last executing test programs: 9.562975331s ago: executing program 0 (id=4646): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0xa, 0x3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) syz_emit_ethernet(0x79, &(0x7f0000000380)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x883e, "21b6547dfe4cad4d537311e75ce73b31829d403940732a9f99d5610b0059de922e1aa59873b73a5eee974ca05aa3fba4071fa82fd563cd0c5a0aa8636ba9f11de7e04dc8fcd3a1a919f07f40d51389f0437d4b2a081288c7610cfe9c6c4d4ed95ce19348a4026291757fb2"}}}, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r6 = syz_io_uring_setup(0x378c, &(0x7f0000000140)={0x0, 0x4774, 0x80, 0x1, 0x372}, &(0x7f0000000080), &(0x7f0000000280)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, r6}, &(0x7f00000011c0), &(0x7f0000ff4000)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)) 8.663267384s ago: executing program 2 (id=4649): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x4000001, 0xcf5e}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)=' ', 0x1}]) pipe(&(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, 0x0, 0x68) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000138ba06506a85c5e0fbe229a1d7a88d3a28d10000305000000001b000000000800008152b882c9706e610f8adb11a807c6f5b293af4d65e7670f7193a76db377ffbea89b00000000093cb75962f5b4c7", @ANYBLOB="00000000000000003000128008000100677265002400028005001600010000000500080007000000050008000900000008000400000100"], 0x50}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="845d", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r7, &(0x7f0000000300), 0x5a8, 0x0, 0x0, 0xfffffffffffffdfd) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0, 0x0], 0x2}) 7.682361551s ago: executing program 2 (id=4651): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000f5000000000000000000e1ff00000002"], 0x73) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200]}}}) clock_gettime(0x0, &(0x7f0000000000)) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000040)=@multiplanar_userptr={0x1, 0x6, 0x4, 0x70000, 0x5, {0x0, 0xea60}, {0x6, 0x0, 0x7, 0x9, 0xb, 0x5, "a232b57e"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0xabf1, 0x8, {&(0x7f00000000c0)}, 0x4}, {0x1, 0x0, {&(0x7f0000000140)}, 0xd}]}, 0xb, 0x0, r0}) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) io_setup(0x222, &(0x7f0000000180)=0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xce, 0x1, 0x5, 0x8, 0x13d3, 0x3335, 0xb977, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xd, 0x6e}}]}}]}}, 0x0) io_submit(r6, 0x2, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1000, r7, &(0x7f0000000480)}, 0x0]) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 7.155161986s ago: executing program 3 (id=4653): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000002c0)="21f82d8c896a72a34cb308f5534e22da27094c8e3076b329c6bf383aa2d8b13c7768cb5dec06436af4f3686c", 0x2c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000002080)={'sit0\x00', 0x0, 0x8000, 0x80, 0xfffffffa, 0x800, {{0x35, 0x4, 0x1, 0x6, 0xd4, 0x65, 0x0, 0x6, 0x19ebc3d69574e8e3, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x3, [{@private=0xa010102, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @end, @end, @timestamp_addr={0x44, 0x3c, 0xe9, 0x1, 0x3, [{@multicast2, 0xfffffffb}, {@loopback, 0x4}, {@remote, 0x6}, {@remote, 0x5}, {@remote, 0xffffffe9}, {@broadcast, 0x2}, {@local, 0x6}]}, @timestamp_addr={0x44, 0x4c, 0xbc, 0x1, 0x5, [{@multicast2, 0xac}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@rand_addr=0x64010101, 0x9}, {@empty, 0x4}, {@multicast1, 0x3}, {@multicast2, 0xa}, {@broadcast, 0xffff}]}, @ssrr={0x89, 0x1f, 0x23, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote, @broadcast, @multicast1, @multicast1]}]}}}}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @private}, 0x4}}, 0x26) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100)) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [@printk={@d}]}, &(0x7f0000000000)='GPL\x00'}, 0x7b) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xc, 0x4}, {0x5, 0xd}, {0xa, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314152}}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 6.348288044s ago: executing program 0 (id=4654): r0 = socket$inet(0x2, 0x2000080001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x5, 0x2002) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r2, 0x0, 0x0) mlockall(0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x10}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000a00)=0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101}}, 0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffffffffffff00000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000001d0001000000004000e0"], 0x10}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="787337cfac950551208c2c484a4bba44ced1aa384fccc6fb10df7c5da4ad1a86a7a4f80930671be56864d7a3aeb2abc956de721363ae8f33e14e34b9eb91324e1a77af1bce93862db6a277eadbb9c286cfb6185c27bab06af6c1f733faaafc0a1adfe904651cadb1a89c3074d5e285a33210cf9fe4c99ea91d4d6199561b1762f6274cb08b0e2dee2121645beba0bd6c11347b0ae5bbf35c86a53d31850ed84a95d451e2f9c3eb9aa619e6b90f48644e2137cf14e5335810d7548cdcadc98011bb205d6ec7ce7bde747437f547"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x0) 6.099384601s ago: executing program 4 (id=4656): syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffffe04671674521a818000000019078ac1414bbac1414bb440400000800907800000000e2124adef8208bcf67ed4090ff1f5544ef7bac73abda1aaa1e7862ef4870ff78d89448ee06d773d617c89913bd82680d68d5cb5f144d51b9b4857a3b5070d8101e3a89548dd950372d1bdf7549e5044277e2b6dc2877122b33735519524181d6bca22f2eeaa18edd5bb086c973b0ecd318ba38b276d056550ba4eae2ff93a81c0d8a75ac914f0b02e8"], 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/anycast6\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) r2 = socket(0xf, 0x3, 0x2) write(r2, &(0x7f0000a97ff0)="020baf040200000000067bbc8e1d4b48", 0x10) 5.963707826s ago: executing program 0 (id=4657): pipe(&(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd]}) epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$IPC_RMID(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000880)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6, 0x0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r9, @ANYBLOB="08000200ac"], 0x20}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 5.963005844s ago: executing program 1 (id=4658): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xe98, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000002"], 0x34}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = io_uring_setup(0x1698, &(0x7f0000000140)={0x0, 0x3, 0x0, 0xfffffffc, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_procfs(0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 5.380313485s ago: executing program 3 (id=4659): syz_emit_ethernet(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/56, 0x38) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004e00), r7) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005180)={0x14, r8, 0x1}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000071000040"]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400004001400c2b26dd2", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000000001f0ffff0000000000000000"], 0x40}}, 0x0) 4.876876458s ago: executing program 1 (id=4660): openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x105000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, r0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev, @in=@private}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000033a80)=""/102383, 0x18fef}], 0x1, 0x200007, 0x6d3) syz_open_dev$sndctrl(&(0x7f0000000080), 0x4, 0x80080) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) rename(&(0x7f0000000300)='./control/file0\x00', &(0x7f0000000340)='./file1\x00') ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) getpid() setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.785897448s ago: executing program 0 (id=4661): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x4000001, 0xcf5e}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)=' ', 0x1}]) pipe(&(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, 0x0, 0x68) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000138ba06506a85c5e0fbe229a1d7a88d3a28d10000305000000001b000000000800008152b882c9706e610f8adb11a807c6f5b293af4d65e7670f7193a76db377ffbea89b00000000093cb75962f5b4c7", @ANYBLOB="00000000000000003000128008000100677265002400028005001600010000000500080007000000050008000900000008000400000100"], 0x50}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="845d", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r7, &(0x7f0000000300), 0x5a8, 0x0, 0x0, 0xfffffffffffffdfd) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0, 0x0], 0x2}) 4.395095611s ago: executing program 2 (id=4662): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x4dd395b241fb0335) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300), 0x18) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="ceb85c00eaa76f7f07f3a27d6e7081a3fddc1e678735f391f49abd24b7ecbf2fb1ca8db4ec77b45c0ac20afa621da9f205e01a0a1ffe5035544ca809f839505abc1d2a5a5e60"], 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @loopback, 0xa27}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) setitimer(0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x90800, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x25c8}, 0x3}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 4.206896405s ago: executing program 1 (id=4663): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ac141400"/176], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000005080), 0x0, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a14000000100001000000"], 0x28}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r3, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020ebeb5c4be7f470a9bc6858fa271210e07dfd01cec21f33c5d9a1d879bb396151b3e506a9a84b1c2b8bbaf5633d806326d00517474a1180732e3d1643f8e6022d7c8333090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b0000000000011907841a806cb6994a98800000000009c90780100000000000000f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1"], 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r7, 0xc0104307, &(0x7f0000000080)=0x3) 4.031019207s ago: executing program 3 (id=4664): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x3, 0x92}, @noop]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, @empty, @remote}}}}}}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) (async) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.946145726s ago: executing program 1 (id=4665): syz_emit_ethernet(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/56, 0x38) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004e00), r7) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005180)={0x14, r8, 0x1}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000071000040"]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400004001400c2b26dd25272000000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000000001f0ffff0000000000000000"], 0x40}}, 0x0) 3.905496378s ago: executing program 4 (id=4666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) unshare(0x28020480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r3, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_BROADCAST={0x8, 0x4, @dev}, @IFA_LABEL={0x14}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x3c}}, 0x0) 3.703392293s ago: executing program 3 (id=4667): r0 = socket$inet(0x2, 0x2000080001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x5, 0x2002) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r2, 0x0, 0x0) mlockall(0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x10}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000a00)=0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101}}, 0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffffffffffff00000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000001d0001000000004000e0"], 0x10}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="787337cfac950551208c2c484a4bba44ced1aa384fccc6fb10df7c5da4ad1a86a7a4f80930671be56864d7a3aeb2abc956de721363ae8f33e14e34b9eb91324e1a77af1bce93862db6a277eadbb9c286cfb6185c27bab06af6c1f733faaafc0a1adfe904651cadb1a89c3074d5e285a33210cf9fe4c99ea91d4d6199561b1762f6274cb08b0e2dee2121645beba0bd6c11347b0ae5bbf35c86a53d31850ed84a95d451e2f9c3eb9aa619e6b90f48644e2137cf14e5335810d7548cdcadc98011bb205d6ec7ce7bde747437f547"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x0) 3.549855895s ago: executing program 0 (id=4668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5de, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1c3}, &(0x7f0000000940)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="83", 0x1) lstat(0x0, 0x0) 3.2986562s ago: executing program 3 (id=4669): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x7}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001d40), 0x12200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000002540)={0x2, 0x3, 0x7, 0x1, 0x7fffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000d14080025bd7000fbdbdf25080001ff0000100008000300010000000800030008003e0005000000252e5b7d33455a7721c685067d38160a0d30d0053f1f5d49278b1ac75249ec5554e515e915607d0c278ab173bda247b77d72"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4042050) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001580)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0xfffffffe}) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) io_uring_setup(0x282, &(0x7f00000013c0)={0x0, 0x100000, 0x800, 0x0, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001340)=[{0x4, 0x3, 0x8, 0x1}, {0x0, 0x3, 0x6, 0x8}, {0x5, 0x5, 0x88, 0x2}, {0x1, 0x3, 0xf, 0x4}, {0x3, 0x3, 0x7, 0x3}], 0x10, 0x406}, 0x90) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x553732321a7ba210, &(0x7f0000136000/0x3000)=nil) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port0\x00', 0xe3, 0x1b0407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) read(r6, &(0x7f0000000280)=""/4096, 0x1000) 3.285814439s ago: executing program 4 (id=4670): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xe98, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000002"], 0x34}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = io_uring_setup(0x1698, &(0x7f0000000140)={0x0, 0x3, 0x0, 0xfffffffc, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_procfs(0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 3.246556569s ago: executing program 2 (id=4671): pipe(&(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd]}) epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$IPC_RMID(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000880)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6, 0x0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r9, @ANYBLOB="08000200ac"], 0x20}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 2.7311717s ago: executing program 1 (id=4672): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x4000007, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x268, 0x311, 0x0, 0x268, 0x3f0, 0x460, 0x460, 0x3f0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x288, 0x2b0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2, @remote, [], [], [], 0x0, 0x7863}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x140, 0xe4030000, {}, [@common=@unspec=@realm={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0xe8, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'bond_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@empty, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="b298f684aa1e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @remote, @local}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsopen(&(0x7f0000000ec0)='zonefs\x00', 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x2c00, 0x40, 0x9}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000f00)='-\x00', &(0x7f0000000f40)='./file0\x00', r6) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000000c0)={0x2, 0x4}) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x1, 0x317}) io_uring_setup(0x2849, &(0x7f0000000e40)={0x0, 0x7922, 0x8, 0xfffffffb, 0x10, 0x0, r4}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r4, 0x0) listen(r1, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000e00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x800) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x2d8, 0x0, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@arp={@loopback, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@MARK={0x28}}, {{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_hsr\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x9, @pix={0x22b1, 0x2a, 0x38414262, 0x8, 0x529feb92, 0x3, 0x3, 0x8, 0x1, 0x2, 0x0, 0x2}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468305f746f5f68737200000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 2.503539364s ago: executing program 1 (id=4673): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000002c0)="21f82d8c896a72a34cb308f5534e22da27094c8e3076b329c6bf383aa2d8b13c7768cb5dec06436af4f3686c", 0x2c}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x288, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff2}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1e4, 0x2, [@TCA_ROUTE4_ACT={0x130, 0x6, [@m_csum={0xd0, 0x1, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x38000000, 0x20000000, 0x8, 0x4}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x10000006, 0x10001, 0x60}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0xffffffffffffffff, 0x6, 0x2}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x400, 0x10000000, 0x1d4ff1bb, 0x4}, 0x1c}}]}, {0x31, 0x6, "991484448f1d00330606eae8262acc6b874adb0b5f39b5acc02b0f0c146eb28c42c5557089903d448af6c4bff6"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x98, 0x6, [@m_connmark={0x94, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x61, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a093d12a497447bc2a6c4f73538dbca11ebb12d1c8ea001eac3246ebaf518402b8"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa3}]}}]}, 0x288}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000300)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1400, 0x51}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ee}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x200]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff7fff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r4, 0x0, &(0x7f0000000040)}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000107d1e5a2d00000000000109022400010000000009040000010300020009210000000122050009058103000000005f4a97"], 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000600)={'pimreg1\x00', 0x600}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x20, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.190486854s ago: executing program 2 (id=4674): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x0, 0xd}, {0x0, 0x10}}}, 0x24}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0784f0"], 0xffe) 2.164260536s ago: executing program 4 (id=4675): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ac141400"/176], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000005080), 0x0, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a14000000100001000000"], 0x28}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r3, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020ebeb5c4be7f470a9bc6858fa271210e07dfd01cec21f33c5d9a1d879bb396151b3e506a9a84b1c2b8bbaf5633d806326d00517474a1180732e3d1643f8e6022d7c8333090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b0000000000011907841a806cb6994a98800000000009c90780100000000000000f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1"], 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r7, 0xc0104307, &(0x7f0000000080)=0x3) 1.950144622s ago: executing program 4 (id=4676): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0xfe, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffffd) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 1.928760237s ago: executing program 2 (id=4677): socket(0x200000100000011, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0xa, 0x7f, 0x7, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x4, 0xba, 0x0, 0x4, 0x1, '\x00', 0x0, 0x9}) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x18}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000080)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) memfd_create(&(0x7f0000000ac0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0xe) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r9) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.849681365s ago: executing program 0 (id=4678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40505331, &(0x7f00000000c0)={0x80}) tkill(0x0, 0x7) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688120032000203000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) setsockopt(r4, 0x800000010d, 0x0, &(0x7f0000000000)="dd4e2f10", 0x4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0xffffffffffffff3b}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006516b7108c0d0e008f8e0700030109021b0001000000000904080001030000000905443f"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000100000000000f000000000000000000083ac62766761c63925a1476781fb6ccd930727f240ffff9a836b1aec39f640c3edb83863149aa90ea70443d9b39f98cf317a8325a3c2e3383d1ebd4ad8d88bd66cd3e86da7fb48bb1dae632ec46915b3b5f8e16aaa4f48fde6f55df02f4a73bf98d6576b5e822317e5eb1a1b33dd396f1913764dc7b2e7f8f5360f317cb1d8801658ce3a74bb0001e838e1c1d3f5d35173bc8f472859c5", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e00"], 0x38}}, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000480)={0xc029, 0x3}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) 1.699189582s ago: executing program 4 (id=4679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000406d6a32c500000000000109022400010000000009040000010300000009210000000905810300000000004368b8a8a29ac1b5fb4998f10b04dcf3e671638c356d12fe2cb88af971e01a21584adb70fc84a9e20cec7d40d9238ddfc890e1076d2f7a27dd4b8934f08d77af5be234e2b08afe450f1c3d039d22455d72479436d58c2272b0056d9de14d5239de350def596d5ab28ddac3c84b12000000005200b84d3c483a6f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220200003fd6448a07a8671c832b28a115ae0019b4"], 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="a40000005065f55d0c7d89d534a3a5e55a1a7bf70a116a8007152b5062399236b559bc0d00f124ecb4adb2", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000058000880540000802c00098028000080060001000a0000001400020000000000000000000000000000000000050003000200000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/158], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x8000000000080001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000006de1edf62f826ec89f873b8877fa265bd86fc81c2c31df0b10ca30043eb0f17a04dd45dec5f06e86b8aa5796507ed7573a444300f34439cc78488dabfd1110aa3f80bf1f1fdc5ef088b778afe40ea1b51b2c85d20a3dc1315d787e759077bd72d0c440f9e0a90fc494e00fdbff4735bb", @ANYRES8=r3, @ANYBLOB="010000000000000000006a02000008af9828c6a3000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000000c0)={0xe8, {{0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}}, {{0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x34, &(0x7f00000001c0)=[{&(0x7f0000002640)=""/4093, 0xffd}, {&(0x7f0000000080)=""/184, 0xb8}], 0x2}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="8400000000010103000000000000000000000000240001801400016a79a0e1000000000108000200ac1414bb0600028005000100000000002400028000000340000400000000018000000300fc02000000000000000000000000000000000400000000000000000000000000000000010800074000000000204f889b91000180080001007f000001080002000c0000000000018000000100ac1414aa000002"], 0x84}}, 0x48800) read$FUSE(r7, &(0x7f0000006480)={0x2020}, 0x2020) preadv(r7, &(0x7f0000001680)=[{&(0x7f0000000580)=""/81, 0x51}], 0x1, 0xfffffffd, 0x0) read$FUSE(r7, &(0x7f00000016c0)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) 0s ago: executing program 3 (id=4680): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000406d6a32c500000000000109022400010000000009040000010300000009210000000905810300000000004368b8a8a29ac1b5fb4998f10b04dcf3e671638c356d12fe2cb88af971e01a21584adb70fc84a9e20cec7d40d9238ddfc890e1076d2f7a27dd4b8934f08d77af5be234e2b08afe450f1c3d039d22455d72479436d58c2272b0056d9de14d5239de350def596d5ab28ddac3c84b12000000005200b84d3c483a6f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220200003fd6448a07a8671c832b28a115ae0019b4"], 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="a40000005065f55d0c7d89d534a3a5e55a1a7bf70a116a8007152b5062399236b559bc0d00f124ecb4adb2", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000058000880540000802c00098028000080060001000a0000001400020000000000000000000000000000000000050003000200000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/158], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x8000000000080001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000000c0)={0xe8, {{0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}}, {{0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x34, &(0x7f00000001c0)=[{&(0x7f0000002640)=""/4093, 0xffd}, {&(0x7f0000000080)=""/184, 0xb8}], 0x2}, 0x0) read$FUSE(r7, &(0x7f0000006480)={0x2020}, 0x2020) preadv(r7, &(0x7f0000001680)=[{&(0x7f0000000580)=""/81, 0x51}], 0x1, 0xfffffffd, 0x0) read$FUSE(r7, &(0x7f00000016c0)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) kernel console output (not intermixed with test programs): s! [ 1225.634783][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.643202][T16625] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x1 has invalid maxpacket 11455, setting to 64 [ 1225.651358][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.672159][T16625] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1225.677400][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.681436][T16625] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1225.707324][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.713502][T16625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.726084][T16625] usb 4-1: Product: syz [ 1225.749563][T16625] usb 4-1: Manufacturer: syz [ 1225.763194][ T940] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input56 [ 1225.783840][T23635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.801601][T16625] usb 4-1: SerialNumber: syz [ 1225.846612][ T4665] bcm5974 1-1:1.0: could not read from device [ 1225.885854][ T4665] bcm5974 1-1:1.0: could not read from device [ 1225.906022][ T940] usb 1-1: USB disconnect, device number 116 [ 1225.923084][ T4665] bcm5974 1-1:1.0: could not read from device [ 1226.010416][T23635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.035050][T23635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.052398][T23635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.073983][T23904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4416'. [ 1226.083300][T23635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.193345][T16625] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input57 [ 1226.254823][ T4665] bcm5974 4-1:1.0: could not read from device [ 1226.310254][ T4665] bcm5974 4-1:1.0: could not read from device [ 1226.322160][T16625] usb 4-1: USB disconnect, device number 76 [ 1226.536577][T22911] hsr_slave_0: left promiscuous mode [ 1226.543309][T23919] FAULT_INJECTION: forcing a failure. [ 1226.543309][T23919] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.560476][T22911] hsr_slave_1: left promiscuous mode [ 1226.576649][T22911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.598017][T22911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.615244][T22911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.622346][T23919] CPU: 0 UID: 0 PID: 23919 Comm: syz.0.4419 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1226.633583][T23919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1226.643632][T23919] Call Trace: [ 1226.646905][T23919] [ 1226.649826][T23919] dump_stack_lvl+0x241/0x360 [ 1226.654501][T23919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1226.659688][T23919] ? __pfx__printk+0x10/0x10 [ 1226.664275][T23919] ? __kmalloc_noprof+0xb0/0x400 [ 1226.669207][T23919] ? __pfx___might_resched+0x10/0x10 [ 1226.674483][T23919] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1226.680459][T23919] should_fail_ex+0x3b0/0x4e0 [ 1226.685217][T23919] ? sock_kmalloc+0xd7/0x160 [ 1226.689799][T23919] should_failslab+0xac/0x100 [ 1226.694474][T23919] ? sock_kmalloc+0xd7/0x160 [ 1226.699057][T23919] __kmalloc_noprof+0xd8/0x400 [ 1226.703814][T23919] sock_kmalloc+0xd7/0x160 [ 1226.708222][T23919] af_alg_alloc_areq+0x90/0x260 [ 1226.713071][T23919] skcipher_recvmsg+0x382/0x1230 [ 1226.718011][T23919] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1226.723371][T23919] ? aa_sock_msg_perm+0x91/0x160 [ 1226.728299][T23919] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1226.733575][T23919] ? security_socket_recvmsg+0x90/0xb0 [ 1226.739029][T23919] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1226.744393][T23919] sock_recvmsg+0x22f/0x280 [ 1226.748924][T23919] ____sys_recvmsg+0x1db/0x470 [ 1226.753726][T23919] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1226.759056][T23919] do_recvmmsg+0x474/0xae0 [ 1226.763474][T23919] ? __pfx_lock_release+0x10/0x10 [ 1226.768505][T23919] ? __pfx_do_recvmmsg+0x10/0x10 [ 1226.773451][T23919] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1226.779340][T23919] ? ksys_write+0x23e/0x2c0 [ 1226.783837][T23919] ? __pfx_lock_release+0x10/0x10 [ 1226.788859][T23919] ? vfs_write+0x7c4/0xc90 [ 1226.793277][T23919] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1226.798908][T23919] ? __fget_files+0x3f6/0x470 [ 1226.803591][T23919] __x64_sys_recvmmsg+0x199/0x250 [ 1226.808609][T23919] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1226.814150][T23919] ? do_syscall_64+0x100/0x230 [ 1226.818903][T23919] ? do_syscall_64+0xb6/0x230 [ 1226.823574][T23919] do_syscall_64+0xf3/0x230 [ 1226.828067][T23919] ? clear_bhb_loop+0x35/0x90 [ 1226.832736][T23919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.838619][T23919] RIP: 0033:0x7fec0f579e79 [ 1226.843026][T23919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.862707][T23919] RSP: 002b:00007fec103f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1226.871109][T23919] RAX: ffffffffffffffda RBX: 00007fec0f715f80 RCX: 00007fec0f579e79 [ 1226.879069][T23919] RDX: 0000000000000001 RSI: 0000000020001c40 RDI: 0000000000000004 [ 1226.887033][T23919] RBP: 00007fec103f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.895014][T23919] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1226.902991][T23919] R13: 0000000000000000 R14: 00007fec0f715f80 R15: 00007fec0f83fa38 [ 1226.910976][T23919] [ 1226.933260][T22911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.030791][T22911] veth1_macvtap: left promiscuous mode [ 1227.044705][T22911] veth0_macvtap: left promiscuous mode [ 1227.060750][T22911] veth1_vlan: left promiscuous mode [ 1227.097931][T22911] veth0_vlan: left promiscuous mode [ 1227.602285][T16625] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1227.816805][T16625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.866818][T16625] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.920541][T16625] usb 3-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1227.971551][T16625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.023839][T16625] usb 3-1: config 0 descriptor?? [ 1228.035792][T16625] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1228.615258][T22911] team0 (unregistering): Port device team_slave_1 removed [ 1228.724603][T22911] team0 (unregistering): Port device team_slave_0 removed [ 1228.775372][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4427'. [ 1229.701279][T23960] IPVS: Error connecting to the multicast addr [ 1229.865406][T14514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.918695][T14514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.071435][T14521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.091114][T14521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.327683][T16625] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1230.554399][T16625] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1230.649710][T16625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.690120][T16625] usb 4-1: config 0 descriptor?? [ 1230.700476][T23999] IPVS: Error connecting to the multicast addr [ 1230.710169][T16625] cp210x 4-1:0.0: cp210x converter detected [ 1230.906274][ T1793] usb 3-1: USB disconnect, device number 92 [ 1231.157594][T16625] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1231.196153][T16625] usb 4-1: USB disconnect, device number 77 [ 1231.242422][T16625] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1231.274862][T16625] cp210x 4-1:0.0: device disconnected [ 1231.288140][T24008] FAULT_INJECTION: forcing a failure. [ 1231.288140][T24008] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.356694][T24008] CPU: 0 UID: 0 PID: 24008 Comm: syz.2.4433 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1231.367484][T24008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1231.377534][T24008] Call Trace: [ 1231.380802][T24008] [ 1231.383738][T24008] dump_stack_lvl+0x241/0x360 [ 1231.388425][T24008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1231.393624][T24008] ? __pfx__printk+0x10/0x10 [ 1231.398227][T24008] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1231.404221][T24008] ? __pfx___might_resched+0x10/0x10 [ 1231.409499][T24008] should_fail_ex+0x3b0/0x4e0 [ 1231.414169][T24008] should_failslab+0xac/0x100 [ 1231.418839][T24008] ? __alloc_skb+0x1c3/0x440 [ 1231.423423][T24008] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1231.429239][T24008] __alloc_skb+0x1c3/0x440 [ 1231.433649][T24008] ? __pfx___alloc_skb+0x10/0x10 [ 1231.438567][T24008] ? netlink_autobind+0xd6/0x2f0 [ 1231.443485][T24008] ? netlink_autobind+0x2b0/0x2f0 [ 1231.448503][T24008] netlink_sendmsg+0x638/0xcb0 [ 1231.453271][T24008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.458537][T24008] ? __import_iovec+0x536/0x820 [ 1231.463372][T24008] ? aa_sock_msg_perm+0x91/0x160 [ 1231.468293][T24008] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1231.473566][T24008] ? security_socket_sendmsg+0x87/0xb0 [ 1231.479024][T24008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.484296][T24008] __sock_sendmsg+0x221/0x270 [ 1231.488960][T24008] ____sys_sendmsg+0x525/0x7d0 [ 1231.493713][T24008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1231.498996][T24008] __sys_sendmsg+0x2b0/0x3a0 [ 1231.503666][T24008] ? __pfx___sys_sendmsg+0x10/0x10 [ 1231.508759][T24008] ? vfs_write+0x7c4/0xc90 [ 1231.513182][T24008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1231.519492][T24008] ? do_syscall_64+0x100/0x230 [ 1231.524238][T24008] ? do_syscall_64+0xb6/0x230 [ 1231.528912][T24008] do_syscall_64+0xf3/0x230 [ 1231.533400][T24008] ? clear_bhb_loop+0x35/0x90 [ 1231.538058][T24008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.543933][T24008] RIP: 0033:0x7f10b0779e79 [ 1231.548341][T24008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1231.567941][T24008] RSP: 002b:00007f10b148e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1231.576353][T24008] RAX: ffffffffffffffda RBX: 00007f10b0915f80 RCX: 00007f10b0779e79 [ 1231.584312][T24008] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 1231.592281][T24008] RBP: 00007f10b148e090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.600244][T24008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.608206][T24008] R13: 0000000000000000 R14: 00007f10b0915f80 R15: 00007f10b0a3fa38 [ 1231.616173][T24008] [ 1231.619235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.034990][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 1232.252353][ T1793] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1232.362247][T16625] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1232.372265][T17461] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1232.452269][ T1793] usb 3-1: Using ep0 maxpacket: 32 [ 1232.459774][ T1793] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1232.468749][ T1793] usb 3-1: config 0 has no interface number 0 [ 1232.475154][ T1793] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1232.486340][ T1793] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1232.498186][ T1793] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1232.509717][ T1793] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1232.521895][ T1793] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1232.540146][ T1793] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1232.560621][ T1793] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1232.562194][T16625] usb 5-1: Using ep0 maxpacket: 32 [ 1232.569865][ T1793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.587645][ T1793] usb 3-1: Product: syz [ 1232.592412][ T1793] usb 3-1: Manufacturer: syz [ 1232.597428][ T1793] usb 3-1: SerialNumber: syz [ 1232.599703][T17461] usb 1-1: too many endpoints for config 0 interface 0 altsetting 115: 64, using maximum allowed: 30 [ 1232.611973][ T1793] usb 3-1: config 0 descriptor?? [ 1232.628611][T16625] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 1232.642400][T17461] usb 1-1: config 0 interface 0 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1232.656396][T24029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1232.671539][T24029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1232.681965][T16625] usb 5-1: config 0 has no interface number 0 [ 1232.694035][T16625] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1232.705200][T17461] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1232.724801][T17461] usb 1-1: New USB device found, idVendor=1039, idProduct=2121, bcdDevice=9e.ff [ 1232.742770][T17461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.750924][T16625] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1232.764333][T17461] usb 1-1: Product: syz [ 1232.768939][T17461] usb 1-1: Manufacturer: syz [ 1232.774376][T16625] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1232.785911][T17461] usb 1-1: SerialNumber: syz [ 1232.803666][T17461] usb 1-1: config 0 descriptor?? [ 1232.809247][T16625] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1232.832662][T17461] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2121) Rev (0X9EFF): Eagle II [ 1232.850039][T16625] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1232.861564][T16625] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1232.877886][T16625] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1232.887143][T16625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.895752][T16625] usb 5-1: Product: syz [ 1232.900078][T16625] usb 5-1: Manufacturer: syz [ 1232.904771][T16625] usb 5-1: SerialNumber: syz [ 1232.918833][T16625] usb 5-1: config 0 descriptor?? [ 1232.935015][ T1793] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 1232.935880][T24035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1232.949630][ T1793] etas_es58x 3-1:0.219: could not retrieve the product info string [ 1232.961066][T24035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1233.012482][T17461] usb 1-1: reset high-speed USB device number 117 using dummy_hcd [ 1233.030693][ T1793] usb 3-1: USB disconnect, device number 93 [ 1233.060904][ T1793] etas_es58x 3-1:0.219: Disconnecting syz syz [ 1233.238231][T16625] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 1233.261466][T16625] etas_es58x 5-1:0.219: could not retrieve the product info string [ 1233.306450][T16625] usb 5-1: USB disconnect, device number 103 [ 1233.318294][T16625] etas_es58x 5-1:0.219: Disconnecting syz syz [ 1233.402250][ T5278] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1233.602242][ T5278] usb 2-1: Using ep0 maxpacket: 8 [ 1233.613927][ T5278] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1233.624561][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1233.636550][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1233.649748][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1233.675865][ T5278] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1233.690821][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1233.711032][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1233.723864][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1233.745748][ T5278] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1233.761985][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1233.775103][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1233.786695][ T5278] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1233.841009][ T5278] usb 2-1: string descriptor 0 read error: -22 [ 1233.854520][T17461] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1233.881473][ T5278] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1233.905977][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.923905][T17461] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1233.931955][T16625] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1233.945524][T17461] usb 1-1: USB disconnect, device number 117 [ 1233.960805][T16625] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1233.981716][T16625] kobject: kobject_add_internal failed for firmware (error: -2 parent: 1-1) [ 1233.995602][ T5278] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1234.015214][T16625] firmware ueagle-atm!eagleII.fw: fw_load_sysfs_fallback: device_register failed [ 1234.028901][T16625] usb 1-1: [UEAGLE-ATM] firmware is not available [ 1234.038413][T24055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1234.191056][T16625] usb 2-1: USB disconnect, device number 105 [ 1234.368211][T24062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1234.411016][T24043] adutux: No device or device unplugged -19 [ 1234.512356][ T1793] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1234.731592][ T1793] usb 4-1: New USB device found, idVendor=1039, idProduct=2121, bcdDevice=9e.ff [ 1234.755730][ T1793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.785110][ T1793] usb 4-1: Product: syz [ 1234.789470][ T1793] usb 4-1: Manufacturer: syz [ 1234.799284][ T1793] usb 4-1: SerialNumber: syz [ 1234.812273][T17461] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1234.818737][ T1793] usb 4-1: config 0 descriptor?? [ 1234.846795][ T1793] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2121) Rev (0X9EFF): Eagle II [ 1234.985734][ T5279] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1235.013324][ T1793] usb 4-1: reset high-speed USB device number 78 using dummy_hcd [ 1235.057730][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1235.072316][T17461] usb 1-1: Using ep0 maxpacket: 16 [ 1235.110794][T17461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1235.180953][T17461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8196, setting to 1024 [ 1235.204351][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 1235.214386][ T5279] usb 3-1: config 0 has an invalid interface number: 57 but max is 0 [ 1235.222238][T17461] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1235.262289][T17461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.264932][ T5279] usb 3-1: config 0 has no interface number 0 [ 1235.314809][T17461] usb 1-1: config 0 descriptor?? [ 1235.326245][ T5279] usb 3-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.373319][ T5279] usb 3-1: config 0 interface 57 has no altsetting 0 [ 1235.418634][ T5279] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1235.456708][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.512803][ T5279] usb 3-1: config 0 descriptor?? [ 1235.883969][ T1793] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1235.909592][T24069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.916668][ T5276] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1235.927756][ T1793] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1235.962893][ T5276] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1235.980099][ T1793] usb 4-1: USB disconnect, device number 78 [ 1236.018073][T24069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.100566][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4452'. [ 1236.158812][T24069] overlayfs: missing 'lowerdir' [ 1237.295845][T17461] usbhid 1-1:0.0: can't add hid device: -71 [ 1237.317172][T17461] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1237.391252][T17461] usb 1-1: USB disconnect, device number 118 [ 1237.588446][ T5279] usb 3-1: string descriptor 0 read error: -71 [ 1237.649398][ T5279] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1237.674170][ T5279] gspca_sonixj: reg_w1 err -71 [ 1237.699409][ T5279] sonixj 3-1:0.57: probe with driver sonixj failed with error -71 [ 1237.704826][T24088] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4457'. [ 1237.736959][ T5279] usb 3-1: USB disconnect, device number 94 [ 1237.783201][T24089] AppArmor: change_hat: Invalid input 'ü' [ 1237.792822][T24088] FAULT_INJECTION: forcing a failure. [ 1237.792822][T24088] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.861958][T24088] CPU: 1 UID: 0 PID: 24088 Comm: syz.2.4457 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1237.872773][T24088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1237.882848][T24088] Call Trace: [ 1237.886139][T24088] [ 1237.889068][T24088] dump_stack_lvl+0x241/0x360 [ 1237.893763][T24088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1237.898995][T24088] ? __pfx__printk+0x10/0x10 [ 1237.903615][T24088] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1237.909094][T24088] ? __pfx___might_resched+0x10/0x10 [ 1237.914418][T24088] should_fail_ex+0x3b0/0x4e0 [ 1237.919116][T24088] should_failslab+0xac/0x100 [ 1237.923802][T24088] ? device_add+0xc1/0xbf0 [ 1237.928209][T24088] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1237.933492][T24088] device_add+0xc1/0xbf0 [ 1237.937723][T24088] ? device_initialize+0x266/0x460 [ 1237.942822][T24088] netdev_register_kobject+0x17e/0x320 [ 1237.948280][T24088] register_netdevice+0x12c5/0x1b00 [ 1237.953485][T24088] ? __pfx_register_netdevice+0x10/0x10 [ 1237.959023][T24088] ? alloc_netdev_mqs+0xc55/0x1000 [ 1237.964137][T24088] br_dev_newlink+0x27/0x100 [ 1237.968720][T24088] ? __pfx_br_dev_newlink+0x10/0x10 [ 1237.973912][T24088] rtnl_newlink+0x1591/0x20a0 [ 1237.978604][T24088] ? __pfx_rtnl_newlink+0x10/0x10 [ 1237.983619][T24088] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1237.989507][T24088] ? rcu_is_watching+0x15/0xb0 [ 1237.994273][T24088] ? trace_contention_end+0x3c/0x120 [ 1237.999548][T24088] ? __mutex_lock+0x2ef/0xd70 [ 1238.004275][T24088] ? __pfx_lock_release+0x10/0x10 [ 1238.009301][T24088] ? __pfx_rtnl_newlink+0x10/0x10 [ 1238.014319][T24088] rtnetlink_rcv_msg+0x73f/0xcf0 [ 1238.019249][T24088] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1238.024357][T24088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1238.029812][T24088] ? ref_tracker_free+0x643/0x7e0 [ 1238.034830][T24088] netlink_rcv_skb+0x1e3/0x430 [ 1238.039590][T24088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1238.045042][T24088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1238.050356][T24088] ? netlink_deliver_tap+0x2e/0x1b0 [ 1238.055548][T24088] netlink_unicast+0x7f6/0x990 [ 1238.060313][T24088] ? __pfx_netlink_unicast+0x10/0x10 [ 1238.065593][T24088] ? __virt_addr_valid+0x183/0x530 [ 1238.070695][T24088] ? __check_object_size+0x49c/0x900 [ 1238.075969][T24088] ? bpf_lsm_netlink_send+0x9/0x10 [ 1238.081071][T24088] netlink_sendmsg+0x8e4/0xcb0 [ 1238.085833][T24088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.091106][T24088] ? aa_sock_msg_perm+0x91/0x160 [ 1238.096035][T24088] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1238.101309][T24088] ? security_socket_sendmsg+0x87/0xb0 [ 1238.106761][T24088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.112031][T24088] __sock_sendmsg+0x221/0x270 [ 1238.116709][T24088] __sys_sendto+0x3a4/0x4f0 [ 1238.121208][T24088] ? __pfx___sys_sendto+0x10/0x10 [ 1238.126240][T24088] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1238.132214][T24088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1238.138538][T24088] __x64_sys_sendto+0xde/0x100 [ 1238.143317][T24088] do_syscall_64+0xf3/0x230 [ 1238.147812][T24088] ? clear_bhb_loop+0x35/0x90 [ 1238.152496][T24088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.158379][T24088] RIP: 0033:0x7f10b0779e79 [ 1238.162783][T24088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.182377][T24088] RSP: 002b:00007f10b148e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1238.190779][T24088] RAX: ffffffffffffffda RBX: 00007f10b0915f80 RCX: 00007f10b0779e79 [ 1238.198738][T24088] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000003 [ 1238.206718][T24088] RBP: 00007f10b148e090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 1238.214679][T24088] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 1238.222637][T24088] R13: 0000000000000000 R14: 00007f10b0915f80 R15: 00007f10b0a3fa38 [ 1238.230607][T24088] [ 1238.652511][ T5279] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1238.692240][T17461] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1238.695724][T11129] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1238.712336][ T5274] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1238.814751][T24107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4463'. [ 1238.854731][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 1238.872360][T17461] usb 4-1: Using ep0 maxpacket: 16 [ 1238.876538][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.898083][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.900486][T17461] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 1238.919035][ T5279] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1238.931400][ T5274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.941902][T11129] usb 5-1: Using ep0 maxpacket: 32 [ 1238.952526][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.953639][T17461] usb 4-1: config 0 has no interface number 0 [ 1238.967178][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.974122][T17461] usb 4-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.003329][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.011337][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.026464][T11129] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1239.064812][T17461] usb 4-1: config 0 interface 57 has no altsetting 0 [ 1239.071601][T17461] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1239.084746][T11129] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1239.095307][ T5279] usb 2-1: config 0 descriptor?? [ 1239.104238][ T5274] usb 3-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1239.125168][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.133351][T11129] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1239.143909][T11129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.153360][ T5274] usb 3-1: config 0 descriptor?? [ 1239.165399][ T5274] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1239.192264][T11129] usb 5-1: Product: syz [ 1239.206130][T11129] usb 5-1: Manufacturer: syz [ 1239.210971][T11129] usb 5-1: SerialNumber: syz [ 1239.231299][T17461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.264037][T17461] usb 4-1: config 0 descriptor?? [ 1239.506968][T24100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.546894][T11129] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1239.562574][T24100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1239.573120][T11129] usb 5-1: USB disconnect, device number 104 [ 1239.593824][T24100] overlayfs: missing 'lowerdir' [ 1239.630840][T11129] usblp0: removed [ 1239.698913][T24097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.709523][T24097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.228761][T24117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4461'. [ 1240.272367][T11129] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1240.474844][T11129] usb 1-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1240.523660][T11129] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1240.601314][T11129] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1240.629987][T11129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.657272][T11129] usb 1-1: Product: syz [ 1240.673987][T11129] usb 1-1: Manufacturer: syz [ 1240.679382][T11129] usb 1-1: SerialNumber: syz [ 1240.697416][T11129] usb 1-1: config 0 descriptor?? [ 1240.922834][ T5274] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1240.937209][T24115] fuse: Bad value for 'fd' [ 1241.123121][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 1241.147423][ T5274] usb 5-1: no configurations [ 1241.154619][ T5274] usb 5-1: can't read configurations, error -22 [ 1241.314735][ T5274] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1241.332753][ T5279] usbhid 2-1:0.0: can't add hid device: -71 [ 1241.341067][ T5279] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1241.359636][ T5279] usb 2-1: USB disconnect, device number 106 [ 1241.501680][T11129] usb 3-1: USB disconnect, device number 95 [ 1241.512363][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 1241.524759][T17461] usb 4-1: string descriptor 0 read error: -71 [ 1241.549300][ T5274] usb 5-1: no configurations [ 1241.554070][T17461] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1241.556005][T17461] gspca_sonixj: reg_w1 err -71 [ 1241.593144][T17461] sonixj 4-1:0.57: probe with driver sonixj failed with error -71 [ 1241.594584][T24130] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4468'. [ 1241.611549][ T5274] usb 5-1: can't read configurations, error -22 [ 1241.637559][T17461] usb 4-1: USB disconnect, device number 79 [ 1241.642733][ T5274] usb usb5-port1: attempt power cycle [ 1242.062495][ T5274] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1242.123078][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 1242.131904][ T5274] usb 5-1: no configurations [ 1242.142412][ T5274] usb 5-1: can't read configurations, error -22 [ 1242.322327][ T5274] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1242.362974][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 1242.369181][ T5274] usb 5-1: no configurations [ 1242.377612][ T5274] usb 5-1: can't read configurations, error -22 [ 1242.401196][ T5274] usb usb5-port1: unable to enumerate USB device [ 1242.990979][ T5278] usb 1-1: USB disconnect, device number 119 [ 1243.327998][T24162] dvmrp0: entered allmulticast mode [ 1243.381594][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4477'. [ 1243.802340][T11129] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1244.022709][T11129] usb 2-1: Using ep0 maxpacket: 16 [ 1244.076819][T11129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.119420][T11129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.151603][T11129] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1244.179265][T11129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.237483][T11129] usb 2-1: config 0 descriptor?? [ 1244.302207][T16625] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1244.414384][T24176] vivid-000: disconnect [ 1244.436112][T24176] vivid-000: reconnect [ 1244.512305][T16625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.537566][T16625] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1244.597302][T16625] usb 3-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1244.642293][T16625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.664011][T16625] usb 3-1: config 0 descriptor?? [ 1244.685716][T16625] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1244.731333][T24166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.752900][T24166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.904595][T24179] AppArmor: change_hat: Invalid input 'ü' [ 1245.452437][ T5279] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1245.612278][ T5274] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1245.655957][ T5279] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.677759][ T5279] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8B has invalid maxpacket 31301, setting to 1024 [ 1245.718741][ T5279] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1245.737286][ T5279] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1245.754755][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.763677][ T5279] usb 1-1: Product: syz [ 1245.768433][ T5279] usb 1-1: Manufacturer: syz [ 1245.775626][ T5279] usb 1-1: SerialNumber: syz [ 1245.790851][T24191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4480'. [ 1245.812282][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 1245.829819][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.861582][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.893439][ T5274] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1245.906003][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.924404][ T5274] usb 4-1: config 0 descriptor?? [ 1246.178830][T24196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1246.285594][ T5279] cdc_ncm 1-1:1.0: bind() failure [ 1246.315286][ T5279] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1246.332662][ T5279] cdc_ncm 1-1:1.1: bind() failure [ 1246.353232][ T5279] usb 1-1: USB disconnect, device number 120 [ 1246.472061][T24198] IPVS: Error connecting to the multicast addr [ 1246.559633][T11129] usbhid 2-1:0.0: can't add hid device: -71 [ 1246.591302][T11129] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1246.606707][T11129] usb 2-1: USB disconnect, device number 107 [ 1246.613839][T24189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.671055][T24189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.045968][T24207] FAULT_INJECTION: forcing a failure. [ 1247.045968][T24207] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.062002][T24207] CPU: 1 UID: 0 PID: 24207 Comm: syz.0.4491 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1247.072773][T24207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1247.082844][T24207] Call Trace: [ 1247.086115][T24207] [ 1247.089029][T24207] dump_stack_lvl+0x241/0x360 [ 1247.093800][T24207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1247.098988][T24207] ? __pfx__printk+0x10/0x10 [ 1247.103564][T24207] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1247.109532][T24207] ? __pfx___might_resched+0x10/0x10 [ 1247.114828][T24207] should_fail_ex+0x3b0/0x4e0 [ 1247.119506][T24207] should_failslab+0xac/0x100 [ 1247.124194][T24207] ? __alloc_skb+0x1c3/0x440 [ 1247.128763][T24207] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1247.134552][T24207] __alloc_skb+0x1c3/0x440 [ 1247.138957][T24207] ? __pfx___alloc_skb+0x10/0x10 [ 1247.143883][T24207] ? netlink_ack_tlv_len+0x6e/0x200 [ 1247.149068][T24207] netlink_ack+0x13f/0xa30 [ 1247.153471][T24207] ? __sys_sendmsg+0x2b0/0x3a0 [ 1247.158213][T24207] ? do_syscall_64+0xf3/0x230 [ 1247.162904][T24207] netlink_rcv_skb+0x262/0x430 [ 1247.167693][T24207] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1247.173146][T24207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1247.178429][T24207] ? apparmor_capable+0x13b/0x1b0 [ 1247.183449][T24207] ? bpf_lsm_capable+0x9/0x10 [ 1247.188105][T24207] ? security_capable+0x90/0xb0 [ 1247.192942][T24207] nfnetlink_rcv+0x297/0x2ad0 [ 1247.197600][T24207] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1247.203303][T24207] ? __dev_queue_xmit+0x2da/0x3e90 [ 1247.208396][T24207] ? __dev_queue_xmit+0x1763/0x3e90 [ 1247.213574][T24207] ? kasan_save_track+0x51/0x80 [ 1247.218410][T24207] ? do_syscall_64+0xf3/0x230 [ 1247.223067][T24207] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1247.228158][T24207] ? __dev_queue_xmit+0x2da/0x3e90 [ 1247.233253][T24207] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1247.238615][T24207] ? ref_tracker_free+0x643/0x7e0 [ 1247.243629][T24207] ? __asan_memcpy+0x40/0x70 [ 1247.248207][T24207] ? __pfx_ref_tracker_free+0x10/0x10 [ 1247.253572][T24207] ? netlink_deliver_tap+0x2e/0x1b0 [ 1247.258748][T24207] ? skb_clone+0x240/0x390 [ 1247.263151][T24207] ? __pfx_lock_release+0x10/0x10 [ 1247.268164][T24207] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1247.273619][T24207] ? netlink_deliver_tap+0x2e/0x1b0 [ 1247.278795][T24207] netlink_unicast+0x7f6/0x990 [ 1247.283548][T24207] ? __pfx_netlink_unicast+0x10/0x10 [ 1247.288831][T24207] ? __virt_addr_valid+0x183/0x530 [ 1247.293923][T24207] ? __check_object_size+0x49c/0x900 [ 1247.299186][T24207] ? bpf_lsm_netlink_send+0x9/0x10 [ 1247.304281][T24207] netlink_sendmsg+0x8e4/0xcb0 [ 1247.309032][T24207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.314302][T24207] ? aa_sock_msg_perm+0x91/0x160 [ 1247.319232][T24207] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1247.324501][T24207] ? security_socket_sendmsg+0x87/0xb0 [ 1247.329948][T24207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.335210][T24207] __sock_sendmsg+0x221/0x270 [ 1247.339879][T24207] ____sys_sendmsg+0x525/0x7d0 [ 1247.344627][T24207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.349900][T24207] __sys_sendmsg+0x2b0/0x3a0 [ 1247.354471][T24207] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.359566][T24207] ? vfs_write+0x7c4/0xc90 [ 1247.363985][T24207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1247.370391][T24207] ? do_syscall_64+0x100/0x230 [ 1247.375230][T24207] ? do_syscall_64+0xb6/0x230 [ 1247.379886][T24207] do_syscall_64+0xf3/0x230 [ 1247.384372][T24207] ? clear_bhb_loop+0x35/0x90 [ 1247.389033][T24207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.394908][T24207] RIP: 0033:0x7fec0f579e79 [ 1247.399319][T24207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.418905][T24207] RSP: 002b:00007fec103f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.427301][T24207] RAX: ffffffffffffffda RBX: 00007fec0f715f80 RCX: 00007fec0f579e79 [ 1247.435253][T24207] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1247.443291][T24207] RBP: 00007fec103f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.451240][T24207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.459198][T24207] R13: 0000000000000000 R14: 00007fec0f715f80 R15: 00007fec0f83fa38 [ 1247.467179][T24207] [ 1247.486202][T24206] IPVS: Error connecting to the multicast addr [ 1247.540286][T16625] usb 3-1: USB disconnect, device number 96 [ 1248.404654][ T5274] usbhid 4-1:0.0: can't add hid device: -71 [ 1248.418951][ T5274] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1248.443778][ T5274] usb 4-1: USB disconnect, device number 80 [ 1249.033503][ T5274] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1249.180502][T24243] ip6t_srh: unknown srh invflags 7863 [ 1249.232568][ T5279] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1249.253781][ T5274] usb 3-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 1249.268807][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.294918][ T5274] usb 3-1: config 0 descriptor?? [ 1249.445466][ T5279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.461033][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1249.479504][ T5279] usb 1-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1249.488882][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.506427][ T5279] usb 1-1: config 0 descriptor?? [ 1249.536373][ T5279] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1249.563758][T24252] FAULT_INJECTION: forcing a failure. [ 1249.563758][T24252] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.576672][T24252] CPU: 1 UID: 0 PID: 24252 Comm: syz.3.4505 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1249.587448][T24252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1249.597524][T24252] Call Trace: [ 1249.600818][T24252] [ 1249.603763][T24252] dump_stack_lvl+0x241/0x360 [ 1249.608463][T24252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1249.613681][T24252] ? __pfx__printk+0x10/0x10 [ 1249.618303][T24252] ? fs_reclaim_acquire+0x93/0x140 [ 1249.623428][T24252] ? __pfx___might_resched+0x10/0x10 [ 1249.628704][T24252] ? dynamic_dname+0x141/0x1b0 [ 1249.633468][T24252] should_fail_ex+0x3b0/0x4e0 [ 1249.638158][T24252] ? tomoyo_encode+0x26f/0x540 [ 1249.642924][T24252] should_failslab+0xac/0x100 [ 1249.647599][T24252] ? tomoyo_encode+0x26f/0x540 [ 1249.652355][T24252] __kmalloc_noprof+0xd8/0x400 [ 1249.657197][T24252] tomoyo_encode+0x26f/0x540 [ 1249.661778][T24252] ? __pfx_sockfs_dname+0x10/0x10 [ 1249.666801][T24252] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1249.672440][T24252] tomoyo_path_number_perm+0x23a/0x880 [ 1249.677894][T24252] ? tomoyo_path_number_perm+0x208/0x880 [ 1249.683517][T24252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1249.689525][T24252] ? __fget_files+0x29/0x470 [ 1249.694111][T24252] ? __fget_files+0x3f6/0x470 [ 1249.698782][T24252] ? __fget_files+0x29/0x470 [ 1249.703369][T24252] security_file_ioctl+0x75/0xb0 [ 1249.708300][T24252] __se_sys_ioctl+0x47/0x170 [ 1249.712884][T24252] do_syscall_64+0xf3/0x230 [ 1249.717376][T24252] ? clear_bhb_loop+0x35/0x90 [ 1249.722115][T24252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.728048][T24252] RIP: 0033:0x7f830c179e79 [ 1249.732466][T24252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.752087][T24252] RSP: 002b:00007f830cef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.760504][T24252] RAX: ffffffffffffffda RBX: 00007f830c316058 RCX: 00007f830c179e79 [ 1249.768467][T24252] RDX: 0000000020000000 RSI: 0000000000008936 RDI: 000000000000000a [ 1249.776428][T24252] RBP: 00007f830cef6090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.784389][T24252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.792378][T24252] R13: 0000000000000000 R14: 00007f830c316058 R15: 00007f830c43fa38 [ 1249.800369][T24252] [ 1249.806902][T24252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1249.905973][ T5275] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1249.938761][T22906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.092391][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 1250.096471][T22906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.136659][ T5275] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1250.156023][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1250.196277][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1250.207787][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1250.220903][ T5275] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1250.236853][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1250.248146][T22906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.265415][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1250.286634][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1250.331781][ T5275] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1250.345089][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1250.357346][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1250.369582][ T5275] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1250.384865][ T5275] usb 5-1: string descriptor 0 read error: -22 [ 1250.395528][T22906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.396947][ T5275] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1250.415410][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.444238][ T5275] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1250.579433][ T5275] usb 3-1: USB disconnect, device number 97 [ 1250.682650][T24265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1250.847862][T22906] bridge_slave_1: left allmulticast mode [ 1250.871221][T22906] bridge_slave_1: left promiscuous mode [ 1250.889186][T22906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.915844][ T5275] usb 5-1: USB disconnect, device number 109 [ 1250.937808][T22906] bridge_slave_0: left allmulticast mode [ 1250.970420][T22906] bridge_slave_0: left promiscuous mode [ 1250.991354][T22906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.113200][T24241] adutux: No device or device unplugged -19 [ 1251.191581][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1251.204897][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1251.214562][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1251.228115][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1251.239242][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1251.247234][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1251.812511][ T5275] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1251.851370][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1251.851388][ T29] audit: type=1326 audit(1724488248.590:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1251.887422][T24292] FAULT_INJECTION: forcing a failure. [ 1251.887422][T24292] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.902597][T24292] CPU: 0 UID: 0 PID: 24292 Comm: syz.4.4511 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1251.913381][T24292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1251.923428][T24292] Call Trace: [ 1251.926702][T24292] [ 1251.929623][T24292] dump_stack_lvl+0x241/0x360 [ 1251.934297][T24292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1251.939487][T24292] ? __pfx__printk+0x10/0x10 [ 1251.944076][T24292] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1251.949524][T24292] ? __pfx___might_resched+0x10/0x10 [ 1251.954894][T24292] should_fail_ex+0x3b0/0x4e0 [ 1251.959567][T24292] should_failslab+0xac/0x100 [ 1251.964240][T24292] ? yama_ptracer_add+0x57/0x4b0 [ 1251.969172][T24292] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1251.974464][T24292] yama_ptracer_add+0x57/0x4b0 [ 1251.979310][T24292] ? yama_task_prctl+0x42/0x500 [ 1251.984159][T24292] yama_task_prctl+0x365/0x500 [ 1251.988918][T24292] security_task_prctl+0x81/0x110 [ 1251.993942][T24292] __se_sys_prctl+0x110/0x3990 [ 1251.998711][T24292] ? stack_trace_save+0x118/0x1d0 [ 1252.003744][T24292] ? __pfx_stack_trace_save+0x10/0x10 [ 1252.009120][T24292] ? stack_depot_save_flags+0x29/0x830 [ 1252.014581][T24292] ? kasan_save_track+0x51/0x80 [ 1252.019432][T24292] ? kasan_save_track+0x3f/0x80 [ 1252.024284][T24292] ? __pfx___se_sys_prctl+0x10/0x10 [ 1252.029478][T24292] ? __seccomp_filter+0xb38/0x1fe0 [ 1252.034581][T24292] ? syscall_trace_enter+0xa8/0x150 [ 1252.039766][T24292] ? do_syscall_64+0xcc/0x230 [ 1252.044429][T24292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.050507][T24292] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1252.056496][T24292] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1252.062821][T24292] ? kasan_quarantine_put+0xdc/0x230 [ 1252.068109][T24292] ? lockdep_hardirqs_on+0x99/0x150 [ 1252.073305][T24292] ? __seccomp_filter+0xb38/0x1fe0 [ 1252.078412][T24292] ? kmem_cache_free+0x145/0x350 [ 1252.083361][T24292] ? __seccomp_filter+0xb38/0x1fe0 [ 1252.088474][T24292] ? __might_fault+0xaa/0x120 [ 1252.093144][T24292] ? __pfx_lock_release+0x10/0x10 [ 1252.098162][T24292] ? __pfx___seccomp_filter+0x10/0x10 [ 1252.103526][T24292] ? __might_fault+0xaa/0x120 [ 1252.108224][T24292] ? rcu_is_watching+0x15/0xb0 [ 1252.112981][T24292] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 1252.119071][T24292] ? __x64_sys_prctl+0x20/0xc0 [ 1252.123912][T24292] do_syscall_64+0xf3/0x230 [ 1252.128491][T24292] ? clear_bhb_loop+0x35/0x90 [ 1252.133164][T24292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.139047][T24292] RIP: 0033:0x7fcb0c979e79 [ 1252.143468][T24292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.163147][T24292] RSP: 002b:00007fcb0d77c038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1252.171555][T24292] RAX: ffffffffffffffda RBX: 00007fcb0cb15f80 RCX: 00007fcb0c979e79 [ 1252.179514][T24292] RDX: 0000000000000000 RSI: 01ffffffffffffff RDI: 0000000059616d61 [ 1252.187482][T24292] RBP: 00007fcb0d77c090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.195450][T24292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.203408][T24292] R13: 0000000000000000 R14: 00007fcb0cb15f80 R15: 00007fcb0cc3fa38 [ 1252.211377][T24292] [ 1252.214535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1252.242386][ T29] audit: type=1326 audit(1724488248.620:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1252.249576][ T5274] usb 1-1: USB disconnect, device number 121 [ 1252.266254][ T29] audit: type=1326 audit(1724488248.630:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1252.294300][ T29] audit: type=1326 audit(1724488248.630:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1252.337063][ T5275] usb 3-1: config 1 interface 0 altsetting 14 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1252.359886][ T29] audit: type=1326 audit(1724488248.630:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1252.370962][ T5275] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x1 has invalid maxpacket 11455, setting to 64 [ 1252.416148][ T5275] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1252.461200][ T29] audit: type=1326 audit(1724488248.630:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb0c978810 code=0x7ffc0000 [ 1252.466526][ T5275] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1252.484430][ T29] audit: type=1326 audit(1724488248.630:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb0c97895f code=0x7ffc0000 [ 1252.514842][T24294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4512'. [ 1252.519713][ T29] audit: type=1326 audit(1724488248.630:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1252.530523][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.548502][ T29] audit: type=1326 audit(1724488249.040:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcb0c9788bc code=0x7ffc0000 [ 1252.580659][ T29] audit: type=1326 audit(1724488249.040:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24291 comm="syz.4.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb0c97895f code=0x7ffc0000 [ 1252.602857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1252.617476][ T5275] usb 3-1: Product: syz [ 1252.621685][ T5275] usb 3-1: Manufacturer: syz [ 1252.631912][ T5275] usb 3-1: SerialNumber: syz [ 1252.836841][T22906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.849211][T22906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.872369][T22906] bond0 (unregistering): Released all slaves [ 1252.979292][T24300] FAULT_INJECTION: forcing a failure. [ 1252.979292][T24300] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.996604][ T5275] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input58 [ 1253.001793][T24300] CPU: 0 UID: 0 PID: 24300 Comm: syz.4.4514 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1253.016497][T24300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1253.026550][T24300] Call Trace: [ 1253.029818][T24300] [ 1253.032740][T24300] dump_stack_lvl+0x241/0x360 [ 1253.037414][T24300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1253.042602][T24300] ? __pfx__printk+0x10/0x10 [ 1253.047190][T24300] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1253.052726][T24300] ? __pfx___might_resched+0x10/0x10 [ 1253.058006][T24300] should_fail_ex+0x3b0/0x4e0 [ 1253.062692][T24300] ? ptlock_alloc+0x20/0x70 [ 1253.067196][T24300] should_failslab+0xac/0x100 [ 1253.071868][T24300] ? ptlock_alloc+0x20/0x70 [ 1253.076366][T24300] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1253.081732][T24300] ptlock_alloc+0x20/0x70 [ 1253.086143][T24300] pte_alloc_one+0xcd/0x5d0 [ 1253.090655][T24300] ? __pfx_pte_alloc_one+0x10/0x10 [ 1253.095763][T24300] ? mark_lock+0x9a/0x350 [ 1253.100088][T24300] ? __lock_acquire+0x137a/0x2040 [ 1253.105110][T24300] __pte_alloc+0x79/0x3a0 [ 1253.109428][T24300] ? mark_lock+0x9a/0x350 [ 1253.113757][T24300] ? __pfx___pte_alloc+0x10/0x10 [ 1253.118685][T24300] ? __lock_acquire+0x137a/0x2040 [ 1253.123708][T24300] handle_pte_fault+0x55cd/0x6fc0 [ 1253.128730][T24300] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 1253.134451][T24300] ? __pfx_lock_acquire+0x10/0x10 [ 1253.139469][T24300] ? __pfx_handle_pte_fault+0x10/0x10 [ 1253.144829][T24300] ? do_raw_spin_lock+0x14f/0x370 [ 1253.149854][T24300] ? follow_page_pte+0xeb2/0x1ee0 [ 1253.154881][T24300] ? follow_page_pte+0xf33/0x1ee0 [ 1253.159897][T24300] ? folio_mark_accessed+0x374/0x1ca0 [ 1253.165262][T24300] ? __pfx_lock_release+0x10/0x10 [ 1253.170282][T24300] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1253.175482][T24300] handle_mm_fault+0x1029/0x1980 [ 1253.180445][T24300] ? __pfx_handle_mm_fault+0x10/0x10 [ 1253.185733][T24300] ? __pfx_find_vma+0x10/0x10 [ 1253.190410][T24300] ? vma_is_secretmem+0xd/0x50 [ 1253.195162][T24300] ? check_vma_flags+0x500/0x5a0 [ 1253.200096][T24300] __get_user_pages+0x6ec/0x16a0 [ 1253.205052][T24300] ? __pfx___get_user_pages+0x10/0x10 [ 1253.210431][T24300] __gup_longterm_locked+0xed7/0x17d0 [ 1253.215805][T24300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1253.222130][T24300] ? sanity_check_pinned_pages+0x12c2/0x13c0 [ 1253.228110][T24300] ? gup_fast_fallback+0x221d/0x2b50 [ 1253.233390][T24300] gup_fast_fallback+0x2742/0x2b50 [ 1253.238518][T24300] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1253.243973][T24300] ? finish_task_switch+0x1e5/0x870 [ 1253.249168][T24300] ? __schedule+0x1808/0x4a60 [ 1253.253849][T24300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1253.260171][T24300] ? is_valid_gup_args+0x124/0x200 [ 1253.265276][T24300] pin_user_pages_fast+0xcc/0x160 [ 1253.270297][T24300] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1253.275926][T24300] ? preempt_schedule+0xe1/0xf0 [ 1253.280775][T24300] iov_iter_extract_pages+0x3db/0x720 [ 1253.286145][T24300] extract_iter_to_sg+0x890/0x22b0 [ 1253.291257][T24300] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1253.296794][T24300] ? unpin_user_page+0xe0/0x1e0 [ 1253.301636][T24300] ? __pfx_unpin_user_page+0x10/0x10 [ 1253.306925][T24300] ? __local_bh_enable_ip+0x168/0x200 [ 1253.312308][T24300] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1253.318035][T24300] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1253.323230][T24300] ? __asan_memset+0x23/0x50 [ 1253.327813][T24300] hash_sendmsg+0x513/0x1110 [ 1253.332410][T24300] ? __pfx_hash_sendmsg+0x10/0x10 [ 1253.337420][T24300] __sock_sendmsg+0x221/0x270 [ 1253.342097][T24300] ____sys_sendmsg+0x525/0x7d0 [ 1253.346867][T24300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.352157][T24300] __sys_sendmsg+0x2b0/0x3a0 [ 1253.356740][T24300] ? __pfx___sys_sendmsg+0x10/0x10 [ 1253.361839][T24300] ? vfs_write+0x7c4/0xc90 [ 1253.366278][T24300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1253.372609][T24300] ? do_syscall_64+0x100/0x230 [ 1253.377363][T24300] ? do_syscall_64+0xb6/0x230 [ 1253.382026][T24300] do_syscall_64+0xf3/0x230 [ 1253.386524][T24300] ? clear_bhb_loop+0x35/0x90 [ 1253.391191][T24300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.397074][T24300] RIP: 0033:0x7fcb0c979e79 [ 1253.401477][T24300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.421075][T24300] RSP: 002b:00007fcb0d77c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.429483][T24300] RAX: ffffffffffffffda RBX: 00007fcb0cb15f80 RCX: 00007fcb0c979e79 [ 1253.437443][T24300] RDX: 0000000000000000 RSI: 0000000020001880 RDI: 0000000000000008 [ 1253.445402][T24300] RBP: 00007fcb0d77c090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.453363][T24300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.461426][T24300] R13: 0000000000000000 R14: 00007fcb0cb15f80 R15: 00007fcb0cc3fa38 [ 1253.469400][T24300] [ 1253.472428][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.511465][ T5224] Bluetooth: hci1: command tx timeout [ 1253.564727][ T4665] bcm5974 3-1:1.0: could not read from device [ 1253.600914][ T4665] bcm5974 3-1:1.0: could not read from device [ 1253.680698][ T4665] bcm5974 3-1:1.0: could not read from device [ 1253.707715][ T4665] bcm5974 3-1:1.0: could not read from device [ 1253.722667][ T5275] usb 3-1: USB disconnect, device number 98 [ 1253.906134][T24309] IPVS: Error connecting to the multicast addr [ 1254.373373][T22906] hsr_slave_0: left promiscuous mode [ 1254.396574][T22906] hsr_slave_1: left promiscuous mode [ 1254.409811][T22906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.419894][T22906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.439371][T22906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.451203][T22906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.513341][ T5275] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1254.523735][T22906] veth1_macvtap: left promiscuous mode [ 1254.549489][T22906] veth0_macvtap: left promiscuous mode [ 1254.556860][T22906] veth1_vlan: left promiscuous mode [ 1254.566004][T22906] veth0_vlan: left promiscuous mode [ 1254.662412][ T5278] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1254.714938][ T5275] usb 4-1: config 1 interface 0 altsetting 14 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1254.737941][ T5275] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x1 has invalid maxpacket 11455, setting to 64 [ 1254.751769][ T5275] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1254.767916][ T5275] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1254.777888][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.790455][ T5275] usb 4-1: Product: syz [ 1254.813624][ T5275] usb 4-1: Manufacturer: syz [ 1254.832632][ T5275] usb 4-1: SerialNumber: syz [ 1254.884716][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1254.934923][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1254.959795][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1254.975068][ T5278] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1254.991234][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.040361][ T5278] usb 3-1: config 0 descriptor?? [ 1255.058208][T24326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1255.176902][ T5275] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input59 [ 1255.195033][ T4665] bcm5974 4-1:1.0: could not read from device [ 1255.219767][ T4665] bcm5974 4-1:1.0: could not read from device [ 1255.243471][ T4665] bcm5974 4-1:1.0: could not read from device [ 1255.263451][ T5275] usb 4-1: USB disconnect, device number 81 [ 1255.273433][T17461] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1255.310357][T24326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.361437][T24326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.542539][ T5224] Bluetooth: hci1: command tx timeout [ 1255.552029][T17461] usb 5-1: Using ep0 maxpacket: 16 [ 1255.612042][T17461] usb 5-1: config 0 has an invalid interface number: 57 but max is 0 [ 1255.662055][T17461] usb 5-1: config 0 has no interface number 0 [ 1255.699742][T17461] usb 5-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.801564][T17461] usb 5-1: config 0 interface 57 has no altsetting 0 [ 1255.834741][T17461] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1255.869527][T17461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.952184][T17461] usb 5-1: config 0 descriptor?? [ 1256.176945][T24331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.237339][T24331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.255051][T24331] overlayfs: missing 'lowerdir' [ 1256.445648][T22906] team0 (unregistering): Port device team_slave_1 removed [ 1256.554915][T22906] team0 (unregistering): Port device team_slave_0 removed [ 1256.652232][ T5274] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1256.842282][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 1256.861375][ T5274] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 1256.904454][ T5274] usb 4-1: config 0 has no interface number 0 [ 1256.928495][ T5274] usb 4-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.951930][ T5274] usb 4-1: config 0 interface 57 has no altsetting 0 [ 1256.962448][ T5274] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1256.971756][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.987291][ T5274] usb 4-1: config 0 descriptor?? [ 1257.250055][T24335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.276728][T24335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.344552][T24335] overlayfs: missing 'lowerdir' [ 1257.632496][ T5224] Bluetooth: hci1: command tx timeout [ 1258.042316][T17461] usb 5-1: string descriptor 0 read error: -71 [ 1258.163401][T17461] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1258.213682][T17461] gspca_sonixj: reg_w1 err -71 [ 1258.219987][ T5278] usbhid 3-1:0.0: can't add hid device: -71 [ 1258.241810][T17461] sonixj 5-1:0.57: probe with driver sonixj failed with error -71 [ 1258.268618][ T5278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1258.322753][T17461] usb 5-1: USB disconnect, device number 110 [ 1258.335340][ T5278] usb 3-1: USB disconnect, device number 99 [ 1258.420333][T24278] chnl_net:caif_netlink_parms(): no params data found [ 1258.912245][ T25] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1259.075368][T24278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.094914][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1259.112192][T24278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.121515][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.133300][T24278] bridge_slave_0: entered allmulticast mode [ 1259.139630][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.152051][T24278] bridge_slave_0: entered promiscuous mode [ 1259.163895][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1259.183677][T24278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.213021][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.223558][T24278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.316359][T24278] bridge_slave_1: entered allmulticast mode [ 1259.331680][ T25] usb 3-1: config 0 descriptor?? [ 1259.362648][ T5274] usb 4-1: string descriptor 0 read error: -71 [ 1259.378518][T24278] bridge_slave_1: entered promiscuous mode [ 1259.415822][ T5274] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1259.454941][ T5274] gspca_sonixj: reg_w1 err -71 [ 1259.475460][ T5274] sonixj 4-1:0.57: probe with driver sonixj failed with error -71 [ 1259.507308][ T5274] usb 4-1: USB disconnect, device number 82 [ 1259.664512][T24278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.712573][ T5224] Bluetooth: hci1: command tx timeout [ 1259.870289][T24278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.026883][T24351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.058825][T24351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.070990][T24278] team0: Port device team_slave_0 added [ 1260.073179][ T5274] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1260.119119][T24278] team0: Port device team_slave_1 added [ 1260.260053][T24278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.292332][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 1260.300785][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.303479][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.326763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.342363][T24278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.365453][T24387] vivid-000: disconnect [ 1260.383535][T24387] vivid-000: reconnect [ 1260.427269][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.438563][ T5274] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1260.451904][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.469373][ T5274] usb 4-1: config 0 descriptor?? [ 1260.481180][T24278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.498646][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.600266][T24278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.836445][T24278] hsr_slave_0: entered promiscuous mode [ 1260.843893][T24278] hsr_slave_1: entered promiscuous mode [ 1261.169664][T24379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.218680][T24379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.602222][ T5278] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1261.718072][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 1261.767736][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1261.829391][ T25] usb 3-1: USB disconnect, device number 100 [ 1261.829392][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1261.829421][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1261.889924][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1261.930117][ T5278] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1261.940870][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.044722][ T5278] usb 1-1: config 0 descriptor?? [ 1262.090678][T24403] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1262.349182][T24403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.372231][ T5279] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1262.380056][ T25] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1262.421528][T24403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.583693][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 1262.594322][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.624255][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.624289][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.624348][ T5279] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1262.624372][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.631001][ T5279] usb 5-1: config 0 descriptor?? [ 1262.656458][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.656531][ T25] usb 3-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1262.656575][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.659815][ T25] usb 3-1: config 0 descriptor?? [ 1262.677715][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1262.695632][ T5278] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 1262.840008][ T5278] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 1262.927418][ T5274] usbhid 4-1:0.0: can't add hid device: -71 [ 1262.944966][ T5274] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1262.948653][ T5278] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1262.972078][T24278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1263.002764][ T5274] usb 4-1: USB disconnect, device number 83 [ 1263.020896][T24278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1263.061048][ T5278] usb 1-1: USB disconnect, device number 122 [ 1263.089848][T24278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1263.111970][T24278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1263.187212][T24416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.212222][T24416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.408217][T24426] dvmrp0: entered allmulticast mode [ 1263.448756][T24278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.501521][T24278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.530536][T14521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.537740][T14521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.637482][T22921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.644626][T22921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.768355][T24434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4533'. [ 1263.789953][T24436] fuse: Unknown parameter '000000000000000000000030x0000000000000006' [ 1263.928701][T24278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.113000][T24278] veth0_vlan: entered promiscuous mode [ 1264.198336][T24278] veth1_vlan: entered promiscuous mode [ 1264.291242][T24278] veth0_macvtap: entered promiscuous mode [ 1264.335047][T24278] veth1_macvtap: entered promiscuous mode [ 1264.401416][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.423312][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.450918][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.478856][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.490741][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.526542][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.546289][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.565968][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.584891][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.596851][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.615344][T24278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.635587][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.647425][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.660898][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.675621][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.686834][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.700245][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.711820][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.723137][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.734287][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.761252][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.800401][T24278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.885379][T24278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.909481][T24278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.934853][T24278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.945428][T24278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.059668][ T5275] usb 3-1: USB disconnect, device number 101 [ 1265.163755][ T5279] usbhid 5-1:0.0: can't add hid device: -71 [ 1265.197230][ T5279] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1265.242876][ T5279] usb 5-1: USB disconnect, device number 111 [ 1265.267538][T22906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.319207][T22906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.454674][T14521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.499251][T14521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.883661][T24512] vivid-000: disconnect [ 1266.894494][T24512] vivid-000: reconnect [ 1266.912210][ T5278] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1267.042294][T16625] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1267.137337][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.190392][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1267.222424][T16625] usb 2-1: device descriptor read/64, error -71 [ 1267.235362][ T5278] usb 3-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1267.275838][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.325561][ T5278] usb 3-1: config 0 descriptor?? [ 1267.347165][ T5278] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1267.522380][T16625] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1267.732500][T16625] usb 2-1: device descriptor read/64, error -71 [ 1267.828147][T24537] fuse: Unknown parameter '0x0000000000000004#' [ 1267.862887][T16625] usb usb2-port1: attempt power cycle [ 1268.302223][T16625] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1268.363906][T16625] usb 2-1: device descriptor read/8, error -71 [ 1268.652258][T16625] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1268.775792][T16625] usb 2-1: device descriptor read/8, error -71 [ 1268.916264][T16625] usb usb2-port1: unable to enumerate USB device [ 1269.613304][T24608] FAULT_INJECTION: forcing a failure. [ 1269.613304][T24608] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.667951][T24608] CPU: 1 UID: 0 PID: 24608 Comm: syz.0.4560 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1269.678763][T24608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1269.688869][T24608] Call Trace: [ 1269.692172][T24608] [ 1269.695121][T24608] dump_stack_lvl+0x241/0x360 [ 1269.699829][T24608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.705048][T24608] ? __pfx__printk+0x10/0x10 [ 1269.709670][T24608] ? fs_reclaim_acquire+0x93/0x140 [ 1269.714808][T24608] ? __pfx___might_resched+0x10/0x10 [ 1269.720118][T24608] should_fail_ex+0x3b0/0x4e0 [ 1269.724820][T24608] ? tomoyo_encode+0x26f/0x540 [ 1269.729607][T24608] should_failslab+0xac/0x100 [ 1269.734313][T24608] ? tomoyo_encode+0x26f/0x540 [ 1269.739086][T24608] __kmalloc_noprof+0xd8/0x400 [ 1269.743871][T24608] tomoyo_encode+0x26f/0x540 [ 1269.748490][T24608] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1269.754170][T24608] tomoyo_path_number_perm+0x23a/0x880 [ 1269.759667][T24608] ? tomoyo_path_number_perm+0x208/0x880 [ 1269.765327][T24608] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1269.771379][T24608] ? __fget_files+0x29/0x470 [ 1269.775996][T24608] ? __fget_files+0x3f6/0x470 [ 1269.780704][T24608] ? __fget_files+0x29/0x470 [ 1269.785324][T24608] security_file_ioctl+0x75/0xb0 [ 1269.790292][T24608] __se_sys_ioctl+0x47/0x170 [ 1269.794941][T24608] do_syscall_64+0xf3/0x230 [ 1269.799447][T24608] ? clear_bhb_loop+0x35/0x90 [ 1269.804144][T24608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.810062][T24608] RIP: 0033:0x7fec0f579e79 [ 1269.814535][T24608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.834231][T24608] RSP: 002b:00007fec103f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.842657][T24608] RAX: ffffffffffffffda RBX: 00007fec0f715f80 RCX: 00007fec0f579e79 [ 1269.850637][T24608] RDX: 0000000000000000 RSI: 00000000401054d6 RDI: 0000000000000003 [ 1269.858662][T24608] RBP: 00007fec103f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.866641][T24608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.874614][T24608] R13: 0000000000000000 R14: 00007fec0f715f80 R15: 00007fec0f83fa38 [ 1269.882596][T24608] [ 1269.923600][T24608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1269.933517][T24608] tap0: tun_chr_ioctl cmd 1074812118 [ 1269.949218][T17461] usb 3-1: USB disconnect, device number 102 [ 1269.972205][ T1793] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1270.090572][T24615] fuse: Unknown parameter '0x0000000000000003#' [ 1270.152801][ T1793] usb 4-1: Using ep0 maxpacket: 16 [ 1270.160156][ T1793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.175103][ T1793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.192592][ T1793] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1270.201677][ T1793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.257442][ T1793] usb 4-1: config 0 descriptor?? [ 1270.281429][ T5224] Bluetooth: Unexpected continuation frame (len 117) [ 1270.340732][T24628] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1270.340732][T24628] program syz.2.4566 not setting count and/or reply_len properly [ 1270.562229][ T5275] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1270.695696][ T1793] waltop 0003:172F:0032.001B: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.3-1/input0 [ 1270.742348][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 1270.755484][ T5275] usb 5-1: config 0 has an invalid interface number: 57 but max is 0 [ 1270.775120][ T5275] usb 5-1: config 0 has no interface number 0 [ 1270.781463][ T5275] usb 5-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.809412][ T5275] usb 5-1: config 0 interface 57 has no altsetting 0 [ 1270.830360][ T5275] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1270.839943][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.857547][ T5275] usb 5-1: config 0 descriptor?? [ 1271.146327][T24625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.172460][T24625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.201704][T24625] overlayfs: missing 'lowerdir' [ 1272.012188][T17461] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1272.202345][T17461] usb 1-1: Using ep0 maxpacket: 8 [ 1272.226859][T17461] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1272.244937][T17461] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1272.256857][T17461] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1272.268454][T17461] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1272.279798][T17461] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1272.295142][T17461] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1272.337113][T17461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.430778][ T5279] usb 4-1: USB disconnect, device number 84 [ 1272.595890][T24642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.624401][T24642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.638125][T17461] usb 1-1: GET_CAPABILITIES returned 0 [ 1272.644805][T17461] usbtmc 1-1:16.0: can't read capabilities [ 1272.846114][ T5279] usb 1-1: USB disconnect, device number 123 [ 1273.190197][ T5275] usb 5-1: string descriptor 0 read error: -71 [ 1273.201809][ T5275] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1273.232645][ T5275] gspca_sonixj: reg_w1 err -71 [ 1273.237528][ T5275] sonixj 5-1:0.57: probe with driver sonixj failed with error -71 [ 1273.269753][ T5275] usb 5-1: USB disconnect, device number 112 [ 1273.297644][T24657] fuse: Unknown parameter '0x0000000000000003#' [ 1273.412415][ T5279] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1273.510901][T24667] IPVS: Error connecting to the multicast addr [ 1273.602045][T24671] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1273.609631][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 1273.627835][ T5279] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1273.671744][ T5279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1273.699193][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1273.722228][ T1793] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1273.731132][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1273.750971][ T5279] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.782000][ T5279] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1273.824333][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.922255][ T1793] usb 3-1: Using ep0 maxpacket: 16 [ 1273.942647][ T1793] usb 3-1: config 0 has an invalid interface number: 57 but max is 0 [ 1273.958207][ T1793] usb 3-1: config 0 has no interface number 0 [ 1273.965414][ T1793] usb 3-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1274.051413][ T5279] usb 1-1: usb_control_msg returned -71 [ 1274.066785][ T5279] usbtmc 1-1:16.0: can't read capabilities [ 1274.072908][ T1793] usb 3-1: config 0 interface 57 has no altsetting 0 [ 1274.093124][ T1793] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1274.108233][ T5279] usb 1-1: USB disconnect, device number 124 [ 1274.128819][ T1793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.178659][ T1793] usb 3-1: config 0 descriptor?? [ 1274.427489][T24665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.443796][T24678] ip6t_srh: unknown srh invflags 7863 [ 1274.465070][T24665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.505461][T24665] overlayfs: missing 'lowerdir' [ 1274.582264][ T5274] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1274.792298][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 1274.830510][ T5274] usb 5-1: config 0 has an invalid interface number: 57 but max is 0 [ 1274.859868][ T5274] usb 5-1: config 0 has no interface number 0 [ 1274.877579][ T5274] usb 5-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1274.891655][ T5274] usb 5-1: config 0 interface 57 has no altsetting 0 [ 1274.898692][ T5274] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1274.915947][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.951649][ T5274] usb 5-1: config 0 descriptor?? [ 1275.273457][T24676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.285368][T24676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.322772][T17461] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1275.338275][T24676] overlayfs: missing 'lowerdir' [ 1275.544632][T17461] usb 4-1: config 1 interface 0 altsetting 14 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1275.552289][ T5279] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1275.572991][T17461] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x1 has invalid maxpacket 11455, setting to 64 [ 1275.610656][T17461] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1275.638772][T17461] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1275.671751][T17461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.697844][T17461] usb 4-1: Product: syz [ 1275.710880][T17461] usb 4-1: Manufacturer: syz [ 1275.730843][T17461] usb 4-1: SerialNumber: syz [ 1275.752270][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 1275.783359][ T5279] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 1275.811418][ T5279] usb 1-1: config 0 has no interface number 0 [ 1275.823812][ T5279] usb 1-1: config 0 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.841529][ T5279] usb 1-1: config 0 interface 57 has no altsetting 0 [ 1275.849888][ T5279] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1275.860541][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.887118][ T5279] usb 1-1: config 0 descriptor?? [ 1276.033475][T17461] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input66 [ 1276.070117][ T4665] bcm5974 4-1:1.0: could not read from device [ 1276.113462][ T4665] bcm5974 4-1:1.0: could not read from device [ 1276.124886][T24696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.149634][T24696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.158916][T17461] usb 4-1: USB disconnect, device number 85 [ 1276.173176][ T4665] bcm5974 4-1:1.0: could not read from device [ 1276.188926][ T4665] bcm5974 4-1:1.0: could not read from device [ 1276.199806][T24696] overlayfs: missing 'lowerdir' [ 1276.202590][T24704] IPVS: Error connecting to the multicast addr [ 1276.445731][ T1793] usb 3-1: string descriptor 0 read error: -71 [ 1276.470353][ T1793] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1276.493446][ T1793] gspca_sonixj: reg_w1 err -71 [ 1276.518027][ T1793] sonixj 3-1:0.57: probe with driver sonixj failed with error -71 [ 1276.549246][ T1793] usb 3-1: USB disconnect, device number 103 [ 1277.256558][ T5274] usb 5-1: string descriptor 0 read error: -71 [ 1277.267344][ T5274] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1277.292748][ T5274] gspca_sonixj: reg_w1 err -71 [ 1277.309429][ T5274] sonixj 5-1:0.57: probe with driver sonixj failed with error -71 [ 1277.345356][ T5274] usb 5-1: USB disconnect, device number 113 [ 1277.543082][T24418] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1277.775755][T24418] usb 2-1: Using ep0 maxpacket: 8 [ 1277.786684][T24418] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1277.796013][T24418] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1277.809668][T24418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1277.852233][T24418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.872837][T24418] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.890809][T24418] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1277.919818][T24418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.099652][T24724] netlink: 'syz.2.4599': attribute type 4 has an invalid length. [ 1278.193663][T24717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.212781][ T5279] usb 1-1: string descriptor 0 read error: -71 [ 1278.234799][T24717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.258365][ T5279] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1278.284700][ T5279] gspca_sonixj: reg_w1 err -71 [ 1278.306062][ T5279] sonixj 1-1:0.57: probe with driver sonixj failed with error -71 [ 1278.321593][T24418] usb 2-1: GET_CAPABILITIES returned 0 [ 1278.349536][ T5279] usb 1-1: USB disconnect, device number 125 [ 1278.355750][T24418] usbtmc 2-1:16.0: can't read capabilities [ 1278.549831][T24418] usb 2-1: USB disconnect, device number 112 [ 1278.910265][T24756] netlink: 'syz.4.4608': attribute type 12 has an invalid length. [ 1278.918460][T24756] netlink: 'syz.4.4608': attribute type 29 has an invalid length. [ 1278.932196][T24756] netlink: 'syz.4.4608': attribute type 2 has an invalid length. [ 1278.939963][T24756] netlink: 'syz.4.4608': attribute type 2 has an invalid length. [ 1278.952128][T24756] netlink: 'syz.4.4608': attribute type 1 has an invalid length. [ 1278.959964][T24756] netlink: 'syz.4.4608': attribute type 37 has an invalid length. [ 1278.968261][T17461] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1278.977448][T24756] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1279.152251][T17461] usb 4-1: device descriptor read/64, error -71 [ 1279.152251][T24418] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1279.183258][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1279.279440][T24767] input: syz1 as /devices/virtual/input/input69 [ 1279.332405][T24418] usb 2-1: Using ep0 maxpacket: 8 [ 1279.341741][T24418] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1279.350148][ T5275] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1279.362444][T24418] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1279.373654][T24418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1279.383783][T24418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1279.396089][T24418] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.409405][T24418] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1279.422521][T24418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.442407][T17461] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1279.552314][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 1279.567747][ T5275] usb 1-1: config 7 has too many interfaces: 255, using maximum allowed: 32 [ 1279.599870][ T5275] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.610799][ T5275] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 255 [ 1279.622610][T17461] usb 4-1: device descriptor read/64, error -71 [ 1279.630328][ T5275] usb 1-1: New USB device found, idVendor=0471, idProduct=07da, bcdDevice= 0.00 [ 1279.649694][T24418] usb 2-1: usb_control_msg returned -71 [ 1279.669958][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.680384][T24418] usbtmc 2-1:16.0: can't read capabilities [ 1279.709144][T24418] usb 2-1: USB disconnect, device number 113 [ 1279.779120][T17461] usb usb4-port1: attempt power cycle [ 1280.079884][ T5278] usb 1-1: USB disconnect, device number 126 [ 1280.222788][T17461] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1280.262493][ T5224] Bluetooth: hci5: command tx timeout [ 1280.268742][T17461] usb 4-1: device descriptor read/8, error -71 [ 1280.302387][T24418] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1280.482374][ T5275] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1280.497970][T24418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.523363][T24418] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1280.540635][T24418] usb 3-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1280.553319][T17461] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1280.560986][T24418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.577568][T24418] usb 3-1: config 0 descriptor?? [ 1280.591302][T24418] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1280.618338][T17461] usb 4-1: device descriptor read/8, error -71 [ 1280.682323][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 1280.711343][ T5275] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1280.731045][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.755934][ T5275] usb 2-1: Product: syz [ 1280.764168][T17461] usb usb4-port1: unable to enumerate USB device [ 1280.767006][ T5275] usb 2-1: Manufacturer: syz [ 1280.778276][ T5275] usb 2-1: SerialNumber: syz [ 1280.805320][ T5275] usb 2-1: config 0 descriptor?? [ 1280.819326][ T5275] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1281.033347][T24775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.052763][T24775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.076592][ T5275] gspca_sq930x: reg_r 001f failed -71 [ 1281.083633][ T5275] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1281.099877][T24784] vivid-000: disconnect [ 1281.113951][ T5275] usb 2-1: USB disconnect, device number 114 [ 1281.124859][T24784] vivid-000: reconnect [ 1281.322281][T17461] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1281.522745][T17461] usb 5-1: Using ep0 maxpacket: 32 [ 1281.532264][T17461] usb 5-1: no configurations [ 1281.536983][T17461] usb 5-1: can't read configurations, error -22 [ 1281.722363][T17461] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1281.922244][T17461] usb 5-1: Using ep0 maxpacket: 32 [ 1281.950580][T17461] usb 5-1: no configurations [ 1281.962482][T17461] usb 5-1: can't read configurations, error -22 [ 1281.972428][T14240] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1281.990548][T17461] usb usb5-port1: attempt power cycle [ 1282.194912][T14240] usb 2-1: Using ep0 maxpacket: 32 [ 1282.208833][T14240] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1282.227436][T14240] usb 2-1: config 0 has no interface number 0 [ 1282.246290][T14240] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1282.266262][T14240] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1282.291448][T14240] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1282.313595][T14240] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1282.334137][T14240] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1282.354886][T14240] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1282.387463][T14240] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1282.408856][T14240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.422352][T17461] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1282.431333][T14240] usb 2-1: Product: syz [ 1282.439748][T14240] usb 2-1: Manufacturer: syz [ 1282.452071][T14240] usb 2-1: SerialNumber: syz [ 1282.465732][T17461] usb 5-1: Using ep0 maxpacket: 32 [ 1282.477969][T14240] usb 2-1: config 0 descriptor?? [ 1282.486408][T17461] usb 5-1: no configurations [ 1282.502237][T17461] usb 5-1: can't read configurations, error -22 [ 1282.507663][T24789] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1282.542489][T24789] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1282.652199][T17461] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1282.714466][T17461] usb 5-1: Using ep0 maxpacket: 32 [ 1282.731292][T17461] usb 5-1: no configurations [ 1282.752320][T17461] usb 5-1: can't read configurations, error -22 [ 1282.771371][T17461] usb usb5-port1: unable to enumerate USB device [ 1282.840825][T14240] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 1282.871422][T14240] etas_es58x 2-1:0.219: could not retrieve the product info string [ 1282.947568][T14240] usb 2-1: USB disconnect, device number 115 [ 1282.992631][T14240] etas_es58x 2-1:0.219: Disconnecting syz syz [ 1283.080152][ T5275] usb 3-1: USB disconnect, device number 104 [ 1283.114112][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1283.532668][ T5279] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1283.584313][ T5275] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1283.777884][ T5279] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1283.792245][ T5275] usb 3-1: Using ep0 maxpacket: 8 [ 1283.808263][ T5275] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1283.826643][ T5279] usb 4-1: config 3 has an invalid interface number: 232 but max is 0 [ 1283.838371][ T5275] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.848389][ T5279] usb 4-1: config 3 has no interface number 0 [ 1283.857176][ T5279] usb 4-1: config 3 interface 232 altsetting 16 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1283.869455][ T5275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.879572][ T5279] usb 4-1: config 3 interface 232 has no altsetting 0 [ 1283.886486][ T5275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.898744][ T5279] usb 4-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice=bf.d3 [ 1283.905835][T14240] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1283.908396][ T5275] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.929668][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.938874][ T5279] usb 4-1: Product: syz [ 1283.943391][ T5279] usb 4-1: Manufacturer: syz [ 1283.948231][ T5279] usb 4-1: SerialNumber: syz [ 1283.953224][ T5275] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1283.980941][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.159164][T14240] usb 2-1: config 1 interface 0 altsetting 14 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1284.173036][T14240] usb 2-1: config 1 interface 0 altsetting 14 endpoint 0x1 has invalid maxpacket 11455, setting to 64 [ 1284.191279][T14240] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1284.223458][T24803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.232881][T14240] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1284.246162][T14240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.256296][T24803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.288456][T24805] xt_cluster: node mask cannot exceed total number of nodes [ 1284.300739][T14240] usb 2-1: Product: syz [ 1284.308752][T14240] usb 2-1: Manufacturer: syz [ 1284.309420][ T5275] usb 3-1: GET_CAPABILITIES returned 0 [ 1284.320607][ T5275] usbtmc 3-1:16.0: can't read capabilities [ 1284.321100][T14240] usb 2-1: SerialNumber: syz [ 1284.562333][ T5278] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1284.574766][ T5275] usb 3-1: USB disconnect, device number 105 [ 1284.613091][T14240] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input71 [ 1284.646580][ T4665] bcm5974 2-1:1.0: could not read from device [ 1284.668254][ T4665] bcm5974 2-1:1.0: could not read from device [ 1284.698510][ T4665] bcm5974 2-1:1.0: could not read from device [ 1284.710393][T14240] usb 2-1: USB disconnect, device number 116 [ 1284.727484][ T4665] bcm5974 2-1:1.0: could not read from device [ 1284.792202][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 1284.809600][ T5278] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1284.832166][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.858366][ T5278] usb 5-1: Product: syz [ 1284.872488][ T5278] usb 5-1: Manufacturer: syz [ 1284.898132][ T5278] usb 5-1: SerialNumber: syz [ 1284.921149][ T5278] usb 5-1: config 0 descriptor?? [ 1284.938321][ T5278] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1285.152300][ T5275] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1285.154233][T24815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.198204][T24815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.260011][ T5278] gspca_sq930x: reg_r 001f failed -71 [ 1285.271064][ T5278] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1285.294942][ T5278] usb 5-1: USB disconnect, device number 118 [ 1285.352230][ T5275] usb 3-1: Using ep0 maxpacket: 8 [ 1285.382786][ T5275] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1285.393453][T14240] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1285.395233][ T5275] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1285.415417][ T5275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1285.426318][ T5275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1285.436962][ T5275] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.450519][ T5275] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1285.459715][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.619802][T14240] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.630470][T14240] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1285.644841][T14240] usb 1-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1285.656828][T14240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.697344][ T5275] usb 3-1: usb_control_msg returned -71 [ 1285.726402][ T5275] usbtmc 3-1:16.0: can't read capabilities [ 1285.729220][T14240] usb 1-1: config 0 descriptor?? [ 1285.753533][T14240] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1285.775513][ T5275] usb 3-1: USB disconnect, device number 106 [ 1286.351608][ T5279] usb 4-1: USB disconnect, device number 90 [ 1286.482439][ T5275] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1286.579112][T24847] IPVS: Error connecting to the multicast addr [ 1286.672397][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 1286.691454][ T5275] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1286.758783][ T5275] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1286.775381][ T5275] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1286.786321][ T5275] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1286.799008][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.809303][ T5275] usb 5-1: Product: syz [ 1286.816887][ T5275] usb 5-1: Manufacturer: syz [ 1286.825810][ T5275] usb 5-1: SerialNumber: syz [ 1287.057966][ T5275] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input72 [ 1287.090085][ T4665] bcm5974 5-1:1.0: could not read from device [ 1287.107015][ T4665] bcm5974 5-1:1.0: could not read from device [ 1287.121362][ T5275] usb 5-1: USB disconnect, device number 119 [ 1287.139002][ T4665] bcm5974 5-1:1.0: could not read from device [ 1287.146708][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 1287.722718][ T5275] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1287.912290][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 1287.924127][ T5279] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1287.933119][ T5275] usb 4-1: no configurations [ 1287.941830][ T5275] usb 4-1: can't read configurations, error -22 [ 1288.094243][ T1793] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1288.119311][ T5275] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1288.134711][ T5279] usb 3-1: config 1 interface 0 altsetting 14 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1288.163755][ T5279] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x1 has invalid maxpacket 11455, setting to 64 [ 1288.177496][ T5279] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1288.179024][T14240] usb 1-1: USB disconnect, device number 127 [ 1288.193501][ T5279] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1288.210606][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.221083][ T5279] usb 3-1: Product: syz [ 1288.231698][ T5279] usb 3-1: Manufacturer: syz [ 1288.239278][ T5279] usb 3-1: SerialNumber: syz [ 1288.322500][ T1793] usb 5-1: Using ep0 maxpacket: 8 [ 1288.333027][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 1288.348050][ T1793] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1288.358869][ T5275] usb 4-1: no configurations [ 1288.365713][ T5275] usb 4-1: can't read configurations, error -22 [ 1288.372446][ T1793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.381081][ T5275] usb usb4-port1: attempt power cycle [ 1288.386791][ T1793] usb 5-1: Product: syz [ 1288.391852][ T1793] usb 5-1: Manufacturer: syz [ 1288.396683][ T1793] usb 5-1: SerialNumber: syz [ 1288.403757][ T1793] usb 5-1: config 0 descriptor?? [ 1288.421119][ T1793] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1288.478930][ T5279] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input73 [ 1288.492969][ T4665] bcm5974 3-1:1.0: could not read from device [ 1288.502540][ T4665] bcm5974 3-1:1.0: could not read from device [ 1288.511304][ T4665] bcm5974 3-1:1.0: could not read from device [ 1288.528625][ T5279] usb 3-1: USB disconnect, device number 107 [ 1288.555745][ T4665] bcm5974 3-1:1.0: could not read from device [ 1288.624460][T24864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.638254][T24864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.669605][ T1793] gspca_sq930x: reg_r 001f failed -71 [ 1288.676241][ T1793] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1288.689763][ T1793] usb 5-1: USB disconnect, device number 120 [ 1288.722420][T14240] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1288.812257][ T5275] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1288.842947][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 1288.848601][ T5275] usb 4-1: no configurations [ 1288.853337][ T5275] usb 4-1: can't read configurations, error -22 [ 1288.914060][T14240] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.924326][T24418] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1288.934742][T14240] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.947138][T14240] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1288.956603][T14240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1288.964746][T14240] usb 1-1: SerialNumber: syz [ 1289.002266][ T5275] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1289.032823][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 1289.038676][ T5275] usb 4-1: no configurations [ 1289.057191][ T5275] usb 4-1: can't read configurations, error -22 [ 1289.067157][ T5275] usb usb4-port1: unable to enumerate USB device [ 1289.112354][T24418] usb 2-1: Using ep0 maxpacket: 8 [ 1289.126538][T24418] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1289.143387][T24418] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.163189][T24418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.178611][T24418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1289.199342][T24418] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.221895][T24418] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1289.231865][T24418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.468758][T24868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.486853][T24868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.691572][T24418] usb 2-1: GET_CAPABILITIES returned 0 [ 1289.816296][T24418] usbtmc 2-1:16.0: can't read capabilities [ 1289.939558][T24418] usb 2-1: USB disconnect, device number 117 [ 1290.538599][T24418] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1290.552997][ T5274] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1290.752669][T24418] usb 2-1: Using ep0 maxpacket: 16 [ 1290.762243][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 1290.780671][T24418] usb 2-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice= 0.90 [ 1290.810654][ T5274] usb 3-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=b9.77 [ 1290.834463][T24418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.849140][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.884317][T24418] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1290.908188][ T5274] usb 3-1: config 0 descriptor?? [ 1290.921305][T24418] r8152-cfgselector 2-1: config 0 descriptor?? [ 1290.968808][T24418] r8152 2-1:0.0: Expected endpoints are not found [ 1290.980198][ T5274] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1291.013997][ T5274] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1291.180109][ T5278] r8152-cfgselector 2-1: USB disconnect, device number 118 [ 1291.377231][T14240] usb 1-1: 0:2 : does not exist [ 1291.412748][T14240] usb 1-1: unit 255 not found! [ 1291.469085][T14240] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1291.542738][ T5274] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 1291.576536][ T5274] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1291.583039][T14240] usb 1-1: USB disconnect, device number 2 [ 1291.601521][ T5274] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1291.642760][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1291.750836][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.174117][T16625] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1292.397031][T16625] usb 5-1: Using ep0 maxpacket: 32 [ 1292.446729][T16625] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 1292.484721][T16625] usb 5-1: config 0 has no interface number 0 [ 1292.511128][T16625] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1292.556950][T16625] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1292.596449][T16625] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1292.653447][T16625] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1292.682206][T16625] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1292.715590][T16625] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1292.751869][T16625] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1292.771848][T16625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.799320][T16625] usb 5-1: Product: syz [ 1292.828098][T16625] usb 5-1: Manufacturer: syz [ 1292.872330][T16625] usb 5-1: SerialNumber: syz [ 1292.925467][T16625] usb 5-1: config 0 descriptor?? [ 1292.950055][T24899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1292.976104][T24899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1293.256263][T16625] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 1293.281950][ T5274] usb 3-1: USB disconnect, device number 108 [ 1293.301036][T16625] etas_es58x 5-1:0.219: could not retrieve the product info string [ 1293.427025][T16625] usb 5-1: USB disconnect, device number 121 [ 1293.483548][T16625] etas_es58x 5-1:0.219: Disconnecting syz syz [ 1293.567958][T24938] tipc: Started in network mode [ 1293.586828][T24938] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1293.611598][T24938] tipc: Enabling of bearer rejected, failed to enable media [ 1293.710249][T24942] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4663'. [ 1294.035012][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1294.035030][ T29] audit: type=1326 audit(1724488290.780:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.070024][T24956] mmap: syz.4.4666 (24956): VmData 54169600 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1294.134375][ T29] audit: type=1326 audit(1724488290.780:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.262454][ T29] audit: type=1326 audit(1724488290.780:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.284792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.314989][T24964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1294.375634][ T29] audit: type=1326 audit(1724488290.790:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.405124][ T29] audit: type=1326 audit(1724488290.790:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.489772][ T29] audit: type=1326 audit(1724488290.790:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.556444][ T29] audit: type=1326 audit(1724488290.790:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.622235][T16625] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1294.660886][ T29] audit: type=1326 audit(1724488290.790:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.683283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.739334][ T29] audit: type=1326 audit(1724488290.790:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.821495][ T29] audit: type=1326 audit(1724488290.790:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24955 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcb0c979e79 code=0x7ffc0000 [ 1294.849907][T16625] usb 1-1: Using ep0 maxpacket: 32 [ 1294.857130][T16625] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1294.900524][T16625] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1294.941881][T16625] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1294.951374][T16625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.989103][T16625] usb 1-1: Product: syz [ 1295.006290][T16625] usb 1-1: Manufacturer: syz [ 1295.025782][T16625] usb 1-1: SerialNumber: syz [ 1295.190232][T24982] ip6t_srh: unknown srh invflags 7863 [ 1295.344025][T16625] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1295.405835][T16625] usb 1-1: USB disconnect, device number 3 [ 1295.438351][T16625] usblp0: removed [ 1295.684243][T14240] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1295.746274][T24989] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1295.882461][T14240] usb 2-1: Using ep0 maxpacket: 16 [ 1295.942222][T14240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.991263][T14240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.046901][T14240] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1296.080542][T14240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.116137][T14240] usb 2-1: config 0 descriptor?? [ 1296.181055][T25001] xt_hashlimit: overflow, try lower: 3/0 [ 1296.464222][ T5274] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1296.474321][T24418] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 1296.575641][T24985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.603075][ T1793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1296.615176][T24985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.666578][ T5274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.666657][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1296.666701][ T5274] usb 5-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1296.666718][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.669431][ T5274] usb 5-1: config 0 descriptor?? [ 1296.680003][ T5274] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1296.751980][T24418] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.752033][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1296.752056][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1296.752313][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1296.752341][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1296.762531][T24418] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.762579][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1296.762602][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1296.762624][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1296.762649][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1296.773872][T24418] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.773905][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1296.773919][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1296.773932][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1296.773954][T24418] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1296.799744][T24418] usb 3-1: string descriptor 0 read error: -22 [ 1296.799841][T24418] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1296.799868][T24418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.807741][T24418] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1296.862261][ T1793] usb 1-1: Using ep0 maxpacket: 16 [ 1296.865918][ T1793] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1296.865947][ T1793] usb 1-1: config 0 has no interface number 0 [ 1296.865988][ T1793] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1296.866015][ T1793] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1296.866040][ T1793] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1296.868102][ T1793] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1296.868133][ T1793] usb 1-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 1296.868154][ T1793] usb 1-1: Manufacturer: syz [ 1296.868170][ T1793] usb 1-1: SerialNumber: syz [ 1296.871349][ T1793] usb 1-1: config 0 descriptor?? [ 1296.880063][ T1793] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1297.018716][ T1793] usb 3-1: USB disconnect, device number 109 [ 1297.721993][T25007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4679'. [ 1297.872443][ T30] INFO: task syz.3.4186:22988 blocked for more than 143 seconds. [ 1297.890021][ T30] Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1297.898944][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1297.908414][ T30] task:syz.3.4186 state:D stack:25488 pid:22988 tgid:22988 ppid:21581 flags:0x00004004 [ 1297.920137][ T30] Call Trace: [ 1297.924061][ T30] [ 1297.928313][ T30] __schedule+0x1800/0x4a60 [ 1297.934217][ T30] ? __pfx___schedule+0x10/0x10 [ 1297.939326][ T30] ? __pfx_lock_release+0x10/0x10 [ 1297.946207][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1297.951860][ T30] ? schedule+0x90/0x320 [ 1297.971286][ T30] schedule+0x14b/0x320 [ 1297.976532][ T30] schedule_preempt_disabled+0x13/0x30 [ 1297.982609][ T30] __mutex_lock+0x6a4/0xd70 [ 1297.987511][ T30] ? __mutex_lock+0x527/0xd70 [ 1297.993121][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 1297.998473][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1298.004265][ T30] ? __pfx_up_write+0x10/0x10 [ 1298.009309][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1298.015195][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 1298.021632][ T30] hugetlb_wp+0x104d/0x3a90 [ 1298.026373][ T30] ? mark_lock+0x9a/0x350 [ 1298.031036][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 1298.036639][ T30] ? __pfx___might_resched+0x10/0x10 [ 1298.043452][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1298.050086][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1298.058121][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1298.065970][ T30] ? __filemap_get_folio+0x769/0xc10 [ 1298.073471][ T30] hugetlb_fault+0x27b2/0x3770 [ 1298.078911][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1298.086635][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1298.092426][T16625] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1298.092828][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1298.106726][ T30] handle_mm_fault+0x173f/0x1980 [ 1298.111974][ T30] ? __pfx_lock_release+0x10/0x10 [ 1298.117418][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1298.123366][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 1298.130198][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 1298.136037][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1298.141897][ T30] ? exc_page_fault+0x113/0x8c0 [ 1298.148387][ T30] exc_page_fault+0x459/0x8c0 [ 1298.155046][ T30] asm_exc_page_fault+0x26/0x30 [ 1298.163440][ T30] RIP: 0033:0x7fa56db41918 [ 1298.168967][ T30] RSP: 002b:00007fa56de3fb98 EFLAGS: 00010202 [ 1298.179157][ T30] RAX: 0000000020000140 RBX: 0000000000000004 RCX: 006d766b2f766564 [ 1298.191066][ T30] RDX: 0000000000000009 RSI: 6d766b2f7665642f RDI: 0000000020000140 [ 1298.211364][ T30] RBP: 00007fa56de3fc68 R08: 00007fa56da00000 R09: 0000000000000001 [ 1298.265043][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000032 [ 1298.275803][ T30] R13: 00007fa56de3fc90 R14: 00007fa56de3fcb0 R15: fffffffffffffffe [ 1298.288057][ T30] [ 1298.293657][ T30] INFO: task syz.3.4186:22989 blocked for more than 143 seconds. [ 1298.304495][ T30] Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1298.313129][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1298.317111][T16625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.322549][ T30] task:syz.3.4186 state:D stack:24112 pid:22989 tgid:22988 ppid:21581 flags:0x00004004 [ 1298.350677][ T30] Call Trace: [ 1298.354743][ T30] [ 1298.357941][ T30] __schedule+0x1800/0x4a60 [ 1298.380295][ T30] ? __pfx___schedule+0x10/0x10 [ 1298.390028][ T30] ? __pfx_lock_release+0x10/0x10 [ 1298.415600][ T30] ? irqentry_exit+0x63/0x90 [ 1298.420879][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1298.435965][ T30] ? schedule+0x90/0x320 [ 1298.437369][T16625] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1298.475649][ T30] schedule+0x14b/0x320 [ 1298.485174][ T30] io_schedule+0x8d/0x110 [ 1298.489796][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1298.507877][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1298.526370][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1298.535112][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1298.541284][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 1298.553656][ T30] __filemap_get_folio+0xb7/0xc10 [ 1298.574354][ T30] hugetlb_fault+0x1b72/0x3770 [ 1298.581580][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1298.581677][T14240] usbhid 2-1:0.0: can't add hid device: -71 [ 1298.598077][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1298.598861][T16625] usb 4-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00 [ 1298.622296][T14240] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1298.631001][T16625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.656958][ T30] ? mt_find+0x226/0x850 [ 1298.658393][T14240] usb 2-1: USB disconnect, device number 119 [ 1298.672371][T16625] usb 4-1: config 0 descriptor?? [ 1298.689557][T16625] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1298.698756][ T30] ? __pfx_lock_release+0x10/0x10 [ 1298.717977][ T30] handle_mm_fault+0x173f/0x1980 [ 1298.746383][ T30] ? mt_find+0x62d/0x850 [ 1298.751748][ T30] ? mt_find+0x226/0x850 [ 1298.756686][ T30] ? __pfx_mt_find+0x10/0x10 [ 1298.762274][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1298.769056][ T30] ? find_vma+0xf9/0x170 [ 1298.776884][ T30] ? __pfx_find_vma+0x10/0x10 [ 1298.782246][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1298.789445][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1298.797074][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1298.802618][ T30] exc_page_fault+0x2b9/0x8c0 [ 1298.807759][ T30] asm_exc_page_fault+0x26/0x30 [ 1298.813204][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 1298.819258][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 1298.841964][ T30] RSP: 0018:ffffc90004d47778 EFLAGS: 00050202 [ 1298.854991][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 1298.866612][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d80 [ 1298.879044][ T30] RBP: ffffc90004d47ec8 R08: ffffffff9017f46f R09: 1ffffffff202fe8d [ 1298.887484][ T30] R10: dffffc0000000000 R11: fffffbfff202fe8e R12: 1ffff920009a8f7d [ 1298.906098][ T30] R13: 1ffff920009a8f08 R14: 0000000020800000 R15: 0000000000800000 [ 1298.915275][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 1298.920981][ T30] ? stack_trace_save+0x118/0x1d0 [ 1298.929683][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1298.936372][ T30] ? stack_depot_save_flags+0x29/0x830 [ 1298.946953][ T30] ? kasan_save_track+0x51/0x80 [ 1298.954388][ T30] ? kasan_save_track+0x3f/0x80 [ 1298.961844][ T30] ? kasan_save_free_info+0x40/0x50 [ 1298.971038][ T30] ? poison_slab_object+0xe0/0x150 [ 1298.979544][ T30] ? __kasan_slab_free+0x37/0x60 [ 1298.988087][ T30] ? kfree+0x149/0x360 [ 1299.005133][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 1299.015590][ T30] ? security_file_ioctl+0x75/0xb0 [ 1299.021008][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1299.032345][ T30] ? do_syscall_64+0xf3/0x230 [ 1299.038027][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.048131][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 1299.059031][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1299.066684][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1299.073653][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1299.080777][ T30] ? __pfx_lock_release+0x10/0x10 [ 1299.101022][ T30] ? kfree+0x149/0x360 [ 1299.105774][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1299.111552][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1299.120054][ T30] ? __fget_files+0x29/0x470 [ 1299.124883][ T30] ? __fget_files+0x3f6/0x470 [ 1299.131694][ T30] ? __fget_files+0x29/0x470 [ 1299.150234][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1299.158304][ T30] ? security_file_ioctl+0x87/0xb0 [ 1299.163501][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1299.169013][ T30] __se_sys_ioctl+0xfc/0x170 [ 1299.173641][ T30] do_syscall_64+0xf3/0x230 [ 1299.178141][ T30] ? clear_bhb_loop+0x35/0x90 [ 1299.183241][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.189164][ T30] RIP: 0033:0x7fa56db79e79 [ 1299.195089][ T30] RSP: 002b:00007fa56ea1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.203618][ T30] RAX: ffffffffffffffda RBX: 00007fa56dd15f80 RCX: 00007fa56db79e79 [ 1299.211594][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 1299.219641][ T30] RBP: 00007fa56dbe793e R08: 0000000000000000 R09: 0000000000000000 [ 1299.227659][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.235696][ T30] R13: 0000000000000000 R14: 00007fa56dd15f80 R15: 00007fa56de3fa38 [ 1299.243764][ T30] [ 1299.246843][ T30] [ 1299.246843][ T30] Showing all locks held in the system: [ 1299.262869][ T30] 1 lock held by khungtaskd/30: [ 1299.269266][T16625] usb 1-1: USB disconnect, device number 4 [ 1299.278308][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1299.293143][T14240] usb 5-1: USB disconnect, device number 122 [ 1299.308273][ T30] 2 locks held by getty/4977: [ 1299.313453][ T30] #0: ffff88802ab7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1299.323770][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1299.334309][ T30] 3 locks held by kworker/1:5/5276: [ 1299.339513][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1299.350527][ T30] #1: ffffc9000406fd00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1299.363080][ T30] #2: ffffffff8e7e1850 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_lock_wait+0x14e/0x260 [ 1299.373821][ T30] 3 locks held by kworker/0:0/14240: [ 1299.379108][ T30] #0: ffff88801d2dc948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1299.391338][ T30] #1: ffffc90003737d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1299.403398][ T30] #2: ffff888023d67190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1299.415436][ T30] 3 locks held by kworker/0:5/16625: [ 1299.420848][ T30] #0: ffff88801d2dc948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1299.432320][ T30] #1: ffffc9000509fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1299.444238][ T30] #2: ffff888023cc9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1299.453208][ T30] 3 locks held by kworker/u8:10/22927: [ 1299.458660][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1299.469358][ T30] #1: ffff8880b9328948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 1299.480810][ T30] #2: ffff8880b932a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 1299.490575][ T30] 2 locks held by syz.3.4186/22988: [ 1299.495839][ T30] #0: ffff88807d65d9b8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 1299.506204][ T30] #1: ffff88801beba698 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 1299.518192][ T30] 3 locks held by syz.3.4186/22989: [ 1299.525237][ T30] #0: ffff88807c41d718 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 1299.535258][ T30] #1: ffff88801beba698 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 1299.546126][ T30] #2: ffff88806483f8e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 1299.556100][ T30] 1 lock held by syz.0.4678/24994: [ 1299.561232][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1299.572219][ T30] 1 lock held by syz.4.4679/25006: [ 1299.577341][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1299.588360][ T30] [ 1299.590722][ T30] ============================================= [ 1299.590722][ T30] [ 1299.604660][ T30] NMI backtrace for cpu 0 [ 1299.609017][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1299.619518][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1299.629563][ T30] Call Trace: [ 1299.632833][ T30] [ 1299.635749][ T30] dump_stack_lvl+0x241/0x360 [ 1299.640497][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1299.645676][ T30] ? __pfx__printk+0x10/0x10 [ 1299.650254][ T30] ? vprintk_emit+0x667/0x7c0 [ 1299.654921][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1299.659931][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1299.664858][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1299.670297][ T30] ? _printk+0xd5/0x120 [ 1299.674447][ T30] ? __pfx__printk+0x10/0x10 [ 1299.679035][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1299.683871][ T30] ? __pfx__printk+0x10/0x10 [ 1299.688448][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1299.693468][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1299.699453][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1299.705435][ T30] watchdog+0xff4/0x1040 [ 1299.709669][ T30] ? watchdog+0x1ea/0x1040 [ 1299.714101][ T30] ? __pfx_watchdog+0x10/0x10 [ 1299.718767][ T30] kthread+0x2f0/0x390 [ 1299.722829][ T30] ? __pfx_watchdog+0x10/0x10 [ 1299.727493][ T30] ? __pfx_kthread+0x10/0x10 [ 1299.732091][ T30] ret_from_fork+0x4b/0x80 [ 1299.736532][ T30] ? __pfx_kthread+0x10/0x10 [ 1299.741123][ T30] ret_from_fork_asm+0x1a/0x30 [ 1299.745980][ T30] [ 1299.749039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.755431][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1299.760657][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 1299.806629][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1299.813506][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 1299.824014][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1299.834063][ T30] Call Trace: [ 1299.837334][ T30] [ 1299.840257][ T30] dump_stack_lvl+0x241/0x360 [ 1299.844929][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1299.850116][ T30] ? __pfx__printk+0x10/0x10 [ 1299.854714][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1299.860692][ T30] ? vscnprintf+0x5d/0x90 [ 1299.865014][ T30] panic+0x349/0x860 [ 1299.868910][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1299.875055][ T30] ? __pfx_panic+0x10/0x10 [ 1299.879461][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1299.884821][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1299.890357][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1299.895719][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1299.901867][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1299.908016][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1299.914164][ T30] watchdog+0x1033/0x1040 [ 1299.918491][ T30] ? watchdog+0x1ea/0x1040 [ 1299.922902][ T30] ? __pfx_watchdog+0x10/0x10 [ 1299.927569][ T30] kthread+0x2f0/0x390 [ 1299.931628][ T30] ? __pfx_watchdog+0x10/0x10 [ 1299.936386][ T30] ? __pfx_kthread+0x10/0x10 [ 1299.940969][ T30] ret_from_fork+0x4b/0x80 [ 1299.945464][ T30] ? __pfx_kthread+0x10/0x10 [ 1299.950047][ T30] ret_from_fork_asm+0x1a/0x30 [ 1299.954814][ T30] [ 1299.958051][ T30] Kernel Offset: disabled [ 1299.962365][ T30] Rebooting in 86400 seconds..