last executing test programs: 8.114692076s ago: executing program 4 (id=897): r0 = socket(0x11, 0x800, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160020030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8800, 0x0, 0x0) 8.024025373s ago: executing program 2 (id=898): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB="08001f0005"], 0x70}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70595ff08000000850000000800000095000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.954781059s ago: executing program 4 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="e4030000", @ANYRES16=r3, @ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'wlan1\x00', {}, 0x1ff}) 7.60825299s ago: executing program 4 (id=901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x8000, 0x10003}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1bbd3b3eb838c6ea}) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010000000000", @ANYBLOB="040101000000000014000300766c616e300000000000", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 5.860812705s ago: executing program 0 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x3000000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x20}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.776703957s ago: executing program 0 (id=905): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x4, 0x1000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00, 0x0, 0x4000081}, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d0f, &(0x7f0000000000)={0x7fffffff, 0xf}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/64, 0x0, 0xdddd0000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r9 = mmap$IORING_OFF_SQES(&(0x7f000054c000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x39, 0x2004, @fd_index=0x9, 0x9, &(0x7f0000000300)=[{&(0x7f0000000180)="1d9cefbb240667b5be88", 0xa}, {&(0x7f0000000500)="8caff1f1f8ed9bf17ae5af66e619a052c409ea732b47189e61fab6c7e47892d05e2a762860cf4992c7a1e7eda338f4e216d45081c012edf3d039dcd89bd23521e565b96f3beba9f7c007eb58937f391e2919bba75e58cd59e46c52f5b7b67cfc86993043ce6463214efe2c240b232b4be3d34fa4d652c02af772d6ae8ec87c35757b6302bcba1ec21f9151f7197831efd88568df5f9595bfdd759f4a6304990a2f17ad298151a5359317998a01fce8", 0xaf}, {&(0x7f00000002c0)="3aa1b57bfc207b0333ecbc69f2", 0xd}, {&(0x7f0000001600)="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", 0x1000}], 0x4, 0x5, 0x1, {0x3}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r6, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r10, 0xc0cc5615, &(0x7f0000000180)={0x4, @capture={0x2b98463320097932, 0x0, {0x6, 0xffffffff}, 0x4007, 0x9}}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r11 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x1000) write$sysctl(r11, &(0x7f00000000c0)='1\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.386669158s ago: executing program 0 (id=906): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x12) close(r0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003701f0e40410e56417f4f09eb15010203010902120001000110000904000100e5f32e05"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) 4.73006751s ago: executing program 3 (id=909): r0 = getpgrp(0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) syz_clone3(&(0x7f0000000200)={0x18002bf00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x36}, &(0x7f0000000100)=""/102, 0x66, &(0x7f0000000180)=""/19, &(0x7f00000001c0)=[0xffffffffffffffff, r0, r1], 0x3, {r3}}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') close(r4) getpgrp(0xffffffffffffffff) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) move_pages(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) (async) syz_clone3(&(0x7f0000000200)={0x18002bf00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x36}, &(0x7f0000000100)=""/102, 0x66, &(0x7f0000000180)=""/19, &(0x7f00000001c0)=[0xffffffffffffffff, r0, r1], 0x3, {r3}}, 0x58) (async) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') (async) close(r4) (async) 4.198750925s ago: executing program 4 (id=910): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) (async) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8000, r2, 0x0}]) (async) syz_usb_disconnect(r0) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$char_usb(r7, 0x0, 0x0) (async) syz_usb_disconnect(r1) (async) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x400, 0x14) 3.979296079s ago: executing program 2 (id=911): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_io_uring_setup(0x4e1, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001880)={'vxcan1\x00'}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, 0x0, 0x0) 3.965028751s ago: executing program 3 (id=912): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x635, &(0x7f0000000180)={0x0, 0x9bed, 0x1, 0x1, 0x371}, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2b1eb860e071a040, 0x4000, @fd_index=0x4, 0x7fff, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x2}) io_uring_enter(r3, 0x52de, 0xf62e, 0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0292000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x39, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) close(r6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) unshare(0x42040200) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b", 0x7e}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8", 0x47}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f0000001280)="b1fd6ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfe991b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7d7ec06cd29107dfa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e37cdbe2fd896dfaba823858ce1d54e88e291b3599e1841867526539c77eb4e4fba76ac9ca49fcdf9518d674e0f84aae53ff15125cc89315316fb213b86b2e424b6bdbab607e29f30150e161e7f88cf8a1a3e99ea3722afd60a0b29a4a66647684d0c8a7be71d43d83d84e94bd4708b4c238c4328575e5bf39b79c1d4780b07ecb9f5bb4a00305cf22c17192081e56e3588bbe5175bd1841505ca", 0x182}], 0x2}}], 0x2, 0xc0) 3.92319466s ago: executing program 1 (id=913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb2e}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8810) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x3, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0x6}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x7600) 3.726732028s ago: executing program 2 (id=914): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x6600, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) recvmsg(r1, 0x0, 0x100) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240080c5}, 0x40000800) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x4000002, 0xdf, 0x6, 0x4, 0x2e, 0x4d, 0x0, 0x1, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 3.118810688s ago: executing program 2 (id=915): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x9) r4 = dup(r2) unshare(0x2010000) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fsopen(&(0x7f0000000240)='romfs\x00', 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x31}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x24000004) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @loopback}}, {{0x2, 0x4e1e, @broadcast}}]}, 0x190) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x90) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 2.995030187s ago: executing program 1 (id=916): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x4, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) prctl$PR_SET_IO_FLUSHER(0x4c, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_80211_inject_frame(&(0x7f0000002dc0)=@device_b, &(0x7f0000002e00)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @from_mac, @device_b, @device_b, {0x9, 0xf}}, @a_msdu}, 0x18) 2.310588497s ago: executing program 1 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x68, @loopback, 0xc2}]}, &(0x7f0000000180)=0x10) syz_emit_ethernet(0x46, &(0x7f00000021c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="4f342beee69b", @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "e66474", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', {[], {{0x4e21, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, "4c3186", 0x2, "c4f0b6"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000021c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="4f342beee69b", @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "e66474", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', {[], {{0x4e21, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, "4c3186", 0x2, "c4f0b6"}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={r2, 0x1c, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f2"}, &(0x7f0000000400)=0x24) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={r2, 0x1c, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f2"}, &(0x7f0000000400)=0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a05000000000000000000010000000900010073797a30000000000c000440000000000000000340000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000003c010000160a0101000b000000000000010000060900020073797a30000000000900010073797a3000000000040003800c010380080002"], 0x1d0}}, 0x0) 2.110217445s ago: executing program 1 (id=918): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'wlan0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x98, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x17}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x2200, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x1, 0x0, {0x5, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x7, 0x5}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x3}]}]}, 0x98}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="fbdbdf120332b613d1d3d6000000669bc05b6df2446fef"], 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40800) 2.090308086s ago: executing program 3 (id=919): fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000240)='d\xdcscardy\x9f\x8d\xf0bDY\xe6`\x97S\xf9\xdcK\xaa\xcb\x80\xa6!\xb2\xaf\xc5\xf7\xdb\xf4\xc1\x13\xd31w\xa8\xa5\x96\xcd\xa3YlE\xe6\x1f\xad{\b\x9d\xd5\xfb\x91<\rU\xb7\x1dC\xd7N\x9f\xc0OPa\xaa\x89\x97\xc4V\x96\x9a6\xdf7\xda|8\x83\xca\xda\xf7\xaeo\x04/1y\x1d\x03\xc8ko\xfek\xc5f.\"/\x12\x86\x1a\x9a\xf8^\xcf\xc9\xc8\xee\xe6~\x9c\a\xf37O\xbb\xe8\xeeT6~\x8f\xc9\xff\vT\xd2%\xb5:4w\xdf\x19q\x83\xd7\xb0)_\xe4\xf0\xc3\xe0\x90\x96\x0f\x00\xe7Ng\x19J\xd7e\xca}\x82\xc3\x7fE\x88\x86\x8f\r{\xfb[ 1\xbfIK\xf9o\x9e\xe0E\xbf', &(0x7f0000000300)="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", 0x142) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00'], 0x50}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2042, 0x111) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x6, 0x9, 0xb2e0, 0x401, 0x3ff}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x0, 0xd}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20002000}, 0x4000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6e, 0xa6, 0x87, 0x20, 0x2304, 0x208, 0xe9bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x24, 0x2, 0x2, 0x61, 0xfe, 0x78, 0x0, [], [{{0x9, 0x5, 0x1, 0xa, 0x200, 0x5}}, {{0x9, 0x5, 0x82, 0x0, 0x200, 0x20}}]}}]}}]}}, 0x0) 1.978128741s ago: executing program 2 (id=920): r0 = getpid() ptrace(0x8406, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x280401) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0x2, &(0x7f0000000100)='#\x00'}, 0x30) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000180)={0x9, {0x40, 0x1, 0x6}, {0x0, 0xffffffff, 0x80000000, 0x2}, {0x2}}) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffa}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8b}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x80000000}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) read$FUSE(r3, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) clock_gettime(0x0, &(0x7f0000007940)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000077c0)=[{{&(0x7f00000023c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002440)=""/55, 0x37}, {&(0x7f0000002480)=""/157, 0x9d}, {&(0x7f0000002540)=""/91, 0x5b}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x4}, 0x8001}, {{&(0x7f0000003600)=@l2tp, 0x80, &(0x7f00000046c0)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)}], 0x2, &(0x7f0000004700)=""/204, 0xcc}, 0xd63}, {{&(0x7f0000004800)=@phonet, 0x80, &(0x7f0000004980)=[{&(0x7f0000004880)=""/101, 0x65}, {&(0x7f0000004900)=""/76, 0x4c}], 0x2}, 0xfd9}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f00000049c0)=""/195, 0xc3}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/129, 0x81}, {&(0x7f0000004c80)=""/133, 0x85}, {&(0x7f0000004d40)=""/19, 0x13}, {&(0x7f0000004d80)=""/28, 0x1c}, {&(0x7f0000004dc0)=""/189, 0xbd}, {&(0x7f0000004e80)=""/134, 0x86}, {&(0x7f0000004f40)=""/6, 0x6}, {&(0x7f0000004f80)=""/4096, 0x1000}], 0xa, &(0x7f0000006040)=""/172, 0xac}, 0x1800}, {{&(0x7f0000006100)=@x25, 0x80, &(0x7f0000007440)=[{&(0x7f0000006180)=""/100, 0x64}, {&(0x7f0000006200)=""/49, 0x31}, {&(0x7f0000006240)=""/248, 0xf8}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/42, 0x2a}, {&(0x7f0000007380)=""/139, 0x8b}], 0x6, &(0x7f00000074c0)=""/184, 0xb8}, 0x9}, {{0x0, 0x0, &(0x7f0000007740)=[{&(0x7f0000007580)=""/104, 0x68}, {&(0x7f0000007600)=""/48, 0x30}, {&(0x7f0000007640)=""/225, 0xe1}], 0x3, &(0x7f0000007780)=""/44, 0x2c}, 0xbe}], 0x6, 0x40002020, &(0x7f0000007980)={r5, r6+10000000}) rt_tgsigqueueinfo(r0, r0, 0x35, &(0x7f00000079c0)={0x26, 0x465, 0x80}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000007a40)) sendmsg$nl_route(r3, &(0x7f0000007b40)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007b00)={&(0x7f0000007ac0)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd28, 0x25dfdbfd, {0x80, 0x80, 0x80, 0x3, 0xfc, 0x4, 0xfd, 0x3, 0x800}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004841) syz_io_uring_setup(0x518b, &(0x7f0000007b80)={0x0, 0xed6a, 0x200, 0x0, 0x2a0, 0x0, r3}, &(0x7f0000007c00), &(0x7f0000007c40)) clock_gettime(0x0, &(0x7f0000007cc0)={0x0, 0x0}) ppoll(&(0x7f0000007c80)=[{r7, 0x8381}, {r2, 0x180}], 0x2, &(0x7f0000007d00)={r8, r9+60000000}, &(0x7f0000007d40)={[0x2]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, &(0x7f0000007d80)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000007dc0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000009040)={0x0, 0x1}, &(0x7f0000009080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000095c0)={0x0, 0x9}, &(0x7f0000009600)=0x8) sendmmsg$inet_sctp(r3, &(0x7f000000a3c0)=[{&(0x7f0000007e00)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000009000)=[{&(0x7f0000007e40)="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", 0x1000}, {&(0x7f0000008e40)="a478a8d02f1e76eebbe10bf8fb1e960404ca2cbdc1a79eee8e6435bac05e8c539e6cb93c01fb64d7ddb9ec83cec5a3087fa4ccb4899ba64f6031fe3b642652dd4a2534a49b0f7743", 0x48}, {&(0x7f0000008ec0)="4214ba5194ac3e4798d3e345712a4dac3430ec19233683e56771826057150b2e048a87c461e64199893556320b816c5ed4db070d8f9224cf0063ad52282eda9fbb9c28d8c25f68cb0b1e8ef1f57506ae11cc2d3a296cc50a7547950647e87c1064169bb5ceca145241121709fe3e61869e1d70e9ab854828dcedff0f5150f029f2e16df808f65d54ede5ee2d67f737cda8f01546b3b730fdfdf170c62200910b7457ed696aa82cca63f6ecdd8e6209cebaba97d3e27a0cf217390db8be141dcdf4c849d9863edc56dbf61c6dd641b5ab8caa30256d4f6068db39f475e94f", 0xde}, {&(0x7f0000008fc0)="da7cb617ef820e89db229b46739423df657c2cd14e9ce7742af61eb59c1eabdfb4bf2eadb5311f", 0x27}], 0x4, &(0x7f00000090c0)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x8c, 0xaf, 0x8001, 0x1, 0x80000001, 0x6, 0x0, 0x1, r10}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0x80}, {&(0x7f0000009140)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000009540)=[{&(0x7f0000009180)="99b2a9d455c1c42270fad8b317349362b7c1dfee44665e38850c1144599b95f61b4eb3d99e1e02f7f290768422b5c64c217727e3cd392090d03f561d59fc43e0bc8a7d1193b9bb91d6a702c5bb9a5fb5fc1b5721bbcc6b7ee38fbd8e2420799367539f242722b4a4e3e49e1f7f39356ce89a74735595bd05146df1c15e843c08d3265d024fcc9db2fa0afe34daf7c2f1a96c7e100a6fd8e08b", 0x99}, {&(0x7f0000009240)="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", 0xfd}, {&(0x7f0000009340)="de0a1c2f400ad55a4affe5c22fdb09f5d8f61e9bb004ff46c4f25d2ae9780871a6bf1cd7823bf780e81f413e516c4c3b79e1162d618857ad44ef6d1b0f9086b93fe13a392cf1bf35513dec31e677faff37af1bd83ad681758ddbc8b94650b2a400678e12c8de7d78677ee5b8ce74fa79c54a6100d2d9c5455a19d5f3adf3a4aaf163942022787a8a12cf", 0x8a}, {&(0x7f0000009400)="a2", 0x1}, {&(0x7f0000009440)="93389d87734909837f579ff1bab3055983e2eebcbc13420c511ef75af9f564f51a61b0c9", 0x24}, {&(0x7f0000009480)="2953c032a2cf43e35839608dff80ee342cbaa4571d61c18cde493398d34d1b5dbb7164199b90b9f4cd7c08a533ef6dbc211d0af2d37e71d40ea0632f900ed85bc5ccf31fbb704f94e1ce88194dc4c10ff3b3fc101bf67571253dc0194a982b9027b67dc952ed6a2e16528985ee502926687997400e889888abdb2c0572f7ae4c15a62455ab422eaabfb6e9e953be8aa679e1a167260ec460b101d2e4a6ab01caa52a1e7723b5757467bb719ec9f7bf51377151ac9fd890f5", 0xb8}], 0x6, &(0x7f0000009640)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xfffffffc}}, @sndinfo={0x20, 0x84, 0x2, {0x8d7, 0x8002, 0x9, 0x40, r11}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x88, 0x20000800}, {&(0x7f0000009700)=@in6={0xa, 0x4e20, 0x3, @mcast2, 0x1}, 0x1c, &(0x7f0000009980)=[{&(0x7f0000009740)="280e3ed3e023b94e5bd61a5f332c2fb891dad7851e90a12b4306502d4663ed3ebbba44fd3dec1f5040a036c5190c52443a68bb9e2dc1e2729fb8f413faff835baf64213e87e628b9531c793099d0f88312b4569517dc99a36bce3013ef7b054bc98aec4d532dab4d6b865622a3c93d8443949b3b25a84a36b4b1de1e69195486c4dc2e85a0a666b3fd78735740907e39e0e16945ba214846797ac2682457c6e10367e70297e1f618", 0xa8}, {&(0x7f0000009800)="0439d1ac0d6193cb663a901059570312d4954926a9ab1f0d917c2e8b55bd1ae4f39bab34e9a05395acd79b1c6bc41a6258d10a0848b1058576df56ba6fd509eb8e755fa826cf8fc80940cfbe6097cb0d", 0x50}, {&(0x7f0000009880)="17f1aa9140783a3d4f882dc85ddce7e0e83bfce840e1a224061287bb6319e022605b723531f4e6df1c8075769f237b61c1a8b01fd3e08ef6e1edcd484569b586c97462445b8f1c9f96f01203e88421d25a4928a283dcaed67a0a87db35c6f55be0eb370fc4718b8c4dbfe02be77aab1a0b2c0247533e3abd5bc19ff50c4572ccf0a6fddad4aac4bd30f512e1b6501518666a2ce931dac8cf502569e762c716cb37f81b82498f547f82f9474c5e681425216b0b21de0bb70c555dd4ebe419fbf923e37fb33f6b3fcb85a561f33134a832efc29adf5367bcb64aed9bb3d21dc4919ca837d67d303ade33", 0xe9}], 0x3, &(0x7f00000099c0)=[@init={0x18, 0x84, 0x0, {0x0, 0x8, 0xba, 0x5}}], 0x18, 0x4000840}, {&(0x7f0000009a00)=@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000009c00)=[{&(0x7f0000009a40)="3121edcd7d78b5c21eb2f9d1c8a5ef99950bca0cad121b3e9adf3bbd8185a37aafb3fd9e253981b4337b8257677664006825d6e0a23a69f2241371c50e94e3022cb891c631592ede9959c7e74644912b5a0e9c61d5ba2551c5102a0fb979026ba72fd0ae06f4b150997315ce4e28b8c1f188a441e218fc970e4e4aac7117606bed22edc778604ee41971ebf6f76f3239625ac1e42a0d88e3397d67771bef651389013a563f119a4efdb9b49ec864f30d226948660e0b12ad42ca", 0xba}, {&(0x7f0000009b00)="1b38518225add6b66a7151ae42d5eae6d0bd4d63d9992b36a4a50d710446060256b43685f31636737918237272c17053fd16a416206d234f4325eeff6008b972a6a3d26f884aa7b615e7ffa05eb57ec05e505574a1f7f7b80bee146b44828999d1e5be57f6a396194b9804558b89cdfdf9c0e0ca38e0c6fc0121619c6e776b98481988077aac9144bc1a8b538086a6f7027bc21eac2e086554d590a04209e7bb27", 0xa1}, {&(0x7f0000009bc0)="47dbe5a73f6fac1a3a736f6a", 0xc}], 0x3, 0x0, 0x0, 0x2004884d}, {&(0x7f0000009c40)=@in6={0xa, 0x4e22, 0x101, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}, 0x1c, &(0x7f000000a2c0)=[{&(0x7f0000009c80)="1b0d9027b2b467e59ecfa32dc35e47d32fc8d521", 0x14}, {&(0x7f0000009cc0)="e6ffd2316fb7d47c6dfa351f7e97731a4ef6c9f288caa3c1ad841050a09e305483fa466d967fbc2a540a68a8224b13340ca1c4babaccee04bb20", 0x3a}, {&(0x7f0000009d00)="b68ba798df37a2e1", 0x8}, {&(0x7f0000009d40)="7c4bf4b0fe49d0235d82a42dcb117559879763f4d0e4f9df7c72033f467e7d8a564718f296601aa7d1f66773848a90d3a330503fcc98c9024b7237d09b360d93ce6aa739533190ccbb6d17f6bdace40c7aab811a17f3429a13d18caac06894d65389f7c37d0a8c56f7f4f50dc24655ff36670c183f49ff2d3b032eb62b3eb512dcb2bae19b326ae9c094ed54e5d0a64b733373ddd1a5c1b72dba76db6004fe3186cf7016c14665fdee34bb4f315b53142e1b10bee1c026ca3633c688641e4b0289b648c56d302d2fe75717", 0xcb}, {&(0x7f0000009e40)="dac244e55a830397095e104566fb2beb2464a6d8929834d91c97cb9ee9ac811f81f680941b02f61f04c7d3d506b7c7dc36376aca2b081a4a8108303afb6ff464a8b3a133b66602ad8ba50d4453617a2feb0e84be3c090141e840e67ec8", 0x5d}, {&(0x7f0000009ec0)="7194c1cac1311608d2dc1825f37d179babfdf6f373762eccf9d2bcbd18dba30abf583a857f8e38f38f454a7ccb684c324edc0433b76f2f8338c424aca37268185e376c6cd490c7d3961523f5eeb5ee8d7e36c632692e79dcb77799d34b483e32b961a4216ed56ceeb2f190b7976917037dd453d988486d72e8ca9ee8e249646c4cda162e0ee0c2db80d96d597d51f133f395e7c5a526428ca4c282885e9d18a01a5c81015f551de52bb388583aba20560adddbf3d867ecf2de7d905a7a10ebc00f1e1a964713ed07b997d9", 0xcb}, {&(0x7f0000009fc0)="cfc69f95128e2542b5aa87e965a278337b25240a66339f4de700856708036b6b27c8e015aed75234fe75c7da9cd636db2c1ef19993950fdda832966b3a2cec5f3632f6c59e2972e37c293ddf7edcdfad4a069f671dec607b2db97491b1f360f95ea9d53ba32f357ed70817edc7eeaa9779c18cd674682787532862b43727ece9f0e6a3b47f855f6bf1e27b670b8b6872407e602266177136c643df03e9d1", 0x9e}, {&(0x7f000000a080)="4cc587cb4b5ac206fcba6e5ea8ad5515fb10f780d4f3a03cb00dfb9c2b93a2b1f8439f640ef18cea4f3277cd62673f9746332afdf4dde56f42badfc5b13f89dbcdb3f70e3be2fb8888cfeb4876ac1f8bc6a27d114fd1aa0dadaa0c380735db15e9f196ed8bac08595205a7cc946795f922dbcdb0234c0603dc74be1d2b2b", 0x7e}, {&(0x7f000000a100)="27aec1aff80d7e14306dbf203508c8018a25fa095a55cc07d3d81f02d261c651839771262d43b7c4c9610a24d86e7eb829775aba2c680280f110b48494a78a813d093149f57bc6afc2a4cbad63555e065d776f5a96382b63ad25321a5025c665d01195b17129c93b684932ffde62b5627b657f40b77674c4bf938dff08800eeb7b5715da8ea002bf159bc102ac47f13da4000c4bda92b6964205eb2a10fa8764d8142a37432324747531a83f9dfbbb0f2fb00c389fb9608065566cbb1755cc167cf95c662257", 0xc6}, {&(0x7f000000a200)="53b211fa7ebc952f57187d114fea3a7960a2dfdfc323089bf55699983f1cf57849f41a51994861c408c4fc6c6fe4da2b720149e658c8edb7c29256498f92a79ef7477cc9447e6c23a9af200415f3a9c8b9c5fadb565fd3df6619d3704648aa8564329a13bd22d66f9e2eb9391a4b705ca37a6ec2a8341d4d3c057ffce2128a6a57b32cb80fccaf8ba43cd197dc7b4c17cba737188b1d3e1b0b4ec18e94adf33d4afc69f67c43b8fe64a6a48e195b5fa7a3751f5f1594ac281a8f", 0xba}], 0xa, &(0x7f000000a380)=[@init={0x18, 0x84, 0x0, {0x40, 0x0, 0x4, 0x8}}], 0x18, 0x24000000}], 0x5, 0x90) syz_open_dev$hidraw(&(0x7f000000a500), 0xd9000000000000, 0x520180) openat$nullb(0xffffffffffffff9c, &(0x7f000000a540), 0x270002, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f000000a580)=0x2c3b, 0x4) 1.830374763s ago: executing program 1 (id=921): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xfff, 0x5c9080) ioctl$LOOP_CONFIGURE(r2, 0xc0401289, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x67, &(0x7f0000000000)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086070000003e00313afffe8000000000000000e8ff0000000000ff0200000000000000000000000000018900907800000000200100000000000000000000000000000000200401a4ca619bb99d9200"/103], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc}) r5 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000003eb0e26b69f8e00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="180800008a000020000000000000000018110000fdc1236897196a1059ea50e7405dd49c9185da2f482bfb3991eac0e7701b8a1560f935d186246021f5", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x360, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) r11 = syz_open_dev$ndb(&(0x7f0000000800), 0x0, 0x4000) ioctl$INCFS_IOC_FILL_BLOCKS(r11, 0x80106720, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x86, 0x7f, 0x21, @remote, @mcast1, 0x0, 0x1, 0x6, 0x41}}) setsockopt$inet_tcp_int(r9, 0x6, 0x9, &(0x7f0000000740)=0xfffffffa, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f00000006c0)) 1.801455276s ago: executing program 2 (id=922): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB="08001f0005"], 0x70}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705002008000000850000000800000095000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.674008907s ago: executing program 4 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0xa00, @loopback, 0x1}}}, 0x3a) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_lifetime={0x4, 0x3, 0xc35, 0x6}]}, 0x78}, 0x1, 0x7}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000100)={0x0, 0x50565559, 0x780, 0x428, 0x0, @stepwise}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/216) socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000400)={0x0, @remote, @multicast1}, &(0x7f0000000440)=0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x6c27, 0x3}, 0x0) close_range(r8, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000340)="66b98f0800000f3266b94f09000066b80e00000066ba000000000f30f2f30f233e65660f3882bb1763650f01cb0f01c866b94c0300000f32f20f01f726f71a2ef30f09", 0x43}], 0x1, 0x11, 0x0, 0x0) 1.526598389s ago: executing program 0 (id=924): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8260}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ftruncate(r0, 0xa) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) 1.368779594s ago: executing program 0 (id=925): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) fcntl$lock(r6, 0x6, &(0x7f0000000440)={0x2, 0x1, 0x1, 0x4}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a3100000000c4006b8aebc45357e8d853ce"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) syz_usb_connect$cdc_ncm(0x2, 0xb5, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x2, 0x1, 0x2, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "19bf"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6ac, 0x8, 0x7, 0x40}, {0x6, 0x24, 0x1a, 0x4, 0x31}, [@country_functional={0x10, 0x24, 0x7, 0x6, 0x1000, [0xd2c5, 0x7, 0x2, 0x4, 0x1]}, @dmm={0x7, 0x24, 0x14, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xfffa, 0xc, 0xfc, 0x1, 0x7, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x0, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x10, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x1bf, 0x1, 0x2, 0x3}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0xf9, 0x4, 0x7, 0xa0, 0xfe}, 0x1b, &(0x7f00000003c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x9, 0xb, 0xa, 0xfc}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xb, 0x2, 0x2, 0x3}]}, 0x4, [{0x9f, &(0x7f0000000540)=@string={0x9f, 0x3, "5f3d78153b4520fb82709abee64f61b1443048471b1b845fba90f4c1ec7f23bf7836e6c456fa4d487aa4ff08cc63167cf0cff3b3d26303c2a06a2e84ae78606259aeda3bb65c35bace4024dbdda357a6f65b47fa22486d859bf3576c058df48c109ab4dbb906e470a0b4aced44c0b9d3acf3d228cd5628a833a4325099268119e2d0a89d32367403af3b91c14b6ffd01943633523637710b240177c057"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x418}}, {0xcc, &(0x7f0000000640)=@string={0xcc, 0x3, "6a95f76a3ee89689a3d62edbbd88da992fa4749846673c470a66cf599b638feb4be19805a12224a5fb4bf67d75b23e01c2a91bb71d7cc98981af44e2bb4187eef9553dc6cdf7e2686cd3a063224cf461c78b9749f240f2eba73516374476ab6019c6c7a25add59ee8df0d73f163edcfe88c7e4e8e418dabf6ef1a18b0d50c1a334e53cd70400e94c3711c939a8e6333a9774daae26fdf4839918ef6d04549d26a8c6a803b592eafb1224a164e372fe182fe8eefeb56d06605fea2f337a56f4fac6d7375e41cb719ccfb7"}}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0070f6d02"]) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000007c0)={0x0, 0xb}) r7 = getpid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001a40)=[{&(0x7f00000013c0)=""/210, 0xd2}], 0x1, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYRES32=r7], 0x688}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) 1.176686268s ago: executing program 3 (id=926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket(0xb, 0x2, 0xb) bind$inet6(r3, &(0x7f0000000100)={0x11, 0x4e22, 0x3ff, @mcast2}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) socket$kcm(0x29, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x4c}}, 0x20040041) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 558.645089ms ago: executing program 4 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x100}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000", @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, 0x0, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e30000ddffffff130012804c0001006d616376746170000400028808000500", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x800) 428.947263ms ago: executing program 0 (id=928): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = dup3(r0, r1, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000008104"]) (async, rerun: 64) syz_usb_connect(0x4, 0x64, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES8=r2, @ANYRESOCT=r0], 0x0) (rerun: 64) 186.316484ms ago: executing program 1 (id=929): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000004500)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) futex(0x0, 0x87, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000100)) syz_open_dev$ttys(0xc, 0x2, 0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) close(r5) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 185.818848ms ago: executing program 3 (id=930): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000d92000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0xffffffffffffff01, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') pread64(r1, &(0x7f0000000100)=""/160, 0xa0, 0x7f1) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 0s ago: executing program 3 (id=931): timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a0300000000000000000007000000090001"], 0xbc}}, 0x48004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x5c4, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) kernel console output (not intermixed with test programs): -1:0.83: probe with driver peak_usb failed with error -71 [ 168.994102][ T65] usb 5-1: USB disconnect, device number 16 [ 169.112747][ T7202] netlink: 44 bytes leftover after parsing attributes in process `syz.3.339'. [ 169.124289][ T7200] loop6: detected capacity change from 0 to 7 [ 169.306627][ T7200] Dev loop6: unable to read RDB block 7 [ 169.329755][ T7200] loop6: AHDI p1 p2 p3 p4 [ 169.337770][ T7200] loop6: partition table partially beyond EOD, truncated [ 169.370353][ T7200] loop6: p1 start 926365495 is beyond EOD, truncated [ 169.384179][ T7200] loop6: p2 start 744947712 is beyond EOD, truncated [ 169.412506][ T7200] loop6: p3 start 1886353253 is beyond EOD, truncated [ 169.511866][ T7205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.585337][ T7205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.817401][ T7205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.849118][ T7205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.377961][ T1208] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 170.466383][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 170.473657][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 170.527871][ T5890] usb 3-1: USB disconnect, device number 25 [ 170.543481][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 170.592866][ T1208] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.696205][ T1208] usb 1-1: config 0 has no interface number 0 [ 170.995521][ T1208] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 171.055977][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.088050][ T1208] usb 1-1: Product: syz [ 171.108878][ T1208] usb 1-1: Manufacturer: syz [ 171.131245][ T1208] usb 1-1: SerialNumber: syz [ 171.157786][ T1208] usb 1-1: config 0 descriptor?? [ 171.186987][ T1208] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.196140][ T5890] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 171.250604][ T1208] usb 1-1: selecting invalid altsetting 1 [ 171.283934][ T1208] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.320074][ T1208] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.350033][ T1208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.358549][ T1208] usb 1-1: media controller created [ 171.412689][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 171.424510][ T5890] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 171.439014][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.456902][ T5890] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 171.789969][ T5890] usb 3-1: config 4 has no interface number 0 [ 171.851212][ T5890] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.961766][ T5890] usb 3-1: config 4 interface 51 has no altsetting 0 [ 172.017880][ T5890] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 172.056472][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.100132][ T5890] usb 3-1: Product: syz [ 172.113604][ T5890] usb 3-1: Manufacturer: syz [ 172.156927][ T5890] usb 3-1: SerialNumber: syz [ 172.266459][ T5890] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 172.357468][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.405556][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.426974][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.445711][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.475821][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.499617][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.526237][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.537380][ T7229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.346'. [ 172.635348][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.922719][ T1208] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 172.929960][ T1208] zl10353_read_register: readreg error (reg=127, ret==-110) [ 173.321601][ T7243] FAULT_INJECTION: forcing a failure. [ 173.321601][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 173.374317][ T7239] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 173.374973][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.3.349 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 173.374996][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.375006][ T7243] Call Trace: [ 173.375013][ T7243] [ 173.375021][ T7243] dump_stack_lvl+0x189/0x250 [ 173.375052][ T7243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.375076][ T7243] ? __pfx__printk+0x10/0x10 [ 173.375099][ T7243] ? __pfx___might_resched+0x10/0x10 [ 173.375115][ T7243] ? fs_reclaim_acquire+0x7d/0x100 [ 173.375144][ T7243] should_fail_ex+0x414/0x560 [ 173.375167][ T7243] should_failslab+0xa8/0x100 [ 173.375191][ T7243] __kmalloc_noprof+0xcb/0x4f0 [ 173.375211][ T7243] ? kfree+0x4d/0x440 [ 173.375227][ T7243] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 173.375253][ T7243] tomoyo_realpath_from_path+0xe3/0x5d0 [ 173.375276][ T7243] ? tomoyo_domain+0xda/0x130 [ 173.375302][ T7243] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 173.375319][ T7243] tomoyo_path_number_perm+0x1e8/0x5a0 [ 173.375340][ T7243] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.375375][ T7243] ? __lock_acquire+0xaac/0xd20 [ 173.375416][ T7243] ? __fget_files+0x2a/0x420 [ 173.375442][ T7243] ? __fget_files+0x3a0/0x420 [ 173.375474][ T7243] ? __fget_files+0x2a/0x420 [ 173.375500][ T7243] security_file_ioctl+0xcb/0x2d0 [ 173.375530][ T7243] __se_sys_ioctl+0x47/0x170 [ 173.375551][ T7243] do_syscall_64+0xf6/0x210 [ 173.375573][ T7243] ? clear_bhb_loop+0x60/0xb0 [ 173.375595][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.375610][ T7243] RIP: 0033:0x7feed4b8e969 [ 173.375626][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.375640][ T7243] RSP: 002b:00007feed5942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.375659][ T7243] RAX: ffffffffffffffda RBX: 00007feed4db5fa0 RCX: 00007feed4b8e969 [ 173.375672][ T7243] RDX: 0000200000000280 RSI: 0000000000008918 RDI: 0000000000000003 [ 173.375683][ T7243] RBP: 00007feed5942090 R08: 0000000000000000 R09: 0000000000000000 [ 173.375693][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.375704][ T7243] R13: 0000000000000000 R14: 00007feed4db5fa0 R15: 00007feed4edfa28 [ 173.375731][ T7243] [ 173.406755][ T7243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.677837][ T7245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.710559][ T7245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.799205][ T7239] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.348'. [ 173.906751][ T9] usb 3-1: USB disconnect, device number 26 [ 174.059841][ T7251] trusted_key: encrypted_key: insufficient parameters specified [ 174.172386][ T5890] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 174.236001][ T7253] loop6: detected capacity change from 0 to 7 [ 174.243497][ T7253] Dev loop6: unable to read RDB block 7 [ 174.251005][ T7253] loop6: AHDI p1 p2 p3 p4 [ 174.266007][ T7253] loop6: partition table partially beyond EOD, truncated [ 174.291851][ T7253] loop6: p1 start 926365495 is beyond EOD, truncated [ 174.303431][ T7253] loop6: p2 start 744947712 is beyond EOD, truncated [ 174.310196][ T7253] loop6: p3 start 1886353253 is beyond EOD, truncated [ 174.342519][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 174.349002][ T5890] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 174.380907][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.425013][ T5890] usb 5-1: config 0 descriptor?? [ 174.482213][ T5890] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 174.683720][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.714606][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.892502][ T1208] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 175.062376][ T1208] usb 3-1: Using ep0 maxpacket: 8 [ 175.185891][ T1208] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.508232][ T1208] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 175.682864][ T1208] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 175.839795][ T7277] FAULT_INJECTION: forcing a failure. [ 175.839795][ T7277] name failslab, interval 1, probability 0, space 0, times 0 [ 175.861888][ T1208] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 175.901333][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.3.360 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 175.901351][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.901359][ T7277] Call Trace: [ 175.901366][ T7277] [ 175.901374][ T7277] dump_stack_lvl+0x189/0x250 [ 175.901406][ T7277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.901430][ T7277] ? __pfx__printk+0x10/0x10 [ 175.901450][ T7277] ? __pfx___might_resched+0x10/0x10 [ 175.901462][ T7277] ? fs_reclaim_acquire+0x7d/0x100 [ 175.901479][ T7277] should_fail_ex+0x414/0x560 [ 175.901493][ T7277] should_failslab+0xa8/0x100 [ 175.901507][ T7277] __kmalloc_noprof+0xcb/0x4f0 [ 175.901526][ T7277] ? tomoyo_encode+0x28b/0x550 [ 175.901569][ T7277] tomoyo_encode+0x28b/0x550 [ 175.901595][ T7277] tomoyo_realpath_from_path+0x58d/0x5d0 [ 175.901610][ T7277] ? tomoyo_domain+0xda/0x130 [ 175.901625][ T7277] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 175.901635][ T7277] tomoyo_path_number_perm+0x1e8/0x5a0 [ 175.901647][ T7277] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.901679][ T7277] ? __lock_acquire+0xaac/0xd20 [ 175.901723][ T7277] ? __fget_files+0x2a/0x420 [ 175.901751][ T7277] ? __fget_files+0x3a0/0x420 [ 175.901764][ T7277] ? __fget_files+0x2a/0x420 [ 175.901778][ T7277] security_file_ioctl+0xcb/0x2d0 [ 175.901795][ T7277] __se_sys_ioctl+0x47/0x170 [ 175.901806][ T7277] do_syscall_64+0xf6/0x210 [ 175.901829][ T7277] ? clear_bhb_loop+0x60/0xb0 [ 175.901851][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.901868][ T7277] RIP: 0033:0x7feed4b8e969 [ 175.901884][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.901898][ T7277] RSP: 002b:00007feed5942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.901910][ T7277] RAX: ffffffffffffffda RBX: 00007feed4db5fa0 RCX: 00007feed4b8e969 [ 175.901917][ T7277] RDX: 0000200000000280 RSI: 0000000000008918 RDI: 0000000000000003 [ 175.901923][ T7277] RBP: 00007feed5942090 R08: 0000000000000000 R09: 0000000000000000 [ 175.901929][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.901935][ T7277] R13: 0000000000000000 R14: 00007feed4db5fa0 R15: 00007feed4edfa28 [ 175.901950][ T7277] [ 176.125466][ T1208] usb 3-1: config 8 has no interface number 0 [ 176.126181][ T7277] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.131598][ T1208] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 176.148289][ T1208] usb 3-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.171398][ T1208] usb 3-1: config 8 interface 24 has no altsetting 0 [ 176.200379][ T7278] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20003 [ 176.379200][ T1208] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 176.396316][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.404481][ T1208] usb 3-1: Product: syz [ 176.421873][ T1208] usb 3-1: Manufacturer: syz [ 176.432322][ T1208] usb 3-1: SerialNumber: syz [ 176.741778][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 176.875100][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.884316][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.070966][ T5890] usb 5-1: qt2_attach - failed to power on unit: -71 [ 177.145394][ T5890] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 177.246451][ T5890] usb 5-1: USB disconnect, device number 17 [ 177.442794][ T65] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 177.602367][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 177.609758][ T65] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 177.624201][ T65] usb 2-1: config 0 has no interface number 0 [ 177.639999][ T65] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 177.657382][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.665894][ T65] usb 2-1: Product: syz [ 177.670098][ T65] usb 2-1: Manufacturer: syz [ 177.674798][ T65] usb 2-1: SerialNumber: syz [ 177.684592][ T65] usb 2-1: config 0 descriptor?? [ 178.025627][ T65] peak_usb 2-1:0.83 can0: unable to request usb[type=0 value=1] err=-71 [ 178.049669][ T65] peak_usb 2-1:0.83: unable to read PCAN-USB Pro firmware info (err -71) [ 178.143513][ T65] peak_usb 2-1:0.83: probe with driver peak_usb failed with error -71 [ 178.164307][ T65] usb 2-1: USB disconnect, device number 21 [ 178.242169][ T7315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.461257][ T1208] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 178.509375][ T1208] usb 3-1: USB disconnect, device number 27 [ 178.787934][ T7321] FAULT_INJECTION: forcing a failure. [ 178.787934][ T7321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.818889][ T7321] CPU: 0 UID: 0 PID: 7321 Comm: syz.1.373 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 178.818914][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.818924][ T7321] Call Trace: [ 178.818931][ T7321] [ 178.818939][ T7321] dump_stack_lvl+0x189/0x250 [ 178.818972][ T7321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.818996][ T7321] ? __pfx__printk+0x10/0x10 [ 178.819024][ T7321] should_fail_ex+0x414/0x560 [ 178.819048][ T7321] _copy_from_user+0x2d/0xb0 [ 178.819071][ T7321] get_user_ifreq+0x6c/0x180 [ 178.819098][ T7321] inet_ioctl+0x38c/0x4c0 [ 178.819126][ T7321] ? __pfx_inet_ioctl+0x10/0x10 [ 178.819168][ T7321] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 178.819195][ T7321] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.819221][ T7321] sock_do_ioctl+0xd9/0x300 [ 178.819242][ T7321] ? __pfx_sock_do_ioctl+0x10/0x10 [ 178.819260][ T7321] ? __lock_acquire+0xaac/0xd20 [ 178.819297][ T7321] sock_ioctl+0x576/0x790 [ 178.819316][ T7321] ? __pfx_sock_ioctl+0x10/0x10 [ 178.819336][ T7321] ? __fget_files+0x3a0/0x420 [ 178.819357][ T7321] ? __fget_files+0x2a/0x420 [ 178.819381][ T7321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 178.819403][ T7321] ? __pfx_sock_ioctl+0x10/0x10 [ 178.819420][ T7321] __se_sys_ioctl+0xfc/0x170 [ 178.819442][ T7321] do_syscall_64+0xf6/0x210 [ 178.819465][ T7321] ? clear_bhb_loop+0x60/0xb0 [ 178.819486][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.819503][ T7321] RIP: 0033:0x7f578098e969 [ 178.819519][ T7321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.819534][ T7321] RSP: 002b:00007f578179c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.819554][ T7321] RAX: ffffffffffffffda RBX: 00007f5780bb5fa0 RCX: 00007f578098e969 [ 178.819567][ T7321] RDX: 0000200000000280 RSI: 0000000000008918 RDI: 0000000000000003 [ 178.819579][ T7321] RBP: 00007f578179c090 R08: 0000000000000000 R09: 0000000000000000 [ 178.819590][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.819601][ T7321] R13: 0000000000000000 R14: 00007f5780bb5fa0 R15: 00007f5780cdfa28 [ 178.819629][ T7321] [ 179.039399][ T1208] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 179.212338][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 179.223515][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.334661][ T1208] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 179.347450][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.465533][ T1208] usb 3-1: Product: syz [ 179.500996][ T1208] usb 3-1: Manufacturer: syz [ 179.525814][ T1208] usb 3-1: SerialNumber: syz [ 179.541686][ T1208] usb 3-1: config 0 descriptor?? [ 179.706847][ T1208] hub 3-1:0.0: bad descriptor, ignoring hub [ 179.713752][ T1208] hub 3-1:0.0: probe with driver hub failed with error -5 [ 179.726893][ T1208] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 180.796795][ T30] audit: type=1326 audit(1747195737.678:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 180.847706][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.861271][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.900865][ T30] audit: type=1326 audit(1747195737.678:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 180.933145][ T30] audit: type=1326 audit(1747195737.678:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 180.963163][ T30] audit: type=1326 audit(1747195737.678:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 180.986733][ T30] audit: type=1326 audit(1747195737.678:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 181.036697][ T30] audit: type=1326 audit(1747195737.678:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 181.134693][ T30] audit: type=1326 audit(1747195737.678:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 181.202524][ T30] audit: type=1326 audit(1747195737.678:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 181.226463][ T5893] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 181.236101][ T30] audit: type=1326 audit(1747195737.678:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 181.259651][ T30] audit: type=1326 audit(1747195737.678:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 181.382357][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 181.388827][ T5893] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 181.397404][ T5893] usb 2-1: config 0 has no interface number 0 [ 181.407732][ T5893] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 181.422353][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.430827][ T5893] usb 2-1: Product: syz [ 181.438351][ T5893] usb 2-1: Manufacturer: syz [ 181.443125][ T5893] usb 2-1: SerialNumber: syz [ 181.456380][ T5893] usb 2-1: config 0 descriptor?? [ 181.784492][ T5893] peak_usb 2-1:0.83 can0: unable to request usb[type=0 value=1] err=-71 [ 181.818184][ T5893] peak_usb 2-1:0.83: unable to read PCAN-USB Pro firmware info (err -71) [ 181.915459][ T5893] peak_usb 2-1:0.83: probe with driver peak_usb failed with error -71 [ 181.930882][ T5893] usb 2-1: USB disconnect, device number 22 [ 182.463184][ T7378] FAULT_INJECTION: forcing a failure. [ 182.463184][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.489538][ T7378] CPU: 0 UID: 0 PID: 7378 Comm: syz.1.387 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 182.489562][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.489572][ T7378] Call Trace: [ 182.489579][ T7378] [ 182.489587][ T7378] dump_stack_lvl+0x189/0x250 [ 182.489618][ T7378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.489648][ T7378] ? __pfx__printk+0x10/0x10 [ 182.489679][ T7378] should_fail_ex+0x414/0x560 [ 182.489704][ T7378] _copy_to_user+0x31/0xb0 [ 182.489729][ T7378] simple_read_from_buffer+0xe1/0x170 [ 182.489756][ T7378] proc_fail_nth_read+0x1df/0x250 [ 182.489783][ T7378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.489809][ T7378] ? rw_verify_area+0x258/0x650 [ 182.489828][ T7378] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.489853][ T7378] vfs_read+0x200/0x980 [ 182.489878][ T7378] ? __pfx___mutex_lock+0x10/0x10 [ 182.489901][ T7378] ? __pfx_vfs_read+0x10/0x10 [ 182.489922][ T7378] ? __fget_files+0x2a/0x420 [ 182.489948][ T7378] ? __fget_files+0x3a0/0x420 [ 182.489968][ T7378] ? __fget_files+0x2a/0x420 [ 182.489999][ T7378] ksys_read+0x145/0x250 [ 182.490017][ T7378] ? __fget_files+0x2a/0x420 [ 182.490042][ T7378] ? __pfx_ksys_read+0x10/0x10 [ 182.490066][ T7378] ? do_syscall_64+0xba/0x210 [ 182.490090][ T7378] do_syscall_64+0xf6/0x210 [ 182.490112][ T7378] ? clear_bhb_loop+0x60/0xb0 [ 182.490134][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.490151][ T7378] RIP: 0033:0x7f578098d37c [ 182.490166][ T7378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.490180][ T7378] RSP: 002b:00007f578179c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.490199][ T7378] RAX: ffffffffffffffda RBX: 00007f5780bb5fa0 RCX: 00007f578098d37c [ 182.490212][ T7378] RDX: 000000000000000f RSI: 00007f578179c0a0 RDI: 0000000000000004 [ 182.490223][ T7378] RBP: 00007f578179c090 R08: 0000000000000000 R09: 0000000000000000 [ 182.490234][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.490245][ T7378] R13: 0000000000000000 R14: 00007f5780bb5fa0 R15: 00007f5780cdfa28 [ 182.490274][ T7378] [ 185.059495][ T5890] usb 3-1: USB disconnect, device number 28 [ 185.962010][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'. [ 186.323512][ T5891] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 186.532397][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 186.555235][ T5891] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 186.566240][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.678812][ T5891] usb 5-1: config 0 has no interface number 0 [ 186.699575][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 186.716943][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.898488][ T5891] usb 5-1: Product: syz [ 187.042338][ T5891] usb 5-1: Manufacturer: syz [ 187.048479][ T5891] usb 5-1: SerialNumber: syz [ 187.085210][ T5891] usb 5-1: config 0 descriptor?? [ 187.306697][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 187.324932][ T5891] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 187.336030][ T5891] usb 5-1: No valid video chain found. [ 187.432102][ T5891] usb 5-1: USB disconnect, device number 18 [ 188.838488][ T7475] loop6: detected capacity change from 0 to 7 [ 188.849387][ T7475] Dev loop6: unable to read RDB block 7 [ 188.872641][ T7475] loop6: AHDI p1 p2 p3 p4 [ 188.881734][ T7475] loop6: partition table partially beyond EOD, truncated [ 188.893003][ T7475] loop6: p1 start 926365495 is beyond EOD, truncated [ 188.900997][ T7475] loop6: p2 start 744947712 is beyond EOD, truncated [ 188.916758][ T7475] loop6: p3 start 1886353253 is beyond EOD, truncated [ 188.948962][ T7477] loop2: detected capacity change from 0 to 7 [ 188.975303][ T5837] Dev loop2: unable to read RDB block 7 [ 188.993256][ T5837] loop2: unable to read partition table [ 189.011252][ T5837] loop2: partition table beyond EOD, truncated [ 189.025385][ T7477] Dev loop2: unable to read RDB block 7 [ 189.031993][ T7477] loop2: unable to read partition table [ 189.041792][ T7477] loop2: partition table beyond EOD, truncated [ 189.059444][ T7477] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.138688][ T7480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.160746][ T7484] FAULT_INJECTION: forcing a failure. [ 189.160746][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.199408][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.3.415 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 189.199433][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.199444][ T7484] Call Trace: [ 189.199451][ T7484] [ 189.199459][ T7484] dump_stack_lvl+0x189/0x250 [ 189.199485][ T7484] ? __lock_acquire+0xaac/0xd20 [ 189.199510][ T7484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.199532][ T7484] ? __pfx__printk+0x10/0x10 [ 189.199550][ T7484] ? __might_fault+0xb0/0x130 [ 189.199582][ T7484] should_fail_ex+0x414/0x560 [ 189.199604][ T7484] _copy_from_user+0x2d/0xb0 [ 189.199626][ T7484] __sys_bpf+0x1ed/0x860 [ 189.199649][ T7484] ? __pfx___sys_bpf+0x10/0x10 [ 189.199681][ T7484] ? ksys_write+0x1e1/0x250 [ 189.199699][ T7484] ? rcu_is_watching+0x15/0xb0 [ 189.199724][ T7484] __x64_sys_bpf+0x7c/0x90 [ 189.199743][ T7484] do_syscall_64+0xf6/0x210 [ 189.199766][ T7484] ? clear_bhb_loop+0x60/0xb0 [ 189.199788][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.199804][ T7484] RIP: 0033:0x7feed4b8e969 [ 189.199819][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.199834][ T7484] RSP: 002b:00007feed5942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.199853][ T7484] RAX: ffffffffffffffda RBX: 00007feed4db5fa0 RCX: 00007feed4b8e969 [ 189.199866][ T7484] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000001 [ 189.199877][ T7484] RBP: 00007feed5942090 R08: 0000000000000000 R09: 0000000000000000 [ 189.199888][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.199899][ T7484] R13: 0000000000000000 R14: 00007feed4db5fa0 R15: 00007feed4edfa28 [ 189.199927][ T7484] [ 189.240313][ T7480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.411208][ T7480] atomic_op ffff888056e6d998 conn xmit_atomic 0000000000000000 [ 189.467785][ T7493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.480097][ T7493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.932460][ T65] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 190.110474][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 190.700452][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.717198][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.733562][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.762102][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 190.763834][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.048882][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 191.070943][ T65] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 191.120532][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 191.150169][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 191.195424][ T65] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 191.205715][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.213790][ T65] usb 3-1: Product: syz [ 191.218033][ T65] usb 3-1: Manufacturer: syz [ 191.222700][ T65] usb 3-1: SerialNumber: syz [ 191.229114][ T65] usb 3-1: config 0 descriptor?? [ 191.240138][ T7499] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 191.259294][ T65] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 191.271777][ T5187] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.284967][ T5187] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.316315][ T5187] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.343750][ T5187] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.574870][ T7499] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.620059][ T5187] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.656817][ T5848] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.742465][ T5187] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 191.789512][ T5187] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 192.417513][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 192.417528][ T30] audit: type=1326 audit(1747195749.298:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578098e969 code=0x0 [ 192.550788][ T7527] netlink: 'syz.1.426': attribute type 6 has an invalid length. [ 193.940893][ T5854] usb 3-1: USB disconnect, device number 29 [ 194.161122][ T7557] loop6: detected capacity change from 0 to 7 [ 194.209696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.217005][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.228156][ T7557] Dev loop6: unable to read RDB block 7 [ 194.245815][ T7557] loop6: unable to read partition table [ 194.285599][ T7557] loop6: partition table beyond EOD, truncated [ 194.318211][ T7557] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.532903][ T5854] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 194.712732][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 194.736427][ T5854] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 194.762871][ T5854] usb 3-1: config 0 has no interface number 0 [ 194.785809][ T5854] usb 3-1: config 0 interface 12 has no altsetting 0 [ 194.798206][ T5854] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 194.832184][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.896233][ T5854] usb 3-1: Product: syz [ 194.900580][ T5854] usb 3-1: Manufacturer: syz [ 194.929749][ T5854] usb 3-1: SerialNumber: syz [ 194.938567][ T5854] usb 3-1: config 0 descriptor?? [ 195.597579][ T5854] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 195.637821][ T5854] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 195.727867][ T5854] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 195.814177][ T5854] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 196.032700][ T5854] usb 3-1: USB disconnect, device number 30 [ 196.302878][ T7586] FAULT_INJECTION: forcing a failure. [ 196.302878][ T7586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.326328][ T7586] CPU: 1 UID: 0 PID: 7586 Comm: syz.3.444 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 196.326344][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.326351][ T7586] Call Trace: [ 196.326355][ T7586] [ 196.326360][ T7586] dump_stack_lvl+0x189/0x250 [ 196.326377][ T7586] ? __lock_acquire+0xaac/0xd20 [ 196.326392][ T7586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.326406][ T7586] ? __pfx__printk+0x10/0x10 [ 196.326416][ T7586] ? __might_fault+0xb0/0x130 [ 196.326434][ T7586] should_fail_ex+0x414/0x560 [ 196.326448][ T7586] _copy_from_iter+0x1db/0x15a0 [ 196.326466][ T7586] ? __pfx__copy_from_iter+0x10/0x10 [ 196.326480][ T7586] ? dev_get_by_index+0x22/0x2e0 [ 196.326490][ T7586] ? dev_get_by_index+0x22/0x2e0 [ 196.326502][ T7586] packet_sendmsg+0x3322/0x5400 [ 196.326515][ T7586] ? aa_label_sk_perm+0x413/0x560 [ 196.326539][ T7586] ? __pfx___might_resched+0x10/0x10 [ 196.326549][ T7586] ? __lock_acquire+0xaac/0xd20 [ 196.326569][ T7586] ? __pfx_packet_sendmsg+0x10/0x10 [ 196.326579][ T7586] ? aa_sk_perm+0x81e/0x950 [ 196.326592][ T7586] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 196.326608][ T7586] ? aa_sock_msg_perm+0x94/0x160 [ 196.326620][ T7586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.326632][ T7586] ? __pfx_packet_sendmsg+0x10/0x10 [ 196.326644][ T7586] __sock_sendmsg+0x21c/0x270 [ 196.326657][ T7586] __sys_sendto+0x3bd/0x520 [ 196.326670][ T7586] ? __pfx___sys_sendto+0x10/0x10 [ 196.326683][ T7586] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 196.326704][ T7586] ? __fget_files+0x3a0/0x420 [ 196.326722][ T7586] ? ksys_write+0x1f0/0x250 [ 196.326733][ T7586] ? rcu_is_watching+0x15/0xb0 [ 196.326746][ T7586] __x64_sys_sendto+0xde/0x100 [ 196.326760][ T7586] do_syscall_64+0xf6/0x210 [ 196.326774][ T7586] ? clear_bhb_loop+0x60/0xb0 [ 196.326786][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.326795][ T7586] RIP: 0033:0x7feed4b8e969 [ 196.326805][ T7586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.326813][ T7586] RSP: 002b:00007feed5942038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 196.326824][ T7586] RAX: ffffffffffffffda RBX: 00007feed4db5fa0 RCX: 00007feed4b8e969 [ 196.326832][ T7586] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 196.326838][ T7586] RBP: 00007feed5942090 R08: 0000200000000140 R09: 0000000000000014 [ 196.326844][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.326850][ T7586] R13: 0000000000000000 R14: 00007feed4db5fa0 R15: 00007feed4edfa28 [ 196.326865][ T7586] [ 197.631268][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.723304][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.654325][ T52] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 199.195409][ T7623] loop6: detected capacity change from 0 to 7 [ 199.212185][ T7623] Dev loop6: unable to read RDB block 7 [ 199.228518][ T7623] loop6: AHDI p1 p2 p3 p4 [ 199.243522][ T7623] loop6: partition table partially beyond EOD, truncated [ 199.267037][ T7623] loop6: p1 start 926365495 is beyond EOD, truncated [ 199.322537][ T7623] loop6: p2 start 744947712 is beyond EOD, truncated [ 199.361404][ T7623] loop6: p3 start 1886353253 is beyond EOD, truncated [ 199.707344][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.720350][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.745247][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.758493][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.886327][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.927577][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.747694][ T7644] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[7644] [ 201.393983][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 201.402079][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 201.402106][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 201.408191][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 201.408225][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 201.429300][ T7662] loop6: detected capacity change from 0 to 7 [ 201.439094][ T5838] Dev loop6: unable to read RDB block 7 [ 201.468277][ T5838] loop6: AHDI p1 p2 p3 p4 [ 201.478940][ T5838] loop6: partition table partially beyond EOD, truncated [ 201.504510][ T5838] loop6: p1 start 926365495 is beyond EOD, truncated [ 201.511247][ T5838] loop6: p2 start 744947712 is beyond EOD, truncated [ 201.519905][ T5838] loop6: p3 start 1886353253 is beyond EOD, truncated [ 201.562437][ T65] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 201.581189][ T7662] Dev loop6: unable to read RDB block 7 [ 201.586954][ T7662] loop6: AHDI p1 p2 p3 p4 [ 201.591554][ T7662] loop6: partition table partially beyond EOD, truncated [ 201.625641][ T7662] loop6: p1 start 926365495 is beyond EOD, truncated [ 201.634801][ T7662] loop6: p2 start 744947712 is beyond EOD, truncated [ 201.647565][ T7662] loop6: p3 start 1886353253 is beyond EOD, truncated [ 201.660096][ T30] audit: type=1326 audit(1747195758.528:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.1.467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578098e969 code=0x0 [ 202.195709][ T65] usb 3-1: too many configurations: 136, using maximum allowed: 8 [ 202.205503][ T65] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 202.213841][ T65] usb 3-1: can't read configurations, error -61 [ 202.348538][ T65] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 202.430971][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 202.624424][ T65] usb 3-1: too many configurations: 136, using maximum allowed: 8 [ 202.642906][ T65] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 202.650513][ T65] usb 3-1: can't read configurations, error -61 [ 202.727480][ T65] usb usb3-port1: attempt power cycle [ 202.985927][ T7687] netlink: 92 bytes leftover after parsing attributes in process `syz.3.471'. [ 202.997757][ T7687] netlink: 92 bytes leftover after parsing attributes in process `syz.3.471'. [ 203.162610][ T65] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 203.382766][ T65] usb 3-1: too many configurations: 136, using maximum allowed: 8 [ 203.414222][ T65] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 203.764869][ T65] usb 3-1: can't read configurations, error -61 [ 203.946208][ T65] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 203.985012][ T65] usb 3-1: too many configurations: 136, using maximum allowed: 8 [ 203.999495][ T7700] bridge0: entered allmulticast mode [ 204.006477][ T65] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 204.095006][ T65] usb 3-1: can't read configurations, error -61 [ 204.144186][ T7700] pim6reg: entered allmulticast mode [ 204.169623][ T65] usb usb3-port1: unable to enumerate USB device [ 204.877636][ T7714] loop6: detected capacity change from 0 to 7 [ 204.935315][ T7714] Dev loop6: unable to read RDB block 7 [ 204.960076][ T7714] loop6: AHDI p1 p2 p3 p4 [ 204.974709][ T7714] loop6: partition table partially beyond EOD, truncated [ 204.990285][ T7714] loop6: p1 start 926365495 is beyond EOD, truncated [ 205.010510][ T7714] loop6: p2 start 744947712 is beyond EOD, truncated [ 205.034853][ T7714] loop6: p3 start 1886353253 is beyond EOD, truncated [ 205.035274][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 205.275426][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 205.452329][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 205.460361][ T9] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 205.469101][ T9] usb 2-1: config 2 has no interface number 0 [ 205.479810][ T9] usb 2-1: config 2 interface 31 has no altsetting 0 [ 205.489556][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 205.503106][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.511176][ T9] usb 2-1: Product: syz [ 205.518722][ T9] usb 2-1: Manufacturer: syz [ 205.526234][ T9] usb 2-1: SerialNumber: syz [ 205.537093][ T7728] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 205.546850][ T7728] netlink: 'syz.4.481': attribute type 11 has an invalid length. [ 206.747395][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.785405][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.165280][ T9] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 207.353261][ T7753] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 207.371710][ T7753] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 207.542576][ T5890] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 207.566940][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.601323][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.674307][ T7763] loop6: detected capacity change from 0 to 7 [ 207.682602][ T7763] Dev loop6: unable to read RDB block 7 [ 207.689057][ T7763] loop6: AHDI p1 p2 p3 p4 [ 207.725704][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.751071][ T7763] loop6: partition table partially beyond EOD, truncated [ 207.771741][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 207.826666][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.855990][ T7763] loop6: p1 start 926365495 is beyond EOD, truncated [ 207.857581][ T5890] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.874360][ T7763] loop6: p2 start 744947712 is beyond EOD, truncated [ 207.876612][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.881185][ T7763] loop6: p3 start 1886353253 is beyond EOD, truncated [ 207.910402][ T5890] usb 3-1: SerialNumber: syz [ 208.459612][ T5890] usb 3-1: 0:2 : does not exist [ 208.622708][ T5890] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 209.072116][ T5890] usb 3-1: USB disconnect, device number 35 [ 209.173704][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.452547][ T5890] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 209.633609][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 209.648052][ T5890] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 209.660524][ T5890] usb 3-1: config 0 has no interface number 0 [ 209.780765][ T5890] usb 3-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=2a.c4 [ 209.791045][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.799642][ T5890] usb 3-1: Product: syz [ 209.829447][ T5890] usb 3-1: Manufacturer: syz [ 209.867390][ T5890] usb 3-1: SerialNumber: syz [ 209.879064][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.502'. [ 209.917438][ T5890] usb 3-1: config 0 descriptor?? [ 209.935512][ T5890] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 210.213190][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.262777][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.463608][ T5890] gspca_sonixj: reg_w1 err -110 [ 210.470429][ T5890] sonixj 3-1:0.128: probe with driver sonixj failed with error -110 [ 210.740330][ T5893] usb 3-1: USB disconnect, device number 36 [ 210.772856][ T7803] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=28 (56 ns) > initial count (12 ns). Using initial count to start timer. [ 211.214744][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 211.392407][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 211.425377][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.470476][ T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 211.470589][ T7827] netlink: 104 bytes leftover after parsing attributes in process `syz.3.509'. [ 211.493566][ T7828] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.535861][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.563712][ T9] usb 5-1: Product: syz [ 211.568524][ T9] usb 5-1: Manufacturer: syz [ 211.579982][ T9] usb 5-1: SerialNumber: syz [ 211.606061][ T9] usb 5-1: config 0 descriptor?? [ 211.621138][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 211.651369][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 211.679693][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 211.772899][ T5890] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 211.789202][ T30] audit: type=1326 audit(1747195768.668:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 211.834374][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.858253][ T30] audit: type=1326 audit(1747195768.668:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 211.884409][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.916794][ T30] audit: type=1326 audit(1747195768.678:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 211.941305][ T30] audit: type=1326 audit(1747195768.728:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cc73c1225 code=0x7ffc0000 [ 211.973284][ T30] audit: type=1326 audit(1747195768.728:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 212.002624][ T30] audit: type=1326 audit(1747195768.748:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 212.026997][ T30] audit: type=1326 audit(1747195768.788:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 212.027669][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.056735][ T30] audit: type=1326 audit(1747195768.788:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 212.097210][ T30] audit: type=1326 audit(1747195768.788:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 212.119284][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.128503][ T30] audit: type=1326 audit(1747195768.788:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 212.150591][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.153636][ T5890] usb 3-1: not running at top speed; connect to a high speed hub [ 212.167975][ T5890] usb 3-1: config 7 has an invalid descriptor of length 82, skipping remainder of the config [ 212.178869][ T5890] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 212.193631][ T5890] usb 3-1: New USB device found, idVendor=24c6, idProduct=ad0e, bcdDevice=9d.4c [ 212.208934][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.217087][ T5890] usb 3-1: Product: syz [ 212.221376][ T5890] usb 3-1: Manufacturer: syz [ 212.228154][ T5890] usb 3-1: SerialNumber: syz [ 212.456831][ T5890] usb 3-1: USB disconnect, device number 37 [ 212.625168][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 212.651433][ T7849] loop2: detected capacity change from 0 to 7 [ 212.674119][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 212.677128][ T7849] Dev loop2: unable to read RDB block 7 [ 212.724921][ T7849] loop2: unable to read partition table [ 212.731258][ T7849] loop2: partition table beyond EOD, truncated [ 212.741741][ T7849] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.853039][ T7851] xt_hashlimit: size too large, truncated to 1048576 [ 213.327625][ T5848] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 213.338818][ T5848] usb 5-1: device reset changed ep0 maxpacket size! [ 213.351428][ T1208] usb 5-1: USB disconnect, device number 19 [ 214.268668][ T7871] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 214.308687][ T1208] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 214.417362][ T7874] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.440247][ T7874] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.449560][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.523'. [ 214.458585][ T7874] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.469613][ T7874] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.506712][ T7874] bond1: (slave geneve2): making interface the new active one [ 214.573360][ T7874] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 214.589074][ T1208] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.598416][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.608995][ T1208] usb 5-1: Product: syz [ 214.613390][ T1208] usb 5-1: Manufacturer: syz [ 214.618033][ T1208] usb 5-1: SerialNumber: syz [ 214.633739][ T1208] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.658917][ T5890] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.748023][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.820290][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.304751][ T7880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.324053][ T7880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.724992][ T5890] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 215.748709][ T5890] ath9k_htc: Failed to initialize the device [ 215.835212][ T5890] usb 5-1: ath9k_htc: USB layer deinitialized [ 216.009896][ T7891] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 216.016580][ T7891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.061716][ T5890] usb 5-1: USB disconnect, device number 20 [ 216.073902][ T7891] vhci_hcd vhci_hcd.0: Device attached [ 216.116166][ T7892] vhci_hcd: connection closed [ 216.120576][ T12] vhci_hcd: stop threads [ 216.137651][ T12] vhci_hcd: release socket [ 216.148935][ T12] vhci_hcd: disconnect device [ 217.442605][ T5890] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 217.603503][ T7929] fuse: Unknown parameter '0x0000000000000003' [ 217.612501][ T5890] usb 5-1: device descriptor read/64, error -71 [ 217.673834][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 217.686904][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 217.697112][ T7932] netlink: 'syz.3.540': attribute type 13 has an invalid length. [ 217.725926][ T7933] netlink: 64 bytes leftover after parsing attributes in process `syz.1.530'. [ 217.852613][ T5890] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 217.906231][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.948299][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.993490][ T5890] usb 5-1: device descriptor read/64, error -71 [ 218.103129][ T5890] usb usb5-port1: attempt power cycle [ 218.368318][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.415289][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.442372][ T5890] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 218.460648][ T7942] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.463103][ T5890] usb 5-1: device descriptor read/8, error -71 [ 218.712367][ T5890] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 218.743757][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 218.756810][ T5890] usb 5-1: device descriptor read/8, error -71 [ 218.763483][ T7947] batadv0: entered promiscuous mode [ 218.782830][ T7944] batadv0: left promiscuous mode [ 218.892752][ T5890] usb usb5-port1: unable to enumerate USB device [ 218.921949][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.936374][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.366226][ T7967] netlink: 'syz.2.546': attribute type 33 has an invalid length. [ 219.398063][ T7967] netlink: 152 bytes leftover after parsing attributes in process `syz.2.546'. [ 219.809874][ T7974] fuse: Unknown parameter '0x0000000000000003' [ 220.016045][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 220.025382][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 220.079557][ T7980] netlink: 'syz.3.551': attribute type 5 has an invalid length. [ 220.126663][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.135642][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.140523][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 220.986054][ T7994] netlink: 104 bytes leftover after parsing attributes in process `syz.1.555'. [ 221.110689][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 221.286133][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.304519][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.172357][ T1208] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 223.289754][ T8022] fuse: Unknown parameter '0x0000000000000003' [ 223.338163][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 223.355846][ T1208] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 223.367383][ T1208] usb 3-1: config 0 has no interface number 0 [ 223.398333][ T1208] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.456361][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 223.457323][ T1208] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 223.478773][ T1208] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 223.488780][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 223.501811][ T1208] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 223.513494][ T1208] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 223.535109][ T1208] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.548762][ T8028] netlink: 'syz.3.564': attribute type 15 has an invalid length. [ 223.687386][ T1208] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 223.700806][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.716977][ T1208] usb 3-1: Product: syz [ 223.723658][ T1208] usb 3-1: Manufacturer: syz [ 223.734652][ T1208] usb 3-1: SerialNumber: syz [ 223.769385][ T1208] usb 3-1: config 0 descriptor?? [ 223.775493][ T8017] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 223.783238][ T8017] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 223.882007][ T8037] netlink: 104 bytes leftover after parsing attributes in process `syz.3.566'. [ 224.009188][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.027884][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.066966][ T1208] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 224.085411][ T1208] etas_es58x 3-1:0.219: could not retrieve the product info string [ 224.171580][ T8032] mmap: syz.4.565 (8032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 224.206970][ T1208] usb 3-1: USB disconnect, device number 38 [ 224.254479][ T1208] etas_es58x 3-1:0.219: Disconnecting syz syz [ 224.838194][ T8065] fuse: Unknown parameter '0x0000000000000003' [ 225.178309][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.187942][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.531359][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 225.594877][ T8077] xt_ecn: cannot match TCP bits for non-tcp packets [ 225.794771][ T8087] FAULT_INJECTION: forcing a failure. [ 225.794771][ T8087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.884861][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.3.580 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 225.884879][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.884885][ T8087] Call Trace: [ 225.884890][ T8087] [ 225.884895][ T8087] dump_stack_lvl+0x189/0x250 [ 225.884916][ T8087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.884930][ T8087] ? __pfx__printk+0x10/0x10 [ 225.884947][ T8087] should_fail_ex+0x414/0x560 [ 225.884961][ T8087] _copy_to_user+0x31/0xb0 [ 225.884976][ T8087] simple_read_from_buffer+0xe1/0x170 [ 225.884991][ T8087] proc_fail_nth_read+0x1df/0x250 [ 225.885007][ T8087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.885022][ T8087] ? rw_verify_area+0x258/0x650 [ 225.885032][ T8087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.885046][ T8087] vfs_read+0x200/0x980 [ 225.885062][ T8087] ? __pfx_vfs_read+0x10/0x10 [ 225.885072][ T8087] ? __sys_bpf+0x46b/0x860 [ 225.885086][ T8087] ? __pfx___sys_bpf+0x10/0x10 [ 225.885105][ T8087] ksys_read+0x145/0x250 [ 225.885115][ T8087] ? rcu_is_watching+0x15/0xb0 [ 225.885125][ T8087] ? __pfx_ksys_read+0x10/0x10 [ 225.885137][ T8087] ? do_syscall_64+0xba/0x210 [ 225.885153][ T8087] do_syscall_64+0xf6/0x210 [ 225.885165][ T8087] ? clear_bhb_loop+0x60/0xb0 [ 225.885177][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.885186][ T8087] RIP: 0033:0x7feed4b8d37c [ 225.885196][ T8087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.885204][ T8087] RSP: 002b:00007feed5942030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.885216][ T8087] RAX: ffffffffffffffda RBX: 00007feed4db5fa0 RCX: 00007feed4b8d37c [ 225.885223][ T8087] RDX: 000000000000000f RSI: 00007feed59420a0 RDI: 0000000000000004 [ 225.885229][ T8087] RBP: 00007feed5942090 R08: 0000000000000000 R09: 0000000000000000 [ 225.885235][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.885241][ T8087] R13: 0000000000000000 R14: 00007feed4db5fa0 R15: 00007feed4edfa28 [ 225.885256][ T8087] [ 226.096289][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.592641][ T1208] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 226.742488][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 226.749926][ T1208] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.778920][ T1208] usb 5-1: config 0 has no interface number 0 [ 226.821002][ T1208] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.837266][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.878786][ T1208] usb 5-1: Product: syz [ 226.889453][ T8111] fuse: Unknown parameter '0x0000000000000003' [ 226.895391][ T1208] usb 5-1: Manufacturer: syz [ 226.900280][ T1208] usb 5-1: SerialNumber: syz [ 226.934963][ T1208] usb 5-1: config 0 descriptor?? [ 226.979626][ T1208] smsc95xx v2.0.0 [ 227.541067][ T1208] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 227.572453][ T1208] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 227.638931][ T8133] loop6: detected capacity change from 0 to 7 [ 227.646847][ T8133] Dev loop6: unable to read RDB block 7 [ 227.653602][ T5854] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 227.662155][ T8133] loop6: unable to read partition table [ 227.668088][ T8133] loop6: partition table beyond EOD, truncated [ 227.674626][ T8133] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.807891][ T5854] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.853560][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.861803][ T5854] usb 3-1: Product: syz [ 227.869380][ T5854] usb 3-1: Manufacturer: syz [ 227.874344][ T5854] usb 3-1: SerialNumber: syz [ 227.894469][ T5854] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 227.931445][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 228.375823][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.384872][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.395547][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.405591][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.472852][ T5891] usb 3-1: USB disconnect, device number 39 [ 228.613896][ T8158] netlink: 104 bytes leftover after parsing attributes in process `syz.0.596'. [ 228.898022][ T1208] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 228.939494][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.944249][ T1208] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 228.955173][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.078743][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 229.106441][ T9] ath9k_htc: Failed to initialize the device [ 229.131012][ T5891] usb 3-1: ath9k_htc: USB layer deinitialized [ 229.504039][ T8182] loop6: detected capacity change from 0 to 7 [ 229.523221][ T5838] Dev loop6: unable to read RDB block 7 [ 229.532150][ T5838] loop6: unable to read partition table [ 229.548811][ T5838] loop6: partition table beyond EOD, truncated [ 229.560936][ T8182] Dev loop6: unable to read RDB block 7 [ 229.567380][ T8182] loop6: unable to read partition table [ 229.575349][ T8182] loop6: partition table beyond EOD, truncated [ 229.590589][ T8182] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.138756][ T1208] usb 5-1: USB disconnect, device number 25 [ 230.499957][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 230.842573][ T9] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 230.871544][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.912124][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.936090][ T9] usb 3-1: config 0 descriptor?? [ 230.955016][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 230.962508][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.972641][ T8207] tipc: Invalid UDP bearer configuration [ 230.972696][ T8207] tipc: Enabling of bearer rejected, failed to enable media [ 230.987091][ T8212] fuse: Unknown parameter '' [ 231.000278][ T9] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 231.018287][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.031114][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.063499][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.080125][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.137068][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 231.271658][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 231.381557][ T8214] macvlan2: entered promiscuous mode [ 231.387817][ T8214] macvlan2: entered allmulticast mode [ 231.395558][ T8214] syz_tun: entered allmulticast mode [ 231.492367][ T1208] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 231.642349][ T1208] usb 5-1: Using ep0 maxpacket: 16 [ 231.649600][ T1208] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 231.660094][ T1208] usb 5-1: config 0 has no interface number 0 [ 231.668095][ T1208] usb 5-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=2a.c4 [ 231.677404][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.685483][ T1208] usb 5-1: Product: syz [ 231.689676][ T1208] usb 5-1: Manufacturer: syz [ 231.694381][ T1208] usb 5-1: SerialNumber: syz [ 231.701201][ T1208] usb 5-1: config 0 descriptor?? [ 231.713307][ T1208] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 231.915124][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.925540][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.935523][ T1208] gspca_sonixj: reg_w1 err -71 [ 231.947173][ T1208] sonixj 5-1:0.128: probe with driver sonixj failed with error -71 [ 231.986887][ T1208] usb 5-1: USB disconnect, device number 26 [ 232.057933][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.071562][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.081954][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.094840][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.245952][ T8236] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 232.268967][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.279285][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.650593][ T8244] netlink: 'syz.1.625': attribute type 32 has an invalid length. [ 232.689397][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 232.803138][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 232.901837][ T1208] usb 3-1: USB disconnect, device number 40 [ 232.977308][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 232.991965][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 233.007901][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.024984][ T9] usb 5-1: config 0 has no interface number 0 [ 233.037218][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.062105][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 233.107960][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 233.140629][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 233.177541][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 233.191190][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.220698][ T9] usb 5-1: Product: syz [ 233.236765][ T9] usb 5-1: Manufacturer: syz [ 233.253569][ T9] usb 5-1: SerialNumber: syz [ 233.383011][ T9] usb 5-1: config 0 descriptor?? [ 233.384443][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.390384][ T8243] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 233.419274][ T8243] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 233.419714][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.489016][ T8265] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 233.667570][ T8243] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 233.675475][ T8243] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 233.725192][ T8265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.772511][ T5901] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 233.774342][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 233.942480][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.953681][ T5901] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 233.963133][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.973432][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.985680][ T5901] usb 3-1: config 0 descriptor?? [ 234.052760][ T5901] cp210x 3-1:0.0: cp210x converter detected [ 234.067479][ T8271] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 234.109120][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 234.127736][ T9] usb 5-1: USB disconnect, device number 27 [ 234.203349][ T8267] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 234.440820][ T5901] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 234.452926][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.461659][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.482080][ T5901] usb 3-1: cp210x converter now attached to ttyUSB0 [ 235.213296][ T5901] usb 3-1: USB disconnect, device number 41 [ 235.246169][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 235.328901][ T5901] cp210x 3-1:0.0: device disconnected [ 235.692729][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.713028][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.120757][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 236.220262][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.231620][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.940906][ T8327] fuse: Unknown parameter 'fY' [ 237.142631][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 237.176488][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.184788][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.389729][ T9] usb 5-1: config 0 has no interfaces? [ 237.429828][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'. [ 237.450501][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'. [ 237.456331][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 237.480166][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.510074][ T9] usb 5-1: Product: syz [ 237.526025][ T9] usb 5-1: Manufacturer: syz [ 237.536457][ T9] usb 5-1: SerialNumber: syz [ 237.552115][ T9] usb 5-1: config 0 descriptor?? [ 237.561376][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.586692][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.658565][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.672610][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.674422][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.696466][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.745132][ T8338] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 237.772318][ T1208] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 237.896549][ T8352] loop6: detected capacity change from 0 to 7 [ 237.906439][ T5838] Dev loop6: unable to read RDB block 7 [ 237.912159][ T5838] loop6: AHDI p1 p2 p3 p4 [ 237.921951][ T5838] loop6: partition table partially beyond EOD, truncated [ 237.932613][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 237.940032][ T1208] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 237.948464][ T5838] loop6: p1 start 926365495 is beyond EOD, truncated [ 237.955576][ T1208] usb 3-1: config 0 has no interface number 0 [ 237.969095][ T5838] loop6: p2 start 744947712 is beyond EOD, truncated [ 237.978252][ T1208] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 237.993540][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.001659][ T5838] loop6: p3 start 1886353253 is beyond EOD, truncated [ 238.014467][ T1208] usb 3-1: Product: syz [ 238.014515][ T8352] Dev loop6: unable to read RDB block 7 [ 238.018634][ T1208] usb 3-1: Manufacturer: syz [ 238.018651][ T1208] usb 3-1: SerialNumber: syz [ 238.023939][ T1208] usb 3-1: config 0 descriptor?? [ 238.033472][ T8352] loop6: AHDI p1 p2 p3 p4 [ 238.045497][ T8352] loop6: partition table partially beyond EOD, truncated [ 238.047827][ T1208] smsc95xx v2.0.0 [ 238.057173][ T8352] loop6: p1 start 926365495 is beyond EOD, truncated [ 238.065395][ T8352] loop6: p2 start 744947712 is beyond EOD, truncated [ 238.072749][ T8352] loop6: p3 start 1886353253 is beyond EOD, truncated [ 238.341346][ T8358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.453072][ T1208] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 238.474841][ T1208] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 238.759237][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 238.759253][ T30] audit: type=1326 audit(1747195795.638:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 238.812000][ T30] audit: type=1326 audit(1747195795.678:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 238.834287][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.859721][ T30] audit: type=1326 audit(1747195795.678:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 239.016821][ T5901] usb 5-1: USB disconnect, device number 28 [ 239.061392][ T30] audit: type=1326 audit(1747195795.678:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 239.125146][ T30] audit: type=1326 audit(1747195795.678:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 239.175001][ T30] audit: type=1326 audit(1747195795.688:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 239.197364][ T30] audit: type=1326 audit(1747195795.688:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 239.295578][ T30] audit: type=1326 audit(1747195795.688:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 239.334140][ T30] audit: type=1326 audit(1747195795.688:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578098e969 code=0x7ffc0000 [ 239.452038][ T1208] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 239.776210][ T1208] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 239.794195][ T8382] netlink: 104 bytes leftover after parsing attributes in process `syz.0.670'. [ 239.849031][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.919022][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.997427][ T8390] loop6: detected capacity change from 0 to 7 [ 240.006881][ T8390] Dev loop6: unable to read RDB block 7 [ 240.016276][ T8390] loop6: AHDI p1 p2 p3 p4 [ 240.020894][ T8390] loop6: partition table partially beyond EOD, truncated [ 240.030263][ T8390] loop6: p1 start 926365495 is beyond EOD, truncated [ 240.081247][ T8390] loop6: p2 start 744947712 is beyond EOD, truncated [ 240.089359][ T8390] loop6: p3 start 1886353253 is beyond EOD, truncated [ 240.246546][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.268683][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.280999][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.298808][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.399019][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.409447][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.427435][ T8408] netlink: 44 bytes leftover after parsing attributes in process `syz.4.679'. [ 240.707366][ T8414] loop2: detected capacity change from 0 to 7 [ 240.715282][ T5838] Dev loop2: unable to read RDB block 7 [ 240.721065][ T5838] loop2: unable to read partition table [ 240.731733][ T5838] loop2: partition table beyond EOD, truncated [ 240.749725][ T8414] Dev loop2: unable to read RDB block 7 [ 240.755477][ T8414] loop2: unable to read partition table [ 240.761381][ T8414] loop2: partition table beyond EOD, truncated [ 240.879388][ T8414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.902339][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 240.932866][ T5890] usb 3-1: USB disconnect, device number 42 [ 240.960594][ T5202] Dev loop2: unable to read RDB block 7 [ 241.015069][ T5202] loop2: unable to read partition table [ 241.021227][ T5202] loop2: partition table beyond EOD, truncated [ 241.091368][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 241.196321][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.209341][ T9] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 241.217966][ T9] usb 5-1: config 127 has no interface number 0 [ 241.226272][ T9] usb 5-1: config 127 interface 25 has no altsetting 0 [ 241.240127][ T9] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 241.249437][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.257602][ T9] usb 5-1: Product: syz [ 241.264948][ T9] usb 5-1: Manufacturer: syz [ 241.269625][ T9] usb 5-1: SerialNumber: syz [ 241.312370][ T5890] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 241.497090][ T9] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 241.512457][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 241.518930][ T5890] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 241.528321][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.600179][ T5890] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.628903][ T5890] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.690597][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.768156][ T5890] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 241.787858][ T5890] usb 3-1: no configuration chosen from 1 choice [ 241.928268][ T8429] loop6: detected capacity change from 0 to 7 [ 241.936211][ T8429] Dev loop6: unable to read RDB block 7 [ 242.079269][ T8429] loop6: AHDI p1 p2 p3 p4 [ 242.103468][ T8429] loop6: partition table partially beyond EOD, truncated [ 242.110775][ T8429] loop6: p1 start 926365495 is beyond EOD, truncated [ 242.120781][ T8429] loop6: p2 start 744947712 is beyond EOD, truncated [ 242.128239][ T8429] loop6: p3 start 1886353253 is beyond EOD, truncated [ 242.138404][ T9] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 242.307415][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 242.671242][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.695563][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.937247][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.946016][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.516770][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.526843][ T9] usb 5-1: device firmware changed [ 243.540650][ T9] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 243.576282][ T9] usb 5-1: USB disconnect, device number 29 [ 243.618222][ T8454] netlink: 27 bytes leftover after parsing attributes in process `syz.0.692'. [ 243.963946][ T8461] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 244.024924][ T65] usb 3-1: USB disconnect, device number 43 [ 244.682480][ T65] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 244.755088][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.765247][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.878991][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 244.888074][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.900163][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.910975][ T65] usb 5-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 244.920963][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.939601][ T65] usb 5-1: config 0 descriptor?? [ 245.154945][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.175851][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.352051][ T65] usbhid 5-1:0.0: can't add hid device: -71 [ 245.426033][ T65] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 245.454700][ T65] usb 5-1: USB disconnect, device number 30 [ 246.109640][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 246.268621][ T8516] netlink: 'syz.4.711': attribute type 275 has an invalid length. [ 246.482105][ T8514] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 247.391367][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.405045][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.435700][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.449525][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.516305][ T8531] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[8531] [ 247.723453][ T5893] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 247.914173][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.924222][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.965670][ T5893] usb 5-1: config 0 has no interfaces? [ 248.004678][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 248.016078][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.028173][ T5893] usb 5-1: Product: syz [ 248.037180][ T5893] usb 5-1: Manufacturer: syz [ 248.041801][ T5893] usb 5-1: SerialNumber: syz [ 248.097338][ T5893] usb 5-1: config 0 descriptor?? [ 248.977556][ T8566] vivid-004: disconnect [ 249.238357][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 249.972372][ T5893] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 250.146210][ T5893] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.273768][ T5893] usb 3-1: config 0 has no interface number 0 [ 250.306073][ T5893] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 250.341256][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.379847][ T5893] usb 3-1: Product: syz [ 250.386146][ T5893] usb 3-1: Manufacturer: syz [ 250.391004][ T5893] usb 3-1: SerialNumber: syz [ 250.404734][ T5893] usb 3-1: config 0 descriptor?? [ 250.452751][ T1208] usb 5-1: USB disconnect, device number 31 [ 250.459038][ T5893] snd-usb-us122l 3-1:0.1: usb_set_interface error [ 250.470214][ T5893] snd-usb-us122l 3-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 250.513057][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.540303][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 250.558492][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 250.568619][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.587521][ T8577] sit1: entered allmulticast mode [ 250.636682][ T8538] vivid-004: reconnect [ 250.737400][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'. [ 250.747394][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 250.891415][ T8582] kernel profiling enabled (shift: 7) [ 250.923389][ T8582] loop2: detected capacity change from 0 to 7 [ 250.945625][ T8582] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 250.951079][ T8582] loop2: partition table partially beyond EOD, truncated [ 250.977790][ T8582] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 251.446527][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.462153][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.622413][ T5890] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 251.786951][ T5890] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 251.818228][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.840072][ T5890] usb 5-1: Product: syz [ 251.852045][ T5890] usb 5-1: Manufacturer: syz [ 251.867980][ T5890] usb 5-1: SerialNumber: syz [ 251.914535][ T5890] usb 5-1: config 0 descriptor?? [ 252.255991][ T8605] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 252.551113][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 252.567586][ T5890] usb 5-1: Firmware version (0.0) predates our first public release. [ 252.583108][ T5890] usb 5-1: Please update to version 0.2 or newer [ 252.625392][ T5890] usb 5-1: USB disconnect, device number 32 [ 252.785945][ T5202] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 252.791355][ T5202] loop2: partition table partially beyond EOD, truncated [ 252.803884][ T5202] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 252.832901][ T1208] usb 3-1: USB disconnect, device number 44 [ 252.926410][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 253.110621][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.148144][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.454012][ T5854] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 253.505989][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.531035][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.612337][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 253.619375][ T5854] usb 5-1: config 0 has no interfaces? [ 253.625306][ T5854] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 253.639472][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.680999][ T5854] usb 5-1: config 0 descriptor?? [ 253.960207][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.971831][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.987109][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.996791][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.015348][ T1208] usb 5-1: USB disconnect, device number 33 [ 254.890718][ T8676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.900923][ T8676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.052363][ T5854] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 255.156979][ T8678] netlink: 'syz.2.757': attribute type 11 has an invalid length. [ 255.270911][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 255.303936][ T5854] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 255.382502][ T5854] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 255.468991][ T5854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 255.487190][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.501786][ T5854] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.526985][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.561185][ T5854] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 255.580618][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.607475][ T5854] usb 5-1: config 0 descriptor?? [ 255.674219][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682703][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.827822][ T5854] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 256.019200][ T5854] usb 5-1: USB disconnect, device number 34 [ 256.075247][ T5854] usblp0: removed [ 256.392369][ T5854] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 256.596404][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 256.614575][ T5854] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 256.626815][ T8681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.638430][ T5854] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 256.680912][ T8681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.695080][ T5854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 256.742668][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.805306][ T8683] x_tables: duplicate entry at hook 1 [ 256.810791][ T5854] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.858496][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 256.930445][ T5854] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 256.967818][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.039751][ T5854] usb 5-1: config 0 descriptor?? [ 257.288826][ T5854] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 257.544359][ C0] usblp0: nonzero read bulk status received: -71 [ 257.545621][ T5929] usb 5-1: USB disconnect, device number 35 [ 257.552993][ T8673] usblp0: error -71 reading from printer [ 257.587735][ T8698] loop6: detected capacity change from 0 to 7 [ 257.616866][ T8698] Dev loop6: unable to read RDB block 7 [ 257.647259][ T8698] loop6: unable to read partition table [ 257.693076][ T8698] loop6: partition table beyond EOD, truncated [ 257.702660][ T8698] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 257.960511][ T8672] usblp0: removed [ 258.061576][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.074420][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.107348][ T8717] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 259.265229][ T8728] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 259.283898][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.297972][ T8728] netlink: 'syz.4.773': attribute type 12 has an invalid length. [ 259.312721][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.475467][ T8731] netlink: 48 bytes leftover after parsing attributes in process `syz.4.774'. [ 259.695991][ T8736] tty tty2: ldisc open failed (-12), clearing slot 1 [ 259.833507][ T8737] tty tty2: ldisc open failed (-12), clearing slot 1 [ 260.772391][ T5893] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 260.854293][ T8753] loop6: detected capacity change from 0 to 7 [ 260.871494][ T8753] Dev loop6: unable to read RDB block 7 [ 260.890929][ T8753] loop6: unable to read partition table [ 260.912032][ T8753] loop6: partition table beyond EOD, truncated [ 261.042474][ T5893] usb 3-1: too many configurations: 126, using maximum allowed: 8 [ 261.057614][ T8753] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.058880][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.077009][ T5893] usb 3-1: can't read configurations, error -61 [ 261.175851][ T8755] dvmrp0: entered allmulticast mode [ 261.266067][ T5893] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 261.359831][ T8766] loop6: detected capacity change from 0 to 7 [ 261.406852][ T5838] Dev loop6: unable to read RDB block 7 [ 261.425685][ T5838] loop6: AHDI p1 p2 p3 p4 [ 261.457007][ T5838] loop6: partition table partially beyond EOD, truncated [ 261.474482][ T5893] usb 3-1: too many configurations: 126, using maximum allowed: 8 [ 261.503377][ T5838] loop6: p1 start 926365495 is beyond EOD, truncated [ 261.516177][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.526932][ T5893] usb 3-1: can't read configurations, error -61 [ 261.532293][ T5838] loop6: p2 start 744947712 is beyond EOD, truncated [ 261.550856][ T5893] usb usb3-port1: attempt power cycle [ 261.556983][ T5838] loop6: p3 start 1886353253 is beyond EOD, truncated [ 261.645814][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 261.685531][ T8766] Dev loop6: unable to read RDB block 7 [ 261.691243][ T8766] loop6: AHDI p1 p2 p3 p4 [ 261.707501][ T8766] loop6: partition table partially beyond EOD, truncated [ 261.722561][ T8766] loop6: p1 start 926365495 is beyond EOD, truncated [ 261.731316][ T8766] loop6: p2 start 744947712 is beyond EOD, truncated [ 261.738093][ T8766] loop6: p3 start 1886353253 is beyond EOD, truncated [ 261.887549][ T8781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.013971][ T8781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.222666][ T5893] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 262.330988][ T5893] usb 3-1: too many configurations: 126, using maximum allowed: 8 [ 262.344018][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.353616][ T5893] usb 3-1: can't read configurations, error -61 [ 262.404344][ T8783] batadv0: entered promiscuous mode [ 262.410969][ T8783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 262.428901][ T8783] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 262.466807][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.492628][ T5893] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 262.513543][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.545263][ T5893] usb 3-1: too many configurations: 126, using maximum allowed: 8 [ 262.567691][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 262.642812][ T5893] usb 3-1: can't read configurations, error -61 [ 262.692663][ T5893] usb usb3-port1: unable to enumerate USB device [ 262.898798][ T8791] netlink: 'syz.1.790': attribute type 6 has an invalid length. [ 262.906686][ T8791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.790'. [ 263.276676][ T8797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.285319][ T8797] bond0: (slave bond1): Enslaving as an active interface with an up link [ 264.250996][ T8824] loop2: detected capacity change from 0 to 7 [ 264.261984][ T5838] Dev loop2: unable to read RDB block 7 [ 264.269814][ T5838] loop2: unable to read partition table [ 264.443700][ T5838] loop2: partition table beyond EOD, truncated [ 264.514668][ T8824] Dev loop2: unable to read RDB block 7 [ 264.536723][ T8824] loop2: unable to read partition table [ 264.544416][ T8824] loop2: partition table beyond EOD, truncated [ 264.557679][ T8824] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 265.020855][ T8849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.805'. [ 265.040137][ T8847] binder: 8846:8847 ioctl c0306201 2000000003c0 returned -14 [ 265.182055][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.191406][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.320872][ T30] audit: type=1326 audit(1747195822.078:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 265.414722][ T30] audit: type=1326 audit(1747195822.078:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 265.520143][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.540483][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.661738][ T30] audit: type=1326 audit(1747195822.078:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 265.790644][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.817594][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.825768][ T30] audit: type=1326 audit(1747195822.078:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 266.201807][ T30] audit: type=1326 audit(1747195822.088:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 266.308153][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.317030][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.122539][ T30] audit: type=1326 audit(1747195822.088:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 267.220385][ T30] audit: type=1326 audit(1747195822.088:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 267.259489][ T8871] loop2: detected capacity change from 0 to 7 [ 267.288501][ T8871] Dev loop2: unable to read RDB block 7 [ 267.294478][ T8871] loop2: unable to read partition table [ 267.309546][ T8871] loop2: partition table beyond EOD, truncated [ 267.396254][ T8871] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 267.437017][ T30] audit: type=1326 audit(1747195822.088:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 267.557274][ T30] audit: type=1326 audit(1747195822.088:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 267.693944][ T30] audit: type=1326 audit(1747195822.088:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.0.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cc738e969 code=0x7ffc0000 [ 267.716122][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.014463][ T5929] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 268.182409][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 268.192429][ T5929] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.209296][ T5929] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.267327][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.275652][ T5929] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 268.285076][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.302166][ T5929] usb 5-1: config 0 descriptor?? [ 268.747970][ T5929] kye 0003:0458:4018.0003: unknown main item tag 0x0 [ 268.767879][ T5929] kye 0003:0458:4018.0003: reserved main item tag 0xe [ 268.782215][ T5929] kye 0003:0458:4018.0003: item fetching failed at offset 15/133 [ 268.803400][ T5929] kye 0003:0458:4018.0003: parse failed [ 268.820870][ T5929] kye 0003:0458:4018.0003: probe with driver kye failed with error -22 [ 268.949329][ T5893] usb 5-1: USB disconnect, device number 36 [ 269.284777][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 270.350058][ T5893] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 270.794708][ T5893] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 270.818207][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.847980][ T5893] usb 3-1: config 0 descriptor?? [ 270.881349][ T5893] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 271.028349][ T8916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.104843][ T8916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.482928][ T5893] gp8psk: usb in 138 operation failed. [ 271.490801][ T5893] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 271.558400][ T5893] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 271.640190][ T5893] usb 3-1: USB disconnect, device number 50 [ 271.772343][ T5929] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 271.971143][ T5929] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 271.985135][ T5929] usb 5-1: config 0 has no interface number 0 [ 271.993865][ T5929] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 272.043903][ T5929] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 272.063008][ T8943] loop2: detected capacity change from 0 to 7 [ 272.070863][ T8943] Dev loop2: unable to read RDB block 7 [ 272.077863][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.091017][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.102001][ T5929] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 272.114302][ T8943] loop2: unable to read partition table [ 272.125602][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.136677][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.146561][ T5929] usb 5-1: config 0 interface 200 has no altsetting 0 [ 272.156195][ T8943] loop2: partition table beyond EOD, truncated [ 272.163071][ T8943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.186908][ T5929] usb 5-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 272.198007][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.212577][ T5929] usb 5-1: Product: syz [ 272.216785][ T5929] usb 5-1: Manufacturer: syz [ 272.221469][ T5929] usb 5-1: SerialNumber: syz [ 272.230962][ T5929] usb 5-1: config 0 descriptor?? [ 272.253528][ T5202] Dev loop2: unable to read RDB block 7 [ 272.259251][ T5202] loop2: unable to read partition table [ 272.265889][ T5202] loop2: partition table beyond EOD, truncated [ 272.571458][ T8956] xt_hashlimit: size too large, truncated to 1048576 [ 272.581289][ T8956] xt_hashlimit: max too large, truncated to 1048576 [ 272.650237][ T8957] fuse: Unknown parameter 'roo ' [ 272.680211][ T8956] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 273.585858][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.625766][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.641870][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 274.317259][ T8982] loop2: detected capacity change from 0 to 7 [ 274.344035][ T5838] Dev loop2: unable to read RDB block 7 [ 274.352107][ T5838] loop2: unable to read partition table [ 274.366758][ T5838] loop2: partition table beyond EOD, truncated [ 274.376642][ T8982] Dev loop2: unable to read RDB block 7 [ 274.382696][ T8982] loop2: unable to read partition table [ 274.388607][ T8982] loop2: partition table beyond EOD, truncated [ 274.410966][ T8982] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 275.031236][ T5929] usb 5-1: USB disconnect, device number 37 [ 275.088319][ T8995] CIFS: VFS: Malformed UNC in devname [ 275.280480][ T8999] bridge3: entered promiscuous mode [ 275.942308][ T5854] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 276.216384][ T5854] usb 5-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 276.244994][ T5854] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.274731][ T5854] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 276.289204][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.315399][ T5854] usb 5-1: Product: syz [ 276.324748][ T5854] usb 5-1: Manufacturer: syz [ 276.336261][ T5854] usb 5-1: SerialNumber: syz [ 276.351602][ T5854] usb 5-1: config 0 descriptor?? [ 276.365404][ T5854] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 276.375844][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 276.395798][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 276.440805][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 276.466392][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 276.502839][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 276.534096][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 276.662410][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 276.684239][ T5854] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 276.695542][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 276.705545][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 276.740094][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 276.778157][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 276.799264][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 276.818028][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 276.869018][ T5854] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 276.904441][ T5854] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 276.950918][ T5854] usb 5-1: USB disconnect, device number 38 [ 276.996404][ T5854] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 277.073798][ T5854] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 277.100434][ T5854] keyspan 5-1:0.0: device disconnected [ 277.128405][ T9025] netlink: 44 bytes leftover after parsing attributes in process `syz.0.855'. [ 277.435335][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.464647][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.501916][ T9033] FAULT_INJECTION: forcing a failure. [ 277.501916][ T9033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.532469][ T9033] CPU: 1 UID: 0 PID: 9033 Comm: syz.2.856 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 277.532485][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.532499][ T9033] Call Trace: [ 277.532507][ T9033] [ 277.532512][ T9033] dump_stack_lvl+0x189/0x250 [ 277.532536][ T9033] ? __lock_acquire+0xaac/0xd20 [ 277.532555][ T9033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.532569][ T9033] ? __pfx__printk+0x10/0x10 [ 277.532579][ T9033] ? __might_fault+0xb0/0x130 [ 277.532598][ T9033] should_fail_ex+0x414/0x560 [ 277.532612][ T9033] _copy_from_user+0x2d/0xb0 [ 277.532627][ T9033] kstrtouint_from_user+0xc4/0x170 [ 277.532640][ T9033] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 277.532661][ T9033] proc_fail_nth_write+0x88/0x240 [ 277.532677][ T9033] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.532777][ T9033] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.532866][ T9033] vfs_write+0x27e/0xa90 [ 277.532884][ T9033] ? __pfx_vfs_write+0x10/0x10 [ 277.532897][ T9033] ? __fget_files+0x2a/0x420 [ 277.532913][ T9033] ? __fget_files+0x3a0/0x420 [ 277.532924][ T9033] ? __fget_files+0x2a/0x420 [ 277.532942][ T9033] ksys_write+0x145/0x250 [ 277.532952][ T9033] ? __fget_files+0x2a/0x420 [ 277.532965][ T9033] ? __pfx_ksys_write+0x10/0x10 [ 277.532978][ T9033] ? do_syscall_64+0xba/0x210 [ 277.532994][ T9033] do_syscall_64+0xf6/0x210 [ 277.533007][ T9033] ? clear_bhb_loop+0x60/0xb0 [ 277.533019][ T9033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.533029][ T9033] RIP: 0033:0x7f91ccb8d41f [ 277.533040][ T9033] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 277.533048][ T9033] RSP: 002b:00007f91cd9c9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 277.533060][ T9033] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91ccb8d41f [ 277.533067][ T9033] RDX: 0000000000000001 RSI: 00007f91cd9c90a0 RDI: 0000000000000005 [ 277.533073][ T9033] RBP: 00007f91cd9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 277.533079][ T9033] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 277.533085][ T9033] R13: 0000000000000000 R14: 00007f91ccdb6080 R15: 00007f91ccedfa28 [ 277.533100][ T9033] [ 277.776431][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.786670][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.349116][ T9029] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 278.652432][ T5929] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 278.812445][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 278.854625][ T5929] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 278.873375][ T5929] usb 5-1: config 0 has no interface number 0 [ 278.899614][ T5929] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 278.919144][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.937751][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.861'. [ 278.948356][ T5929] usb 5-1: Product: syz [ 278.952889][ T5929] usb 5-1: Manufacturer: syz [ 278.957493][ T5929] usb 5-1: SerialNumber: syz [ 278.996859][ T5929] usb 5-1: config 0 descriptor?? [ 279.025074][ T5929] smsc95xx v2.0.0 [ 279.250578][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.266859][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.352577][ T5854] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 279.433769][ T5929] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 279.447675][ T5929] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 279.528147][ T5854] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.537666][ T5854] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.561338][ T5854] usb 3-1: config 220 has no interface number 2 [ 279.576446][ T5854] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 279.589798][ T5854] usb 3-1: config 220 interface 0 has no altsetting 0 [ 279.597415][ T5854] usb 3-1: config 220 interface 76 has no altsetting 0 [ 279.605359][ T5854] usb 3-1: config 220 interface 1 has no altsetting 0 [ 279.625665][ T5854] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 279.651065][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.674265][ T5854] usb 3-1: Product: syz [ 279.691474][ T5854] usb 3-1: Manufacturer: syz [ 279.701751][ T5854] usb 3-1: SerialNumber: syz [ 280.537950][ T5854] usb 3-1: selecting invalid altsetting 0 [ 280.538368][ T5854] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 280.538398][ T5854] usb 3-1: No valid video chain found. [ 280.545794][ T5854] usb 3-1: selecting invalid altsetting 0 [ 280.545820][ T5854] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 280.550301][ T5854] usb 3-1: USB disconnect, device number 52 [ 280.691623][ T5929] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 280.691782][ T5929] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 281.012625][ T9078] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.867'. [ 281.012688][ T9078] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 281.887436][ T5891] usb 5-1: USB disconnect, device number 39 [ 282.108892][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.875'. [ 282.352412][ T9103] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 282.500035][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.510153][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.524523][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.534378][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.542407][ T65] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 282.581370][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.590386][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.607050][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.638430][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.814256][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 282.830545][ T65] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 282.844279][ T65] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 282.855069][ T65] usb 3-1: config 0 has no interface number 0 [ 282.861366][ T65] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.884428][ T65] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 282.930288][ T65] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.004223][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.013709][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.046124][ T9112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.117668][ T65] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 283.150540][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.221579][ T65] usb 3-1: config 0 descriptor?? [ 283.255087][ T9099] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 283.496032][ T65] usb 3-1: USB disconnect, device number 53 [ 285.109824][ T9138] bridge1: entered promiscuous mode [ 285.122340][ T5891] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 285.295011][ T5891] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 285.306345][ T5891] usb 5-1: config 0 has no interface number 0 [ 285.319413][ T5891] usb 5-1: config 0 interface 128 has no altsetting 0 [ 285.358569][ T5891] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 285.381416][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.431019][ T5891] usb 5-1: Product: syz [ 285.451148][ T5891] usb 5-1: Manufacturer: syz [ 285.478263][ T5891] usb 5-1: SerialNumber: syz [ 285.504136][ T5891] usb 5-1: config 0 descriptor?? [ 285.535595][ T5891] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 285.562355][ T5891] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 285.595485][ T5891] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 285.749207][ T5891] usb 5-1: USB disconnect, device number 40 [ 285.880080][ T9153] ipvlan2: entered promiscuous mode [ 285.901143][ T9153] ipvlan2: entered allmulticast mode [ 285.906652][ T9153] macvlan0: entered allmulticast mode [ 285.914936][ T9153] veth1_vlan: entered allmulticast mode [ 286.159245][ T9161] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 286.236919][ T9163] netlink: 156 bytes leftover after parsing attributes in process `syz.2.894'. [ 286.423692][ T9166] loop2: detected capacity change from 0 to 7 [ 286.456651][ T9166] Dev loop2: unable to read RDB block 7 [ 286.464697][ T9166] loop2: unable to read partition table [ 286.478619][ T9166] loop2: partition table beyond EOD, truncated [ 286.497105][ T9166] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.793948][ T9175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 286.878865][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 287.265105][ T9186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.952543][ T65] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 287.973672][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 288.040059][ T9191] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 288.104600][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 288.112395][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 288.135025][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.144372][ T65] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 288.162569][ T65] usb 3-1: config 127 has no interface number 0 [ 288.187084][ T65] usb 3-1: config 127 interface 25 has no altsetting 0 [ 288.213913][ T65] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 288.234187][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.251155][ T65] usb 3-1: Product: syz [ 288.265982][ T65] usb 3-1: Manufacturer: syz [ 288.274715][ T65] usb 3-1: SerialNumber: syz [ 288.547936][ T65] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 288.854681][ T9191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.887624][ T9191] team0: Port device bond0 added [ 289.091294][ T9193] team0 (unregistering): Port device team_slave_0 removed [ 289.128744][ T9193] team0 (unregistering): Port device team_slave_1 removed [ 289.162301][ T9193] team0 (unregistering): Port device bond0 removed [ 289.203936][ T65] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 289.531799][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.540765][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.554308][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.563393][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.759270][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.811496][ T65] usb 3-1: device firmware changed [ 290.823537][ T5893] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 290.838512][ T65] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 290.898232][ T65] usb 3-1: USB disconnect, device number 54 [ 291.005529][ T5893] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.015060][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.102517][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.227644][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.246507][ T5893] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.258861][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.430810][ T5893] usb 5-1: Product: syz [ 291.438779][ T5893] usb 5-1: Manufacturer: syz [ 291.480882][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 291.525383][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 291.590018][ T5893] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 291.694155][ T5893] cdc_wdm 5-1:1.0: Unknown control protocol [ 291.761818][ T5893] usb 5-1: USB disconnect, device number 41 [ 291.845466][ T9251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.343558][ T5893] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 292.511635][ T9254] netlink: 256 bytes leftover after parsing attributes in process `syz.1.917'. [ 292.525820][ T5893] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.556810][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.597617][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.662534][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.691726][ T5893] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.701064][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.729054][ T5893] usb 5-1: Product: syz [ 292.747793][ T5893] usb 5-1: Manufacturer: syz [ 292.777515][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.790465][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 292.807757][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 292.855910][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 292.866055][ T5893] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 292.871330][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.872064][ T5893] cdc_wdm 5-1:1.0: Unknown control protocol [ 293.027686][ T5893] usb 5-1: USB disconnect, device number 42 [ 293.046771][ T9267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.922'. [ 293.206483][ T9273] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 293.499039][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.510327][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.542352][ T65] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 293.705145][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 293.720658][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.757587][ T65] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 293.770044][ T65] usb 3-1: config 127 has no interface number 0 [ 293.784064][ T65] usb 3-1: config 127 interface 25 has no altsetting 0 [ 293.832624][ T65] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 293.899380][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.973966][ T65] usb 3-1: Product: syz [ 294.029097][ T65] usb 3-1: Manufacturer: syz [ 294.065071][ T65] usb 3-1: SerialNumber: syz [ 294.327786][ T65] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 294.518841][ T9295] netlink: 15 bytes leftover after parsing attributes in process `syz.4.927'. [ 294.675430][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 294.692496][ T31] Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 [ 294.714776][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.738214][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.764844][ T31] task:kworker/1:0 state:D stack:21448 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 294.801906][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.834899][ T31] Workqueue: usb_hub_wq hub_event [ 294.844587][ T31] Call Trace: [ 294.862195][ T31] [ 294.868390][ T31] __schedule+0x16e2/0x4cd0 [ 294.878039][ T31] ? schedule+0x165/0x360 [ 294.888409][ T31] ? __pfx___schedule+0x10/0x10 [ 294.898310][ T31] ? schedule+0x91/0x360 [ 295.208882][ T31] schedule+0x165/0x360 [ 295.248035][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 295.362468][ T65] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 295.832687][ T31] schedule_timeout+0x9a/0x270 [ 295.837592][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 295.853626][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.942326][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.947757][ T31] ? wait_for_completion+0x267/0x5d0 [ 295.953204][ T31] wait_for_completion+0x2bf/0x5d0 [ 296.215740][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 296.225777][ T31] i2c_del_adapter+0x581/0x6e0 [ 296.231350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.237429][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 296.346667][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 296.549898][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 296.559983][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 296.569964][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 296.582391][ T31] usb_probe_interface+0x641/0xbc0 [ 296.609557][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 296.617564][ T31] really_probe+0x26a/0x9a0 [ 296.629178][ T31] __driver_probe_device+0x18c/0x2f0 [ 296.639638][ T31] driver_probe_device+0x4f/0x430 [ 296.712410][ T31] __device_attach_driver+0x2ce/0x530 [ 296.723309][ T31] bus_for_each_drv+0x251/0x2e0 [ 296.738496][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 296.749646][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 296.771094][ T31] __device_attach+0x2b8/0x400 [ 296.784735][ T31] ? __pfx___device_attach+0x10/0x10 [ 296.795826][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 296.805634][ T31] bus_probe_device+0x185/0x260 [ 296.814924][ T31] device_add+0x7b6/0xb50 [ 296.825835][ T31] usb_set_configuration+0x1a87/0x20e0 [ 296.841126][ T31] usb_generic_driver_probe+0x8d/0x150 [ 296.855091][ T31] usb_probe_device+0x1c4/0x390 [ 296.871378][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 296.882301][ T31] really_probe+0x26a/0x9a0 [ 296.895286][ T31] __driver_probe_device+0x18c/0x2f0 [ 296.906244][ T31] driver_probe_device+0x4f/0x430 [ 296.917932][ T31] __device_attach_driver+0x2ce/0x530 [ 296.941028][ T31] bus_for_each_drv+0x251/0x2e0 [ 297.003154][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 297.010389][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 297.017460][ T31] __device_attach+0x2b8/0x400 [ 297.025853][ T31] ? __pfx___device_attach+0x10/0x10 [ 297.036144][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 297.107701][ T31] bus_probe_device+0x185/0x260 [ 297.124350][ T31] device_add+0x7b6/0xb50 [ 297.133718][ T31] usb_new_device+0xa39/0x16c0 [ 297.145155][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 297.161484][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.176541][ T65] usb 3-1: device descriptor read/all, error -71 [ 297.186628][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.201264][ T31] hub_event+0x2941/0x4a00 [ 297.208064][ T31] ? __pfx_hub_event+0x10/0x10 [ 297.232302][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 297.246977][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.260816][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 297.274625][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 297.291052][ T31] process_scheduled_works+0xade/0x17a0 [ 297.305862][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.330756][ T31] worker_thread+0x8a0/0xda0 [ 297.348642][ T31] kthread+0x711/0x8a0 [ 297.353803][ T31] ? __pfx_worker_thread+0x10/0x10 [ 297.359544][ T31] ? __pfx_kthread+0x10/0x10 [ 297.365019][ T31] ? __pfx_kthread+0x10/0x10 [ 297.369807][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.375307][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.381058][ T31] ? __pfx_kthread+0x10/0x10 [ 297.387573][ T31] ret_from_fork+0x4b/0x80 [ 297.392180][ T31] ? __pfx_kthread+0x10/0x10 [ 297.397876][ T31] ret_from_fork_asm+0x1a/0x30 [ 297.405731][ T31] [ 297.419307][ T31] [ 297.419307][ T31] Showing all locks held in the system: [ 297.533397][ T31] 5 locks held by kworker/1:0/24: [ 297.545697][ T31] #0: ffff888144a8fd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 297.586807][ T31] #1: ffffc900001e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 297.641465][ T31] #2: ffff888027bf9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 297.692308][ T31] #3: ffff88807e5cd198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 297.701615][ T31] #4: ffff88807f817160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 297.742268][ T31] 1 lock held by khungtaskd/31: [ 297.751402][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 297.761914][ T31] 5 locks held by kworker/u8:2/36: [ 297.767401][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 297.778609][ T31] #1: ffffc90000ad7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 297.789415][ T31] #2: ffffffff8f2ea790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 297.801225][ T31] #3: ffffffff8f2f72c8 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x611/0xbd0 [ 297.813450][ T31] #4: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 297.827820][ T31] 8 locks held by kworker/1:1/65: [ 297.833964][ T31] #0: ffff888144a8fd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 297.848725][ T31] #1: ffffc9000217fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 297.861769][ T31] #2: ffff888027be1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 297.874908][ T31] #3: ffff888077999198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 297.885256][ T31] #4: ffff88804e8c6160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 297.897782][ T31] #5: ffff888027be4510 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_reset_device+0x549/0xae0 [ 297.911338][ T31] #6: ffff888144fff768 (hcd->address0_mutex){+.+.}-{4:4}, at: usb_reset_and_verify_device+0x373/0x1910 [ 297.924831][ T31] #7: ffffffff8ebc7d30 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 297.935422][ T31] 2 locks held by getty/5592: [ 297.940105][ T31] #0: ffff88814d6740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 297.952484][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 297.963993][ T65] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 297.977736][ T65] usb 3-1: USB disconnect, device number 55 [ 297.984653][ T31] 2 locks held by udevd/5838: [ 297.989598][ T31] #0: ffff888027eeb9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 298.002038][ T31] #1: ffffffff8df3dce0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 298.015207][ T31] 4 locks held by udevd/6033: [ 298.021400][ T31] #0: ffff88802fff8540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 298.031047][ T31] #1: ffff888033c28488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 298.042114][ T31] #2: ffff888033f344b8 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 298.052010][ T31] #3: ffff88807e5cd198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 298.061591][ T31] [ 298.064073][ T31] ============================================= [ 298.064073][ T31] [ 298.072569][ T31] NMI backtrace for cpu 1 [ 298.072582][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 298.072602][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.072612][ T31] Call Trace: [ 298.072620][ T31] [ 298.072627][ T31] dump_stack_lvl+0x189/0x250 [ 298.072651][ T31] ? __wake_up_klogd+0xd9/0x110 [ 298.072674][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.072697][ T31] ? __pfx__printk+0x10/0x10 [ 298.072733][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 298.072755][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 298.072770][ T31] ? _printk+0xcf/0x120 [ 298.072792][ T31] ? __pfx__printk+0x10/0x10 [ 298.072811][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 298.072832][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 298.072853][ T31] watchdog+0xfee/0x1030 [ 298.072877][ T31] ? watchdog+0x1de/0x1030 [ 298.072905][ T31] kthread+0x711/0x8a0 [ 298.072929][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.072949][ T31] ? __pfx_kthread+0x10/0x10 [ 298.072970][ T31] ? __pfx_kthread+0x10/0x10 [ 298.072988][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.073007][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.073026][ T31] ? __pfx_kthread+0x10/0x10 [ 298.073045][ T31] ret_from_fork+0x4b/0x80 [ 298.073062][ T31] ? __pfx_kthread+0x10/0x10 [ 298.073081][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.073112][ T31] [ 298.073119][ T31] Sending NMI from CPU 1 to CPUs 0: [ 298.226388][ C0] NMI backtrace for cpu 0 [ 298.226403][ C0] CPU: 0 UID: 0 PID: 1149 Comm: kworker/u8:7 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 298.226422][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.226432][ C0] Workqueue: bat_events batadv_nc_worker [ 298.226459][ C0] RIP: 0010:lock_release+0xc3/0x3e0 [ 298.226480][ C0] Code: 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b 5c 24 20 fa 48 c7 c7 4b f5 75 8d e8 c4 11 b8 09 65 ff 05 0d 7b d7 10 44 24 20 01 00 00 00 83 3d 0e d9 e0 0d 00 0f 84 96 01 00 00 41 [ 298.226494][ C0] RSP: 0018:ffffc900042bfa58 EFLAGS: 00000002 [ 298.226507][ C0] RAX: 0000000000000000 RBX: 0000000000000206 RCX: c2eb667a79f62900 [ 298.226518][ C0] RDX: 0000000000000000 RSI: ffffffff8d75f54b RDI: ffffffff8bc1d820 [ 298.226529][ C0] RBP: fffffffffffffe38 R08: 0000000000000000 R09: 0000000000000000 [ 298.226539][ C0] R10: 0000000000000000 R11: ffffffff8b243dc2 R12: dffffc0000000000 [ 298.226550][ C0] R13: ffffffff8b243dc2 R14: ffffffff8df3dce0 R15: ffff888026671e00 [ 298.226562][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 298.226575][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.226585][ C0] CR2: 00007f25be780178 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 298.226600][ C0] Call Trace: [ 298.226606][ C0] [ 298.226615][ C0] ? batadv_nc_worker+0xd2/0x610 [ 298.226631][ C0] batadv_nc_worker+0x28c/0x610 [ 298.226648][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 298.226663][ C0] process_scheduled_works+0xade/0x17a0 [ 298.226689][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.226717][ C0] worker_thread+0x8a0/0xda0 [ 298.226733][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.226753][ C0] ? __kthread_parkme+0x7b/0x200 [ 298.226772][ C0] kthread+0x711/0x8a0 [ 298.226790][ C0] ? __pfx_worker_thread+0x10/0x10 [ 298.226804][ C0] ? __pfx_kthread+0x10/0x10 [ 298.226821][ C0] ? __pfx_kthread+0x10/0x10 [ 298.226837][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.226853][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.226870][ C0] ? __pfx_kthread+0x10/0x10 [ 298.226886][ C0] ret_from_fork+0x4b/0x80 [ 298.226901][ C0] ? __pfx_kthread+0x10/0x10 [ 298.226917][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.226937][ C0] [ 298.464429][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 298.471311][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 298.483130][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.493203][ T31] Call Trace: [ 298.496494][ T31] [ 298.499435][ T31] dump_stack_lvl+0x99/0x250 [ 298.504040][ T31] ? __asan_memcpy+0x40/0x70 [ 298.508612][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.513808][ T31] ? __pfx__printk+0x10/0x10 [ 298.518400][ T31] panic+0x2db/0x790 [ 298.522291][ T31] ? __pfx_panic+0x10/0x10 [ 298.526693][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 298.532482][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 298.537836][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 298.543973][ T31] watchdog+0x102d/0x1030 [ 298.548287][ T31] ? watchdog+0x1de/0x1030 [ 298.552690][ T31] kthread+0x711/0x8a0 [ 298.556750][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.561410][ T31] ? __pfx_kthread+0x10/0x10 [ 298.565995][ T31] ? __pfx_kthread+0x10/0x10 [ 298.570603][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.575820][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.581024][ T31] ? __pfx_kthread+0x10/0x10 [ 298.585601][ T31] ret_from_fork+0x4b/0x80 [ 298.590000][ T31] ? __pfx_kthread+0x10/0x10 [ 298.594571][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.599317][ T31] [ 298.602460][ T31] Kernel Offset: disabled [ 298.606776][ T31] Rebooting in 86400 seconds..