5646d778bb8c381a256054afcf3be19e036d7b61cd349448a2b5074377881f4b8e941a0f5be459dd07ac6"}, {0x33, 0x0, "81a6bf84e035e287ae8b69c1ddc245c1098e674c4bd587428e48dd35f9a1d3434f55311bf5bf01898465f567d63808"}, {0x10, 0x0, "53663878d0bf0fe9d2f7b069"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}]}]}, 0x35bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) socket(0x6, 0x80000, 0x2) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000), 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x88c0}, 0x4044000) 6.178704654s ago: executing program 2 (id=1948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000f3000040"]) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)=""/28, 0x1c}], 0x1}, 0x100000a}], 0x1, 0x40000020, 0x0) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x7, 0x80, 0x6, 0x4, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_sec_ctx={0x2, 0x18, 0x5, 0x2, 0x3, "259d5e"}]}, 0x20}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="30008b0003080102000000000000000003000400000003002f00000014000480080001400000000108000240000003ff"], 0x30}, 0x1, 0x0, 0x0, 0x20010}, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000001c0)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0xe56, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3ff}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 6.13021307s ago: executing program 3 (id=1949): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x3fe}], 0x1}}], 0x1, 0x240080a0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) 5.47791742s ago: executing program 4 (id=1950): syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000001140)="b805000000b9050000000f01d9f3450f01df66b8e0008ee0c4017c2b9b00000000f345a4c74424007c000000c74424022c000000ff1c240f015f000f01c4660f72e769de7d4d", 0x46}], 0x1, 0x40, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x2) write$dsp(r3, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) close(r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) write(r8, 0x0, 0x0) 5.108069386s ago: executing program 3 (id=1951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0x10, 0x80000, 0x0) socket$inet_sctp(0x2, 0x400000000001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$getown(r1, 0x9) ptrace(0x8, r6) ptrace$getregset(0x4204, r5, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) 4.567970379s ago: executing program 2 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) 3.692763514s ago: executing program 1 (id=1953): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1fb, 0x0, 0x0, 0x80000001, 0x400009, 0x82, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000200000005a80000000000000000000000008000000000000000000081030000000000000000000000000a03e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) 3.396754537s ago: executing program 3 (id=1954): syz_clone(0x820000, &(0x7f0000000140)="14ad29621b49d7a6107a933c33540bcd783995f82712f2eae252a11a898539ec6bc37907fa1d4f4e856487db19ea43f16b9e6535ec42dc9e88415817402c6206c23fd5117caac849057f9bab9aa9a6c2badd74fd881eb4f8560f6c9bf101aa4fd42df63f987f226f37e1410e3e8fc08dced9b592b6e3865b7bfaab73e0abe43c969b6b18eefee5ea", 0x88, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x90f, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x9}], 0x2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 3.351689414s ago: executing program 0 (id=1955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)) (async) 2.581574691s ago: executing program 0 (id=1956): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$full(0xffffff9c, &(0x7f00000003c0), 0x123300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x4000) 2.388943514s ago: executing program 2 (id=1957): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 2.232779425s ago: executing program 3 (id=1958): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400169042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x8386]}, 0x0, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000000)=[@t={0x81, 0x8, 0x3, 0x4}], 0x8) ioctl$TIOCCBRK(r2, 0x5428) 2.154820875s ago: executing program 1 (id=1959): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00000000c0)=@phonet={0x23, 0x81, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)="3e3b8e324cb9e5385abc994ff9e65c1a7dec86d8e3501b8325fd642b4f3ec22eb611e99de86e55f7c38064168f52abb04c826fd33f0226c44467a9b9a50fedb4b6117f32d69830e1f2baf439399f906de1ffbf0e7c42c9adf998c9b0c164da2d28d13e2230c9be707e16676604c42b6a5f860c1469599cd64e6d629e5422807c6ac234925d025e3493d975d6ab590f4eec7b41d2e8a1906766e2a79d504447ca13b8c3b9ea6a70daa04908a5f79916d621b405c41ea9c2f89fca313fd43153cecfc879b96450ca5d416619e31379e496f091c13fe95817b4bd8020190c223b9ab82be396bdf2c8a8030400c73e49d92a1077a77a", 0xf4}, {&(0x7f00000002c0)="5499f8214ac827f1cc8e8bb91ca8ece5596aff111c1ccbd60ccef8c5b38b16191e3e55a9f310e2ebf34196d22277236b3a5d6de5757965f41b729f3c59e20a36bb58db7d84d3a641d6d5fb41914c3f830d05dea3bc32a769f802a89bcd7af579eee9ec3798149586386d7443b0aeefc257d575387a236621609dba59a92a7d907033a74fe7d3b5e98cff4c81095356b01361c266170ae14dfd2995781677c8e25c81abe1de1213d561d94771ebbc36bb07aaac7dbe8602c478fec63a96285d0115a1a0db3966ef26b4821652f23b1d470b3961fabff8c3c69e66", 0xda}, {&(0x7f00000003c0)="7dd649156f9b41f8d00c6d141bb3b78d277a16818217fcab309d7c5cc0451fdd0a942f54b1f5d86c54fb1c5c5184fddbca2811a3b06ce02b81501e54d3a7c6ecfaec432a6724194b8e3766980d78fba9a6914c1acdb52e0fa467c88bc7bce18f345c378decbdf3f0019c3443d3b7dc237d9abc285cda24fd6e2b983fc554c446e3ccdae7578256047e2f9ba83491dae8875f2ed3aa823c307e", 0x99}, {&(0x7f0000000040)="25f34d27", 0x4}, {&(0x7f0000000480)="e75439a088b9e694d772865841177f7453f198bddf3a7f66350f6e20c00b7a1bf47b0b7b0c27f795030fa9c74eafa8a9d41675e41a7da380b7609955ee2e86e4b49f745c3e236030ec4a3ce86a60e6ce7f2b0807dffd9259863b8e2abc4cd8f396789cff4ee2784031619a908d9cdb0addefe5", 0x73}, {&(0x7f0000000500)="e05a5a905d86a02eb8e27d6429b54cef78678f1584fe0a487a6ed09eb99bcf066bd23d1056481b848d21b06ee1abb45dd41eee1c4d602a3dc54a859080072cc473ce572aceb8e401be45099aedcf3b31e0", 0x51}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="50000000000000001201000080000091dbc744ba7b329a8357ee55207e24ed245ff826ca7f716c33c92545e7689e73cf553c69a0f94465fea07e6c2953764c126964f19bf816c44a6c04000000000000"], 0x50}, 0x81) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000d) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 1.173704543s ago: executing program 1 (id=1960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0), 0x8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000008880), 0x483, 0x44000102, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x51, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100, @val=0x80}, "e8e6e165f722b6e15864d979b28b11d355ecc3bab7d6c6c1c77de6b30de1a0dd36ea8533e83fb8383e66f46564e5845e02afb7dff805233c41b3bb5c3aaf9f2600"}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1, 0xff, 0x1}, 0xfe}, 0x18) setsockopt$packet_tx_ring(r5, 0x10f, 0x8a, &(0x7f0000000580)=@req3, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000000), 0x0}, 0x20) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x3, [{0x5000000}, {}, {}]}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @string={0x4, 0x3, "5414"}}, 0x0, 0x0, 0x0}, 0x0) 942.093805ms ago: executing program 4 (id=1961): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x3fe}], 0x1}}], 0x1, 0x240080a0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) 808.871577ms ago: executing program 2 (id=1962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x34}}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x4c0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x3, @mcast2}, 0xc5a625ed50737118) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@empty, 0x4e24, 0xfffc, 0x4e24, 0x0, 0xa, 0x0, 0x10}, {0x100000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x800000000001}, {0x0, 0xfffffffffffffffd, 0x0, 0x6cb3}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x600000, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3502, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}}, 0xe8) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ppoll(&(0x7f0000000300)=[{r3, 0xb}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000580)=0x281) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x40000000}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) read(r3, &(0x7f0000000080)=""/47, 0x2f) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x403, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x1e1e}, @TCA_TBF_PRATE64={0xc, 0x5, 0xafa8d36186c14c7d}]}}]}, 0x74}}, 0x44080) 420.927991ms ago: executing program 4 (id=1963): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {}, {0x3}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x300, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 0s ago: executing program 4 (id=1964): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/25, 0x19) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) kernel console output (not intermixed with test programs): 389.095364][ T1215] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.109826][ T1215] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.119405][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.346501][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'. [ 389.365928][ T1215] usb 5-1: usb_control_msg returned -71 [ 389.384945][ T1215] usbtmc 5-1:16.0: can't read capabilities [ 389.422146][ T1215] usb 5-1: USB disconnect, device number 60 [ 390.244603][T15799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.257955][T15799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.286288][T15799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 390.514188][T15813] loop9: detected capacity change from 0 to 7 [ 390.521890][T15813] Dev loop9: unable to read RDB block 7 [ 390.530319][T15813] loop9: unable to read partition table [ 390.536785][T15813] loop9: partition table beyond EOD, truncated [ 390.544805][T15813] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 390.871065][T15829] IPv6: Can't replace route, no match found [ 391.031965][T15835] netlink: 'syz.2.1222': attribute type 12 has an invalid length. [ 391.056550][T15835] blktrace: Concurrent blktraces are not allowed on nbd2 [ 391.436132][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 391.476225][ T5892] usb 1-1: USB disconnect, device number 72 [ 391.642451][ T9] usb 5-1: config 0 has no interfaces? [ 391.664575][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 391.686951][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.714467][ T9] usb 5-1: Product: syz [ 391.727423][ T9] usb 5-1: Manufacturer: syz [ 391.740223][ T9] usb 5-1: SerialNumber: syz [ 391.759632][ T9] usb 5-1: config 0 descriptor?? [ 392.643050][T15892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.669009][T15892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.724028][T15892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1233'. [ 393.485124][T15944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.516589][T15944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.101808][T15951] loop9: detected capacity change from 0 to 7 [ 394.316669][T15951] Dev loop9: unable to read RDB block 7 [ 394.339497][T15951] loop9: AHDI p2 p3 p4 [ 394.398320][T15951] loop9: partition table partially beyond EOD, truncated [ 394.434133][T15951] loop9: p2 start 304735 is beyond EOD, truncated [ 394.440720][T15951] loop9: p3 start 1748066164 is beyond EOD, truncated [ 395.038142][ T5930] usb 5-1: USB disconnect, device number 61 [ 395.272884][T15970] netlink: 'syz.4.1237': attribute type 12 has an invalid length. [ 395.319285][T15970] blktrace: Concurrent blktraces are not allowed on nbd4 [ 396.400762][T15978] loop9: detected capacity change from 0 to 7 [ 396.454071][T15978] Dev loop9: unable to read RDB block 7 [ 396.483656][T15978] loop9: AHDI p2 p3 p4 [ 396.641958][T15978] loop9: partition table partially beyond EOD, truncated [ 396.662590][T15978] loop9: p2 start 304735 is beyond EOD, truncated [ 396.670701][T15978] loop9: p3 start 1748066164 is beyond EOD, truncated [ 398.376218][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.412553][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.574610][T16029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1246'. [ 399.479044][T16052] netlink: 'syz.3.1251': attribute type 12 has an invalid length. [ 399.864070][ T5930] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 400.048094][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 400.069730][ T5930] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.109404][ T5930] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.183087][T16089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.192418][T16089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.255241][ T5930] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 400.279847][ T5930] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 400.289242][ T5930] usb 1-1: Product: syz [ 400.293448][ T5930] usb 1-1: Manufacturer: syz [ 400.299610][T16088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.337691][ T5930] hub 1-1:4.0: USB hub found [ 400.341278][T16088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.407308][T16089] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1258'. [ 400.421318][T16089] fuse: Bad value for 'fd' [ 400.529955][ T5930] hub 1-1:4.0: 2 ports detected [ 401.099698][T16114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.137332][T16114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.576458][ T5930] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 401.582917][ T5930] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 402.664297][ T5899] usb 1-1: USB disconnect, device number 73 [ 403.094031][ T5930] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 403.254076][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 403.264617][ T5930] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 403.273334][ T5930] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.363585][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.451358][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.668500][ T5930] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.808304][ T5930] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.857619][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.098556][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1263'. [ 404.112610][ T5930] usb 1-1: usb_control_msg returned -71 [ 404.192350][ T5930] usbtmc 1-1:16.0: can't read capabilities [ 404.228296][T16152] netlink: 'syz.2.1267': attribute type 12 has an invalid length. [ 404.283057][ T5930] usb 1-1: USB disconnect, device number 74 [ 404.355790][T16152] blktrace: Concurrent blktraces are not allowed on nbd2 [ 405.406580][T16113] syz.1.1261 (16113): drop_caches: 2 [ 406.887752][T16243] netlink: 'syz.2.1278': attribute type 12 has an invalid length. [ 406.899017][T16243] blktrace: Concurrent blktraces are not allowed on nbd2 [ 407.031212][T16250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.075313][ T1215] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 407.088212][T16250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.234414][T16250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1279'. [ 407.255013][ T1215] usb 5-1: config 0 has no interfaces? [ 407.273268][ T1215] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 407.282814][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.292837][ T1215] usb 5-1: Product: syz [ 407.302385][ T1215] usb 5-1: Manufacturer: syz [ 407.307303][ T52] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 407.320534][ T1215] usb 5-1: SerialNumber: syz [ 407.337838][ T1215] usb 5-1: config 0 descriptor?? [ 407.463884][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 407.479328][ T52] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 407.494379][ T52] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 407.513465][ T52] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 407.537434][T16266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 407.555527][ T52] usb 1-1: config 1 has no interface number 0 [ 407.563647][T16242] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1277'. [ 407.576957][T16242] fuse: Bad value for 'fd' [ 407.590228][ T52] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.602535][ T52] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 407.616293][ T52] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 407.626898][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.666501][ T52] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 407.898586][ T52] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 408.935830][ T52] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 409.594224][ T5899] usb 1-1: USB disconnect, device number 75 [ 409.601254][ T5899] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 410.330645][ T5899] usb 5-1: USB disconnect, device number 62 [ 410.639002][T16344] netlink: 'syz.4.1290': attribute type 12 has an invalid length. [ 410.678278][T16344] blktrace: Concurrent blktraces are not allowed on nbd4 [ 410.888587][ T30] kauditd_printk_skb: 1024 callbacks suppressed [ 410.888608][ T30] audit: type=1326 audit(1744133214.476:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 410.917621][ T5899] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 411.003854][ T30] audit: type=1326 audit(1744133214.476:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.056091][ T30] audit: type=1326 audit(1744133214.476:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.092617][ T5899] usb 1-1: config 0 has an invalid interface number: 197 but max is 0 [ 411.112476][ T5899] usb 1-1: config 0 has no interface number 0 [ 411.136592][ T30] audit: type=1326 audit(1744133214.476:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.138855][ T5899] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 411.204505][ T1215] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 411.239625][ T30] audit: type=1326 audit(1744133214.476:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.272736][ T5899] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 411.288608][ T30] audit: type=1326 audit(1744133214.476:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.304029][ T5899] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 411.374164][ T1215] usb 5-1: Using ep0 maxpacket: 8 [ 411.385472][ T1215] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 411.386378][ T5899] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 411.407309][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.443857][ T1215] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.453996][ T30] audit: type=1326 audit(1744133214.476:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.480889][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.493620][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.502044][ T1215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.527139][ T5899] usb 1-1: Product: syz [ 411.531374][ T5899] usb 1-1: Manufacturer: syz [ 411.538869][ T1215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.555948][ T30] audit: type=1326 audit(1744133214.476:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.576686][ T5899] usb 1-1: SerialNumber: syz [ 411.595117][ T1215] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.623399][ T1215] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 411.641296][ T30] audit: type=1326 audit(1744133214.476:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.675891][ T5899] usb 1-1: config 0 descriptor?? [ 411.685417][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.704671][T16346] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 411.712133][T16346] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 411.761001][T16370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1295'. [ 411.793890][ T30] audit: type=1326 audit(1744133214.476:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.3.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x7ffc0000 [ 411.936357][T16359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1292'. [ 411.960724][ T1215] usb 5-1: usb_control_msg returned -71 [ 411.966713][ T1215] usbtmc 5-1:16.0: can't read capabilities [ 412.011634][ T1215] usb 5-1: USB disconnect, device number 63 [ 412.049528][T16346] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 412.070158][T16346] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 412.098253][ T5899] qmi_wwan 1-1:0.197: probe with driver qmi_wwan failed with error -22 [ 413.641002][ T52] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 413.677345][ T5899] usb 1-1: USB disconnect, device number 76 [ 413.806670][ T52] usb 5-1: config 0 has no interfaces? [ 413.816531][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.828180][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.956422][ T52] usb 5-1: Product: syz [ 414.031462][ T52] usb 5-1: Manufacturer: syz [ 414.076589][ T52] usb 5-1: SerialNumber: syz [ 414.089700][ T52] usb 5-1: config 0 descriptor?? [ 414.384103][ T5899] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 414.405731][T16452] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1300'. [ 414.419286][T16452] fuse: Bad value for 'fd' [ 414.584153][ T5899] usb 1-1: device descriptor read/64, error -71 [ 414.631370][T16475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.743505][T16475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.835080][ T5899] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 415.043916][ T5899] usb 1-1: device descriptor read/64, error -71 [ 415.156044][ T5899] usb usb1-port1: attempt power cycle [ 415.261989][T16487] netlink: 'syz.3.1304': attribute type 12 has an invalid length. [ 415.271897][T16487] blktrace: Concurrent blktraces are not allowed on nbd3 [ 415.604111][ T5899] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 415.636616][T16512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.651966][T16512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.654676][ T5899] usb 1-1: device descriptor read/8, error -71 [ 415.719837][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1310'. [ 416.023651][ T5899] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 416.075468][ T5899] usb 1-1: device descriptor read/8, error -71 [ 416.284132][ T5899] usb usb1-port1: unable to enumerate USB device [ 416.470031][T16524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.485204][T16524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.509261][T16522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1312'. [ 416.741417][ T5930] usb 5-1: USB disconnect, device number 64 [ 417.380580][T16553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.390124][T16553] team0: Port device bond2 added [ 417.403430][T16577] netlink: 'syz.2.1318': attribute type 12 has an invalid length. [ 417.448188][T16577] blktrace: Concurrent blktraces are not allowed on nbd2 [ 417.678543][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.706569][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.044267][ T5930] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 418.215652][ T5930] usb 1-1: config 0 has no interfaces? [ 418.227327][ T5930] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 418.244007][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.252191][ T5930] usb 1-1: Product: syz [ 418.257344][ T5930] usb 1-1: Manufacturer: syz [ 418.261984][ T5930] usb 1-1: SerialNumber: syz [ 418.287122][ T5930] usb 1-1: config 0 descriptor?? [ 418.383861][ T52] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 418.533999][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 418.553407][ T52] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.570960][T16640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.608731][ T52] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.627130][T16640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.668236][ T5899] usb 1-1: USB disconnect, device number 81 [ 418.691944][ T52] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 418.704089][ T52] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 418.719999][T16640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 418.733573][ T52] usb 5-1: Product: syz [ 418.742109][ T52] usb 5-1: Manufacturer: syz [ 418.760770][ T52] hub 5-1:4.0: USB hub found [ 418.960920][ T52] hub 5-1:4.0: 2 ports detected [ 419.426012][ T52] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 419.433068][ T52] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 419.494789][ T52] usb 5-1: USB disconnect, device number 65 [ 419.588454][T16680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.644106][T16680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.846639][T16680] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1325'. [ 419.881873][T16680] fuse: Bad value for 'fd' [ 419.911525][T16701] netlink: 'syz.2.1331': attribute type 12 has an invalid length. [ 419.920486][T16701] blktrace: Concurrent blktraces are not allowed on nbd2 [ 420.445765][T16712] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 421.383841][ T5899] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 421.538859][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 421.572240][ T5899] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 421.630693][ T5899] usb 1-1: config 0 has no interface number 0 [ 421.658061][ T5899] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 421.695547][ T5899] usb 1-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 421.705199][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.713279][ T5899] usb 1-1: Product: syz [ 421.721566][ T5899] usb 1-1: Manufacturer: syz [ 421.739394][ T5899] usb 1-1: SerialNumber: syz [ 421.758157][ T5899] usb 1-1: config 0 descriptor?? [ 421.767229][T16722] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 421.808422][ T5899] ftdi_sio 1-1:0.151: FTDI USB Serial Device converter detected [ 421.848249][ T5899] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 421.897921][T16745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 421.940351][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 421.966708][T16746] vlan2: entered allmulticast mode [ 421.972229][T16746] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 421.994619][T16722] input: syz0 as /devices/virtual/input/input31 [ 422.141456][ T5930] usb 1-1: USB disconnect, device number 82 [ 422.162842][ T5930] ftdi_sio 1-1:0.151: device disconnected [ 422.572843][T16780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.600316][T16780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.186271][T16815] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 423.254796][T16816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.263593][T16816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.483676][T16844] loop9: detected capacity change from 0 to 7 [ 424.493792][T16844] Dev loop9: unable to read RDB block 7 [ 424.499715][T16844] loop9: AHDI p2 p3 p4 [ 424.504132][T16844] loop9: partition table partially beyond EOD, truncated [ 424.512129][T16844] loop9: p2 start 304735 is beyond EOD, truncated [ 424.518939][T16844] loop9: p3 start 1748066164 is beyond EOD, truncated [ 425.339770][T16860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.396007][T16860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.439550][T16860] input: syz0 as /devices/virtual/input/input32 [ 426.164125][ T5899] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 426.244355][ T5930] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 426.270623][T16893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.289814][T16893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.300093][T16900] CUSE: info not properly terminated [ 426.307780][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.322506][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.340857][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 426.350970][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.364729][ T5899] usb 1-1: config 0 has no interface number 0 [ 426.370943][ T5899] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.424629][ T5899] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.435617][ T5930] usb 5-1: config index 0 descriptor too short (expected 65524, got 18) [ 426.435650][ T5930] usb 5-1: config 0 has an invalid interface number: 239 but max is -1 [ 426.435674][ T5930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 426.435697][ T5930] usb 5-1: config 0 has no interface number 0 [ 426.440136][ T5930] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 426.463845][ T5899] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 426.488320][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.500580][ T5930] usb 5-1: Product: syz [ 426.507531][ T5930] usb 5-1: Manufacturer: syz [ 426.512340][ T5930] usb 5-1: SerialNumber: syz [ 426.531360][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.553518][ T5930] usb 5-1: config 0 descriptor?? [ 426.555969][ T5899] usb 1-1: config 0 descriptor?? [ 427.055638][T16930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1364'. [ 427.073469][T16930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.086145][T16930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.198111][ T5899] uclogic 0003:28BD:0094.000A: pen parameters not found [ 427.231637][ T5899] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 428.907868][ T52] usb 1-1: USB disconnect, device number 83 [ 430.220559][T16975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.311142][ T5930] usb 5-1: probing VID:PID(2201:012C) [ 430.344281][T16975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.426181][ T5930] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 430.434647][T16975] input: syz0 as /devices/virtual/input/input33 [ 430.585723][ T5930] vub300 5-1:0.239: probe with driver vub300 failed with error -22 [ 430.638513][ T5930] usb 5-1: USB disconnect, device number 66 [ 431.262954][T17018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.271896][T17018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.424277][T17025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.453837][T17025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.484742][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 431.635934][T17018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'. [ 431.714554][T17039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.723977][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 431.741593][T17039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.754894][T17039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.779561][T17039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.795553][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.839192][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.914074][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 431.930379][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.980443][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.055163][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 432.060775][T17061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.112201][T17061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.164061][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 432.209820][ T9] usb 5-1: Product: syz [ 432.235157][ T9] usb 5-1: Manufacturer: syz [ 432.282894][ T9] hub 5-1:4.0: USB hub found [ 432.401081][T17081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 432.418592][T17081] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1381'. [ 432.453382][T17081] batadv1: entered promiscuous mode [ 432.463619][T17081] batadv1: entered allmulticast mode [ 432.464021][ T5930] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 432.484478][ T9] hub 5-1:4.0: 2 ports detected [ 432.646293][ T5930] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 432.657783][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.711360][ T5930] usb 1-1: config 0 descriptor?? [ 432.737233][ T5930] gspca_main: spca508-2.14.0 probing 8086:0110 [ 432.940669][ T5930] gspca_spca508: reg_read err -32 [ 432.967957][ T5930] gspca_spca508: reg_read err -32 [ 432.986529][ T5930] gspca_spca508: reg_read err -32 [ 433.227680][ T5930] gspca_spca508: reg_read err -71 [ 433.242069][ T5930] gspca_spca508: reg write: error -71 [ 433.267799][ T5930] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 433.350436][ T5930] usb 1-1: USB disconnect, device number 84 [ 433.626656][ T9] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 434.132757][ T9] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 434.421748][T17111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.472692][T17111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.562554][T17111] input: syz0 as /devices/virtual/input/input34 [ 434.634244][ T9] usb 5-1: USB disconnect, device number 67 [ 434.798208][T17141] sctp: [Deprecated]: syz.2.1390 (pid 17141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.798208][T17141] Use struct sctp_sack_info instead [ 434.999339][T17154] loop9: detected capacity change from 0 to 7 [ 435.111716][T17154] Dev loop9: unable to read RDB block 7 [ 435.226207][T17154] loop9: AHDI p2 p3 p4 [ 435.329287][T17154] loop9: partition table partially beyond EOD, truncated [ 435.388520][T17154] loop9: p2 start 304735 is beyond EOD, truncated [ 435.420478][T17154] loop9: p3 start 1748066164 is beyond EOD, truncated [ 435.601905][T17178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.641580][ T5892] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 435.652905][T17178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.823840][ T5892] usb 1-1: device descriptor read/64, error -71 [ 435.891107][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.894546][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.094938][ T5892] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 436.243911][ T5892] usb 1-1: device descriptor read/64, error -71 [ 436.391991][ T5892] usb usb1-port1: attempt power cycle [ 436.568329][T17244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.577361][T17244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.682194][T17246] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1398'. [ 436.753556][T17257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.762540][T17257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.805698][ T5892] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 437.134623][ T5899] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 437.145609][ T5892] usb 1-1: device descriptor read/8, error -71 [ 437.248139][T17257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1400'. [ 437.344887][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 437.353006][ T5899] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.379288][ T5899] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.407666][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 437.417310][ T5892] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 437.429873][ T5899] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 437.445166][ T5899] usb 5-1: Product: syz [ 437.710959][ T5899] usb 5-1: Manufacturer: syz [ 437.715814][ T5892] usb 1-1: device descriptor read/8, error -71 [ 437.749843][ T5899] hub 5-1:4.0: USB hub found [ 437.869333][ T5892] usb usb1-port1: unable to enumerate USB device [ 437.952235][ T5899] hub 5-1:4.0: 2 ports detected [ 439.020222][ T5899] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 439.027594][ T5899] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 439.371702][T17294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 439.393909][ T5899] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 439.627003][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 439.782495][ T5899] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 439.811207][ T5899] usb 1-1: config 0 has no interface number 0 [ 439.833856][ T5899] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 439.853414][ T5899] usb 1-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 439.878887][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.900343][ T5899] usb 1-1: Product: syz [ 439.908370][ T5899] usb 1-1: Manufacturer: syz [ 439.916400][ T5899] usb 1-1: SerialNumber: syz [ 439.944536][ T5899] usb 1-1: config 0 descriptor?? [ 439.975557][T17288] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 439.984399][ T5930] usb 5-1: USB disconnect, device number 68 [ 439.985670][ T5899] ftdi_sio 1-1:0.151: FTDI USB Serial Device converter detected [ 440.045199][ T5899] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 440.176255][T17312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 440.230326][T17288] input: syz0 as /devices/virtual/input/input35 [ 440.312811][T17333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.338272][ T5899] usb 1-1: USB disconnect, device number 89 [ 440.346552][ T5899] ftdi_sio 1-1:0.151: device disconnected [ 440.436085][T17333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.526913][T17402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.542176][T17402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.831952][T17437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.841254][T17437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.092945][T17446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1417'. [ 442.614405][T17474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.647526][T17474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.705719][T17474] input: syz0 as /devices/virtual/input/input36 [ 443.582891][T17497] 8021q: adding VLAN 0 to HW filter on device bond9 [ 443.642998][T17497] team0: Port device bond9 added [ 444.033637][T17534] xt_CT: No such helper "pptp" [ 444.789489][T17564] loop9: detected capacity change from 0 to 7 [ 444.802636][T17564] Dev loop9: unable to read RDB block 7 [ 444.838403][T17564] loop9: AHDI p2 p3 p4 [ 444.873970][T17564] loop9: partition table partially beyond EOD, truncated [ 444.887627][T17564] loop9: p2 start 304735 is beyond EOD, truncated [ 444.959288][T17564] loop9: p3 start 1748066164 is beyond EOD, truncated [ 445.083838][ T1215] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 445.289592][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.296117][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.343892][ T1215] usb 5-1: device descriptor read/64, error -71 [ 445.604014][ T1215] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 445.793924][ T1215] usb 5-1: device descriptor read/64, error -71 [ 445.904335][ T1215] usb usb5-port1: attempt power cycle [ 446.284201][T17623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.309108][T17623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.333976][ T1215] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 446.351502][T17623] input: syz0 as /devices/virtual/input/input37 [ 446.391225][ T1215] usb 5-1: device descriptor read/8, error -71 [ 446.492103][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 446.492124][ T30] audit: type=1326 audit(1744133250.076:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17630 comm="syz.3.1437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe668b8d169 code=0x0 [ 446.643858][ T1215] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 446.674696][ T1215] usb 5-1: device descriptor read/8, error -71 [ 446.697150][T17646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.710163][T17646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.734479][ T5899] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 446.742833][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'. [ 446.753384][T17646] FAULT_INJECTION: forcing a failure. [ 446.753384][T17646] name failslab, interval 1, probability 0, space 0, times 0 [ 446.780910][T17646] CPU: 1 UID: 0 PID: 17646 Comm: syz.3.1439 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 446.780937][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.780950][T17646] Call Trace: [ 446.780957][T17646] [ 446.780965][T17646] dump_stack_lvl+0x241/0x360 [ 446.781001][T17646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.781029][T17646] ? __pfx__printk+0x10/0x10 [ 446.781065][T17646] ? __pfx___might_resched+0x10/0x10 [ 446.781094][T17646] should_fail_ex+0x424/0x570 [ 446.781119][T17646] should_failslab+0xac/0x100 [ 446.781147][T17646] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 446.781176][T17646] ? __alloc_skb+0x1c2/0x480 [ 446.781198][T17646] __alloc_skb+0x1c2/0x480 [ 446.781221][T17646] ? __pfx___alloc_skb+0x10/0x10 [ 446.781241][T17646] ? netlink_autobind+0xd6/0x2f0 [ 446.781267][T17646] ? netlink_autobind+0x2b0/0x2f0 [ 446.781299][T17646] netlink_sendmsg+0x638/0xcd0 [ 446.781343][T17646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.781374][T17646] ? aa_sock_msg_perm+0x91/0x160 [ 446.781407][T17646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.781432][T17646] __sock_sendmsg+0x221/0x270 [ 446.781461][T17646] ____sys_sendmsg+0x523/0x860 [ 446.781490][T17646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.781508][T17646] ? __fget_files+0x2a/0x420 [ 446.781529][T17646] ? __fget_files+0x2a/0x420 [ 446.781555][T17646] __sys_sendmmsg+0x3a0/0x7b0 [ 446.781586][T17646] ? __pfx___sys_sendmmsg+0x10/0x10 [ 446.781637][T17646] ? rcu_read_lock_any_held+0xbb/0x160 [ 446.781662][T17646] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 446.781690][T17646] ? vfs_write+0xb29/0xd10 [ 446.781721][T17646] ? ksys_write+0x24e/0x2d0 [ 446.781746][T17646] ? __mutex_unlock_slowpath+0x229/0x800 [ 446.781799][T17646] ? ksys_write+0x275/0x2d0 [ 446.781832][T17646] __x64_sys_sendmmsg+0xa0/0xb0 [ 446.781854][T17646] do_syscall_64+0xf3/0x230 [ 446.781878][T17646] ? clear_bhb_loop+0x45/0xa0 [ 446.781901][T17646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.781919][T17646] RIP: 0033:0x7fe668b8d169 [ 446.781936][T17646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.781953][T17646] RSP: 002b:00007fe6699a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.781975][T17646] RAX: ffffffffffffffda RBX: 00007fe668da5fa0 RCX: 00007fe668b8d169 [ 446.781989][T17646] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 446.782003][T17646] RBP: 00007fe6699a2090 R08: 0000000000000000 R09: 0000000000000000 [ 446.782015][T17646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.782041][T17646] R13: 0000000000000000 R14: 00007fe668da5fa0 R15: 00007fe668ecfa28 [ 446.782089][T17646] [ 447.133851][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 447.140912][ T5899] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 447.151984][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.167169][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.178534][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.189171][ T5899] usb 1-1: Product: syz [ 447.193347][ T5899] usb 1-1: Manufacturer: syz [ 447.198913][ T5899] usb 1-1: SerialNumber: syz [ 447.205680][ T1215] usb usb5-port1: unable to enumerate USB device [ 447.452667][ T5899] usb 1-1: 0:2 : does not exist [ 447.470009][ T5899] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 447.558847][ T5899] usb 1-1: USB disconnect, device number 90 [ 447.812684][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.962431][T17700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.991010][T17700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.222805][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1443'. [ 448.431864][ T5899] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 448.666278][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 448.707847][ T5899] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 448.799278][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.827245][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.837953][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.848879][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.862785][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.901042][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.242707][T17699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1445'. [ 449.254097][T17699] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1445'. [ 449.269402][T17699] batadv1: entered promiscuous mode [ 449.275096][T17699] batadv1: entered allmulticast mode [ 449.304884][T17763] loop9: detected capacity change from 0 to 7 [ 449.361932][T17763] Dev loop9: unable to read RDB block 7 [ 449.382142][T17763] loop9: AHDI p2 p3 p4 [ 449.386776][T17763] loop9: partition table partially beyond EOD, truncated [ 449.400411][T17763] loop9: p2 start 304735 is beyond EOD, truncated [ 449.407610][T17763] loop9: p3 start 1748066164 is beyond EOD, truncated [ 449.571347][ T5899] usb 5-1: usb_control_msg returned -71 [ 449.579328][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 449.755917][ T5899] usb 5-1: USB disconnect, device number 73 [ 451.084008][ T5899] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 451.173622][T17808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.221419][T17808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.244110][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 451.254515][ T5899] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 451.267808][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1454'. [ 451.277022][ T5899] usb 1-1: config 0 has no interface number 0 [ 451.283154][ T5899] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 451.296551][ T5899] usb 1-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 451.333597][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.359200][ T5899] usb 1-1: Product: syz [ 451.381659][ T5899] usb 1-1: Manufacturer: syz [ 451.386672][T17818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1455'. [ 451.397286][ T5899] usb 1-1: SerialNumber: syz [ 451.406547][T17818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1455'. [ 451.419607][ T5899] usb 1-1: config 0 descriptor?? [ 451.434588][T17795] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 451.452760][ T5899] ftdi_sio 1-1:0.151: FTDI USB Serial Device converter detected [ 451.476345][ T5899] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 451.536146][T17826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.545222][T17826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.607846][T17831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.620060][T17831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.666790][T17795] input: syz0 as /devices/virtual/input/input38 [ 451.722839][ T52] usb 1-1: USB disconnect, device number 91 [ 451.733433][ T52] ftdi_sio 1-1:0.151: device disconnected [ 452.126272][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 452.154630][T17876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.163946][T17876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.190870][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 452.352011][T17885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1465'. [ 452.361580][T17884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1465'. [ 452.447883][T17876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1462'. [ 452.609748][T17903] netlink: 872 bytes leftover after parsing attributes in process `syz.0.1468'. [ 452.753875][ T5899] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 452.904157][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 452.914957][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.928109][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.962592][ T5899] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 453.083164][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.182491][ T5899] usb 5-1: config 0 descriptor?? [ 453.201700][T17920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.230334][T17920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.351003][T17926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1471'. [ 453.393680][T17926] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1471'. [ 453.412485][T17893] program syz.4.1466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.457075][T17926] batadv1: entered promiscuous mode [ 453.466344][T17926] batadv1: entered allmulticast mode [ 453.605599][ T7936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.619408][ T7936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.628612][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.649529][T17939] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 453.694103][ T1215] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 453.823896][ T1215] usb 1-1: device descriptor read/64, error -71 [ 454.074087][ T1215] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 454.182310][ T5899] usbhid 5-1:0.0: can't add hid device: -71 [ 454.189890][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 454.203822][ T1215] usb 1-1: device descriptor read/64, error -71 [ 454.228843][ T5899] usb 5-1: USB disconnect, device number 74 [ 454.307327][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.318134][ T1215] usb usb1-port1: attempt power cycle [ 454.329513][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.358711][T17950] input: syz0 as /devices/virtual/input/input39 [ 454.556859][ T5930] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.614115][ T5930] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.663892][ T1215] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 454.684530][ T1215] usb 1-1: device descriptor read/8, error -71 [ 454.924635][ T1215] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 454.987652][ T1215] usb 1-1: device descriptor read/8, error -71 [ 455.114068][ T1215] usb usb1-port1: unable to enumerate USB device [ 455.318417][T17975] netlink: 'syz.4.1479': attribute type 12 has an invalid length. [ 455.333381][T17975] blktrace: Concurrent blktraces are not allowed on nbd4 [ 455.412973][T17982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.451927][T17982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.756377][T17991] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 456.351820][T17986] delete_channel: no stack [ 457.503946][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.569460][T18056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.602493][T18056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.729638][T18080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.738782][T18080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.292848][T18080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1490'. [ 458.516696][T18164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.597791][T18164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.164563][ T5899] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 459.294085][T18180] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:0 [ 459.352908][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 459.366840][ T5899] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 459.384347][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.404240][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.419776][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.447171][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.479157][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 459.502121][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.725598][ T5930] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 459.752997][T18173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.763423][T18173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.791103][T18173] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1496'. [ 459.876579][T18173] batadv1: entered promiscuous mode [ 459.883895][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 459.892820][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.905297][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.930865][ T5930] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 459.942809][T18173] batadv1: entered allmulticast mode [ 459.950890][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.977927][ T5930] usb 1-1: config 0 descriptor?? [ 460.128400][ T5899] usb 5-1: usb_control_msg returned -71 [ 460.137599][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 460.308866][ T5899] usb 5-1: USB disconnect, device number 75 [ 461.638985][T18233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 461.757266][T18238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.791519][T18238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.977630][T18241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.055025][T18241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.079847][T18241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.093267][T18241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.111841][ T30] audit: type=1800 audit(1744133265.656:1748): pid=18241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1504" name="file0" dev="tmpfs" ino=1528 res=0 errno=0 [ 463.081420][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 463.087675][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 463.172076][ T5930] usb 1-1: USB disconnect, device number 96 [ 463.467475][ T1215] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 463.626575][ T1215] usb 5-1: config 0 has no interfaces? [ 463.636195][ T1215] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 463.654308][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.671238][ T1215] usb 5-1: Product: syz [ 463.678487][ T1215] usb 5-1: Manufacturer: syz [ 463.685810][ T5930] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 463.695307][ T1215] usb 5-1: SerialNumber: syz [ 463.713217][ T1215] usb 5-1: config 0 descriptor?? [ 463.808875][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 463.912018][ T5930] usb 1-1: config 0 has no interfaces? [ 463.976946][ T5930] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 464.023352][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.033672][ T5930] usb 1-1: Product: syz [ 464.038711][ T5930] usb 1-1: Manufacturer: syz [ 464.043441][ T5930] usb 1-1: SerialNumber: syz [ 464.057910][ T5930] usb 1-1: config 0 descriptor?? [ 464.174986][T18287] syzkaller1: entered promiscuous mode [ 464.180915][T18287] syzkaller1: entered allmulticast mode [ 464.329928][T18273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1507'. [ 464.780143][T18307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.790924][T18307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.092255][T18312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1512'. [ 465.093968][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.410147][T18320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.421875][T18320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.564510][T18325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.573488][T18325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.480298][ T1215] usb 5-1: USB disconnect, device number 76 [ 466.851230][T18337] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 467.072836][ T1215] usb 1-1: USB disconnect, device number 97 [ 467.513892][ T1215] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 467.715819][ T1215] usb 1-1: Using ep0 maxpacket: 32 [ 467.723862][ T1215] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 467.742080][ T1215] usb 1-1: config 0 has no interface number 0 [ 467.763862][ T1215] usb 1-1: config 0 interface 184 has no altsetting 0 [ 467.784245][ T1215] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 467.793445][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.822010][ T1215] usb 1-1: Product: syz [ 467.842380][ T1215] usb 1-1: Manufacturer: syz [ 467.898275][ T1215] usb 1-1: SerialNumber: syz [ 468.011828][ T1215] usb 1-1: config 0 descriptor?? [ 468.233840][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 468.298619][ T1215] smsc75xx v1.0.0 [ 468.345562][T18371] »»»»»»—wŸ‚_Mo: renamed from lo (while UP) [ 468.358627][ T1215] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 468.383937][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 468.390773][ T1215] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 468.391390][ T9] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 468.429716][ T9] usb 5-1: config 8 has no interface number 0 [ 468.436473][ T1215] usb 1-1: USB disconnect, device number 98 [ 468.451242][ T9] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 468.478661][ T9] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 468.492684][ T9] usb 5-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 468.515200][ T9] usb 5-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.534691][ T9] usb 5-1: config 8 interface 206 has no altsetting 0 [ 468.577512][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 468.596592][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.616848][ T9] usb 5-1: Product: syz [ 468.621056][ T9] usb 5-1: Manufacturer: syz [ 468.654016][ T9] usb 5-1: SerialNumber: syz [ 468.813566][T18389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.828173][T18389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.166726][ T9] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 469.271337][ T9] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 471.797784][ T5899] usb 5-1: USB disconnect, device number 77 [ 471.948619][ T5899] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 472.020861][T18443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.029888][T18443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.095099][ T5899] garmin_gps 5-1:8.206: device disconnected [ 472.191579][T18439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 472.438539][T18443] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1526'. [ 472.734353][ T5899] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 473.076981][ T5899] usb 5-1: config 0 has no interfaces? [ 473.189743][ T5899] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 473.227583][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.334017][ T5899] usb 5-1: Product: syz [ 473.350164][ T5899] usb 5-1: Manufacturer: syz [ 473.396930][ T5899] usb 5-1: SerialNumber: syz [ 473.655717][ T5899] usb 5-1: config 0 descriptor?? [ 474.501147][T18457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1528'. [ 474.974638][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 475.626811][ T9] usb 1-1: config 0 has no interfaces? [ 475.748948][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.762336][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.804351][ T9] usb 1-1: Product: syz [ 475.883475][ T9] usb 1-1: Manufacturer: syz [ 475.903612][ T9] usb 1-1: SerialNumber: syz [ 475.940989][ T9] usb 1-1: config 0 descriptor?? [ 477.030677][ T1215] usb 5-1: USB disconnect, device number 78 [ 477.654251][ T1215] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 477.732410][T18583] veth1_macvtap: left promiscuous mode [ 477.883826][ T1215] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 477.912077][ T30] audit: type=1326 audit(1744133281.496:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 477.950620][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.017724][ T1215] usb 5-1: Product: syz [ 478.035087][ T1215] usb 5-1: Manufacturer: syz [ 478.044008][ T30] audit: type=1326 audit(1744133281.526:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.069816][ T1215] usb 5-1: SerialNumber: syz [ 478.098721][ T1215] usb 5-1: config 0 descriptor?? [ 478.145867][ T1215] gspca_main: sq930x-2.14.0 probing 2770:930c [ 478.154126][ T30] audit: type=1326 audit(1744133281.526:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.185485][ T30] audit: type=1326 audit(1744133281.526:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.212438][ T30] audit: type=1326 audit(1744133281.526:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.306626][ T30] audit: type=1326 audit(1744133281.526:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.469067][ T30] audit: type=1326 audit(1744133281.526:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.496281][ T30] audit: type=1326 audit(1744133281.526:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.542988][T18603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.592261][ T30] audit: type=1326 audit(1744133281.526:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.624451][T18603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.721739][ T30] audit: type=1326 audit(1744133281.526:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5e6678d169 code=0x7ffc0000 [ 478.804183][ T5891] usb 1-1: USB disconnect, device number 99 [ 478.988271][T18621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1543'. [ 479.324843][T18623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1545'. [ 479.484022][ T1215] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 479.491005][ T1215] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 479.518519][ T1215] usb 5-1: USB disconnect, device number 79 [ 479.619132][T18641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.950845][T18641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.503806][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 480.690033][ T9] usb 1-1: config 0 has no interfaces? [ 480.703568][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 480.716928][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.771953][ T9] usb 1-1: Product: syz [ 480.787081][ T9] usb 1-1: Manufacturer: syz [ 480.794097][ T5892] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 480.806373][ T9] usb 1-1: SerialNumber: syz [ 480.853535][T18679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.864745][ T9] usb 1-1: config 0 descriptor?? [ 480.914281][T18679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.954162][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 480.977984][ T5892] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 480.990172][ T5892] usb 5-1: config 2 has no interface number 0 [ 481.030921][ T5892] usb 5-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 481.094249][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.108205][ T5892] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 481.147816][ T5892] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.179790][ T5892] usb 5-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 481.216782][T18692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1548'. [ 481.258157][ T5892] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 481.280992][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.292330][ T5892] usb 5-1: Product: syz [ 481.307841][ T5892] usb 5-1: Manufacturer: syz [ 481.318546][ T5892] usb 5-1: SerialNumber: syz [ 481.352946][ T5892] usb 5-1: NFC: intf ffff88807f4a9000 id ffffffff8f73e0e0 [ 481.362700][T18685] syzkaller0: entered promiscuous mode [ 481.378401][T18689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.388247][T18689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.417658][T18689] vivid-004: ================= START STATUS ================= [ 481.427717][T18689] vivid-004: ================== END STATUS ================== [ 481.461930][T18685] syzkaller0: entered allmulticast mode [ 481.556196][ T5892] usb 5-1: USB disconnect, device number 80 [ 482.129554][T18712] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 483.090764][T18724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.131505][T18724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.624844][ T5930] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 483.857495][ T5930] usb 5-1: config 20 has an invalid descriptor of length 1, skipping remainder of the config [ 483.878920][ T5930] usb 5-1: config 20 has 0 interfaces, different from the descriptor's value: 1 [ 483.916771][ T5930] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=3c.3e [ 483.954299][ T5930] usb 5-1: New USB device strings: Mfr=249, Product=2, SerialNumber=3 [ 484.001153][ T5930] usb 5-1: Product: syz [ 484.051553][ T5930] usb 5-1: Manufacturer: syz [ 484.106634][ T5930] usb 5-1: SerialNumber: syz [ 484.537787][ T5892] usb 5-1: USB disconnect, device number 81 [ 484.841268][ T5892] usb 1-1: USB disconnect, device number 100 [ 485.316621][T18767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1564'. [ 485.330587][T18767] netlink: 'syz.0.1564': attribute type 7 has an invalid length. [ 485.394153][T18767] netlink: 'syz.0.1564': attribute type 8 has an invalid length. [ 485.403365][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 486.275394][T18772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.292312][T18772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.799770][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 486.812972][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 487.423076][T18789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.574393][T18789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.858298][T18792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.874728][T18792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.572129][T18798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1571'. [ 488.592197][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 490.015190][T18852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.031970][T18852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.200616][ T1215] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 490.270539][T18858] tipc: Started in network mode [ 490.282165][T18858] tipc: Node identity e0000002, cluster identity 4711 [ 490.290877][T18858] tipc: Enabling of bearer rejected, failed to enable media [ 490.641808][ T1215] usb 5-1: config 0 has no interfaces? [ 490.708404][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.719902][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.817448][ T1215] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 490.828595][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.844707][ T1215] usb 5-1: Product: syz [ 490.863815][ T1215] usb 5-1: Manufacturer: syz [ 490.905631][ T1215] usb 5-1: SerialNumber: syz [ 490.941703][T18872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.985810][ T1215] usb 5-1: config 0 descriptor?? [ 491.032349][T18872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.469067][ T1215] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 491.640813][ T1215] usb 1-1: device descriptor read/64, error -71 [ 491.905930][ T1215] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 491.987529][T18842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1574'. [ 492.184203][ T1215] usb 1-1: device descriptor read/64, error -71 [ 492.294866][ T1215] usb usb1-port1: attempt power cycle [ 492.937695][ T1215] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 493.025710][ T1215] usb 1-1: device descriptor read/8, error -71 [ 493.264071][ T1215] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 493.326201][ T1215] usb 1-1: device descriptor read/8, error -71 [ 493.501144][ T1215] usb usb1-port1: unable to enumerate USB device [ 494.109990][ T9] usb 5-1: USB disconnect, device number 82 [ 494.371828][T18915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'. [ 494.730382][T18924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.827379][T18924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.070540][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 495.149090][T18942] netlink: 'syz.3.1593': attribute type 12 has an invalid length. [ 495.160181][T18942] blktrace: Concurrent blktraces are not allowed on nbd3 [ 495.243881][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 495.258687][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 495.276595][ T9] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 495.293762][ T9] usb 5-1: config 0 has no interface number 0 [ 495.318447][ T9] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68a2, bcdDevice=f2.be [ 495.341095][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.359877][ T1215] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 495.373112][ T9] usb 5-1: Product: syz [ 495.398312][ T9] usb 5-1: Manufacturer: syz [ 495.417179][ T9] usb 5-1: SerialNumber: syz [ 495.440039][ T9] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 495.480563][ T9] usb 5-1: no configuration chosen from 1 choice [ 495.584142][T18965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.594360][T18965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.905253][T18965] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1595'. [ 495.988298][T18977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.020547][T18977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.726339][T18974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1597'. [ 497.268669][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 497.400652][T18966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.470259][T18983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.485247][T18966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.502035][T18983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.929377][ T9] usb 5-1: USB disconnect, device number 83 [ 498.292683][T18996] vivid-007: disconnect [ 498.320918][T18994] vivid-007: reconnect [ 498.966745][ T5891] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 499.039486][T19006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.061904][T19006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.124228][ T5891] usb 5-1: device descriptor read/64, error -71 [ 499.444473][ T5891] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 499.589417][ T5891] usb 5-1: device descriptor read/64, error -71 [ 499.736628][ T5891] usb usb5-port1: attempt power cycle [ 500.094455][ T5891] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 500.132717][T19031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.148199][ T5891] usb 5-1: device descriptor read/8, error -71 [ 500.167747][T19031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.394032][ T5891] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 500.435940][ T5891] usb 5-1: device descriptor read/8, error -71 [ 500.569599][ T5891] usb usb5-port1: unable to enumerate USB device [ 500.614152][ T1215] usb 1-1: unable to get BOS descriptor or descriptor too short [ 500.661351][ T1215] usb 1-1: too many configurations: 132, using maximum allowed: 8 [ 500.719111][ T1215] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 500.753192][ T1215] usb 1-1: chopping to 0 config(s) [ 500.761313][ T1215] usb 1-1: can't read configurations, error -32 [ 500.934965][ T1215] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 501.084220][ T1215] usb 1-1: device descriptor read/64, error -32 [ 501.170057][T19063] loop9: detected capacity change from 0 to 7 [ 501.187792][T19063] Dev loop9: unable to read RDB block 7 [ 501.204443][ T1215] usb usb1-port1: attempt power cycle [ 501.223050][T19063] loop9: AHDI p2 p3 p4 [ 501.229114][T19063] loop9: partition table partially beyond EOD, truncated [ 501.321093][T19063] loop9: p2 start 304735 is beyond EOD, truncated [ 501.393616][T19063] loop9: p3 start 1748066164 is beyond EOD, truncated [ 501.594741][ T1215] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 501.774513][ T1215] usb 1-1: device descriptor read/8, error -32 [ 502.114180][ T1215] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 502.124180][T19079] fuse: Bad value for 'fd' [ 502.174458][T19079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.203938][ T1215] usb 1-1: device descriptor read/8, error -32 [ 502.365147][ T1215] usb usb1-port1: unable to enumerate USB device [ 502.373483][T19079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.485895][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1614'. [ 502.971893][T19102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1615'. [ 503.540018][T19109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.550932][T19109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.776023][T19114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1616'. [ 504.496386][T19127] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1621'. [ 504.528658][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 504.528684][ T30] audit: type=1326 audit(1744133308.116:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19125 comm="syz.0.1621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x0 [ 505.198842][T19136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.210885][T19136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.402255][T19143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.482649][T19143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.828008][T19150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'. [ 506.704129][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.710708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.822241][T19178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 508.225671][ T1215] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 508.280268][T19205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.307866][T19205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.648535][ T1215] usb 5-1: config 0 has no interfaces? [ 508.690180][ T1215] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 508.700416][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.716303][ T1215] usb 5-1: Product: syz [ 508.750951][T19216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1639'. [ 508.754192][ T1215] usb 5-1: Manufacturer: syz [ 508.784300][ T1215] usb 5-1: SerialNumber: syz [ 508.941328][ T1215] usb 5-1: config 0 descriptor?? [ 509.198320][T19200] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1632'. [ 509.425217][T19231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.504400][T19231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.877635][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.900118][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.123836][T19249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 511.644184][ T1215] usb 5-1: USB disconnect, device number 88 [ 511.814168][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 512.468106][T19277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 512.532418][T19277] team0: Port device bond5 added [ 513.068820][T19320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.141149][T19320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.375059][T19329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.434366][T19329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.526859][T19356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.536465][T19356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.663606][T19360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1660'. [ 517.367683][T19371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.489913][T19371] team0: Port device bond3 added [ 517.700317][T19409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.829921][T19409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.214421][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 518.453902][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 518.464933][ T9] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 518.551227][ T9] usb 5-1: config 0 has no interface number 0 [ 518.593935][ T9] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 518.693882][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 518.727494][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.793644][ T9] usb 5-1: Product: syz [ 518.863001][ T9] usb 5-1: Manufacturer: syz [ 518.917808][ T9] usb 5-1: SerialNumber: syz [ 518.934920][ T9] usb 5-1: config 0 descriptor?? [ 518.941013][T19417] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 518.982484][ T9] ftdi_sio 5-1:0.151: FTDI USB Serial Device converter detected [ 519.045394][ T9] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 519.210783][T19417] input: syz0 as /devices/virtual/input/input42 [ 519.212385][T19446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.244565][T19446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.392915][ T9] usb 5-1: USB disconnect, device number 89 [ 519.541971][T19460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1670'. [ 519.593002][ T9] ftdi_sio 5-1:0.151: device disconnected [ 520.238594][T19483] fuse: Bad value for 'user_id' [ 520.248258][T19483] fuse: Bad value for 'user_id' [ 521.402555][T19499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.491268][T19499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.633670][T19508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 521.645251][T19508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 521.688879][T19508] bridge0: port 3(vlan3) entered blocking state [ 521.703544][T19508] bridge0: port 3(vlan3) entered disabled state [ 521.720776][T19508] vlan3: entered allmulticast mode [ 521.727326][T19508] bridge0: entered allmulticast mode [ 521.749896][T19508] vlan3: left allmulticast mode [ 521.762022][T19508] bridge0: left allmulticast mode [ 522.247147][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 522.890275][T19542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.929819][T19542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.979475][T19542] input: syz0 as /devices/virtual/input/input43 [ 523.721059][T19577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 523.751477][T19583] bridge0: entered promiscuous mode [ 523.785954][T19583] bridge0: port 3(macsec0) entered blocking state [ 523.807526][T19583] bridge0: port 3(macsec0) entered disabled state [ 523.844560][T19583] macsec0: entered allmulticast mode [ 523.850682][T19583] bridge0: entered allmulticast mode [ 523.892725][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.911139][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.950453][T19583] macsec0: left allmulticast mode [ 523.956007][T19583] bridge0: left allmulticast mode [ 524.000273][T19583] bridge0: left promiscuous mode [ 524.667885][T19604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.705037][T19604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.882888][T19612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1694'. [ 524.974735][T19614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.985045][T19614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.040876][T19614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.050479][T19614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.799873][T19641] vivid-000: disconnect [ 526.818615][T19641] vivid-000: reconnect [ 527.326854][T19650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.416347][T19650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.466901][T19650] input: syz0 as /devices/virtual/input/input45 [ 528.574264][ T5899] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 528.769117][ T5899] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 528.810592][T19680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.820550][T19680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.862765][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.912801][ T5899] usb 5-1: Product: syz [ 528.922680][T19683] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 528.931657][ T5899] usb 5-1: Manufacturer: syz [ 528.931681][ T5899] usb 5-1: SerialNumber: syz [ 528.952574][ T5899] usb 5-1: config 0 descriptor?? [ 528.976939][ T5899] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 528.992250][T19687] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 529.011562][T19687] netlink: 'syz.1.1706': attribute type 2 has an invalid length. [ 529.022433][T19687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'. [ 529.038531][T19683] netlink: 'syz.1.1706': attribute type 2 has an invalid length. [ 529.047251][T19683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'. [ 529.182630][T19692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.233058][T19692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.647970][ T5899] gspca_sunplus: reg_r err -71 [ 529.654158][ T5899] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 529.700043][ T5899] usb 5-1: USB disconnect, device number 90 [ 529.771572][T19698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 531.020301][T19744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.031023][T19744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.814987][T19759] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 531.815050][T19759] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1720'. [ 531.815154][T19759] team0: entered promiscuous mode [ 531.822098][T19759] bond2: entered promiscuous mode [ 531.834747][T19759] bond3: entered promiscuous mode [ 531.846634][T19759] bridge0: port 3(team0) entered blocking state [ 531.857942][T19759] bridge0: port 3(team0) entered disabled state [ 531.863062][T19759] team0: entered allmulticast mode [ 531.863120][T19759] team_slave_0: entered allmulticast mode [ 531.863160][T19759] team_slave_1: entered allmulticast mode [ 531.863214][T19759] bond2: entered allmulticast mode [ 531.863253][T19759] bond3: entered allmulticast mode [ 531.897927][T19755] ptrace attach of "./syz-executor exec"[19758] was attempted by "./syz-executor exec"[19755] [ 531.900540][T19759] team0: left allmulticast mode [ 532.016509][T19762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.016913][T19762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.144426][T19759] team_slave_0: left allmulticast mode [ 532.144472][T19759] team_slave_1: left allmulticast mode [ 532.144525][T19759] bond2: left allmulticast mode [ 532.144558][T19759] bond3: left allmulticast mode [ 533.039120][T19782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.119917][T19782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.205755][T19782] xt_ecn: cannot match TCP bits for non-tcp packets [ 533.216305][T19774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 533.332576][T19774] bond4: entered promiscuous mode [ 533.396736][T19774] team0: Port device bond4 added [ 533.810951][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 533.990487][T19823] sctp: [Deprecated]: syz.1.1726 (pid 19823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.990487][T19823] Use struct sctp_sack_info instead [ 534.135311][T19834] fuse: Bad value for 'fd' [ 535.331744][T19860] netlink: 'syz.3.1734': attribute type 12 has an invalid length. [ 535.375398][T19860] blktrace: Concurrent blktraces are not allowed on nbd3 [ 535.954206][ T5891] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 536.014535][T19884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.071923][T19884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.202052][ T5891] usb 5-1: config 0 has no interfaces? [ 536.321241][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 536.348956][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.420499][ T5891] usb 5-1: Product: syz [ 536.454019][ T5891] usb 5-1: Manufacturer: syz [ 536.479180][T19891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.490203][T19891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.503170][T19891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.511509][T19891] IPv6: NLM_F_CREATE should be set when creating new route [ 536.541444][ T5891] usb 5-1: SerialNumber: syz [ 536.558996][ T5891] usb 5-1: config 0 descriptor?? [ 536.957899][T19896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.971177][T19896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.605057][T19917] batman_adv: batadv0: Adding interface: ip6gretap1 [ 539.611808][T19917] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 539.811498][T19917] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 541.140783][T19947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.193385][T19947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.359779][ T1215] usb 5-1: USB disconnect, device number 91 [ 541.604999][T19934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.654203][T19934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.994069][T19961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.011674][T19961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.108676][T19961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1751'. [ 542.311869][T19961] can: request_module (can-proto-0) failed. [ 542.757663][T19973] netlink: 'syz.1.1752': attribute type 7 has an invalid length. [ 542.931825][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 543.416633][T19978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.448419][T19978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.633316][T19976] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 544.298215][T19997] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 545.065306][ T5892] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 545.263862][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 545.325897][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 545.418528][ T5892] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 545.489600][ T5892] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 545.518047][ T5892] usb 5-1: Product: syz [ 545.528775][ T5892] usb 5-1: Manufacturer: syz [ 545.546906][ T5892] usb 5-1: SerialNumber: syz [ 545.564578][T20013] trusted_key: encrypted_key: insufficient parameters specified [ 545.659777][T20013] netlink: 'syz.3.1760': attribute type 12 has an invalid length. [ 545.719630][T20013] blktrace: Concurrent blktraces are not allowed on nbd3 [ 545.827981][T20031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.904466][T20031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.917536][ T5892] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 545.934783][ T5892] visor 5-1:1.0: probe with driver visor failed with error -110 [ 546.094518][T20031] netlink: 'syz.1.1761': attribute type 25 has an invalid length. [ 546.154214][T20031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1761'. [ 546.471708][T20054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 546.503116][T20053] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1764'. [ 546.680586][T20061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.771099][T20061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.894076][ T976] raw-gadget.0 gadget.1: failed to queue resume event [ 546.994027][ T976] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 547.030874][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 547.041334][ T976] raw-gadget.0 gadget.1: failed to queue reset event [ 547.133990][ T976] raw-gadget.0 gadget.1: failed to queue resume event [ 547.214605][ T976] usb 2-1: device descriptor read/64, error -32 [ 547.334673][ T976] raw-gadget.0 gadget.1: failed to queue suspend event [ 547.351814][ T976] raw-gadget.0 gadget.1: failed to queue reset event [ 547.665267][ T976] raw-gadget.0 gadget.1: failed to queue resume event [ 547.815041][ T976] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 547.833396][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 547.854893][ T5892] usb 5-1: USB disconnect, device number 92 [ 547.862680][ T976] raw-gadget.0 gadget.1: failed to queue reset event [ 547.964747][ T976] raw-gadget.0 gadget.1: failed to queue resume event [ 548.077949][ T976] usb 2-1: device descriptor read/64, error -32 [ 548.194120][ T976] raw-gadget.0 gadget.1: failed to queue suspend event [ 548.317396][ T976] usb usb2-port1: attempt power cycle [ 548.334851][ T976] raw-gadget.0 gadget.1: failed to queue disconnect event [ 548.417933][ T976] raw-gadget.0 gadget.1: failed to queue reset event [ 548.522850][ T976] raw-gadget.0 gadget.1: failed to queue resume event [ 548.540829][ T976] raw-gadget.0 gadget.1: failed to queue reset event [ 548.634106][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 548.744601][ T976] raw-gadget.0 gadget.1: failed to queue resume event [ 548.843892][ T976] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 548.884418][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 548.891820][ T976] usb 2-1: device descriptor read/8, error -32 [ 548.924033][ T24] usb 5-1: config 0 has no interfaces? [ 549.009298][ T976] raw-gadget.0 gadget.1: failed to queue suspend event [ 549.038228][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 549.048310][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.059724][ T24] usb 5-1: Product: syz [ 549.064679][ T24] usb 5-1: Manufacturer: syz [ 549.071266][ T24] usb 5-1: SerialNumber: syz [ 549.079756][ T976] raw-gadget.0 gadget.1: failed to queue reset event [ 549.090039][ T24] usb 5-1: config 0 descriptor?? [ 549.215055][ T976] raw-gadget.0 gadget.1: failed to queue resume event [ 549.256862][T20099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.283968][ T976] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 549.292250][T20099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.335719][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 549.346714][T20099] --map-set only usable from mangle table [ 549.353342][ T976] usb 2-1: device descriptor read/8, error -32 [ 550.079604][ T976] raw-gadget.0 gadget.1: failed to queue suspend event [ 550.102556][ T976] usb usb2-port1: unable to enumerate USB device [ 550.656129][T20103] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 550.717203][T20103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 550.860964][T20108] trusted_key: encrypted_key: insufficient parameters specified [ 550.903346][T20109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.912235][T20108] netlink: 'syz.0.1775': attribute type 12 has an invalid length. [ 550.913034][T20108] blktrace: Concurrent blktraces are not allowed on nbd0 [ 550.959597][T20109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.145945][T20134] xt_ipcomp: unknown flags 12 [ 552.928963][T20140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.024660][T20140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.664663][ T9] usb 5-1: USB disconnect, device number 93 [ 555.496567][T20174] trusted_key: encrypted_key: insufficient parameters specified [ 555.537630][T20175] overlayfs: missing 'lowerdir' [ 555.558619][T20174] netlink: 'syz.2.1788': attribute type 12 has an invalid length. [ 555.594831][T20174] blktrace: Concurrent blktraces are not allowed on nbd2 [ 555.727624][ T30] audit: type=1326 audit(1744133359.306:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 555.750560][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.867696][T20184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.913877][ T30] audit: type=1326 audit(1744133359.356:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 555.914163][T20184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.936542][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.022265][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 556.053216][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 556.078065][ T30] audit: type=1326 audit(1744133359.356:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 556.101067][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.137327][T20192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.147395][T20192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.178280][ T30] audit: type=1326 audit(1744133359.356:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 556.201165][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.249828][T20192] fuse: Bad value for 'fd' [ 556.257612][T20187] delete_channel: no stack [ 556.287067][ T30] audit: type=1326 audit(1744133359.376:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 556.512837][ T30] audit: type=1326 audit(1744133359.376:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 556.619698][ T30] audit: type=1326 audit(1744133359.376:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 556.814692][ T30] audit: type=1326 audit(1744133359.376:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 557.028082][T20212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.038275][T20212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.079438][T20205] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3294959997 (6589919994 ns) > initial count (1466258754 ns). Using initial count to start timer. [ 557.143307][ T30] audit: type=1326 audit(1744133359.376:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 557.333957][ T30] audit: type=1326 audit(1744133359.376:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20176 comm="syz.0.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 559.423882][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 559.574110][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 559.633062][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.699555][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.746242][ T24] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 559.795070][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.834429][ T24] usb 5-1: config 0 descriptor?? [ 559.935998][T20240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.049448][T20240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.219449][T20249] trusted_key: encrypted_key: insufficient parameters specified [ 561.824714][T20249] netlink: 'syz.1.1801': attribute type 12 has an invalid length. [ 561.844246][T20249] blktrace: Concurrent blktraces are not allowed on nbd1 [ 563.248132][T20261] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 563.302305][T20261] batman_adv: batadv0: Adding interface: ip6gretap2 [ 563.331236][T20261] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 563.388775][T20261] batman_adv: batadv0: Interface activated: ip6gretap2 [ 563.757182][T20276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.804777][T20276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.090497][T20294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.173177][T20294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.776521][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 565.776542][ T30] audit: type=1326 audit(1744133369.346:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.0.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 565.805145][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.898088][ T30] audit: type=1326 audit(1744133369.366:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20304 comm="syz.0.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75878d169 code=0x7ffc0000 [ 565.920669][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.963098][T20311] FAULT_INJECTION: forcing a failure. [ 565.963098][T20311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.167188][T20311] CPU: 1 UID: 0 PID: 20311 Comm: syz.1.1813 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 566.167221][T20311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.167235][T20311] Call Trace: [ 566.167243][T20311] [ 566.167253][T20311] dump_stack_lvl+0x241/0x360 [ 566.167292][T20311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.167323][T20311] ? __pfx__printk+0x10/0x10 [ 566.167365][T20311] should_fail_ex+0x424/0x570 [ 566.167392][T20311] _copy_from_user+0x2d/0xb0 [ 566.167423][T20311] copy_msghdr_from_user+0xb3/0x580 [ 566.167476][T20311] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 566.167502][T20311] ? __fget_files+0x2a/0x420 [ 566.167525][T20311] ? __fget_files+0x2a/0x420 [ 566.167554][T20311] __sys_sendmsg+0x20a/0x360 [ 566.167582][T20311] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.167662][T20311] ? do_syscall_64+0xb6/0x230 [ 566.167692][T20311] do_syscall_64+0xf3/0x230 [ 566.167718][T20311] ? clear_bhb_loop+0x45/0xa0 [ 566.167743][T20311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.167764][T20311] RIP: 0033:0x7f5e6678d169 [ 566.167783][T20311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.167801][T20311] RSP: 002b:00007f5e67687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.167824][T20311] RAX: ffffffffffffffda RBX: 00007f5e669a5fa0 RCX: 00007f5e6678d169 [ 566.167840][T20311] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 566.167853][T20311] RBP: 00007f5e67687090 R08: 0000000000000000 R09: 0000000000000000 [ 566.167867][T20311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.167880][T20311] R13: 0000000000000000 R14: 00007f5e669a5fa0 R15: 00007f5e66acfa28 [ 566.167912][T20311] [ 566.664127][ T24] usbhid 5-1:0.0: can't add hid device: -32 [ 566.678319][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 567.167725][T20322] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1814'. [ 567.439196][T20325] macvlan0: entered promiscuous mode [ 567.462327][ T24] usb 5-1: USB disconnect, device number 94 [ 567.491299][T20325] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 567.588062][T20325] netlink: 'syz.3.1816': attribute type 2 has an invalid length. [ 567.645340][T20325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.682416][T20325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.089020][T20358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.144530][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.153789][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.234867][T20358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.374970][T20358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1820'. [ 568.385219][T20358] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1820'. [ 568.405012][T20358] batadv1: entered promiscuous mode [ 568.411383][T20358] batadv1: entered allmulticast mode [ 569.490892][T20411] netem: incorrect gi model size [ 569.528129][T20411] netem: change failed [ 570.202415][T20436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.211363][T20436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.345470][T20440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.389250][T20440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.432130][T20469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1827'. [ 573.034841][ T976] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 573.253988][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.284086][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 573.361942][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.091863][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.187566][ T976] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 574.275331][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.343183][ T976] usb 5-1: config 0 descriptor?? [ 576.396164][T20500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.449655][T20500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.490604][T20502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.564522][T20502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.849730][T20509] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1833'. [ 577.499693][T20513] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1835'. [ 577.591396][T20513] vti0: entered promiscuous mode [ 578.074095][ T30] audit: type=1800 audit(1744133381.656:1790): pid=20522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1834" name="file0" dev="tmpfs" ino=1942 res=0 errno=0 [ 578.133094][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.281891][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.519642][T20534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.528734][T20534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.298280][ T976] usbhid 5-1:0.0: can't add hid device: -32 [ 580.326742][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 581.286736][T20545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.378085][T20545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.731959][T20545] usb usb8: usbfs: process 20545 (syz.0.1841) did not claim interface 0 before use [ 582.254997][ T9] usb 5-1: USB disconnect, device number 95 [ 582.764566][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.764907][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.900946][T20570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.901296][T20570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.229007][T20577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.369724][T20577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.667879][T20594] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 585.022459][T20594] team0: Port device wlan1 added [ 585.320485][T20603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.367927][T20603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.654291][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 588.715796][T20654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.758577][T20654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.787327][T20728] futex_wake_op: syz.3.1872 tries to shift op by -33; fix this program [ 592.801845][T20728] netdevsim netdevsim3: Direct firmware load for . [ 592.801845][T20728] failed with error -2 [ 592.812902][T20728] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 592.812902][T20728] [ 593.814898][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.906002][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.143811][ T5899] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 594.296012][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.547004][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.578708][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.724127][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.760047][ T5899] usb 5-1: Product: syz [ 594.764826][ T5899] usb 5-1: Manufacturer: syz [ 594.786230][ T5899] usb 5-1: SerialNumber: syz [ 595.126400][T20743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.024124][T20743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.061162][ T5899] usb 5-1: 0:2 : does not exist [ 596.111729][ T5899] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 596.339671][ T5899] usb 5-1: USB disconnect, device number 96 [ 596.657095][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.367921][T20822] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 598.472270][T20821] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 600.802535][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 600.879779][T20851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.015514][ T9] usb 5-1: config 0 has no interfaces? [ 601.023609][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 601.033818][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.062800][T20851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.080285][ T9] usb 5-1: Product: syz [ 601.094986][ T9] usb 5-1: Manufacturer: syz [ 601.099693][ T9] usb 5-1: SerialNumber: syz [ 601.155523][ T9] usb 5-1: config 0 descriptor?? [ 601.229705][T20851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.242234][T20851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.306943][T20836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.662333][T20862] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 601.801021][ T976] usb 5-1: USB disconnect, device number 97 [ 602.148407][T20862] 8021q: adding VLAN 0 to HW filter on device bond13 [ 603.284089][T20877] bond13: (slave veth5): Enslaving as an active interface with a down link [ 605.894220][T20992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.903355][T20992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.990663][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.000112][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.010135][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.019085][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.422976][T21005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.477617][T21005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.738644][ T5151] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 610.209338][T21054] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1915'. [ 611.215251][T21063] FAULT_INJECTION: forcing a failure. [ 611.215251][T21063] name failslab, interval 1, probability 0, space 0, times 0 [ 611.313848][T21063] CPU: 0 UID: 0 PID: 21063 Comm: syz.1.1917 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 611.313880][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.313894][T21063] Call Trace: [ 611.313903][T21063] [ 611.313912][T21063] dump_stack_lvl+0x241/0x360 [ 611.313952][T21063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.313984][T21063] ? __pfx__printk+0x10/0x10 [ 611.314012][T21063] ? __lock_acquire+0xad5/0xd80 [ 611.314047][T21063] should_fail_ex+0x424/0x570 [ 611.314075][T21063] should_failslab+0xac/0x100 [ 611.314107][T21063] kmem_cache_alloc_noprof+0x78/0x390 [ 611.314136][T21063] ? skb_clone+0x20c/0x390 [ 611.314165][T21063] skb_clone+0x20c/0x390 [ 611.314194][T21063] __netlink_deliver_tap+0x3c4/0x7f0 [ 611.314237][T21063] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.314266][T21063] netlink_deliver_tap+0x19d/0x1b0 [ 611.314297][T21063] netlink_unicast+0x7c6/0x9a0 [ 611.314334][T21063] ? __pfx_netlink_unicast+0x10/0x10 [ 611.314363][T21063] ? skb_put+0x114/0x1f0 [ 611.314389][T21063] netlink_sendmsg+0x8c3/0xcd0 [ 611.314434][T21063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.314476][T21063] ? __pfx_aa_file_perm+0x10/0x10 [ 611.314507][T21063] ? aa_sock_msg_perm+0x91/0x160 [ 611.314543][T21063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.314572][T21063] __sock_sendmsg+0x221/0x270 [ 611.314604][T21063] sock_write_iter+0x2d9/0x3f0 [ 611.314634][T21063] ? __pfx_sock_write_iter+0x10/0x10 [ 611.314674][T21063] ? bpf_lsm_file_permission+0x9/0x10 [ 611.314708][T21063] vfs_write+0x70f/0xd10 [ 611.314742][T21063] ? __pfx_sock_write_iter+0x10/0x10 [ 611.314778][T21063] ? __pfx_vfs_write+0x10/0x10 [ 611.314806][T21063] ? __fget_files+0x2a/0x420 [ 611.314830][T21063] ? __fget_files+0x2a/0x420 [ 611.314860][T21063] ksys_write+0x19d/0x2d0 [ 611.314891][T21063] ? __pfx_ksys_write+0x10/0x10 [ 611.314923][T21063] ? do_syscall_64+0xb6/0x230 [ 611.314953][T21063] do_syscall_64+0xf3/0x230 [ 611.314979][T21063] ? clear_bhb_loop+0x45/0xa0 [ 611.315005][T21063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.315026][T21063] RIP: 0033:0x7f5e6678d169 [ 611.315046][T21063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.315064][T21063] RSP: 002b:00007f5e67687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.315089][T21063] RAX: ffffffffffffffda RBX: 00007f5e669a5fa0 RCX: 00007f5e6678d169 [ 611.315104][T21063] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 611.315118][T21063] RBP: 00007f5e67687090 R08: 0000000000000000 R09: 0000000000000000 [ 611.315132][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.315145][T21063] R13: 0000000000000000 R14: 00007f5e669a5fa0 R15: 00007f5e66acfa28 [ 611.315178][T21063] [ 612.012747][T21073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.074727][T21073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.276584][T21081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.285795][T21081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.940339][T21103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.949616][T21103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.092616][T21128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.135894][T21128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.283839][ T5899] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 615.443936][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 615.487531][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.547248][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.603873][ T5899] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 615.613021][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.721025][ T5899] usb 5-1: config 0 descriptor?? [ 616.203167][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1931'. [ 616.374945][T21148] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1933'. [ 616.445522][T21148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.474291][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 616.494727][T21148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.562796][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.604488][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.745202][T21181] delete_channel: no stack [ 619.184837][T21185] tipc: Enabling of bearer rejected, failed to enable media [ 620.414986][ T30] audit: type=1326 audit(1744133423.996:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 620.441676][T21223] netlink: 'syz.2.1942': attribute type 2 has an invalid length. [ 620.549783][T21223] þ: entered promiscuous mode [ 620.664497][ T30] audit: type=1326 audit(1744133423.996:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 620.994414][ T30] audit: type=1326 audit(1744133423.996:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 621.204214][ T30] audit: type=1326 audit(1744133423.996:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 621.226682][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.261099][T21230] syz_tun: entered promiscuous mode [ 621.267911][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'. [ 621.433194][ T30] audit: type=1326 audit(1744133423.996:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 621.478523][T21230] syz_tun: left promiscuous mode [ 621.565451][ T30] audit: type=1326 audit(1744133423.996:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 621.735226][ T30] audit: type=1326 audit(1744133423.996:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 621.985869][T21232] lo: entered promiscuous mode [ 621.996886][ T30] audit: type=1326 audit(1744133423.996:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 622.057100][T21232] tunl0: entered promiscuous mode [ 622.121950][T21232] gre0: entered promiscuous mode [ 622.123795][ T30] audit: type=1326 audit(1744133423.996:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 622.152911][T21232] gretap0: entered promiscuous mode [ 622.186697][T21232] erspan0: entered promiscuous mode [ 622.232832][T21232] ip_vti0: entered promiscuous mode [ 622.238235][ T30] audit: type=1326 audit(1744133423.996:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21222 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840058d169 code=0x7ffc0000 [ 622.265700][T21232] ip6_vti0: entered promiscuous mode [ 622.303389][T21232] sit0: entered promiscuous mode [ 622.454646][ T5899] usbhid 5-1:0.0: can't add hid device: -110 [ 622.460841][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -110 [ 622.544337][T21232] ip6tnl0: entered promiscuous mode [ 622.569957][T21232] ip6gre0: entered promiscuous mode [ 622.590212][T21232] ip6gretap0: entered promiscuous mode [ 622.605392][T21232] bridge0: entered promiscuous mode [ 622.631172][T21232] vcan0: entered promiscuous mode [ 622.640782][T21232] bond0: entered promiscuous mode [ 622.657022][T21232] bond_slave_0: entered promiscuous mode [ 622.671042][T21232] bond_slave_1: entered promiscuous mode [ 622.684935][T21232] team0: entered promiscuous mode [ 622.694725][T21232] team_slave_0: entered promiscuous mode [ 622.701892][T21232] team_slave_1: entered promiscuous mode [ 622.762692][T21232] bond2: entered promiscuous mode [ 622.804593][T21232] bond3: entered promiscuous mode [ 622.864086][T21232] bond5: entered promiscuous mode [ 622.869327][T21232] bond6: entered promiscuous mode [ 622.929121][T21232] bond7: entered promiscuous mode [ 622.974409][T21232] bond8: entered promiscuous mode [ 622.991581][T21232] bond9: entered promiscuous mode [ 623.009694][T21232] bond10: entered promiscuous mode [ 623.018425][T21232] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 623.090745][T21232] dummy0: entered promiscuous mode [ 623.112102][T21232] nlmon0: entered promiscuous mode [ 623.218395][T21232] caif0: entered promiscuous mode [ 623.223477][T21232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.718181][ T24] usb 5-1: USB disconnect, device number 98 [ 625.636282][T21288] SET target dimension over the limit! [ 626.154769][T21292] vlan2: entered allmulticast mode [ 626.175175][T21292] geneve0: entered allmulticast mode [ 626.404301][T21295] bridge_slave_0: left allmulticast mode [ 626.410653][T21295] bridge_slave_0: left promiscuous mode [ 626.428154][T21295] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.562341][T21295] bridge_slave_1: left allmulticast mode [ 626.576084][T21295] bridge_slave_1: left promiscuous mode [ 626.582890][T21295] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.752156][T21295] bond0: (slave bond_slave_0): Releasing backup interface [ 626.849138][T21295] bond0: (slave bond_slave_1): Releasing backup interface [ 626.879187][T21295] team_slave_0: left promiscuous mode [ 626.999675][T21295] team0: Port device team_slave_0 removed [ 627.025666][T21295] team_slave_1: left promiscuous mode [ 627.069050][T21295] team0: Port device team_slave_1 removed [ 627.170275][T21295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.235741][T21295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.271247][T21295] bond1: left promiscuous mode [ 627.318664][T21295] team0: Port device bond1 removed [ 627.421171][T21295] bond2: left promiscuous mode [ 627.588787][T21295] team0: Port device bond2 removed [ 627.629139][T21295] bond3: left promiscuous mode [ 627.663629][T21295] team0: Port device bond3 removed [ 629.581661][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.588669][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.861543][T21337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.929138][T21337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.903134][T21342] ================================================================== [ 630.911254][T21342] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 630.919851][T21342] Write of size 1440 at addr ffffc9001c1d7da0 by task vivid-000-vid-c/21342 [ 630.928527][T21342] [ 630.930858][T21342] CPU: 1 UID: 0 PID: 21342 Comm: vivid-000-vid-c Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 630.930885][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 630.930900][T21342] Call Trace: [ 630.930910][T21342] [ 630.930921][T21342] dump_stack_lvl+0x241/0x360 [ 630.930958][T21342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.930980][T21342] ? __pfx__printk+0x10/0x10 [ 630.931001][T21342] ? _printk+0xd5/0x120 [ 630.931035][T21342] print_report+0x16e/0x5b0 [ 630.931056][T21342] ? tpg_fill_plane_buffer+0x1981/0x5d50 [ 630.931071][T21342] ? __virt_addr_valid+0xbd/0x530 [ 630.931093][T21342] ? tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 630.931109][T21342] kasan_report+0x143/0x180 [ 630.931127][T21342] ? irqentry_exit+0x63/0x90 [ 630.931145][T21342] ? tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 630.931163][T21342] kasan_check_range+0x28f/0x2a0 [ 630.931182][T21342] ? tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 630.931202][T21342] __asan_memcpy+0x40/0x70 [ 630.931218][T21342] tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 630.931258][T21342] vivid_thread_vid_cap_tick+0xfd1/0x60d0 [ 630.931283][T21342] ? __switch_to+0xe97/0x1c30 [ 630.931306][T21342] ? sched_clock_cpu+0x77/0x4d0 [ 630.931333][T21342] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 630.931351][T21342] ? __mutex_trylock_common+0x184/0x2e0 [ 630.931379][T21342] vivid_thread_vid_cap+0x8ce/0x1120 [ 630.931405][T21342] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 630.931422][T21342] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 630.931437][T21342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 630.931459][T21342] ? __kthread_parkme+0x1a8/0x200 [ 630.931479][T21342] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 630.931495][T21342] kthread+0x7b7/0x940 [ 630.931516][T21342] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 630.931532][T21342] ? __pfx_kthread+0x10/0x10 [ 630.931553][T21342] ? trace_irq_enable+0x2c/0x120 [ 630.931568][T21342] ? __pfx_kthread+0x10/0x10 [ 630.931588][T21342] ret_from_fork+0x4b/0x80 [ 630.931603][T21342] ? __pfx_kthread+0x10/0x10 [ 630.931623][T21342] ret_from_fork_asm+0x1a/0x30 [ 630.931643][T21342] [ 630.931648][T21342] [ 631.136946][T21342] The buggy address belongs to the virtual mapping at [ 631.136946][T21342] [ffffc9001c1c1000, ffffc9001c1d9000) created by: [ 631.136946][T21342] vb2_vmalloc_alloc+0xf2/0x340 [ 631.154853][T21342] [ 631.157191][T21342] The buggy address belongs to the physical page: [ 631.163609][T21342] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x287b7 [ 631.173695][T21342] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 631.180813][T21342] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 631.189576][T21342] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 631.198157][T21342] page dumped because: kasan: bad access detected [ 631.204585][T21342] page_owner tracks the page as allocated [ 631.210312][T21342] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 21339, tgid 21338 (syz.2.1962), ts 629919518331, free_ts 628092071202 [ 631.229693][T21342] post_alloc_hook+0x1f4/0x240 [ 631.234471][T21342] get_page_from_freelist+0x352b/0x36c0 [ 631.240020][T21342] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 631.245833][T21342] alloc_pages_mpol+0x339/0x690 [ 631.250687][T21342] alloc_pages_noprof+0x121/0x190 [ 631.255721][T21342] __vmalloc_node_range_noprof+0x9cb/0x1390 [ 631.261643][T21342] vmalloc_user_noprof+0x74/0x80 [ 631.266581][T21342] vb2_vmalloc_alloc+0xf2/0x340 [ 631.271436][T21342] __vb2_queue_alloc+0xa16/0x16f0 [ 631.276461][T21342] vb2_core_reqbufs+0xd3b/0x17d0 [ 631.281404][T21342] __vb2_init_fileio+0x319/0xfa0 [ 631.286346][T21342] vb2_core_poll+0x45a/0x7a0 [ 631.290946][T21342] vb2_fop_poll+0x170/0x360 [ 631.295444][T21342] v4l2_poll+0x140/0x2b0 [ 631.299705][T21342] do_sys_poll+0xa4a/0x13f0 [ 631.304225][T21342] __se_sys_ppoll+0x2a2/0x330 [ 631.308930][T21342] page last free pid 21310 tgid 21308 stack trace: [ 631.315428][T21342] __free_frozen_pages+0xde8/0x10a0 [ 631.320628][T21342] tlb_finish_mmu+0x11f/0x200 [ 631.325384][T21342] exit_mmap+0x5b1/0xde0 [ 631.329631][T21342] __mmput+0x115/0x420 [ 631.333699][T21342] exit_mm+0x221/0x310 [ 631.337776][T21342] do_exit+0x994/0x27f0 [ 631.341932][T21342] do_group_exit+0x207/0x2c0 [ 631.346531][T21342] get_signal+0x1696/0x1730 [ 631.351036][T21342] arch_do_signal_or_restart+0x98/0x840 [ 631.356591][T21342] syscall_exit_to_user_mode+0xce/0x340 [ 631.362171][T21342] do_syscall_64+0x100/0x230 [ 631.366770][T21342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.372682][T21342] [ 631.375003][T21342] Memory state around the buggy address: [ 631.380626][T21342] ffffc9001c1d7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 631.388684][T21342] ffffc9001c1d7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 631.396745][T21342] >ffffc9001c1d8000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 631.404809][T21342] ^ [ 631.408878][T21342] ffffc9001c1d8080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 631.416933][T21342] ffffc9001c1d8100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 631.425005][T21342] ================================================================== [ 631.433852][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.468506][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.520720][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.863008][T21342] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 631.870271][T21342] CPU: 0 UID: 0 PID: 21342 Comm: vivid-000-vid-c Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 631.881061][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 631.891143][T21342] Call Trace: [ 631.894445][T21342] [ 631.897403][T21342] dump_stack_lvl+0x241/0x360 [ 631.902131][T21342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.907359][T21342] ? __pfx__printk+0x10/0x10 [ 631.911990][T21342] ? vprintk_emit+0x81f/0xa40 [ 631.916706][T21342] ? vscnprintf+0x5d/0x90 [ 631.921077][T21342] panic+0x349/0x880 [ 631.925011][T21342] ? check_panic_on_warn+0x21/0xb0 [ 631.930161][T21342] ? __pfx_panic+0x10/0x10 [ 631.934614][T21342] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 631.940629][T21342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 631.947022][T21342] check_panic_on_warn+0x86/0xb0 [ 631.951992][T21342] ? tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 631.957656][T21342] end_report+0x77/0x160 [ 631.961937][T21342] kasan_report+0x154/0x180 [ 631.966475][T21342] ? irqentry_exit+0x63/0x90 [ 631.971099][T21342] ? tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 631.976769][T21342] kasan_check_range+0x28f/0x2a0 [ 631.981747][T21342] ? tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 631.987410][T21342] __asan_memcpy+0x40/0x70 [ 631.991853][T21342] tpg_fill_plane_buffer+0x1a4a/0x5d50 [ 631.997384][T21342] vivid_thread_vid_cap_tick+0xfd1/0x60d0 [ 632.003167][T21342] ? __switch_to+0xe97/0x1c30 [ 632.007885][T21342] ? sched_clock_cpu+0x77/0x4d0 [ 632.012782][T21342] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 632.018979][T21342] ? __mutex_trylock_common+0x184/0x2e0 [ 632.024579][T21342] vivid_thread_vid_cap+0x8ce/0x1120 [ 632.029917][T21342] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 632.035674][T21342] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 632.041656][T21342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 632.048020][T21342] ? __kthread_parkme+0x1a8/0x200 [ 632.053080][T21342] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 632.058839][T21342] kthread+0x7b7/0x940 [ 632.062948][T21342] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 632.068704][T21342] ? __pfx_kthread+0x10/0x10 [ 632.073337][T21342] ? trace_irq_enable+0x2c/0x120 [ 632.078315][T21342] ? __pfx_kthread+0x10/0x10 [ 632.082950][T21342] ret_from_fork+0x4b/0x80 [ 632.087399][T21342] ? __pfx_kthread+0x10/0x10 [ 632.092104][T21342] ret_from_fork_asm+0x1a/0x30 [ 632.096916][T21342] [ 632.100348][T21342] Kernel Offset: disabled [ 632.104684][T21342] Rebooting in 86400 seconds..