last executing test programs: 9.169259748s ago: executing program 3 (id=658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911031000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x2e, 0x0, @val=@iter={0x0}}, 0x20) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3ff, 0x8, 0x1, {0x22, 0xca9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0x23, 0x7, {0x7, 0x30, "978d9cbf2d"}}, &(0x7f0000000080)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "e5322fb60c802c3dc25d1a20d1d41ccc99422aa9e83dc9afc48057ba384569cac9f3a77b5c4c233963ee8c4f803745367cf4344b69160e0a9b55e02a0312371f7fb50f90896de3f4b57491d5dea2181e4c5919b398cb1e9f1b6e8a394581b2aa378da82e0c4e9d3ccc08de8e2d88b3fe61c2d2a27a1526eca9609044de6ba310aae4d580489cd7d5c24d42c9de3cb29c167da8eee0e6143e00243b43b6ec85a15e011fe9d87a5487f229d6d2a9c2d8bd3c11d7d353556d3ae1aff5b8ddbf00d1d0ea3ccf15f58c56f640a8b3aeb4063a13e1ba7fc732111dff65f05b04e2c7066c317fcaa1e22ffd13"}}, &(0x7f0000000180)={0x0, 0x22, 0x22, {[@main=@item_012={0x2, 0x0, 0xc, "8661"}, @local=@item_4={0x3, 0x2, 0x8, "627cd0b9"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x7, "54bc91b9"}, @main=@item_4={0x3, 0x0, 0x8, "92dd6695"}, @local=@item_4={0x3, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0x8, "eb52f8bc"}, @main=@item_4={0x3, 0x0, 0x0, "af2ad07c"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x38d}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x8c, "059d864c2e7b1132985b6e633bad8a8131f9924454cbfbd27652bf8bf2a9040dd82ce95b1ef52d9c593eebf04509bc327379ad0748419f944e83c3c9670a8e2a314959165ba12d86ed79342d9a876907d848b5400e0d1d62e86b00cad2ec304347599f819bf43e2827e3b06e3a47fda0a9155809251d92f72bf93d4adaa12ddf8e79f0873815cc0bc07b365a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000380)={0x20, 0x1, 0xd8, "4958b6a047e4d8dd36ef2e7f27fec0989bfea264468ba590b1963561c03f9660547af41387a33bb4a4d206f6d401586903e524e93e1db25f0e786121e9e5f13e40935a64904a7f44bfa03f8f62b75492de842207268adb28abbba5e4025443a5d5b55e67f6a798c0ff293861599665d1aa81f9d37068de00bfe7dca6a9722a7fb57c63a9525f6750b3a056d2c31129b91c68b6563f12aaa22d2e1c8e096455164b27117925e85d0e1e87c9447c12421bd25f55a7b4976d36657ca6bce098e82bd97bc2cb66fab77ef22d496b6ee3971419c8a23b5971b68c"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) 7.635797478s ago: executing program 4 (id=663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711067000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0xff00, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.571034328s ago: executing program 4 (id=665): unshare(0x40000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0xc0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009662da20402001497747010203010902"], 0x0) socket$inet6(0xa, 0x3, 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1000000c, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) read$alg(r8, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) 7.439707312s ago: executing program 3 (id=666): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1fff, r0, 0x0, 0x0, 0x7, 0x0, 0x2000}]) 6.99135366s ago: executing program 3 (id=668): syz_io_uring_setup(0x6ead, &(0x7f0000000000)={0x0, 0x565e, 0x8, 0x2, 0x398}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (async, rerun: 64) syz_io_uring_setup(0x43ec, &(0x7f0000000100)={0x0, 0x45c9, 0x1, 0x3, 0x1ad}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) (async, rerun: 64) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0xffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="190154d7db4f9a2365b0a1e2edfb05a797ffc5599799ecffdfff1cb5aaa9b1baa1", 0x21}, {&(0x7f0000000240)="b48a85e27924c4bb89b8b47c3520dc99c468a858365e446e25a3e2a87289be09de71f927dad369f2e1a01de6ccc38fd52072981135fb5928d26102f2a566240b9849280b9c2109ec0c68acde72da8cc4b928448a7758fc51f8b9e7ae5a43e7269a4b65fcdd9f7ebd9cf15d1b937c18efacbc674b4c91e24ace3e10083b6488c1320538bb2b69c422d029be8f7a91b916a711f6ac1905fa2ef70702a4fc84d4479fae052e4f5b87c803c73132fa06ab5da089fc6404b9700dec6548c735bc035b", 0xc0}], 0x2, 0xf, 0x0, {0x0, r5}}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, 0xffffffffffffffff, 0x37, 0x0}) (async, rerun: 64) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_open_dev$rtc(&(0x7f00000003c0), 0x3337, 0x800) ioctl$RTC_EPOCH_SET(r10, 0x4008700e, 0x56) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18081000", @ANYRES32=r6, @ANYRES64=0x0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.863516713s ago: executing program 3 (id=669): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x197302, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_getattr(r3, &(0x7f00000000c0)={0x38}, 0x38, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x299000, 0x28c000, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x7101}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/4096) socket$tipc(0x1e, 0x2, 0x0) 4.602080969s ago: executing program 2 (id=679): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x18, 0x2, {}, {0x3, 0xff8e}, {0xf4ef}, {0xffffffff, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}) 4.391008178s ago: executing program 0 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003300)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) (async) r3 = socket$inet6(0xa, 0xa, 0x8000000003c) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x8) r7 = socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f00002b4000/0x1000)=nil, 0x1, 0x0, 0x0, 0x2, 0x92, 0x0, 0x1a}) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) (async) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x230, 0x270, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e22], [0x4e24, 0x4e20], 0x1, 0x1, 0xe, 0xdd}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x1af5, 0x3}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "87d4c718c1d7dd1aa99b850d63813239ff77ca7ddb31a9f167958a960a00"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 4.183705548s ago: executing program 1 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000002400000000000aa8000000060a0b040000000000000000020000007c000480200001800e000100636f6e6e6c696d69740000000c0002800800014000000000580001800e000100627974656f7264657200000044000280080002400000000208000340000000000800024000000015080002400000001308000440000000030800034000000001080002400000000f08000240000000100900010073797a30000000100900020073797a320000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 4.183328617s ago: executing program 4 (id=682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="891070000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x201, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.871065004s ago: executing program 2 (id=683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a"], 0x64}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x800001004, 0x804, 0x4, 0xc, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x6], 0x8000000, 0x141200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.852225496s ago: executing program 0 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0x10000003, "47a503000000080000002600000006008100000000ff000000000000a8db0700"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xc, "55780d4dc328000010c46fa9d1f5ffb92eafb6723b08000000172578e35bde00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x492, "3dd6d0c1a11354eb000014ffffffffffff00"}) r2 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x11, &(0x7f0000000600)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xfffffefd, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xd020, 0x50000}}}}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0x10000003, "47a503000000080000002600000006008100000000ff000000000000a8db0700"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xc, "55780d4dc328000010c46fa9d1f5ffb92eafb6723b08000000172578e35bde00"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x492, "3dd6d0c1a11354eb000014ffffffffffff00"}) (async) getpid() (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) ustat(0x11, &(0x7f0000000600)) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xfffffefd, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xd020, 0x50000}}}}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 3.543582006s ago: executing program 1 (id=685): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00A\x00'}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 3.543118437s ago: executing program 4 (id=686): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f8ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb9134658fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e924d6b1594af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e96825d7bbdd97e4bae368d009b4611619a778f547fa1c92cc656a89728a6a1758b98fd27e1f5e1b446506d8947ca82bac7c2f00"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, 0x1}, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000001c0)=' ', 0x1, 0x20000840, &(0x7f00000002c0)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r8 = syz_open_dev$loop(&(0x7f00000000c0), 0xa, 0x26600) ioctl$LOOP_CLR_FD(r8, 0x4c01) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="34006b0095f8a76f09709369c63ffa77fe9914f0997f157d0990de8d85b77d8535371bc4fcde6ef7cccf3297530b43868d97c03137ad9a27fcb8cf0f54504c7ca288f4c5d425ee918f9f9f3c2bcb6de823e0aa68be434316e43925ae1066b99d30186b4950ad674f92cb1ad8cfe96c876cbb5543d60732b5abbb1e6aedfaff750600ed11a32abe31ebafc2ed46cffda0c5820ae52513e585176d", @ANYRES16=r10, @ANYBLOB="010000000000000000001c000000200001801400020074756e6c30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB], 0x34}}, 0x4040010) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf25240000005800018014000200697036677265300000000000000000001400020069703665727370616e3000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="14000200766c616e300000000000000000000000380001800800030001000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="08000300020000001400020076657468315f747e6f5f626174616476002c0001801400020069703674656c30000000000000000000140002006e696376663000000000000000000000480001800800170072bf924c22903034b380ba5c5fb99c0b02000000144002007465616d5f736c61766529b5affed88f04545f31000000000800fe88f5ae0500000000000000030003000000", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="340001801400020076657468315f766c616e0000000000000800030003000000140002006e657470636930000000000000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x20080090}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x4, 0x80, 0x3, 0xcb3}, {0x4, 0x81, 0x4, 0xe2b}, {0x7ff, 0x0, 0xf4, 0x1}]}, 0x10) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffc, 0x8000000000000000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x1ff, 0x200000000001}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1}) r13 = socket$inet(0x2, 0x3, 0x7f) r14 = syz_usb_connect(0x6, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904"], 0x0) syz_usb_control_io$cdc_ncm(r14, 0x0, 0x0) r15 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r15, 0x0, 0x24, &(0x7f0000000740)={@broadcast, @empty}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRESOCT, @ANYRES64], 0x214}, 0x1, 0x0, 0x0, 0x433aeb8d8bf9adea}, 0x4048001) setsockopt$inet_int(r13, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x2) 3.244073539s ago: executing program 1 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) rename(&(0x7f0000000900)='./file0\x00', &(0x7f0000000bc0)='./file1\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x5, 0x8, 0x3, 0x65303, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0xf, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000940)='%pI4 \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x6e80138, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0xc, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000e2ffffffffffff0873000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001860000000000000000000000000010018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x6, r5, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0x5, 0xffff}, 0x10, r6, r7, 0x1, &(0x7f0000000a40)=[r8, r1, r9, r10, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x2, 0x5, 0xe, 0x2}], 0x10, 0x4, @void, @value}, 0x94) unlink(&(0x7f0000000000)='./file0\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) 2.832999205s ago: executing program 1 (id=688): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') pread64(r1, 0x0, 0x0, 0x800000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x2000000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e) 2.829172522s ago: executing program 3 (id=689): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x70, 0x96, 0x1c, 0x40, 0xfe9, 0xdb55, 0x69fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf4, 0x0, 0x0, 0xd4, 0xcb, 0x5c}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x20004040, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.711244473s ago: executing program 4 (id=690): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000010000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2.709563486s ago: executing program 2 (id=691): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect(r4, &(0x7f00000001c0)=@can={0x1d, r5}, 0x80) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000300)=""/56}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000800000000000200"}) 2.37688471s ago: executing program 4 (id=692): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1f0, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}}, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010070000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a000010090581034000000000090401"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xb423, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4810000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) listen(r1, 0x50) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.375957837s ago: executing program 1 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0xe000000, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 2.231230785s ago: executing program 1 (id=693): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'team0\x00', &(0x7f0000000f40)=@ethtool_wolinfo={0x4b, 0xfffffffc, 0x0, "000000002191"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x3}, {0x6, 0x0, 0x3, 0xffffffff}]}) write$ppp(r3, &(0x7f0000000140)="1627", 0x2) sendto$unix(r2, &(0x7f00000004c0)="a0", 0x1, 0x40400c1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) 2.035564948s ago: executing program 0 (id=694): fsopen(0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r0, 0x0, 0x0) mq_open(&(0x7f00000000c0)='ip_vti0\x00', 0x1, 0x2, &(0x7f0000000100)={0x5, 0x8, 0x4, 0x100000001}) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x300, 0x10000047}, 0x4000084) 1.910849302s ago: executing program 2 (id=695): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x9, 0x9, 0x0, 0xc, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x7, 0x100000, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x237f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.900147812s ago: executing program 0 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001c3ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e20000080004004fff000008001b"], 0x30}, 0x1, 0x4fff}, 0x0) 1.531391974s ago: executing program 0 (id=697): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="589374c96ee3", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000140)=0x512a) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x4, 0x73, 0x8, 0x7}, 0x15, [0x1, 0x19, 0xfcf8, 0x7, 0x8, 0x5, 0x8, 0x9, 0x3, 0x5, 0x76, 0x1, 0x3, 0x80000, 0x3, 0x8, 0x7f, 0x8240, 0x40, 0x7, 0x35359c9f, 0x3, 0x6, 0x4, 0x5d, 0x3, 0x8, 0x2, 0x3, 0x0, 0x1, 0x8, 0xfffffff8, 0x3, 0x6, 0x5, 0xf, 0x9, 0x3, 0x1ff, 0x9, 0x8, 0x10, 0x1ac, 0x63, 0x40, 0x10000, 0x2, 0x430e155b, 0x7, 0xffffb64a, 0x7, 0x5, 0x6, 0x8, 0x2, 0x300, 0x5, 0xd4, 0x3, 0x86, 0x4c93ed95, 0xfffffff6, 0x566e5adb], [0xa2, 0x1, 0x7f, 0x1000, 0x5, 0xffffffff, 0x800, 0xf1, 0x28d, 0x16, 0x1000, 0x6, 0x6, 0x9, 0x7, 0x71dd, 0x3, 0x24eaa159, 0x81, 0x6, 0x1, 0x1d, 0x80, 0xffffffff, 0x2, 0x8, 0x2051, 0x8, 0x81, 0x6, 0x80, 0x1ff, 0x3, 0x5, 0xffff, 0x7ff, 0x2, 0x0, 0x78a, 0x80000000, 0x3, 0x3, 0x8, 0x5, 0x9, 0x10001, 0x222a0, 0x1000, 0x2, 0x1, 0x8, 0x3c0, 0x7, 0x10, 0x5, 0xf, 0x5, 0x0, 0xa00f, 0x8, 0x8, 0x7fff, 0x80000001], [0x4, 0x0, 0x8, 0x80000000, 0xe, 0x5f8, 0x7, 0x7, 0x715, 0x8, 0x6, 0x8, 0x6, 0x3, 0x7, 0x5c, 0x9, 0x4, 0x1, 0x7f, 0xfffffff8, 0x4, 0x3, 0x0, 0x6, 0x6, 0x2, 0x4de, 0x1, 0x9, 0x2, 0x4, 0xffff, 0x4319, 0x1, 0x52, 0xf6ec, 0xa, 0x7b, 0xfff, 0x8000, 0x1, 0x7, 0x3, 0x86, 0x7fff, 0x4, 0x728, 0x8, 0x4, 0x868c, 0x0, 0xabe8, 0xfffffc9c, 0x7, 0xffff2b18, 0x8, 0x3, 0x0, 0x0, 0xfff, 0x7, 0xb, 0x5], [0x7, 0x1, 0xffffffc0, 0x1b, 0xfffffff9, 0x9, 0xf, 0x1, 0x3, 0x8001, 0x6, 0x8, 0xfffffff9, 0x7, 0x2, 0x7, 0xa4, 0x6, 0x8, 0x8, 0x7f, 0x600, 0xd, 0x171a, 0xffff, 0x100, 0x101, 0xf, 0xffffffff, 0x4, 0x80, 0x3, 0xffffff7f, 0x3fe6, 0x0, 0xf, 0xf, 0x8, 0x3ed6, 0xb6, 0x8, 0x9, 0x7fffffff, 0x80, 0x40, 0x6, 0x409, 0x10, 0x1, 0x8, 0x1, 0x9, 0x1, 0x70a1, 0x8, 0x7, 0x4, 0xfff, 0x5, 0x2, 0x2, 0x2e61, 0xffffffff, 0x40]}, 0x45c) mq_open(&(0x7f0000000280)='/dev/sg#\x00', 0x1, 0x44, &(0x7f0000000300)={0x75ae, 0xfb1, 0x5, 0x100000000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x55af) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x80010, r8, 0xd20d5000) socket$alg(0x26, 0x5, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@hyper, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) 1.451954389s ago: executing program 2 (id=698): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x1800}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.394824041s ago: executing program 3 (id=699): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x7, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="26f00fba2f43baf80c66b831810f8466efbafc0cb0aaee3e0f01c5baf80c66b8db71d38466efbafc0cec67f33e260f1cbe0b00000064d98300000f78d264def4baf80c66b8a5b1ea8566efbafc0cec64360f796669", 0x55}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="7472796c6ff9ca9adf3f17634f6d00"], 0xf) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x20000000005, 0x421}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000000)) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000002c0)=0x1ff, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0xd0, 0x2e8, 0x0, 0x490, 0x2e8, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x29}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff000000, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], '\x00', 'hsr0\x00', {}, {}, 0x2b, 0x0, 0x6, 0xd}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0xf8, 0x2, 0x67, 0xb896, 0x81, 0x200}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xff000000, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xffffffff], 'pimreg0\x00', 'wlan0\x00', {}, {}, 0x1, 0x7, 0x7, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private2, 0x4, 0x9, 0x5}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh1={{0x90}, {0x2e, 0x5, 0xd, 0x58, 0x6, @private1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff], [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00], 0x182}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4=@remote, 0x2e, 0x3b, 0x2}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x80, 0x4d3]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) 778.665µs ago: executing program 0 (id=700): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x197302, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_getattr(r3, &(0x7f00000000c0)={0x38}, 0x38, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x299000, 0x28c000, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x7101}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/4096) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 2 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a"], 0x64}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x800001004, 0x804, 0x4, 0xc, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x6], 0x8000000, 0x141200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): new high-speed USB device number 10 using dummy_hcd [ 157.641229][ T5893] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 157.689785][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.716004][ T5893] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.733379][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.743672][ T5893] usb 4-1: Product: syz [ 157.748473][ T5893] usb 4-1: Manufacturer: syz [ 157.757066][ T5893] usb 4-1: SerialNumber: syz [ 157.773165][ T5893] usb 4-1: config 0 descriptor?? [ 157.784382][ T5893] usb 4-1: selecting invalid altsetting 0 [ 157.838645][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 157.871731][ T5889] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 157.880337][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.894814][ T5889] usb 1-1: config 0 has no interface number 0 [ 157.906493][ T5889] usb 1-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 157.916996][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.925496][ T5889] usb 1-1: Product: syz [ 157.931708][ T5889] usb 1-1: Manufacturer: syz [ 157.937427][ T5889] usb 1-1: SerialNumber: syz [ 157.947886][ T5889] usb 1-1: config 0 descriptor?? [ 157.963663][ T5889] usb 1-1: bad CDC descriptors [ 158.027696][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.051311][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.080244][ T5889] usb 4-1: USB disconnect, device number 8 [ 158.122537][ T5893] usb 5-1: USB disconnect, device number 19 [ 158.165505][ T10] usb 1-1: USB disconnect, device number 10 [ 158.308861][ T6762] fuse: Unknown parameter '000000000000000000030æµ%W' [ 158.329420][ T6762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.921425][ T6779] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 158.937504][ T6779] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.090057][ T6785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.241'. [ 159.133837][ T6787] loop6: detected capacity change from 0 to 7 [ 159.143337][ T5886] Dev loop6: unable to read RDB block 7 [ 159.156729][ T5886] loop6: AHDI p1 p2 [ 159.161066][ T5886] loop6: partition table partially beyond EOD, truncated [ 159.178641][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.188105][ T5886] loop6: p1 start 926365495 is beyond EOD, truncated [ 159.216566][ T6787] Dev loop6: unable to read RDB block 7 [ 159.251081][ T6787] loop6: AHDI p1 p2 [ 159.271418][ T6787] loop6: partition table partially beyond EOD, truncated [ 159.308777][ T6787] loop6: p1 start 926365495 is beyond EOD, truncated [ 159.360385][ T6791] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 159.384964][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.420328][ T6791] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 159.431642][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.480177][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.482640][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 159.511845][ T10] usb 1-1: Product: syz [ 159.532234][ T10] usb 1-1: Manufacturer: syz [ 159.547115][ T10] usb 1-1: SerialNumber: syz [ 159.619429][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 159.641332][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 159.789949][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.980310][ C1] usblp0: nonzero write bulk status received: -71 [ 159.990014][ T5894] usb 1-1: USB disconnect, device number 11 [ 160.095749][ T6805] loop6: detected capacity change from 0 to 7 [ 160.121996][ T6805] Dev loop6: unable to read RDB block 7 [ 160.133092][ T6805] loop6: unable to read partition table [ 160.140465][ T6805] loop6: partition table beyond EOD, truncated [ 160.156632][ T6805] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.189305][ T6777] usblp0: removed [ 160.391761][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 160.551071][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.564530][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.627130][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.639446][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.653211][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.662959][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.691703][ T10] usb 3-1: config 0 descriptor?? [ 161.202831][ T10] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 161.227947][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 161.386386][ T6823] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 161.486108][ T6823] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 161.675765][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 161.684900][ T6828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.259'. [ 161.830230][ T5893] usb 3-1: USB disconnect, device number 18 [ 162.158473][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 162.318418][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 162.331002][ T44] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 162.357707][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.400903][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.438711][ T5893] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.448193][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.462140][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.500698][ T44] usb 1-1: Product: syz [ 162.510893][ T44] usb 1-1: Manufacturer: syz [ 162.522240][ T44] usb 1-1: SerialNumber: syz [ 162.596076][ T5893] usb 5-1: device descriptor read/64, error -71 [ 162.687016][ T6844] netlink: 56 bytes leftover after parsing attributes in process `syz.3.265'. [ 162.698316][ T6844] netlink: zone id is out of range [ 162.721058][ T6844] netlink: zone id is out of range [ 162.838380][ T5893] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 162.943675][ T44] usb 1-1: 0:2 : does not exist [ 162.988538][ T5893] usb 5-1: device descriptor read/64, error -71 [ 163.100361][ T5893] usb usb5-port1: attempt power cycle [ 163.176899][ T9] usb 1-1: USB disconnect, device number 12 [ 163.222703][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.438443][ T5893] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 163.480527][ T5893] usb 5-1: device descriptor read/8, error -71 [ 163.574909][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 163.614950][ T6859] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 163.623313][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.630762][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.748377][ T5893] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 163.781717][ T5893] usb 5-1: device descriptor read/8, error -71 [ 163.900554][ T5893] usb usb5-port1: unable to enumerate USB device [ 163.937376][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 163.937397][ T30] audit: type=1326 audit(1749085119.088:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 163.967202][ T30] audit: type=1326 audit(1749085119.088:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 163.990413][ T30] audit: type=1326 audit(1749085119.088:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 164.013545][ T30] audit: type=1326 audit(1749085119.088:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 164.048389][ T5889] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 164.068419][ T30] audit: type=1326 audit(1749085119.088:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 164.128349][ T30] audit: type=1326 audit(1749085119.088:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 164.180775][ T6867] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 164.186493][ T30] audit: type=1326 audit(1749085119.088:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 164.219567][ T5889] usb 4-1: device descriptor read/64, error -71 [ 164.247091][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.398103][ T6867] bond0: (slave team0): Enslaving as an active interface with an up link [ 164.475688][ T30] audit: type=1326 audit(1749085119.628:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 164.498611][ T5889] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.531436][ T6881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.275'. [ 164.544942][ T30] audit: type=1326 audit(1749085119.628:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1b8e929 code=0x7ffc0000 [ 164.658350][ T5889] usb 4-1: device descriptor read/64, error -71 [ 164.788969][ T5889] usb usb4-port1: attempt power cycle [ 164.808491][ T5893] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 164.984412][ T6883] vlan2: entered promiscuous mode [ 164.994570][ T6883] batadv0: entered promiscuous mode [ 165.070376][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.082985][ T5893] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 165.092609][ T5893] usb 2-1: can't read configurations, error -71 [ 165.138380][ T5889] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.159912][ T5889] usb 4-1: device descriptor read/8, error -71 [ 165.178410][ T5894] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 165.306969][ T6893] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 165.348787][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 165.356740][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 165.370400][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.375347][ T6895] mmap: syz.4.282 (6895): VmData 37457920 exceed data ulimit 1070. Update limits or use boot option ignore_rlimit_data. [ 165.384997][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.403612][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.408684][ T5889] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.411708][ T5894] usb 3-1: Product: syz [ 165.438364][ T5894] usb 3-1: Manufacturer: syz [ 165.441973][ T5889] usb 4-1: device descriptor read/8, error -71 [ 165.443017][ T5894] usb 3-1: SerialNumber: syz [ 165.481537][ T5894] usb 3-1: config 0 descriptor?? [ 165.484221][ T6897] FAULT_INJECTION: forcing a failure. [ 165.484221][ T6897] name failslab, interval 1, probability 0, space 0, times 0 [ 165.500089][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: syz.0.284 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 165.500116][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.500129][ T6897] Call Trace: [ 165.500137][ T6897] [ 165.500146][ T6897] dump_stack_lvl+0x189/0x250 [ 165.500185][ T6897] ? __pfx____ratelimit+0x10/0x10 [ 165.500216][ T6897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.500249][ T6897] ? __pfx__printk+0x10/0x10 [ 165.500290][ T6897] should_fail_ex+0x414/0x560 [ 165.500329][ T6897] should_failslab+0xa8/0x100 [ 165.500355][ T6897] kmem_cache_alloc_noprof+0x73/0x3c0 [ 165.500376][ T6897] ? skb_clone+0x212/0x3a0 [ 165.500409][ T6897] skb_clone+0x212/0x3a0 [ 165.500441][ T6897] __netlink_deliver_tap+0x404/0x850 [ 165.500481][ T6897] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.500508][ T6897] netlink_deliver_tap+0x19c/0x1b0 [ 165.500534][ T6897] netlink_sendskb+0x68/0x140 [ 165.500557][ T6897] netlink_rcv_skb+0x28c/0x470 [ 165.500582][ T6897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.500616][ T6897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.500669][ T6897] ? down_read+0x1ad/0x2e0 [ 165.500693][ T6897] genl_rcv+0x28/0x40 [ 165.500721][ T6897] netlink_unicast+0x75b/0x8d0 [ 165.500756][ T6897] netlink_sendmsg+0x805/0xb30 [ 165.500792][ T6897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.500822][ T6897] ? aa_sock_msg_perm+0x94/0x160 [ 165.500856][ T6897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.500885][ T6897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.500911][ T6897] __sock_sendmsg+0x219/0x270 [ 165.500947][ T6897] ____sys_sendmsg+0x505/0x830 [ 165.500981][ T6897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.501027][ T6897] ? import_iovec+0x74/0xa0 [ 165.501059][ T6897] ___sys_sendmsg+0x21f/0x2a0 [ 165.501089][ T6897] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.501157][ T6897] ? __fget_files+0x2a/0x420 [ 165.501183][ T6897] ? __fget_files+0x3a0/0x420 [ 165.501220][ T6897] __x64_sys_sendmsg+0x19b/0x260 [ 165.501250][ T6897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.501288][ T6897] ? __pfx_ksys_write+0x10/0x10 [ 165.501307][ T6897] ? rcu_is_watching+0x15/0xb0 [ 165.501334][ T6897] ? do_syscall_64+0xbe/0x3b0 [ 165.501371][ T6897] do_syscall_64+0xfa/0x3b0 [ 165.501402][ T6897] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.501433][ T6897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.501454][ T6897] ? clear_bhb_loop+0x60/0xb0 [ 165.501481][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.501503][ T6897] RIP: 0033:0x7fb931d8e929 [ 165.501521][ T6897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.501538][ T6897] RSP: 002b:00007fb932b5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.501560][ T6897] RAX: ffffffffffffffda RBX: 00007fb931fb5fa0 RCX: 00007fb931d8e929 [ 165.501575][ T6897] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 165.501589][ T6897] RBP: 00007fb932b5d090 R08: 0000000000000000 R09: 0000000000000000 [ 165.501602][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.501614][ T6897] R13: 0000000000000000 R14: 00007fb931fb5fa0 R15: 00007fb9320dfa28 [ 165.501650][ T6897] [ 165.523986][ T5894] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.578910][ T5889] usb usb4-port1: unable to enumerate USB device [ 165.581846][ T5894] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 165.783671][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.889001][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.954933][ T30] audit: type=1326 audit(1749085121.108:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faff1b2ab19 code=0x7ffc0000 [ 166.308731][ T5889] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 166.508735][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 166.519992][ T5889] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 166.535097][ T5889] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 166.601768][ T5889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.602023][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 166.625777][ T5889] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 166.641049][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.673735][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 166.682930][ T5889] usb 1-1: Product: syz [ 166.687488][ T5889] usb 1-1: Manufacturer: syz [ 166.727261][ T5889] usb 1-1: SerialNumber: syz [ 166.758979][ T5889] usb 1-1: config 0 descriptor?? [ 166.774921][ T5894] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 166.809241][ T5894] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 166.856942][ T5894] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 166.899129][ T6918] fuse: Bad value for 'fd' [ 166.910458][ T5894] em28xx 3-1:0.0: No AC97 audio processor [ 166.961271][ T5894] usb 3-1: USB disconnect, device number 19 [ 167.014853][ T5894] em28xx 3-1:0.0: Disconnecting em28xx [ 167.052620][ T5894] em28xx 3-1:0.0: Freeing device [ 167.200426][ T6924] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 167.214698][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.223178][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.271712][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.279023][ T6924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.286742][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.294002][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.332854][ T6924] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 167.588859][ T5894] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 167.597010][ T6940] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 167.604842][ T5889] usb 1-1: USB disconnect, device number 13 [ 167.640572][ T6940] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.766286][ T6946] netlink: 'syz.4.302': attribute type 10 has an invalid length. [ 167.781067][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 167.782556][ T6945] loop6: detected capacity change from 0 to 7 [ 167.800643][ T5886] Dev loop6: unable to read RDB block 7 [ 167.805204][ T5894] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 167.806290][ T5886] loop6: AHDI p1 p2 [ 167.819831][ T5886] loop6: partition table partially beyond EOD, truncated [ 167.830678][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.835914][ T5886] loop6: p1 start 926365495 is beyond EOD, truncated [ 167.861475][ T5894] usb 2-1: config 0 has no interface number 0 [ 167.874759][ T5894] usb 2-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 167.875579][ T6945] Dev loop6: unable to read RDB block 7 [ 167.885685][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.900306][ T6945] loop6: AHDI p1 p2 [ 167.904774][ T6945] loop6: partition table partially beyond EOD, truncated [ 167.914073][ T6946] syz_tun: entered promiscuous mode [ 167.920291][ T5894] usb 2-1: Product: syz [ 167.924693][ T5894] usb 2-1: Manufacturer: syz [ 167.933622][ T5894] usb 2-1: SerialNumber: syz [ 167.936583][ T6946] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 167.944730][ T5894] usb 2-1: config 0 descriptor?? [ 167.960714][ T5894] usb 2-1: bad CDC descriptors [ 167.968920][ T6945] loop6: p1 start 926365495 is beyond EOD, truncated [ 168.189646][ T5894] usb 2-1: USB disconnect, device number 12 [ 168.292395][ T6960] netlink: 'syz.0.307': attribute type 39 has an invalid length. [ 168.362904][ T6966] loop6: detected capacity change from 0 to 7 [ 168.379241][ T6966] Dev loop6: unable to read RDB block 7 [ 168.385122][ T6966] loop6: unable to read partition table [ 168.391535][ T6966] loop6: partition table beyond EOD, truncated [ 168.397831][ T6966] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.604695][ T6972] netlink: 'syz.0.310': attribute type 10 has an invalid length. [ 168.715750][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 168.928059][ T6974] bond0: (slave bridge0): Releasing backup interface [ 168.937292][ T6974] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 169.858512][ T5893] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 169.927332][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 169.965658][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.319'. [ 170.041800][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.147846][ T5893] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 170.197816][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.255352][ T5893] usb 3-1: config 0 descriptor?? [ 170.400088][ T7006] fuse: Unknown parameter '00000000000000000003ÿÿ' [ 171.108420][ T44] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 171.282115][ T5893] usbhid 3-1:0.0: can't add hid device: -71 [ 171.294515][ T7016] vlan2: entered promiscuous mode [ 171.304267][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.329654][ T5893] usb 3-1: USB disconnect, device number 20 [ 171.390323][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.405707][ T44] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 171.415424][ T44] usb 2-1: can't read configurations, error -71 [ 171.458383][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.513381][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 171.522910][ T7021] netlink: 'syz.3.329': attribute type 5 has an invalid length. [ 171.531428][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 171.546681][ T7021] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 171.555429][ T7021] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 171.564202][ T7021] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 171.572995][ T7021] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 171.581887][ T7021] geneve2: entered promiscuous mode [ 171.587170][ T7021] geneve2: entered allmulticast mode [ 171.600390][ T10] usb 1-1: device descriptor read/64, error -71 [ 171.842353][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 171.988357][ T10] usb 1-1: device descriptor read/64, error -71 [ 172.048591][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.119638][ T10] usb usb1-port1: attempt power cycle [ 172.228358][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 172.245649][ T5889] usb 4-1: config 0 interface 0 altsetting 181 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 172.262748][ T5889] usb 4-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.276483][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.284995][ T7041] loop6: detected capacity change from 0 to 7 [ 172.290578][ T5889] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 172.301860][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.303231][ T7041] Dev loop6: unable to read RDB block 7 [ 172.316754][ T7041] loop6: AHDI p3 p4 [ 172.321078][ T7041] loop6: partition table partially beyond EOD, truncated [ 172.321407][ T5889] usb 4-1: Product: syz [ 172.328597][ T7041] loop6: p3 start 1886353253 is beyond EOD, truncated [ 172.342555][ T5889] usb 4-1: Manufacturer: syz [ 172.347448][ T5889] usb 4-1: SerialNumber: syz [ 172.366828][ T5889] usb 4-1: config 0 descriptor?? [ 172.382716][ T5889] usb 4-1: no audio or video endpoints found [ 172.499337][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 172.550969][ T10] usb 1-1: device descriptor read/8, error -71 [ 172.680824][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.695607][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.801077][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 172.860022][ T10] usb 1-1: device descriptor read/8, error -71 [ 172.971375][ T10] usb usb1-port1: unable to enumerate USB device [ 173.418474][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.077257][ T7077] netlink: 48 bytes leftover after parsing attributes in process `syz.2.344'. [ 174.218904][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 174.393942][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.405312][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.417230][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 174.427878][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.437863][ T9] usb 5-1: Product: syz [ 174.442644][ T9] usb 5-1: Manufacturer: syz [ 174.447379][ T9] usb 5-1: SerialNumber: syz [ 174.459135][ T9] usb 5-1: config 0 descriptor?? [ 174.540007][ T5889] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 174.702265][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.711686][ T5889] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 174.721308][ T5889] usb 3-1: can't read configurations, error -71 [ 174.742899][ T44] usb 4-1: USB disconnect, device number 13 [ 174.768373][ T5893] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 174.921263][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.933016][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.944785][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 174.954783][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.967904][ T5893] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.978589][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.989619][ T5893] usb 1-1: config 0 descriptor?? [ 175.430260][ T5893] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 175.493833][ T7105] bond_slave_1: mtu less than device minimum [ 175.523403][ T5893] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 175.878499][ T7115] FAULT_INJECTION: forcing a failure. [ 175.878499][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 175.892692][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.3.355 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 175.892720][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.892732][ T7115] Call Trace: [ 175.892741][ T7115] [ 175.892750][ T7115] dump_stack_lvl+0x189/0x250 [ 175.892784][ T7115] ? __pfx____ratelimit+0x10/0x10 [ 175.892813][ T7115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.892851][ T7115] ? __pfx__printk+0x10/0x10 [ 175.892872][ T7115] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 175.892911][ T7115] ? ref_tracker_alloc+0x318/0x460 [ 175.892933][ T7115] should_fail_ex+0x414/0x560 [ 175.892967][ T7115] should_failslab+0xa8/0x100 [ 175.892995][ T7115] kmem_cache_alloc_noprof+0x73/0x3c0 [ 175.893014][ T7115] ? skb_clone+0x212/0x3a0 [ 175.893044][ T7115] skb_clone+0x212/0x3a0 [ 175.893072][ T7115] __netlink_deliver_tap+0x404/0x850 [ 175.893107][ T7115] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.893130][ T7115] netlink_deliver_tap+0x19c/0x1b0 [ 175.893153][ T7115] __netlink_sendskb+0x47/0x90 [ 175.893172][ T7115] netlink_dump+0xa12/0xe20 [ 175.893205][ T7115] ? __pfx_netlink_dump+0x10/0x10 [ 175.893239][ T7115] ? netlink_lookup+0x30/0x200 [ 175.893258][ T7115] ? netlink_lookup+0x30/0x200 [ 175.893276][ T7115] ? netlink_lookup+0x30/0x200 [ 175.893300][ T7115] __netlink_dump_start+0x5cb/0x7e0 [ 175.893330][ T7115] rtnetlink_rcv_msg+0x9eb/0xb70 [ 175.893351][ T7115] ? __pfx_mpls_dump_routes+0x10/0x10 [ 175.893380][ T7115] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 175.893398][ T7115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.893415][ T7115] ? ref_tracker_free+0x63a/0x7d0 [ 175.893432][ T7115] ? __pfx_rtnl_dumpit+0x10/0x10 [ 175.893450][ T7115] ? __pfx_mpls_dump_routes+0x10/0x10 [ 175.893479][ T7115] ? __skb_clone+0x63/0x7a0 [ 175.893511][ T7115] netlink_rcv_skb+0x208/0x470 [ 175.893533][ T7115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.893554][ T7115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.893589][ T7115] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.893610][ T7115] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.893638][ T7115] netlink_unicast+0x75b/0x8d0 [ 175.893675][ T7115] netlink_sendmsg+0x805/0xb30 [ 175.893706][ T7115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.893749][ T7115] ? aa_sock_msg_perm+0x94/0x160 [ 175.893781][ T7115] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.893808][ T7115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.893832][ T7115] __sock_sendmsg+0x219/0x270 [ 175.893867][ T7115] ____sys_sendmsg+0x505/0x830 [ 175.893898][ T7115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.893934][ T7115] ? import_iovec+0x74/0xa0 [ 175.893964][ T7115] ___sys_sendmsg+0x21f/0x2a0 [ 175.893991][ T7115] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.894054][ T7115] ? __fget_files+0x2a/0x420 [ 175.894077][ T7115] ? __fget_files+0x3a0/0x420 [ 175.894111][ T7115] __x64_sys_sendmsg+0x19b/0x260 [ 175.894140][ T7115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.894167][ T7115] ? __pfx_ksys_write+0x10/0x10 [ 175.894186][ T7115] ? do_syscall_64+0xbe/0x3b0 [ 175.894211][ T7115] do_syscall_64+0xfa/0x3b0 [ 175.894233][ T7115] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.894254][ T7115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.894268][ T7115] ? clear_bhb_loop+0x60/0xb0 [ 175.894286][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.894300][ T7115] RIP: 0033:0x7eff9c18e929 [ 175.894314][ T7115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.894327][ T7115] RSP: 002b:00007eff9d09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.894342][ T7115] RAX: ffffffffffffffda RBX: 00007eff9c3b5fa0 RCX: 00007eff9c18e929 [ 175.894353][ T7115] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 175.894362][ T7115] RBP: 00007eff9d09f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.894371][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.894379][ T7115] R13: 0000000000000000 R14: 00007eff9c3b5fa0 R15: 00007eff9c4dfa28 [ 175.894401][ T7115] [ 176.300473][ T7117] FAULT_INJECTION: forcing a failure. [ 176.300473][ T7117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.355130][ T7117] CPU: 0 UID: 0 PID: 7117 Comm: syz.0.350 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 176.355152][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.355161][ T7117] Call Trace: [ 176.355168][ T7117] [ 176.355175][ T7117] dump_stack_lvl+0x189/0x250 [ 176.355203][ T7117] ? __pfx____ratelimit+0x10/0x10 [ 176.355226][ T7117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.355250][ T7117] ? __pfx__printk+0x10/0x10 [ 176.355276][ T7117] should_fail_ex+0x414/0x560 [ 176.355303][ T7117] _copy_to_user+0x31/0xb0 [ 176.355324][ T7117] simple_read_from_buffer+0xe1/0x170 [ 176.355349][ T7117] proc_fail_nth_read+0x1df/0x250 [ 176.355380][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.355411][ T7117] ? rw_verify_area+0x258/0x650 [ 176.355445][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.355468][ T7117] vfs_read+0x1fd/0x980 [ 176.355485][ T7117] ? __pfx___mutex_lock+0x10/0x10 [ 176.355509][ T7117] ? __pfx_vfs_read+0x10/0x10 [ 176.355524][ T7117] ? __fget_files+0x2a/0x420 [ 176.355544][ T7117] ? __fget_files+0x3a0/0x420 [ 176.355560][ T7117] ? __fget_files+0x2a/0x420 [ 176.355584][ T7117] ksys_read+0x145/0x250 [ 176.355596][ T7117] ? __fget_files+0x3a0/0x420 [ 176.355614][ T7117] ? __pfx_ksys_read+0x10/0x10 [ 176.355632][ T7117] ? do_syscall_64+0xbe/0x3b0 [ 176.355657][ T7117] do_syscall_64+0xfa/0x3b0 [ 176.355678][ T7117] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.355707][ T7117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.355723][ T7117] ? clear_bhb_loop+0x60/0xb0 [ 176.355741][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.355756][ T7117] RIP: 0033:0x7fb931d8d33c [ 176.355769][ T7117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.355782][ T7117] RSP: 002b:00007fb932b1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.355799][ T7117] RAX: ffffffffffffffda RBX: 00007fb931fb6160 RCX: 00007fb931d8d33c [ 176.355810][ T7117] RDX: 000000000000000f RSI: 00007fb932b1b0a0 RDI: 0000000000000005 [ 176.355819][ T7117] RBP: 00007fb932b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.355828][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.355836][ T7117] R13: 0000000000000000 R14: 00007fb931fb6160 R15: 00007fb9320dfa28 [ 176.355858][ T7117] [ 176.692782][ T5889] usb 1-1: USB disconnect, device number 18 [ 176.838612][ T7122] xt_connbytes: Forcing CT accounting to be enabled [ 176.845326][ T7122] set match dimension is over the limit! [ 177.067786][ T9] usb 5-1: USB disconnect, device number 25 [ 177.146009][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 177.334310][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.568543][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.362'. [ 177.645752][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 177.817553][ T44] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 177.865972][ T44] usb 4-1: config 0 has no interface number 0 [ 177.888480][ T44] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 177.915004][ T44] usb 4-1: config 0 interface 3 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.926130][ T44] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 177.971875][ T44] usb 4-1: New USB device found, idVendor=05c6, idProduct=9056, bcdDevice= c.b0 [ 178.022523][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.059531][ T44] usb 4-1: Product: syz [ 178.063916][ T44] usb 4-1: Manufacturer: syz [ 178.070197][ T44] usb 4-1: SerialNumber: syz [ 178.085882][ T44] usb 4-1: config 0 descriptor?? [ 178.148807][ T5889] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 178.301231][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.318407][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.337165][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 178.338457][ T5894] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 178.356165][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.378320][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.418392][ T5889] usb 3-1: Product: syz [ 178.427000][ T5889] usb 3-1: Manufacturer: ï“¿ [ 178.447283][ T5889] usb 3-1: SerialNumber: syz [ 178.561588][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.576024][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.608465][ T5894] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.631515][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.669896][ T5894] usb 1-1: config 0 descriptor?? [ 178.886164][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.905611][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.926085][ T5889] usb 3-1: 0:2 : does not exist [ 178.973686][ T5889] usb 3-1: USB disconnect, device number 23 [ 178.974338][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 178.990003][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 179.049305][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.117088][ T5894] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 179.154664][ T5894] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 179.381917][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.410549][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.454190][ T44] usb 1-1: USB disconnect, device number 19 [ 179.518521][ T5894] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 179.678400][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 179.691719][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.702611][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.716666][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.735631][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.746197][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.767125][ T5894] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.795705][ T5894] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.805790][ T5894] usb 2-1: Manufacturer: syz [ 179.814532][ T5894] usb 2-1: config 0 descriptor?? [ 179.827912][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 179.837484][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.373'. [ 180.014791][ T5893] usb 4-1: USB disconnect, device number 14 [ 180.092734][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.136384][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.168735][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.714893][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.723958][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 180.737747][ T7176] netlink: 'syz.3.376': attribute type 5 has an invalid length. [ 180.795436][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.376'. [ 181.424744][ T5894] rc_core: IR keymap rc-hauppauge not found [ 181.441837][ T5894] Registered IR keymap rc-empty [ 181.447313][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.498511][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.505967][ T7187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.513260][ T7187] IPv6: NLM_F_CREATE should be set when creating new route [ 181.520591][ T7187] IPv6: NLM_F_CREATE should be set when creating new route [ 181.528952][ T5889] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 181.550159][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 181.590818][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 181.623815][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.660148][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.688647][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.709210][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.727975][ T7183] batadv0: entered promiscuous mode [ 181.738792][ T7183] vlan2: entered promiscuous mode [ 181.743863][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.760767][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.808727][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.809604][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 181.835783][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.858789][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.879346][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 181.912103][ T5894] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 181.917000][ T7198] loop6: detected capacity change from 0 to 7 [ 181.929473][ T5894] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 181.932013][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.943510][ T5894] usb 2-1: USB disconnect, device number 16 [ 181.968369][ T6700] Dev loop6: unable to read RDB block 7 [ 181.974362][ T6700] loop6: AHDI p3 p4 [ 181.979622][ T6700] loop6: partition table partially beyond EOD, truncated [ 181.987581][ T6700] loop6: p3 start 1886353253 is beyond EOD, truncated [ 181.996293][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.011956][ T5889] usb 4-1: can't read configurations, error -71 [ 182.027466][ T7198] Dev loop6: unable to read RDB block 7 [ 182.045265][ T10] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 182.049226][ T7198] loop6: AHDI p3 p4 [ 182.054441][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.072158][ T10] usb 1-1: config 0 has no interface number 0 [ 182.076254][ T7198] loop6: partition table partially beyond EOD, [ 182.078732][ T10] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 182.093730][ T7198] truncated [ 182.099436][ T10] usb 1-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 182.113306][ T7198] loop6: p3 start 1886353253 is beyond EOD, truncated [ 182.140788][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 182.179939][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.206796][ T10] usb 1-1: config 0 descriptor?? [ 182.236485][ T10] ttusbir 1-1:0.83: cannot find expected altsetting [ 182.441775][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.450612][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.460784][ T5894] usb 1-1: USB disconnect, device number 20 [ 182.540511][ T7206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.388'. [ 182.558412][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 182.664880][ T7210] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 182.665683][ T7208] program syz.3.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.674607][ T7210] veth1_macvtap: left promiscuous mode [ 182.690194][ T7210] team0: Device veth1_macvtap failed to register rx_handler [ 182.724369][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 182.736051][ T10] usb 3-1: config 4 has an invalid interface number: 234 but max is 3 [ 182.755391][ T10] usb 3-1: config 4 has an invalid interface number: 37 but max is 3 [ 182.774815][ T10] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 182.784178][ T10] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 182.793403][ T10] usb 3-1: config 4 has an invalid interface number: 122 but max is 3 [ 182.802255][ T10] usb 3-1: config 4 has an invalid interface number: 63 but max is 3 [ 182.812963][ T10] usb 3-1: config 4 has an invalid interface number: 218 but max is 3 [ 182.822152][ T10] usb 3-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 182.833733][ T10] usb 3-1: config 4 has no interface number 0 [ 182.844980][ T10] usb 3-1: config 4 has no interface number 1 [ 182.851546][ T10] usb 3-1: config 4 has no interface number 2 [ 182.858602][ T10] usb 3-1: config 4 has no interface number 3 [ 182.864976][ T10] usb 3-1: config 4 has no interface number 4 [ 182.912384][ T10] usb 3-1: config 4 interface 234 altsetting 215 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 182.940907][ T10] usb 3-1: config 4 interface 234 altsetting 215 has an invalid descriptor for endpoint zero, skipping [ 182.966652][ T10] usb 3-1: config 4 interface 37 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 183.000350][ T10] usb 3-1: config 4 interface 37 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 183.061556][ T10] usb 3-1: config 4 interface 37 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 183.097700][ T10] usb 3-1: config 4 interface 37 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 183.112986][ T10] usb 3-1: config 4 interface 37 altsetting 4 endpoint 0x6 has an invalid bInterval 150, changing to 4 [ 183.132465][ T10] usb 3-1: config 4 interface 37 altsetting 4 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 183.152333][ T10] usb 3-1: config 4 interface 37 altsetting 4 endpoint 0x8B has invalid maxpacket 22090, setting to 64 [ 183.152370][ T10] usb 3-1: config 4 interface 37 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 183.152395][ T10] usb 3-1: config 4 interface 37 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 183.152422][ T10] usb 3-1: config 4 interface 37 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 183.152446][ T10] usb 3-1: config 4 interface 37 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 183.152469][ T10] usb 3-1: config 4 interface 37 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 183.152492][ T10] usb 3-1: config 4 interface 37 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 183.152520][ T10] usb 3-1: too many endpoints for config 4 interface 122 altsetting 53: 37, using maximum allowed: 30 [ 183.152561][ T10] usb 3-1: config 4 interface 122 altsetting 53 has a duplicate endpoint with address 0x3, skipping [ 183.152587][ T10] usb 3-1: config 4 interface 122 altsetting 53 has an invalid descriptor for endpoint zero, skipping [ 183.152608][ T10] usb 3-1: config 4 interface 122 altsetting 53 has an invalid descriptor for endpoint zero, skipping [ 183.152631][ T10] usb 3-1: config 4 interface 122 altsetting 53 has 3 endpoint descriptors, different from the interface descriptor's value: 37 [ 183.152670][ T10] usb 3-1: config 4 interface 63 altsetting 1 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 183.152698][ T10] usb 3-1: config 4 interface 63 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 183.152719][ T10] usb 3-1: config 4 interface 63 altsetting 1 has an endpoint descriptor with address 0x1C, changing to 0xC [ 183.152746][ T10] usb 3-1: config 4 interface 63 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 183.152772][ T10] usb 3-1: config 4 interface 63 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 183.152794][ T10] usb 3-1: config 4 interface 63 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 183.152817][ T10] usb 3-1: config 4 interface 63 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 183.152845][ T10] usb 3-1: config 4 interface 63 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 183.152879][ T10] usb 3-1: config 4 interface 218 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 183.152900][ T10] usb 3-1: config 4 interface 234 has no altsetting 0 [ 183.152919][ T10] usb 3-1: config 4 interface 37 has no altsetting 0 [ 183.152938][ T10] usb 3-1: config 4 interface 122 has no altsetting 0 [ 183.152957][ T10] usb 3-1: config 4 interface 63 has no altsetting 0 [ 183.152976][ T10] usb 3-1: config 4 interface 218 has no altsetting 0 [ 183.156802][ T10] usb 3-1: New USB device found, idVendor=257a, idProduct=3605, bcdDevice=55.26 [ 183.156836][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.156860][ T10] usb 3-1: Product: Ñ• [ 183.156876][ T10] usb 3-1: Manufacturer: 䓚笉晻ꓮ禉궜á¾ï²•Ö¦âª¥ï’Œï¯¡åƒ¥é»í‚£å¾¾é°•ì¾¸à¨®è½ì†Šá¦ç±³î± áº‰ä§ŽèˆŒæᗕ⒧ᬡ赠⽘䩵䵑㕼ȣ鴜陑ã‹éžâ¿Œå¼Ÿæ¿¤ëˆœÈ¬ã–ˆïŠâšŽë¯ ìžè¼á”†ï¬©é‡œé¡€ê•ë”‹â“³ì•¬á«¸í‘—᠙但㌇귳㴆꟪ᥫ袙솋볟 [ 183.156908][ T10] usb 3-1: SerialNumber: 〪 [ 183.174185][ T10] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 183.174215][ T10] usb 3-1: no configuration chosen from 1 choice [ 183.818453][ T44] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 183.881424][ T7243] netlink: 'syz.0.404': attribute type 2 has an invalid length. [ 183.958366][ T5894] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.971308][ T44] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 183.983229][ T44] usb 4-1: config 5 has no interface number 0 [ 183.990635][ T44] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 184.006005][ T44] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 184.022306][ T44] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 184.035498][ T44] usb 4-1: config 5 interface 123 has no altsetting 0 [ 184.047383][ T44] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 184.056629][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.064808][ T44] usb 4-1: Product: syz [ 184.069140][ T44] usb 4-1: Manufacturer: syz [ 184.073795][ T44] usb 4-1: SerialNumber: syz [ 184.127174][ T5894] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 184.140612][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.150605][ T5894] usb 2-1: Product: syz [ 184.154872][ T5894] usb 2-1: Manufacturer: syz [ 184.162933][ T5894] usb 2-1: SerialNumber: syz [ 184.182362][ T5894] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 184.210412][ T5893] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.315239][ T44] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 184.344749][ T5852] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 184.362666][ T44] usb 4-1: USB disconnect, device number 17 [ 184.528490][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 184.543650][ T5852] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 184.556105][ T5852] usb 1-1: can't read configurations, error -22 [ 184.591217][ T5889] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 184.687286][ T44] usb 2-1: USB disconnect, device number 17 [ 184.698022][ T5852] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 184.757969][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.769880][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.781141][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.806871][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.838584][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.847700][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.848388][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 184.867159][ T5852] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 184.877921][ T5852] usb 1-1: can't read configurations, error -22 [ 184.882738][ T5889] usb 5-1: config 0 descriptor?? [ 184.884813][ T5852] usb usb1-port1: attempt power cycle [ 184.895752][ T7252] FAULT_INJECTION: forcing a failure. [ 184.895752][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.910025][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.3.408 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 184.910073][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.910086][ T7252] Call Trace: [ 184.910095][ T7252] [ 184.910105][ T7252] dump_stack_lvl+0x189/0x250 [ 184.910160][ T7252] ? __pfx____ratelimit+0x10/0x10 [ 184.910191][ T7252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.910224][ T7252] ? __pfx__printk+0x10/0x10 [ 184.910260][ T7252] should_fail_ex+0x414/0x560 [ 184.910297][ T7252] _copy_to_user+0x31/0xb0 [ 184.910327][ T7252] simple_read_from_buffer+0xe1/0x170 [ 184.910355][ T7252] proc_fail_nth_read+0x1df/0x250 [ 184.910385][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.910414][ T7252] ? rw_verify_area+0x258/0x650 [ 184.910446][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.910474][ T7252] vfs_read+0x1fd/0x980 [ 184.910499][ T7252] ? __pfx___mutex_lock+0x10/0x10 [ 184.910532][ T7252] ? __pfx_vfs_read+0x10/0x10 [ 184.910554][ T7252] ? __fget_files+0x2a/0x420 [ 184.910584][ T7252] ? __fget_files+0x3a0/0x420 [ 184.910606][ T7252] ? __fget_files+0x2a/0x420 [ 184.910640][ T7252] ksys_read+0x145/0x250 [ 184.910663][ T7252] ? __pfx_ksys_read+0x10/0x10 [ 184.910689][ T7252] ? do_syscall_64+0xbe/0x3b0 [ 184.910726][ T7252] do_syscall_64+0xfa/0x3b0 [ 184.910758][ T7252] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.910789][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.910809][ T7252] ? clear_bhb_loop+0x60/0xb0 [ 184.910835][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.910864][ T7252] RIP: 0033:0x7eff9c18d33c [ 184.910890][ T7252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.910909][ T7252] RSP: 002b:00007eff9d09f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.910931][ T7252] RAX: ffffffffffffffda RBX: 00007eff9c3b5fa0 RCX: 00007eff9c18d33c [ 184.910947][ T7252] RDX: 000000000000000f RSI: 00007eff9d09f0a0 RDI: 0000000000000004 [ 184.910961][ T7252] RBP: 00007eff9d09f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.910974][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.910987][ T7252] R13: 0000000000000000 R14: 00007eff9c3b5fa0 R15: 00007eff9c4dfa28 [ 184.911020][ T7252] [ 185.144437][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.203102][ T7254] set match dimension is over the limit! [ 185.248396][ T5852] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 185.274061][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 185.285161][ T5852] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 185.294082][ T5852] usb 1-1: can't read configurations, error -22 [ 185.306888][ T5894] usb 3-1: USB disconnect, device number 24 [ 185.309358][ T7256] loop6: detected capacity change from 0 to 7 [ 185.320574][ T5893] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 185.326442][ T7256] Dev loop6: unable to read RDB block 7 [ 185.333868][ T7256] loop6: AHDI p1 p2 [ 185.337920][ T7256] loop6: partition table partially beyond EOD, truncated [ 185.356289][ T7256] loop6: p1 start 926365495 is beyond EOD, truncated [ 185.379478][ T5893] ath9k_htc: Failed to initialize the device [ 185.399330][ T5889] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 185.420351][ T5889] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 185.433857][ T44] usb 2-1: ath9k_htc: USB layer deinitialized [ 185.469563][ T5852] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 185.541800][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 185.577586][ T5852] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 185.600707][ T5852] usb 1-1: can't read configurations, error -22 [ 185.626810][ T5852] usb usb1-port1: unable to enumerate USB device [ 186.179847][ T981] usb 5-1: USB disconnect, device number 26 [ 186.218665][ T5889] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 186.228372][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.390458][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.403067][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.417477][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.429416][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 186.440315][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.450457][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.458168][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.468299][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.478330][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.499274][ T5893] usb 4-1: config 0 descriptor?? [ 186.506352][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 186.521700][ T5889] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 186.537098][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.557409][ T5889] usb 2-1: config 0 descriptor?? [ 186.933503][ T5893] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 186.972963][ T5893] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 187.011149][ T5889] shield 0003:0955:7214.000D: unknown main item tag 0x1 [ 187.026464][ T5889] shield 0003:0955:7214.000D: item fetching failed at offset 1/5 [ 187.049306][ T5889] shield 0003:0955:7214.000D: Parse failed [ 187.055258][ T5889] shield 0003:0955:7214.000D: probe with driver shield failed with error -22 [ 187.219420][ T7295] netlink: 'syz.0.423': attribute type 4 has an invalid length. [ 187.225579][ T9] usb 2-1: USB disconnect, device number 18 [ 187.291635][ T7295] netlink: 'syz.0.423': attribute type 4 has an invalid length. [ 187.342482][ T7297] loop6: detected capacity change from 0 to 7 [ 187.366753][ T7297] Dev loop6: unable to read RDB block 7 [ 187.381554][ T7297] loop6: unable to read partition table [ 187.388887][ T7297] loop6: partition table beyond EOD, truncated [ 187.398802][ T7297] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.547999][ T9] usb 4-1: USB disconnect, device number 18 [ 187.840231][ T7313] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 187.885561][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 187.902658][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 188.062676][ T7295] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 188.249913][ T7329] CUSE: unknown device info "" [ 188.260027][ T7329] CUSE: unknown device info "ü" [ 188.275325][ T7329] CUSE: unknown device info "ü" [ 188.288860][ T5893] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 188.290673][ T7329] CUSE: unknown device info "€" [ 188.342560][ T7329] CUSE: unknown device info "" [ 188.377869][ T7329] CUSE: unknown device info "" [ 188.384090][ T7329] CUSE: unknown device info "" [ 188.390462][ T7329] CUSE: unknown device info "H" [ 188.395534][ T7329] CUSE: unknown device info "$" [ 188.407308][ T7337] FAULT_INJECTION: forcing a failure. [ 188.407308][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 188.410531][ T7329] CUSE: unknown device info "Ae-½p" [ 188.430376][ T7337] CPU: 0 UID: 0 PID: 7337 Comm: syz.3.437 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 188.430411][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.430425][ T7337] Call Trace: [ 188.430433][ T7337] [ 188.430441][ T7337] dump_stack_lvl+0x189/0x250 [ 188.430481][ T7337] ? __pfx____ratelimit+0x10/0x10 [ 188.430510][ T7337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.430542][ T7337] ? __pfx__printk+0x10/0x10 [ 188.430571][ T7337] ? __pfx___might_resched+0x10/0x10 [ 188.430597][ T7337] ? fs_reclaim_acquire+0x7d/0x100 [ 188.430625][ T7337] should_fail_ex+0x414/0x560 [ 188.430658][ T7337] should_failslab+0xa8/0x100 [ 188.430682][ T7337] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 188.430702][ T7337] ? __alloc_skb+0x112/0x2d0 [ 188.430726][ T7337] __alloc_skb+0x112/0x2d0 [ 188.430750][ T7337] netlink_ack+0x146/0xa50 [ 188.430788][ T7337] netlink_rcv_skb+0x28c/0x470 [ 188.430810][ T7337] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 188.430842][ T7337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.430878][ T7337] ? bpf_lsm_capable+0x9/0x20 [ 188.430898][ T7337] ? security_capable+0x7e/0x2e0 [ 188.430938][ T7337] nfnetlink_rcv+0x26a/0x2520 [ 188.430972][ T7337] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 188.431015][ T7337] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 188.431044][ T7337] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.431075][ T7337] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 188.431103][ T7337] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.431132][ T7337] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 188.431169][ T7337] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 188.431227][ T7337] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 188.431264][ T7337] ? rcu_is_watching+0x15/0xb0 [ 188.431283][ T7337] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 188.431308][ T7337] ? skb_clone+0x246/0x3a0 [ 188.431340][ T7337] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 188.431364][ T7337] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.431394][ T7337] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.431425][ T7337] netlink_unicast+0x75b/0x8d0 [ 188.431457][ T7337] netlink_sendmsg+0x805/0xb30 [ 188.431490][ T7337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.431517][ T7337] ? aa_sock_msg_perm+0x94/0x160 [ 188.431550][ T7337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.431577][ T7337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.431608][ T7337] __sock_sendmsg+0x219/0x270 [ 188.431643][ T7337] ____sys_sendmsg+0x505/0x830 [ 188.431673][ T7337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.431708][ T7337] ? import_iovec+0x74/0xa0 [ 188.431737][ T7337] ___sys_sendmsg+0x21f/0x2a0 [ 188.431765][ T7337] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.431828][ T7337] ? __fget_files+0x2a/0x420 [ 188.431851][ T7337] ? __fget_files+0x3a0/0x420 [ 188.431886][ T7337] __x64_sys_sendmsg+0x19b/0x260 [ 188.431913][ T7337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.431948][ T7337] ? __pfx_ksys_write+0x10/0x10 [ 188.431966][ T7337] ? rcu_is_watching+0x15/0xb0 [ 188.431989][ T7337] ? do_syscall_64+0xbe/0x3b0 [ 188.432024][ T7337] do_syscall_64+0xfa/0x3b0 [ 188.432053][ T7337] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.432081][ T7337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.432101][ T7337] ? clear_bhb_loop+0x60/0xb0 [ 188.432125][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.432145][ T7337] RIP: 0033:0x7eff9c18e929 [ 188.432163][ T7337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.432180][ T7337] RSP: 002b:00007eff9d09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.432202][ T7337] RAX: ffffffffffffffda RBX: 00007eff9c3b5fa0 RCX: 00007eff9c18e929 [ 188.432217][ T7337] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 188.432230][ T7337] RBP: 00007eff9d09f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.432242][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.432254][ T7337] R13: 0000000000000000 R14: 00007eff9c3b5fa0 R15: 00007eff9c4dfa28 [ 188.432285][ T7337] [ 188.432609][ T7329] CUSE: unknown device info "ÿÛß%" [ 188.558434][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 188.561015][ T7329] CUSE: unknown device info "" [ 188.730770][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.733181][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 188.787733][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.870571][ T5893] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 188.876046][ T7329] CUSE: unknown device info "ÿÿÿÿ" [ 188.879938][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.895197][ T7329] CUSE: unknown device info "óÿ$" [ 188.903437][ T7329] CUSE: unknown device info "€" [ 188.953268][ T7329] CUSE: unknown device info "" [ 188.958192][ T7329] CUSE: unknown device info "óÀšÑ€" [ 188.963831][ T5893] usb 2-1: config 0 has no interface number 0 [ 188.968150][ T7329] CUSE: unknown device info "" [ 188.977364][ T7329] CUSE: unknown device info "" [ 188.999140][ T7329] CUSE: zero length info key specified [ 189.002978][ T5893] usb 2-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 189.014627][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.021303][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.035288][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.043640][ T5893] usb 2-1: Product: syz [ 189.043662][ T5893] usb 2-1: Manufacturer: syz [ 189.043679][ T5893] usb 2-1: SerialNumber: syz [ 189.063370][ T5893] usb 2-1: config 0 descriptor?? [ 189.074947][ T9] usb 3-1: Product: syz [ 189.082000][ T5893] usb 2-1: bad CDC descriptors [ 189.114484][ T9] usb 3-1: Manufacturer: syz [ 189.124278][ T9] usb 3-1: SerialNumber: syz [ 189.137989][ T9] usb 3-1: config 0 descriptor?? [ 189.182780][ T9] usb 3-1: selecting invalid altsetting 0 [ 189.314663][ T5893] usb 2-1: USB disconnect, device number 19 [ 189.390844][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.424527][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.477121][ T981] usb 3-1: USB disconnect, device number 25 [ 190.203298][ T7367] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.445'. [ 190.243141][ T7367] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.445'. [ 190.763932][ T7373] netlink: 'syz.0.448': attribute type 10 has an invalid length. [ 190.797783][ T7366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.816487][ T7366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.867470][ T7366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.895157][ T7366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.902505][ T7366] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.911938][ T7366] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.919550][ T7366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.925842][ T7366] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 190.934771][ T7366] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 190.956052][ T7366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.977093][ T7366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.994324][ T7366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.048202][ T7366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.056066][ T7366] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.093351][ T7366] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.286244][ T7384] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 191.294613][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.451'. [ 191.353357][ T7387] netlink: 48 bytes leftover after parsing attributes in process `syz.0.452'. [ 191.418646][ T5852] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 191.578524][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 191.589317][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.625722][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 191.667946][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 191.698748][ T5852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 191.727295][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 191.778176][ T5852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 191.788127][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.910803][ T5852] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 191.932909][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.983378][ T5852] usb 3-1: Product: syz [ 192.010308][ T7400] macsec1: entered allmulticast mode [ 192.016817][ T7400] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 192.029469][ T7400] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 192.042920][ T5852] usb 3-1: Manufacturer: syz [ 192.047600][ T5852] usb 3-1: SerialNumber: syz [ 192.070282][ T5852] usb 3-1: config 0 descriptor?? [ 192.076603][ T7370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.085934][ T5852] usb 3-1: NFC: Reader power on cmd error -90 [ 192.123298][ T5852] pn533_usb 3-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 192.160842][ T5852] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 192.295482][ T5852] usb 3-1: USB disconnect, device number 26 [ 192.349309][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.715047][ T7415] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 192.908486][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.984670][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 193.006293][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.012467][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.068325][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 193.429329][ T30] kauditd_printk_skb: 691 callbacks suppressed [ 193.429349][ T30] audit: type=1326 audit(1749085148.588:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.2.469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faff1b8e929 code=0x0 [ 193.684901][ T7445] ======================================================= [ 193.684901][ T7445] WARNING: The mand mount option has been deprecated and [ 193.684901][ T7445] and is ignored by this kernel. Remove the mand [ 193.684901][ T7445] option from the mount to silence this warning. [ 193.684901][ T7445] ======================================================= [ 194.274899][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.298363][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.428684][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.445361][ T7456] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 194.787858][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 194.858569][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 194.988329][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.068909][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.075738][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.149172][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 195.159727][ T7480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.209532][ T5893] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 195.332281][ T7488] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 195.341194][ T7488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.488'. [ 195.380477][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 195.403119][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.432892][ T5893] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 195.468354][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.487225][ T5893] usb 5-1: Product: syz [ 195.497363][ T5893] usb 5-1: Manufacturer: syz [ 195.507708][ T5893] usb 5-1: SerialNumber: syz [ 195.520463][ T981] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 195.531312][ T5893] usb 5-1: config 0 descriptor?? [ 195.563662][ T5893] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 195.591386][ T5893] sr9700 5-1:0.0: probe with driver sr9700 failed with error -22 [ 195.713006][ T7503] netlink: 'syz.3.493': attribute type 10 has an invalid length. [ 195.720427][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.732053][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 195.753390][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 195.763580][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.772384][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.781838][ T7503] bridge0: left promiscuous mode [ 195.794927][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 195.828662][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.832064][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.848929][ T7503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.856510][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.863769][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.874730][ T981] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 195.902329][ T7503] bridge0: entered promiscuous mode [ 195.905065][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.910064][ T7503] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 195.955976][ T981] usb 2-1: Product: syz [ 195.974972][ T981] usb 2-1: Manufacturer: syz [ 195.993151][ T981] usb 2-1: SerialNumber: syz [ 196.011444][ T981] usb 2-1: config 0 descriptor?? [ 196.035854][ T981] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 196.128867][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 196.194797][ T7507] loop6: detected capacity change from 0 to 7 [ 196.214726][ T7507] Dev loop6: unable to read RDB block 7 [ 196.260036][ T7507] loop6: AHDI p1 p2 p3 p4 [ 196.273379][ T7507] loop6: partition table partially beyond EOD, truncated [ 196.300341][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 196.309765][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.331754][ T10] usb 3-1: config 0 descriptor?? [ 196.351149][ T7507] loop6: p1 start 926365495 is beyond EOD, truncated [ 196.363738][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 196.365628][ T7507] loop6: p2 size 47 extends beyond EOD, truncated [ 196.386876][ T7507] loop6: p3 start 1886353253 is beyond EOD, truncated [ 196.455293][ T7472] tipc: Started in network mode [ 196.464082][ T7472] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 196.491860][ T7472] tipc: Enabling of bearer rejected, failed to enable media [ 196.559821][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.602710][ T5889] usb 5-1: USB disconnect, device number 27 [ 196.647203][ T5886] udevd[5886]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 196.728792][ T5893] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.888432][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 196.897143][ T5893] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 196.905735][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.916847][ T5893] usb 4-1: config 0 has no interface number 0 [ 196.926540][ T5893] usb 4-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 196.935858][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.943969][ T5893] usb 4-1: Product: syz [ 196.948578][ T5852] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 196.956221][ T5893] usb 4-1: Manufacturer: syz [ 196.964434][ T5893] usb 4-1: SerialNumber: syz [ 196.974041][ T5893] usb 4-1: config 0 descriptor?? [ 196.987180][ T5893] usb 4-1: bad CDC descriptors [ 197.068390][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.098423][ T5852] usb 1-1: device descriptor read/64, error -71 [ 197.148494][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.148582][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.196994][ T5889] usb 4-1: USB disconnect, device number 19 [ 197.228928][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.338352][ T5852] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 197.468536][ T5852] usb 1-1: device descriptor read/64, error -71 [ 197.565464][ T10] gspca_stv06xx: I2C: Read error writing address: -71 [ 197.582354][ T10] usb 3-1: USB disconnect, device number 27 [ 197.588480][ T5852] usb usb1-port1: attempt power cycle [ 197.611211][ T5893] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 197.759348][ T5893] usb 5-1: device descriptor read/64, error -71 [ 197.938329][ T5852] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 197.964165][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 197.973365][ T7531] netlink: 36 bytes leftover after parsing attributes in process `syz.3.502'. [ 197.983162][ T5852] usb 1-1: device descriptor read/8, error -71 [ 198.008427][ T5893] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 198.084700][ T44] usb 2-1: USB disconnect, device number 20 [ 198.218427][ T5893] usb 5-1: device descriptor read/64, error -71 [ 198.238817][ T5852] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 198.305927][ T5852] usb 1-1: device descriptor read/8, error -71 [ 198.314330][ T7541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.315063][ T7538] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 198.355125][ T5893] usb usb5-port1: attempt power cycle [ 198.371108][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.378507][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.439506][ T5852] usb usb1-port1: unable to enumerate USB device [ 198.517259][ T7545] netlink: 'syz.3.507': attribute type 4 has an invalid length. [ 198.563212][ T7549] netlink: 'syz.3.507': attribute type 4 has an invalid length. [ 198.738412][ T5893] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 198.765009][ T5893] usb 5-1: device descriptor read/8, error -71 [ 199.086422][ T7558] netlink: 48 bytes leftover after parsing attributes in process `syz.2.511'. [ 199.128352][ T5893] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 199.162247][ T5893] usb 5-1: device descriptor read/8, error -71 [ 199.178485][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 199.270559][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 199.289081][ T5893] usb usb5-port1: unable to enumerate USB device [ 199.406102][ T10] usb 4-1: config 0 has an invalid interface number: 206 but max is 1 [ 199.439917][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.480860][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 199.500805][ T10] usb 4-1: config 0 has no interface number 0 [ 199.518341][ T10] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 199.538356][ T10] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 199.560752][ T10] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 30768, setting to 64 [ 199.588580][ T10] usb 4-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 199.602116][ T10] usb 4-1: config 0 interface 206 has no altsetting 0 [ 199.621312][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 199.644889][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.664137][ T10] usb 4-1: Product: syz [ 199.678342][ T10] usb 4-1: Manufacturer: syz [ 199.698151][ T10] usb 4-1: SerialNumber: syz [ 199.713757][ T10] usb 4-1: config 0 descriptor?? [ 199.722470][ T7556] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.835155][ T7570] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 199.949840][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.957995][ T7574] FAULT_INJECTION: forcing a failure. [ 199.957995][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 199.998764][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.0.519 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 199.998794][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.998807][ T7574] Call Trace: [ 199.998815][ T7574] [ 199.998825][ T7574] dump_stack_lvl+0x189/0x250 [ 199.998869][ T7574] ? __pfx____ratelimit+0x10/0x10 [ 199.998901][ T7574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.998934][ T7574] ? __pfx__printk+0x10/0x10 [ 199.998964][ T7574] ? __pfx___might_resched+0x10/0x10 [ 199.998984][ T7574] ? fs_reclaim_acquire+0x7d/0x100 [ 199.999015][ T7574] should_fail_ex+0x414/0x560 [ 199.999053][ T7574] should_failslab+0xa8/0x100 [ 199.999079][ T7574] kmem_cache_alloc_noprof+0x73/0x3c0 [ 199.999100][ T7574] ? __kernfs_new_node+0xd7/0x7e0 [ 199.999137][ T7574] __kernfs_new_node+0xd7/0x7e0 [ 199.999175][ T7574] ? __pfx___kernfs_new_node+0x10/0x10 [ 199.999202][ T7574] ? kernfs_root+0x1c/0x230 [ 199.999235][ T7574] ? kernfs_root+0x1c/0x230 [ 199.999260][ T7574] ? kernfs_root+0x1c/0x230 [ 199.999292][ T7574] kernfs_new_node+0x102/0x210 [ 199.999325][ T7574] kernfs_create_link+0xa7/0x200 [ 199.999349][ T7574] sysfs_do_create_link_sd+0x83/0x110 [ 199.999378][ T7574] device_add_class_symlinks+0xb6/0x240 [ 199.999410][ T7574] device_add+0x475/0xb50 [ 199.999441][ T7574] input_register_device+0x9ca/0x10b0 [ 199.999482][ T7574] uinput_create_device+0x422/0x670 [ 199.999524][ T7574] uinput_ioctl_handler+0x3f0/0x1570 [ 199.999558][ T7574] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 199.999601][ T7574] ? __fget_files+0x2a/0x420 [ 199.999625][ T7574] ? __fget_files+0x3a0/0x420 [ 199.999655][ T7574] ? bpf_lsm_file_ioctl+0x9/0x20 [ 199.999688][ T7574] ? __pfx_uinput_ioctl+0x10/0x10 [ 199.999716][ T7574] __se_sys_ioctl+0xf9/0x170 [ 199.999751][ T7574] do_syscall_64+0xfa/0x3b0 [ 199.999785][ T7574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.999805][ T7574] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.999826][ T7574] ? clear_bhb_loop+0x60/0xb0 [ 199.999852][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.999873][ T7574] RIP: 0033:0x7fb931d8e929 [ 199.999892][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.999910][ T7574] RSP: 002b:00007fb932b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.999934][ T7574] RAX: ffffffffffffffda RBX: 00007fb931fb5fa0 RCX: 00007fb931d8e929 [ 199.999950][ T7574] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 199.999968][ T7574] RBP: 00007fb932b5d090 R08: 0000000000000000 R09: 0000000000000000 [ 199.999981][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.999993][ T7574] R13: 0000000000000000 R14: 00007fb931fb5fa0 R15: 00007fb9320dfa28 [ 200.000025][ T7574] [ 200.412364][ T10] usb 4-1: USB disconnect, device number 20 [ 200.622795][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.978861][ T5889] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 201.059390][ T7603] loop6: detected capacity change from 0 to 7 [ 201.074798][ T5886] Dev loop6: unable to read RDB block 7 [ 201.081122][ T5886] loop6: AHDI p1 p2 [ 201.081160][ T5886] loop6: partition table partially beyond EOD, truncated [ 201.081799][ T5886] loop6: p1 start 926365495 is beyond EOD, truncated [ 201.088341][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 201.094275][ T7603] Dev loop6: unable to read RDB block 7 [ 201.094323][ T7603] loop6: AHDI p1 p2 [ 201.094346][ T7603] loop6: partition table partially beyond EOD, truncated [ 201.094530][ T7603] loop6: p1 start 926365495 is beyond EOD, truncated [ 201.161535][ T5889] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.161568][ T5889] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.161599][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.161646][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 201.161674][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 201.163400][ T5889] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.163430][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.163453][ T5889] usb 3-1: Product: syz [ 201.163469][ T5889] usb 3-1: Manufacturer: syz [ 201.175509][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 201.175531][ T5889] cdc_wdm 3-1:1.0: skipping garbage [ 201.186647][ T5889] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 201.186671][ T5889] cdc_wdm 3-1:1.0: Unknown control protocol [ 201.240294][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.240325][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.241677][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 201.314409][ T7605] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 201.327211][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.396671][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 201.428960][ T5889] usb 3-1: USB disconnect, device number 28 [ 201.450907][ T10] usb 2-1: SerialNumber: syz [ 201.700969][ T10] usb 2-1: 0:2 : does not exist [ 201.746713][ T7622] loop6: detected capacity change from 0 to 7 [ 201.753584][ T10] usb 2-1: USB disconnect, device number 21 [ 201.794974][ T7622] Dev loop6: unable to read RDB block 7 [ 201.801935][ T7622] loop6: unable to read partition table [ 201.826551][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.828582][ T7622] loop6: partition table beyond EOD, truncated [ 201.865770][ T7622] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.919853][ T7626] xt_connbytes: Forcing CT accounting to be enabled [ 201.927147][ T7626] set match dimension is over the limit! [ 201.938645][ T5889] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 202.130323][ T5889] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 202.138679][ T5889] usb 1-1: config 2 has no interface number 0 [ 202.155020][ T5889] usb 1-1: config 2 interface 1 has no altsetting 0 [ 202.173658][ T5889] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 202.185284][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.203854][ T5889] usb 1-1: Product: syz [ 202.208079][ T5889] usb 1-1: Manufacturer: syz [ 202.216326][ T5889] usb 1-1: SerialNumber: syz [ 202.255449][ T7638] netlink: 44 bytes leftover after parsing attributes in process `syz.4.540'. [ 202.500950][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 203.485130][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 203.504518][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 203.736509][ T7668] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 203.782846][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.554'. [ 204.016582][ T7672] random: crng reseeded on system resumption [ 204.424706][ T7688] FAULT_INJECTION: forcing a failure. [ 204.424706][ T7688] name failslab, interval 1, probability 0, space 0, times 0 [ 204.470571][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.4.560 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 204.470603][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.470617][ T7688] Call Trace: [ 204.470626][ T7688] [ 204.470635][ T7688] dump_stack_lvl+0x189/0x250 [ 204.470675][ T7688] ? __pfx____ratelimit+0x10/0x10 [ 204.470710][ T7688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.470744][ T7688] ? __pfx__printk+0x10/0x10 [ 204.470784][ T7688] should_fail_ex+0x414/0x560 [ 204.470823][ T7688] should_failslab+0xa8/0x100 [ 204.470852][ T7688] kmem_cache_alloc_noprof+0x73/0x3c0 [ 204.470874][ T7688] ? skb_clone+0x212/0x3a0 [ 204.470908][ T7688] skb_clone+0x212/0x3a0 [ 204.470940][ T7688] __netlink_deliver_tap+0x404/0x850 [ 204.470980][ T7688] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.471007][ T7688] netlink_deliver_tap+0x19c/0x1b0 [ 204.471032][ T7688] netlink_sendskb+0x68/0x140 [ 204.471057][ T7688] netlink_rcv_skb+0x28c/0x470 [ 204.471081][ T7688] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 204.471117][ T7688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.471154][ T7688] ? bpf_lsm_capable+0x9/0x20 [ 204.471175][ T7688] ? security_capable+0x7e/0x2e0 [ 204.471215][ T7688] nfnetlink_rcv+0x26a/0x2520 [ 204.471251][ T7688] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 204.471286][ T7688] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 204.471311][ T7688] ? __dev_queue_xmit+0x27e/0x3a70 [ 204.471341][ T7688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.471382][ T7688] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 204.471414][ T7688] ? __pfx___dev_queue_xmit+0x10/0x10 [ 204.471459][ T7688] ? ref_tracker_free+0x63a/0x7d0 [ 204.471478][ T7688] ? __copy_skb_header+0xa7/0x550 [ 204.471507][ T7688] ? __pfx_ref_tracker_free+0x10/0x10 [ 204.471527][ T7688] ? __skb_clone+0x63/0x7a0 [ 204.471559][ T7688] ? __skb_clone+0x483/0x7a0 [ 204.471594][ T7688] ? skb_clone+0x246/0x3a0 [ 204.471625][ T7688] ? __netlink_deliver_tap+0x807/0x850 [ 204.471649][ T7688] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.471681][ T7688] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.471704][ T7688] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.471735][ T7688] netlink_unicast+0x75b/0x8d0 [ 204.471768][ T7688] netlink_sendmsg+0x805/0xb30 [ 204.471804][ T7688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.471835][ T7688] ? aa_sock_msg_perm+0x94/0x160 [ 204.471869][ T7688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.471898][ T7688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.471924][ T7688] __sock_sendmsg+0x219/0x270 [ 204.471960][ T7688] ____sys_sendmsg+0x505/0x830 [ 204.471994][ T7688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.472031][ T7688] ? import_iovec+0x74/0xa0 [ 204.472063][ T7688] ___sys_sendmsg+0x21f/0x2a0 [ 204.472092][ T7688] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.472160][ T7688] ? __fget_files+0x2a/0x420 [ 204.472184][ T7688] ? __fget_files+0x3a0/0x420 [ 204.472221][ T7688] __x64_sys_sendmsg+0x19b/0x260 [ 204.472251][ T7688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.472290][ T7688] ? __pfx_ksys_write+0x10/0x10 [ 204.472309][ T7688] ? rcu_is_watching+0x15/0xb0 [ 204.472335][ T7688] ? do_syscall_64+0xbe/0x3b0 [ 204.472378][ T7688] do_syscall_64+0xfa/0x3b0 [ 204.472411][ T7688] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.472441][ T7688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.472461][ T7688] ? clear_bhb_loop+0x60/0xb0 [ 204.472487][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.472507][ T7688] RIP: 0033:0x7f7446b8e929 [ 204.472527][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.472546][ T7688] RSP: 002b:00007f7447ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.472570][ T7688] RAX: ffffffffffffffda RBX: 00007f7446db5fa0 RCX: 00007f7446b8e929 [ 204.472586][ T7688] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 204.472600][ T7688] RBP: 00007f7447ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 204.472612][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.472624][ T7688] R13: 0000000000000000 R14: 00007f7446db5fa0 R15: 00007f7446edfa28 [ 204.472657][ T7688] [ 204.574642][ T7691] Cannot find del_set index 2 as target [ 205.091042][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 205.177811][ T5889] snd-usb-audio 1-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 205.210356][ T7701] macvtap1: entered promiscuous mode [ 205.248618][ T7701] macvtap1: entered allmulticast mode [ 205.278412][ T5889] snd-usb-us122l 1-1:2.1: usb_set_interface error [ 205.278473][ T7701] erspan0: entered allmulticast mode [ 205.308801][ T5889] snd-usb-us122l 1-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 205.356455][ T5889] usb 1-1: USB disconnect, device number 29 [ 205.444667][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.577099][ T5838] Bluetooth: hci1: unexpected event 0x20 length: 19 > 7 [ 205.688710][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.572'. [ 206.148620][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.319133][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 206.335517][ T5889] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 206.360428][ T5889] usb 4-1: config 0 has no interface number 0 [ 206.382846][ T5889] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 206.402792][ T7738] FAULT_INJECTION: forcing a failure. [ 206.402792][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 206.408180][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.415820][ T7738] CPU: 1 UID: 0 PID: 7738 Comm: syz.2.577 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 206.415866][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.415881][ T7738] Call Trace: [ 206.415892][ T7738] [ 206.415903][ T7738] dump_stack_lvl+0x189/0x250 [ 206.415949][ T7738] ? __pfx____ratelimit+0x10/0x10 [ 206.415985][ T7738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.416025][ T7738] ? __pfx__printk+0x10/0x10 [ 206.416058][ T7738] ? __lock_acquire+0xab9/0xd20 [ 206.416098][ T7738] should_fail_ex+0x414/0x560 [ 206.416142][ T7738] should_failslab+0xa8/0x100 [ 206.416173][ T7738] kmem_cache_alloc_noprof+0x73/0x3c0 [ 206.416197][ T7738] ? dst_alloc+0x105/0x170 [ 206.416235][ T7738] dst_alloc+0x105/0x170 [ 206.416273][ T7738] ip_route_input_rcu+0x1ed5/0x2ff0 [ 206.416326][ T7738] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 206.416388][ T7738] ? ipt_do_table+0x13dd/0x1640 [ 206.416421][ T7738] ? ip_route_input_noref+0x98/0x250 [ 206.416457][ T7738] ip_route_input_noref+0x167/0x250 [ 206.416494][ T7738] ? __pfx_ip_route_input_noref+0x10/0x10 [ 206.416536][ T7738] ? ipt_do_table+0x2a3/0x1640 [ 206.416560][ T7738] ? __pfx_ipt_do_table+0x10/0x10 [ 206.416593][ T7738] ip_rcv_finish_core+0x5af/0x1c00 [ 206.416636][ T7738] ip_rcv_finish+0x14c/0x2f0 [ 206.416667][ T7738] NF_HOOK+0x309/0x3a0 [ 206.416694][ T7738] ? __pfx_ip_rcv_finish+0x10/0x10 [ 206.416720][ T7738] ? NF_HOOK+0x9a/0x3a0 [ 206.416744][ T7738] ? __pfx_NF_HOOK+0x10/0x10 [ 206.416767][ T7738] ? ip_rcv_core+0x7f7/0xd00 [ 206.416794][ T7738] ? __pfx_ip_rcv_finish+0x10/0x10 [ 206.416833][ T7738] ? __pfx_ip_rcv+0x10/0x10 [ 206.416865][ T7738] __netif_receive_skb+0x143/0x380 [ 206.416910][ T7738] ? netif_receive_skb+0x115/0x790 [ 206.416946][ T7738] netif_receive_skb+0x1cb/0x790 [ 206.416982][ T7738] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 206.417020][ T7738] ? __pfx_netif_receive_skb+0x10/0x10 [ 206.417064][ T7738] ? tun_rx_batched+0x160/0x730 [ 206.417091][ T7738] tun_rx_batched+0x1b9/0x730 [ 206.417117][ T7738] ? __lock_acquire+0xab9/0xd20 [ 206.417155][ T7738] ? __pfx_tun_rx_batched+0x10/0x10 [ 206.417187][ T7738] ? tun_get_user+0x2549/0x3ce0 [ 206.417230][ T7738] tun_get_user+0x298e/0x3ce0 [ 206.417258][ T7738] ? tun_get_user+0x693/0x3ce0 [ 206.417282][ T7738] ? tun_get_user+0x2549/0x3ce0 [ 206.417325][ T7738] ? aa_file_perm+0x11f/0xed0 [ 206.417351][ T7738] ? __pfx_tun_get_user+0x10/0x10 [ 206.417377][ T7738] ? aa_file_perm+0x3e7/0xed0 [ 206.417418][ T7738] ? ref_tracker_alloc+0x318/0x460 [ 206.417438][ T7738] ? __lock_acquire+0xab9/0xd20 [ 206.417474][ T7738] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 206.417506][ T7738] ? tun_get+0x1c/0x2f0 [ 206.417537][ T7738] ? tun_get+0x1c/0x2f0 [ 206.417561][ T7738] ? tun_get+0x1c/0x2f0 [ 206.417591][ T7738] tun_chr_write_iter+0x113/0x200 [ 206.417622][ T7738] vfs_write+0x548/0xa90 [ 206.417652][ T7738] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 206.417679][ T7738] ? __pfx_vfs_write+0x10/0x10 [ 206.417715][ T7738] ? __fget_files+0x2a/0x420 [ 206.417756][ T7738] ksys_write+0x145/0x250 [ 206.417783][ T7738] ? __pfx_ksys_write+0x10/0x10 [ 206.417803][ T7738] ? rcu_is_watching+0x15/0xb0 [ 206.417832][ T7738] ? do_syscall_64+0xbe/0x3b0 [ 206.417882][ T7738] do_syscall_64+0xfa/0x3b0 [ 206.417918][ T7738] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.417953][ T7738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.417976][ T7738] ? clear_bhb_loop+0x60/0xb0 [ 206.418007][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.418030][ T7738] RIP: 0033:0x7faff1b8d3df [ 206.418053][ T7738] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 206.418074][ T7738] RSP: 002b:00007fafef9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 206.418100][ T7738] RAX: ffffffffffffffda RBX: 00007faff1db5fa0 RCX: 00007faff1b8d3df [ 206.418118][ T7738] RDX: 00000000000000da RSI: 00002000000001c0 RDI: 00000000000000c8 [ 206.418134][ T7738] RBP: 00007fafef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.418148][ T7738] R10: 00000000000000da R11: 0000000000000293 R12: 0000000000000001 [ 206.418163][ T7738] R13: 0000000000000001 R14: 00007faff1db5fa0 R15: 00007faff1edfa28 [ 206.418200][ T7738] [ 206.979789][ T7744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.987176][ T7744] IPv6: NLM_F_CREATE should be set when creating new route [ 206.994468][ T7744] IPv6: NLM_F_CREATE should be set when creating new route [ 207.179457][ T5889] usb 4-1: Product: syz [ 207.183697][ T5889] usb 4-1: Manufacturer: syz [ 207.202452][ T5889] usb 4-1: SerialNumber: syz [ 207.240583][ T5889] usb 4-1: config 0 descriptor?? [ 207.464369][ T7762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.584'. [ 207.500380][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.509536][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.522350][ T5893] usb 4-1: USB disconnect, device number 21 [ 207.530792][ T7741] sctp: [Deprecated]: syz.1.578 (pid 7741) Use of int in max_burst socket option. [ 207.530792][ T7741] Use struct sctp_assoc_value instead [ 208.109462][ T7771] loop6: detected capacity change from 0 to 7 [ 208.128425][ T5852] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 208.148586][ T7771] Dev loop6: unable to read RDB block 7 [ 208.206600][ T7771] loop6: AHDI p3 p4 [ 208.218388][ T7771] loop6: partition table partially beyond EOD, truncated [ 208.289704][ T5852] usb 5-1: config 0 has no interfaces? [ 208.306601][ T7771] loop6: p3 start 1886353253 is beyond EOD, truncated [ 208.307771][ T5852] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.358159][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.377760][ T7775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.590'. [ 208.421384][ T5852] usb 5-1: Product: syz [ 208.425627][ T5852] usb 5-1: Manufacturer: syz [ 208.497177][ T5852] usb 5-1: SerialNumber: syz [ 208.517134][ T5852] usb 5-1: config 0 descriptor?? [ 208.598980][ T5893] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 208.780622][ T5893] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 208.790586][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.802484][ T5893] usb 1-1: config 0 descriptor?? [ 208.812804][ T5893] gspca_main: spca508-2.14.0 probing 8086:0110 [ 208.948478][ T5852] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 209.013859][ T5893] gspca_spca508: reg_read err -32 [ 209.013952][ T7789] fuse: Unknown parameter 'fd0x0000000000000006' [ 209.036872][ T5893] gspca_spca508: reg_read err -32 [ 209.045554][ T7789] fuse: Unknown parameter '00000000000000000000' [ 209.189156][ T7792] delete_channel: no stack [ 209.193998][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 209.262412][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.309915][ T5852] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 209.319589][ T5852] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 209.356454][ T5852] usb 2-1: Product: syz [ 209.427823][ T5852] usb 2-1: Manufacturer: syz [ 209.445005][ T10] usb 4-1: config 0 has no interfaces? [ 209.450619][ T5852] usb 2-1: SerialNumber: syz [ 209.473650][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 209.474990][ T5852] usb 2-1: config 0 descriptor?? [ 209.503847][ T5852] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 209.560891][ T5893] gspca_spca508: reg_read err -110 [ 209.577399][ T5893] gspca_spca508: reg_read err -32 [ 209.588812][ T5893] gspca_spca508: reg_read err -32 [ 209.595610][ T5893] gspca_spca508: reg write: error -32 [ 209.609638][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.619677][ T5893] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 209.639273][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.700719][ T10] usb 4-1: Product: syz [ 209.715620][ T10] usb 4-1: Manufacturer: syz [ 209.728263][ T10] usb 4-1: SerialNumber: syz [ 209.739052][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.845149][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.845569][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.857856][ T10] usb 4-1: config 0 descriptor?? [ 210.204439][ T7800] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.592'. [ 210.421563][ T5852] gspca_zc3xx: reg_w_i err -110 [ 210.427369][ T5852] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 210.466014][ T7781] hfs: unable to load iocharset "io#harset" [ 210.492749][ T981] usb 2-1: USB disconnect, device number 22 [ 210.801539][ T5852] usb 5-1: USB disconnect, device number 32 [ 211.258581][ T44] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 211.438657][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 211.464024][ T44] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 211.495420][ T44] usb 5-1: config 0 has no interface number 0 [ 211.555707][ T44] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 211.569863][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.587126][ T44] usb 5-1: Product: syz [ 211.597396][ T44] usb 5-1: Manufacturer: syz [ 211.607603][ T44] usb 5-1: SerialNumber: syz [ 211.633653][ T44] usb 5-1: config 0 descriptor?? [ 211.683734][ T44] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 211.882978][ T44] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 211.927391][ T44] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 212.086809][ T5893] usb 5-1: USB disconnect, device number 33 [ 213.017951][ T7824] loop6: detected capacity change from 0 to 7 [ 213.083455][ T7824] Dev loop6: unable to read RDB block 7 [ 213.104045][ T7824] loop6: AHDI p1 p2 [ 213.113567][ T981] usb 4-1: USB disconnect, device number 22 [ 213.160960][ T7824] loop6: partition table partially beyond EOD, truncated [ 213.209379][ T7824] loop6: p1 start 926365495 is beyond EOD, truncated [ 213.321586][ T5889] usb 1-1: USB disconnect, device number 30 [ 213.664395][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.737191][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.775768][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 213.883881][ T7850] team_slave_0 (unregistering): left promiscuous mode [ 213.898749][ T5889] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 213.955235][ T7850] team0: Port device team_slave_0 removed [ 214.090754][ T5889] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 214.110096][ T5889] usb 3-1: config 0 has no interface number 0 [ 214.125107][ T5889] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 214.146845][ T5889] usb 3-1: config 0 interface 216 has no altsetting 0 [ 214.173333][ T5889] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 214.268954][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.292398][ T5889] usb 3-1: config 0 descriptor?? [ 214.299034][ T7846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.310202][ T5889] usb 3-1: NFC: intf ffff88801eabc000 id ffffffff8eb529e0 [ 214.514007][ T5889] usb 3-1: USB disconnect, device number 29 [ 214.662191][ T7868] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 214.718378][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 214.863719][ T7872] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 214.879324][ T7872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.618'. [ 214.890152][ T44] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.909027][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.931230][ T44] usb 4-1: config 0 descriptor?? [ 214.969924][ T44] cp210x 4-1:0.0: cp210x converter detected [ 215.172912][ T44] usb 4-1: cp210x converter now attached to ttyUSB0 [ 215.359502][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.423791][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.474699][ T5852] usb 4-1: USB disconnect, device number 23 [ 215.502835][ T7888] loop6: detected capacity change from 0 to 7 [ 215.519178][ T5852] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.546152][ T5852] cp210x 4-1:0.0: device disconnected [ 215.548954][ T7888] Dev loop6: unable to read RDB block 7 [ 215.587352][ T7888] loop6: AHDI p1 p2 p3 p4 [ 215.593457][ T7888] loop6: partition table partially beyond EOD, truncated [ 215.618569][ T7888] loop6: p1 start 926365495 is beyond EOD, truncated [ 215.629334][ T7888] loop6: p2 size 47 extends beyond EOD, truncated [ 215.646363][ T7888] loop6: p3 start 1886353253 is beyond EOD, truncated [ 215.772264][ T5886] udevd[5886]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 215.787742][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 215.822872][ T7892] macvtap1: entered promiscuous mode [ 215.857756][ T7892] macvtap1: entered allmulticast mode [ 216.404356][ T7915] FAULT_INJECTION: forcing a failure. [ 216.404356][ T7915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.420357][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: syz.4.636 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 216.420388][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.420402][ T7915] Call Trace: [ 216.420410][ T7915] [ 216.420419][ T7915] dump_stack_lvl+0x189/0x250 [ 216.420458][ T7915] ? __pfx____ratelimit+0x10/0x10 [ 216.420489][ T7915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.420522][ T7915] ? __pfx__printk+0x10/0x10 [ 216.420546][ T7915] ? __might_fault+0xb0/0x130 [ 216.420581][ T7915] should_fail_ex+0x414/0x560 [ 216.420619][ T7915] _copy_from_user+0x2d/0xb0 [ 216.420646][ T7915] kstrtouint_from_user+0xc4/0x170 [ 216.420671][ T7915] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 216.420713][ T7915] proc_fail_nth_write+0x88/0x240 [ 216.420740][ T7915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.420774][ T7915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.420803][ T7915] vfs_write+0x27b/0xa90 [ 216.420833][ T7915] ? __pfx_vfs_write+0x10/0x10 [ 216.420857][ T7915] ? __fget_files+0x2a/0x420 [ 216.420886][ T7915] ? __fget_files+0x3a0/0x420 [ 216.420909][ T7915] ? __fget_files+0x2a/0x420 [ 216.420944][ T7915] ksys_write+0x145/0x250 [ 216.420975][ T7915] ? __pfx_ksys_write+0x10/0x10 [ 216.421001][ T7915] ? do_syscall_64+0xbe/0x3b0 [ 216.421038][ T7915] do_syscall_64+0xfa/0x3b0 [ 216.421068][ T7915] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.421099][ T7915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.421120][ T7915] ? clear_bhb_loop+0x60/0xb0 [ 216.421147][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.421168][ T7915] RIP: 0033:0x7f7446b8d3df [ 216.421187][ T7915] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 216.421206][ T7915] RSP: 002b:00007f7447ac8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 216.421229][ T7915] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7446b8d3df [ 216.421244][ T7915] RDX: 0000000000000001 RSI: 00007f7447ac80a0 RDI: 0000000000000003 [ 216.421258][ T7915] RBP: 00007f7447ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 216.421271][ T7915] R10: 00000000000000da R11: 0000000000000293 R12: 0000000000000001 [ 216.421284][ T7915] R13: 0000000000000001 R14: 00007f7446db5fa0 R15: 00007f7446edfa28 [ 216.421318][ T7915] [ 216.689296][ T7919] sctp: [Deprecated]: syz.2.637 (pid 7919) Use of int in maxseg socket option. [ 216.689296][ T7919] Use struct sctp_assoc_value instead [ 216.758886][ T5893] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 216.913295][ T7925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.963902][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.985889][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.027761][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.055382][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.079315][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.088805][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.107698][ T5893] usb 2-1: config 0 descriptor?? [ 217.251322][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 217.265107][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 217.540002][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 217.546106][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 217.583312][ T5893] usb 2-1: USB disconnect, device number 23 [ 217.658916][ T5889] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 217.828324][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 217.840592][ T5889] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 217.849324][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.859885][ T5889] usb 4-1: config 0 has no interface number 0 [ 217.886993][ T5889] usb 4-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 217.908276][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.916396][ T5889] usb 4-1: Product: syz [ 217.921253][ T5889] usb 4-1: Manufacturer: syz [ 217.925917][ T5889] usb 4-1: SerialNumber: syz [ 217.937805][ T5889] usb 4-1: config 0 descriptor?? [ 217.950069][ T5889] usb 4-1: bad CDC descriptors [ 218.163354][ T5852] usb 4-1: USB disconnect, device number 24 [ 219.244560][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.654'. [ 219.279374][ T5893] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 219.450239][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.548560][ T5889] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 219.596438][ T7969] Unknown options in mask 5 [ 219.684555][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.696818][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 219.763677][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 219.768110][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.784903][ T5889] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 219.804750][ T5889] usb 4-1: config 0 has no interface number 0 [ 219.811570][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.826375][ T5889] usb 4-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 219.835514][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.839383][ T5893] usb 2-1: config 0 descriptor?? [ 219.859178][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.867456][ T5889] usb 4-1: Product: syz [ 219.902768][ T5889] usb 4-1: Manufacturer: syz [ 219.907660][ T5889] usb 4-1: SerialNumber: syz [ 219.934070][ T5889] usb 4-1: config 0 descriptor?? [ 219.951532][ T5889] ftdi_sio 4-1:0.151: FTDI USB Serial Device converter detected [ 219.970721][ T5889] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 220.162728][ T7965] ip6gre1: entered allmulticast mode [ 220.181305][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 220.215575][ T5852] IPVS: starting estimator thread 0... [ 220.284364][ T5893] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 220.310202][ T5893] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 220.326609][ T5893] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 220.379151][ T7971] IPVS: using max 28 ests per chain, 67200 per kthread [ 220.387157][ T5893] usb 4-1: USB disconnect, device number 25 [ 220.404652][ T5893] ftdi_sio 4-1:0.151: device disconnected [ 220.591932][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.625001][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.270191][ T44] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 221.478568][ T5893] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 221.638580][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 221.648922][ T5893] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.664008][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.672364][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 221.683125][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.707969][ T5893] usb 4-1: config 0 descriptor?? [ 221.765573][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 222.157050][ T5188] bcm5974 4-1:0.0: could not write to device [ 222.157489][ T5889] usb 4-1: USB disconnect, device number 26 [ 222.171282][ T6700] bcm5974 4-1:0.0: could not read from device [ 222.196722][ T6700] udevd[6700]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 222.207914][ T6700] udevd[6700]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 222.381054][ T5852] usb 2-1: USB disconnect, device number 24 [ 222.912051][ T8004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.508316][ T5894] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 223.548372][ T44] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 223.748573][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 223.778354][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.797241][ T5894] usb 5-1: config 0 has no interfaces? [ 223.802868][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 223.820150][ T5894] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 223.838340][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.847435][ T44] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 223.882413][ T5894] usb 5-1: Product: syz [ 223.887938][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.898473][ T5894] usb 5-1: Manufacturer: syz [ 223.903127][ T5894] usb 5-1: SerialNumber: syz [ 223.942247][ T44] usb 1-1: config 0 descriptor?? [ 223.957151][ T5894] usb 5-1: config 0 descriptor?? [ 224.157630][ T44] konepure 0003:1E7D:2DB4.000F: unbalanced collection at end of report description [ 224.186158][ T7998] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 224.216358][ T44] konepure 0003:1E7D:2DB4.000F: parse failed [ 224.238542][ T44] konepure 0003:1E7D:2DB4.000F: probe with driver konepure failed with error -22 [ 224.370903][ T44] usb 1-1: USB disconnect, device number 31 [ 225.075412][ T8037] loop6: detected capacity change from 0 to 7 [ 225.100026][ T5886] Dev loop6: unable to read RDB block 7 [ 225.112444][ T5886] loop6: unable to read partition table [ 225.126733][ T5886] loop6: partition table beyond EOD, truncated [ 225.183563][ T8037] Dev loop6: unable to read RDB block 7 [ 225.208455][ T8037] loop6: unable to read partition table [ 225.214674][ T8037] loop6: partition table beyond EOD, truncated [ 225.222731][ T8037] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.858686][ T5852] usb 5-1: USB disconnect, device number 35 [ 226.042666][ T8053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.156088][ T8077] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 227.162527][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.684'. [ 227.170270][ T8077] syzkaller1: linktype set to 0 [ 227.210177][ T8078] vxcan3: entered promiscuous mode [ 227.507251][ T8082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.688'. [ 227.600024][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.690'. [ 227.643256][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.690'. [ 227.728332][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 227.890126][ T9] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 227.917975][ T9] usb 4-1: config 0 has no interface number 0 [ 227.934876][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 227.953892][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.963941][ T9] usb 4-1: Product: syz [ 227.968885][ T9] usb 4-1: Manufacturer: syz [ 227.994007][ T9] usb 4-1: SerialNumber: syz [ 228.021914][ T9] usb 4-1: config 0 descriptor?? [ 228.061693][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 228.084050][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 228.111710][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.155269][ T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 228.175005][ T9] usb 4-1: media controller created [ 228.252341][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.268768][ T5852] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 228.391584][ T9] cxusb: set interface failed [ 228.413118][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 228.431924][ T8104] input: syz0 as /devices/virtual/input/input26 [ 228.492479][ T5852] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.528441][ T5852] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.565164][ T5852] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.585104][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.618903][ T5852] usb 5-1: Product: syz [ 228.623176][ T5852] usb 5-1: Manufacturer: syz [ 228.639199][ T9] DVB: Unable to find symbol mt352_attach() [ 228.646137][ T5852] usb 5-1: SerialNumber: syz [ 228.658765][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 228.664883][ T9] zl10353_read_register: readreg error (reg=127, ret==-121) [ 228.704613][ T5852] usb 5-1: selecting invalid altsetting 1 [ 228.739012][ T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 228.893365][ T44] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 228.998443][ T9] rc_core: IR keymap rc-dvico-mce not found [ 229.006709][ T9] Registered IR keymap rc-empty [ 229.023656][ T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 229.062867][ T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input27 [ 229.109476][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 229.121706][ T5852] cdc_ncm 5-1:1.0: bind() failure [ 229.180403][ T44] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 229.191961][ T5852] usb 5-1: USB disconnect, device number 36 [ 229.198502][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.206578][ T44] usb 2-1: Product: syz [ 229.270307][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 229.297308][ T44] usb 2-1: Manufacturer: syz [ 229.327095][ T44] usb 2-1: SerialNumber: syz [ 229.402074][ T44] usb 2-1: config 0 descriptor?? [ 229.428300][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 229.447024][ T44] gspca_main: sq905-2.14.0 probing 2770:9120 [ 229.589777][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 229.681636][ T44] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 229.715237][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 229.754410][ T44] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 229.807771][ T9] usb 4-1: USB disconnect, device number 27 [ 229.830663][ T44] usb 2-1: USB disconnect, device number 25 [ 229.855536][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 230.015037][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 230.160873][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 236.878237][ C0] sched: DL replenish lagged too much [ 246.045963][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 337.978227][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 337.985267][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8119/1:b..l [ 337.993608][ C0] rcu: (detected by 0, t=10502 jiffies, g=30061, q=484181 ncpus=2) [ 338.001639][ C0] task:syz.2.701 state:R running task stack:27272 pid:8119 tgid:8118 ppid:5848 task_flags:0x400040 flags:0x00004002 [ 338.016220][ C0] Call Trace: [ 338.019548][ C0] [ 338.022519][ C0] __schedule+0x16f5/0x4d00 [ 338.027181][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 338.032525][ C0] ? __pfx___schedule+0x10/0x10 [ 338.037435][ C0] ? __lock_acquire+0xab9/0xd20 [ 338.042344][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 338.047693][ C0] preempt_schedule_irq+0xb5/0x150 [ 338.052867][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 338.058651][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 338.064511][ C0] irqentry_exit+0x6f/0x90 [ 338.068991][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.075016][ C0] RIP: 0010:unwind_next_frame+0x132f/0x2390 [ 338.080990][ C0] Code: 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef <48> 39 dd 76 a2 e9 7b ef ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 7c [ 338.100649][ C0] RSP: 0018:ffffc9000413f1f8 EFLAGS: 00000293 [ 338.106767][ C0] RAX: ffffffff8fbe8940 RBX: ffffffff8fbe8944 RCX: ffffffff8fbe8948 [ 338.114812][ C0] RDX: ffffffff8fbe8944 RSI: ffffffff903ec47a RDI: ffffffff8be271e0 [ 338.124561][ C0] RBP: ffffffff8fbe8948 R08: 0000000000000003 R09: ffffffff81729e15 [ 338.132586][ C0] R10: ffffc9000413f318 R11: ffffffff81acf710 R12: ffffffff8235954b [ 338.140614][ C0] R13: ffffffff8fbe8944 R14: ffffc9000413f2c8 R15: ffffffff8fbe8944 [ 338.148669][ C0] ? chrdev_open+0x4cb/0x5e0 [ 338.153320][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.159522][ C0] ? unwind_next_frame+0xa5/0x2390 [ 338.164700][ C0] ? unwind_next_frame+0xd4/0x2390 [ 338.169886][ C0] ? unwind_next_frame+0xa5/0x2390 [ 338.175055][ C0] ? chrdev_open+0x4cc/0x5e0 [ 338.179695][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.185904][ C0] arch_stack_walk+0x11c/0x150 [ 338.190731][ C0] ? chrdev_open+0x4cc/0x5e0 [ 338.195373][ C0] stack_trace_save+0x9c/0xe0 [ 338.200097][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 338.205621][ C0] save_stack+0xf5/0x1f0 [ 338.209936][ C0] ? __pfx_save_stack+0x10/0x10 [ 338.214827][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 338.220155][ C0] ? __slab_free+0x326/0x400 [ 338.224791][ C0] ? qlist_free_all+0x97/0x140 [ 338.229649][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 338.235336][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 338.240399][ C0] ? __kmalloc_cache_noprof+0x1be/0x3d0 [ 338.245984][ C0] ? tty_alloc_file+0x4f/0xa0 [ 338.250708][ C0] ? ptmx_open+0x5f/0x2e0 [ 338.255076][ C0] ? chrdev_open+0x4cc/0x5e0 [ 338.259726][ C0] ? page_ext_put+0x97/0xc0 [ 338.264281][ C0] __reset_page_owner+0x71/0x1f0 [ 338.269267][ C0] __free_frozen_pages+0xc71/0xe70 [ 338.274440][ C0] __slab_free+0x326/0x400 [ 338.278904][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 338.284848][ C0] ? __phys_addr+0xd3/0x180 [ 338.289397][ C0] qlist_free_all+0x97/0x140 [ 338.294041][ C0] kasan_quarantine_reduce+0x148/0x160 [ 338.299559][ C0] __kasan_slab_alloc+0x22/0x80 [ 338.304460][ C0] __kmalloc_cache_noprof+0x1be/0x3d0 [ 338.309875][ C0] ? tty_alloc_file+0x4f/0xa0 [ 338.314688][ C0] tty_alloc_file+0x4f/0xa0 [ 338.319238][ C0] ptmx_open+0x5f/0x2e0 [ 338.323437][ C0] chrdev_open+0x4cc/0x5e0 [ 338.327902][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 338.332898][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 338.337884][ C0] do_dentry_open+0xdf3/0x1970 [ 338.342724][ C0] vfs_open+0x3b/0x340 [ 338.346835][ C0] ? path_openat+0x2ecd/0x3830 [ 338.351663][ C0] path_openat+0x2ee5/0x3830 [ 338.356304][ C0] ? arch_stack_walk+0xfc/0x150 [ 338.361231][ C0] ? __pfx_path_openat+0x10/0x10 [ 338.366222][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.372353][ C0] do_filp_open+0x1fa/0x410 [ 338.376901][ C0] ? __lock_acquire+0xab9/0xd20 [ 338.381803][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 338.386904][ C0] ? _raw_spin_unlock+0x28/0x50 [ 338.391807][ C0] ? alloc_fd+0x64c/0x6c0 [ 338.396209][ C0] do_sys_openat2+0x121/0x1c0 [ 338.400932][ C0] ? __se_sys_futex+0x36f/0x400 [ 338.405845][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.411101][ C0] ? rcu_is_watching+0x15/0xb0 [ 338.415909][ C0] __x64_sys_openat+0x138/0x170 [ 338.420814][ C0] do_syscall_64+0xfa/0x3b0 [ 338.425375][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.430633][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.436744][ C0] ? clear_bhb_loop+0x60/0xb0 [ 338.441462][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.447394][ C0] RIP: 0033:0x7faff1b8e929 [ 338.451851][ C0] RSP: 002b:00007fafef9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.460328][ C0] RAX: ffffffffffffffda RBX: 00007faff1db5fa0 RCX: 00007faff1b8e929 [ 338.468345][ C0] RDX: 0000000000121301 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 338.476353][ C0] RBP: 00007faff1c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 338.484361][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.492378][ C0] R13: 0000000000000000 R14: 00007faff1db5fa0 R15: 00007faff1edfa28 [ 338.500413][ C0] [ 339.466316][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.586972][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.657383][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.672800][ T1303] ieee802154 phy1 wpan1: encryption failed: -22