last executing test programs: 11.991836555s ago: executing program 1 (id=8491): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)=ANY=[], 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) 8.634961938s ago: executing program 1 (id=8506): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000440)) ioprio_get$pid(0x3, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, &(0x7f00000003c0)=@random={'os2.', '\x00'}, &(0x7f0000000a80)=""/4096, 0x1000) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) syz_ublk_setup_queues(r1, r7, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x100000, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xa1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 6.479876737s ago: executing program 1 (id=8510): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x63) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 6.347429079s ago: executing program 0 (id=8513): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x278, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x4801}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 6.28078604s ago: executing program 1 (id=8514): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="ffffffffffff0211223344550806000108000604000243055805123400123400ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 6.029310738s ago: executing program 2 (id=8516): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000068000001294", 0x2e}], 0x1}, 0x90) 5.944080288s ago: executing program 0 (id=8518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000006c0)={0x4, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0f000000000000010400001811000067139aaa9e8d61282a276036cd145738c6a6d1da8e"], &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x480}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) remap_file_pages(&(0x7f00008e0000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x10) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000700)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000740)=0x4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) socket$inet_sctp(0x2, 0x1, 0x84) r5 = fsopen(&(0x7f0000000300)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000340)='fd', 0x0, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r6, 0x100) recvfrom$inet6(r6, 0x0, 0x0, 0x40000001, &(0x7f0000000500)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000540)={&(0x7f0000000580)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)="d9", 0x1a000}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x18, 0x40048d5}, 0x8050) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000780)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r8, &(0x7f00000007c0), 0x400000000000203, 0x0) connect$inet(r8, &(0x7f0000000800)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) 5.681316719s ago: executing program 2 (id=8519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={{0xffffffffffffff1c, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x24000000) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) fcntl$setstatus(r1, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000500), 0x40000000000009f, 0x0) fcntl$lock(r2, 0x410, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000400)={0x1}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x20048011) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.646222946s ago: executing program 2 (id=8520): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x200000000600, 0x0, 0x0, 0x200000000630, 0x200000000660], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000fffffff00000000002414d27000000097d982a2d294e4ba000000000000000000fcffb69effff0000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff"]}, 0x108) 5.564292009s ago: executing program 2 (id=8521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000200000000000000002000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) syz_clone3(&(0x7f0000001240)={0x4c1434280, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.353468335s ago: executing program 2 (id=8522): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000440)={0x1, &(0x7f0000000740)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000840)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000880)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f00000008c0)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000900)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$inet6(r1, &(0x7f0000000940)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000980)={0x0, 0x401}, 0x8) fsopen(&(0x7f0000000080)='ubifs\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000015000103010000000000000001"], 0x14}}, 0x804) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x86, &(0x7f0000000200)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x6, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev={0xac, 0x14, 0x14, 0x3e}, {[@cipso={0x86, 0x6, 0x1}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000300)=0x3) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@sha1={0x1, "6cd63f1bea5ce1a33a0f7e6286cb0b0ffc1a87e2"}, 0x15, 0x3) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/32, 0x33d4}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000de2018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf01000000000000b7"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0x41000081) syz_usb_connect(0x3, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x89901) statx(r5, 0x0, 0x1000, 0x6000, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000680)=@gcm_256={{0x303}, "f02bdd68c5bc6836", "2a61ace948e6b00727a3b841de35724418a22c5e5d5689445649e4f7de45c483", "32012511", "e95c9887ec4bfb56"}, 0x38) r6 = add_key$user(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), 0x3751, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r6, r6, r6}, 0x0, 0x0, 0x0) 4.978615642s ago: executing program 4 (id=8523): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000600)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="14000000000000002900000034007300010000000000000014"], 0x30}}], 0x1, 0xff14) bind$inet6(r0, 0x0, 0x0) 4.827573837s ago: executing program 4 (id=8525): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x4, 0x2}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.607385803s ago: executing program 3 (id=8526): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0xcde, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x28) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0xe703000000000000, 0x42804}, 0x84) 4.462991645s ago: executing program 0 (id=8527): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x200) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00001d6400)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}], 0x4, "cbda627192ec30"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00001d7400)={{0x0, 0x3, 0x51b, 0x800, 0x223f, 0x3, 0x4, 0x82a, 0x10, 0x2, 0x0, 0x3, 0x4, 0x3, 0xffffffffffffff7f}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00001d74c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "da0df6a5dd1baf"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00001d84c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x5, "e4a0b9859fa958"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00001d94c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00001da4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00001da6c0)={{0x0, 0x2, 0x8, 0x5, 0x0, 0x100, 0x8, 0xffff0000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00001da780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00001da980)={{0x0, 0x5, 0x0, 0xfb8, 0x9, 0x83, 0x5, 0x4, 0x9, 0x4, 0x5, 0x3, 0x1, 0x9, 0xfffffffffffffa99}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00001daa40)={0x6, [{}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xc3, "3584684bbf6241"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00001dba40)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {r20}, {r21, r22}, {r23, r24}, {r25, r27}], 0x38, "4e0a8d953615c1"}) sendmsg$nl_route(r6, &(0x7f0000003380)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003400)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 4.233268229s ago: executing program 3 (id=8528): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000540)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@local, @local, @void, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0x9, 0x6, "22121d", 0x44, 0x2f, 0x1, @mcast2, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0xb1, 0x0, 0x0, 0x1, 0x7, 0x1}}}, {0x8, 0x22eb, 0x3a, {{0x7, 0x2, 0x8, 0x3, 0x0, 0x0, 0x1, 0x4}, 0x2, {0xef2b, 0x7, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}}, 0x0) 4.108019977s ago: executing program 1 (id=8529): syz_usb_connect(0x3, 0xc7, &(0x7f0000000380)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201000c240503"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone(0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x88401, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000007c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000800)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x6c9a, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18976c0000000000185000000d00000000000000df0800009500003bc900"], &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000009c0)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000b00)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b80)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000bc0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 3.991298509s ago: executing program 3 (id=8530): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a3, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0xb00}], 0x1, 0x255e0000) 3.982700624s ago: executing program 0 (id=8531): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40010120) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000003c0)={0x6e, 0x1}) socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0xf00, &(0x7f00000008c0)={0x0, 0xd4ad, 0x10000, 0x0, 0x4e}, &(0x7f0000000940), 0x0, &(0x7f00000009c0)) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x80, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r8 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x12b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r15, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}], 0x1, 0x40000002, 0x0) ioctl$FE_GET_PROPERTY(r14, 0x80106f53, &(0x7f0000000e40)={0x25, &(0x7f0000000d00)=[{0x1a, '\x00', @buffer={"f21e17a6f5974e71d0ab77ca516b3305649733f99b9b7b139fd3956419648a16", 0x20}, 0x5}, {0x18, '\x00', @st={0x4, [{0x3, @uvalue=0x101}, {0x0, @uvalue=0x4}, {0x3, @svalue=0x5}, {0x0, @uvalue=0xfff}]}, 0x400}, {0x44, '\x00', @buffer={"c380d33c5444eda6320356fca9d2acf2854b368d93d47638ebaf642caabb4529", 0x20}, 0x6}, {0x3b, '\x00', @buffer={"08d07e928edb86cd80fed23dc7dd958a14aa21ff0229c6fbde2cb93b0e24fba0", 0x20}, 0x4}]}) 3.641461462s ago: executing program 3 (id=8532): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x81, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001740), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001780), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000017c0)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x800003}, 0x0) sched_getattr(0x0, &(0x7f0000001800)={0x38}, 0x38, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000018c0)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8000000000000006) syz_open_dev$tty1(0xc, 0x4, 0x1) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001900)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000002940)={0x0, 0x12c, @ioapic={0x80a0000, 0x8fff, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x9, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x8, '\x00', 0x6}, {0x7, 0x4, 0xe, '\x00', 0x3b}, {0x49, 0xe, 0xd7, '\x00', 0x86}, {0xc, 0x2, 0x2, '\x00', 0x2}, {0xd, 0x81, 0xf9, '\x00', 0x4}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x6, 0x1, 0xa, '\x00', 0xfe}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0xb}, {0x2, 0x0, 0x1, '\x00', 0x7f}, {0x45, 0x51, 0x6, '\x00', 0x8}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x3, '\x00', 0x7}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0xb}, {0xa, 0x0, 0xc8, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xfb, 0x8, 0x8, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x0, '\x00', 0x2}, {0xf9, 0x5e, 0x4, '\x00', 0x7}, {0xc, 0xf, 0x0, '\x00', 0x6}]}}) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001280)=0x14) sendmsg$nl_route(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="7400000010003704030000000700000000004000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000540012800b00010069703667726500004400028008000100", @ANYRES32=r7], 0x74}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bind$packet(r0, &(0x7f0000001480)={0x11, 0x10, r7, 0x1, 0x0, 0x6, @random="00e200"}, 0x14) 2.245826761s ago: executing program 0 (id=8533): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a060000) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b0, 0x0, 0x5}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000002300), 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x36, &(0x7f0000002340)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902240001040e10830904560b02e80ef9060905030300047f580609058b03"], &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000023c0)={0x7, 0x0, [{0x80000000, 0x3, 0x4da1e89fc77a7b65, 0xfffffffc, 0x1, 0x1501, 0x100}, {0x40000001, 0x5, 0x0, 0x8, 0x3, 0x5, 0x101}, {0x40000001, 0x8, 0x4, 0x401, 0x5, 0x62d, 0x80000000}, {0xc0000001, 0x0, 0x1, 0x7ff, 0x3b8, 0x2, 0x5}, {0x1, 0x8, 0x5, 0x14, 0x2d3, 0x0, 0x27e}, {0x40000001, 0x1, 0x1, 0x0, 0xc0, 0x2, 0xff}, {0x80000000, 0x6, 0x5, 0x5, 0x2, 0x20c00, 0x4}]}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x41, &(0x7f0000002500)=0x4, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000002640)={0x0, 0x400, 0x1, 0x1, 0x0, [0x0, 0x9, 0x69ea, 0x8001]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=ANY=[@ANYRESHEX=r5], 0xec}, 0x1, 0x0, 0x0, 0x2404c8c1}, 0x2000a001) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)={0x14, r11, 0x800, 0x70bd28, 0x259fdc02}, 0x14}}, 0x4000) 1.959690066s ago: executing program 2 (id=8534): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10001, 0x21, 0x4}, 0x18) listen(r0, 0xffffff80) socket$unix(0x1, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) io_uring_setup(0x1b81, &(0x7f00000005c0)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8}) syz_emit_ethernet(0x22, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x46, r2, {0x4}}, './file0\x00'}) syz_open_dev$sndpcmc(&(0x7f0000000700), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0af9400000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100e7ffff7f0000000010000a800c000100f81f3fe70a58a07714000000110001"], 0x100}}, 0x0) 1.21515525s ago: executing program 4 (id=8535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x98}, 0x1, 0x0, 0x12000000}, 0x0) 893.862751ms ago: executing program 4 (id=8536): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0xff000000000406fd}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xff, 0xff000000], [0xff000000, 0x0, 0xff, 0xff000000], 'ipvlan1\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x2, 0x2e, 0x4, 0x30}, 0x0, 0x248, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_0\x00', {0xf1, 0x0, 0x33, 0x80ff, 0x2000, 0x4, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000001, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x5}, {0x2, 0x1, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x38}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffff00, 0xff, 0xff], [0x0, 0x808000ff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0xbd, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1d) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000006c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000700)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000740)=0x4}) 498.654348ms ago: executing program 1 (id=8537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001900010026bd7000fedbdf25fe8000000000000000000000000000aafe8000000000e6ffffffffffffff00bb00000000000000020a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="09000000000000000c00000000000000000000000000000009000004000000000400000000000000ffffffffffffffff000000000000000000000000000000000000000000000000010100000000000003000080000000000200000000000008ffffffff040000000100020000000000"], 0xb8}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000380)=@in6={0xa, 0x4e23, 0xd, @mcast2, 0x7}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="f1", 0x1}], 0x1}, 0x40040) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = getpgrp(0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000026c0)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000002740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x9c41ab5da7294035, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4, 0x2, 0xb9}}], 0x1, &(0x7f00000029c0)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="ba7d4dbf0c835cf4470ac6773a0cd8e89368c0391bb6f99584a8058b40063664dba6cbd5f0991d45510a113fdd3316fd12212ee29465600ad35e1c1a7a280ddf49484b25", @ANYRES64=0x0], 0x20) r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0xd, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80040, 0x54) clock_gettime(0xa, 0x0) ioctl(r3, 0x4048aec9, &(0x7f0000000500)="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") r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r6, 0x0) ioctl(r6, 0x4048aecb, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/54) ioctl(r6, 0x4048aecb, &(0x7f0000000100)="0100000000000000003000"/72) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x9, 0xff, 0x1, 0x0, 0x5be, 0x101, 0x3ff, 0x7}, 0x0) ioctl(r6, 0x4048aecb, &(0x7f0000000100)="0200000000000000004000"/72) ioctl(r6, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0100"/72) ioctl$KVM_RUN(r6, 0xae80, 0x0) 428.226661ms ago: executing program 3 (id=8538): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xb662, 0x800}, 0x0, &(0x7f0000000580)={0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000, 0x0, 0x200000000000000}, &(0x7f00000005c0)={0x0, 0x989680}, 0x0) 333.70464ms ago: executing program 4 (id=8539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0xfff1}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000095}, 0x4008842) 189.591444ms ago: executing program 3 (id=8540): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) recvfrom(r1, &(0x7f00000003c0)=""/60, 0x3c, 0x40, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000440)={0x1d, r8}, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000580)={0x9, 0xffffffff}) sendmsg$can_bcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="010000006b010000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000002"], 0x48}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r9, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x1f000000) 156.083671ms ago: executing program 4 (id=8541): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1f00000000000000, 0x2) mbind(&(0x7f00004f9000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 0s ago: executing program 0 (id=8542): syz_emit_ethernet(0x82, &(0x7f0000000880)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@private, 0xfe}, {@dev}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ALL_64_after_hwframe+0x77/0x7f [ 1704.593119][T31731] RIP: 0033:0x7fb0feb9f559 [ 1704.593129][T31731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.593139][T31731] RSP: 002b:00007fb0ff9d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.593151][T31731] RAX: ffffffffffffffda RBX: 00007fb0fee25fa0 RCX: 00007fb0feb9f559 [ 1704.593159][T31731] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1704.593166][T31731] RBP: 00007fb0ff9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.593172][T31731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.593179][T31731] R13: 00007fb0fee26038 R14: 00007fb0fee25fa0 R15: 00007fb0fef4fa48 [ 1704.593195][T31731] [ 1705.414596][T31741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7952'. [ 1705.414619][T31741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7952'. [ 1705.790022][T25325] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1705.926704][T31754] netlink: 'syz.0.7956': attribute type 6 has an invalid length. [ 1705.926729][T31754] netlink: 'syz.0.7956': attribute type 7 has an invalid length. [ 1705.926742][T31754] netlink: 'syz.0.7956': attribute type 8 has an invalid length. [ 1705.958442][T25325] usb 4-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 1705.959581][T25325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.959610][T25325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.959649][T25325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.004741][T31753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1706.004955][T31753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1706.005102][T31753] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1706.005158][T31753] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1706.021467][T25325] usb 4-1: config 0 descriptor?? [ 1706.044847][T31753] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1706.044975][T31753] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1706.483990][T31763] dvmrp0: entered allmulticast mode [ 1706.694517][T31745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.695561][T31745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.738418][T25325] hid-led 0003:27B8:01ED.00AE: probe with driver hid-led failed with error -71 [ 1706.760370][T25325] usb 4-1: USB disconnect, device number 21 [ 1706.874129][T31770] input: syz0 as /devices/virtual/input/input163 [ 1707.017797][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1707.057603][T18068] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1707.187204][T18068] usb 2-1: device descriptor read/64, error -71 [ 1707.428633][T18068] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1707.558273][T18068] usb 2-1: device descriptor read/64, error -71 [ 1707.677506][T18068] usb usb2-port1: attempt power cycle [ 1707.736150][T31787] Cannot find del_set index 2 as target [ 1707.897479][T30442] Bluetooth: hci0: command 0x0c1a tx timeout [ 1708.043272][T18068] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1708.058013][T30442] Bluetooth: hci1: command 0x0406 tx timeout [ 1708.058051][T30442] Bluetooth: hci5: command 0x0406 tx timeout [ 1708.058107][T30442] Bluetooth: hci4: command 0x0c1a tx timeout [ 1708.058433][T18068] usb 2-1: device descriptor read/8, error -71 [ 1708.226966][T23952] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1708.264168][T31770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7963'. [ 1708.297974][T18068] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1708.339973][T18068] usb 2-1: device descriptor read/8, error -71 [ 1708.381204][T23952] usb 4-1: New USB device found: idVendor=0fc5, idProduct=b080, bcdDevice=0.00 [ 1708.382833][T23952] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1708.382859][T23952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.414577][T23952] usb 4-1: config 0 descriptor?? [ 1708.458156][T18068] usb usb2-port1: unable to enumerate USB device [ 1708.828285][T23952] hid_parser_main: 5 callbacks suppressed [ 1708.828322][T23952] hid-led 0003:0FC5:B080.00AF: unknown main item tag 0x1 [ 1708.828607][T23952] hid-led 0003:0FC5:B080.00AF: unknown main item tag 0x5 [ 1708.833748][T23952] hid-led 0003:0FC5:B080.00AF: unknown main item tag 0x6 [ 1708.833783][T23952] hid-led 0003:0FC5:B080.00AF: unknown main item tag 0x0 [ 1708.833808][T23952] hid-led 0003:0FC5:B080.00AF: unknown main item tag 0x0 [ 1708.833826][T23952] hid-led 0003:0FC5:B080.00AF: unbalanced collection at end of report description [ 1708.834347][T23952] hid-led 0003:0FC5:B080.00AF: probe with driver hid-led failed with error -22 [ 1709.021295][T25325] usb 4-1: USB disconnect, device number 22 [ 1710.010465][T31808] tipc: Enabling of bearer rejected, failed to enable media [ 1710.138219][T30442] Bluetooth: hci1: command 0x0406 tx timeout [ 1710.138276][ T4957] Bluetooth: hci5: command 0x0406 tx timeout [ 1710.500903][T31825] netlink: 'syz.4.7982': attribute type 1 has an invalid length. [ 1710.536057][T31825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1710.954774][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 1710.954793][ T29] audit: type=1400 audit(1793006977.698:18432): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=31831 comm="syz.4.7984" [ 1711.063502][T31837] netlink: 'syz.1.7986': attribute type 10 has an invalid length. [ 1711.068708][T31837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1711.072691][T31837] team0: Port device netdevsim1 added [ 1711.080690][T31837] netlink: 'syz.1.7986': attribute type 10 has an invalid length. [ 1711.112619][T31837] team0: Port device netdevsim1 removed [ 1711.313525][T31843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.314591][T31843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.040338][T31856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.040855][T31856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.668039][T25325] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1712.820662][T25325] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1712.822172][T25325] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1712.822196][T25325] usb 2-1: config 0 has no interface number 0 [ 1712.864377][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.864402][T25325] usb 2-1: Product: syz [ 1712.864417][T25325] usb 2-1: Manufacturer: syz [ 1712.864432][T25325] usb 2-1: SerialNumber: syz [ 1712.903209][T25325] usb 2-1: config 0 descriptor?? [ 1713.123428][T25325] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1713.125247][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7995'. [ 1713.149938][T25325] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1713.150242][T25325] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1713.150286][T25325] usb 2-1: media controller created [ 1713.205701][T25325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1713.326518][T25325] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 1713.687668][T31882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7998'. [ 1713.687690][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7998'. [ 1713.740113][T25325] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1713.752807][T31883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1713.927483][T25325] usb 5-1: Using ep0 maxpacket: 8 [ 1713.971953][T25325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1713.972005][T25325] usb 5-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1713.986068][T25325] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1713.986113][T25325] usb 5-1: can't read configurations, error -71 [ 1714.075059][T31891] loop2: detected capacity change from 0 to 7 [ 1714.078577][T31891] Dev loop2: unable to read RDB block 7 [ 1714.078626][T31891] loop2: unable to read partition table [ 1714.078811][T31891] loop2: partition table beyond EOD, truncated [ 1714.078839][T31891] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1714.318196][T23952] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1714.477885][T23952] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1714.479384][T23952] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1714.479407][T23952] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.479451][T23952] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1714.479471][T23952] usb 3-1: config 1 has no interface number 1 [ 1714.479507][T23952] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1714.479539][T23952] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1714.482379][T23952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.482403][T23952] usb 3-1: Product: syz [ 1714.482417][T23952] usb 3-1: Manufacturer: syz [ 1714.482431][T23952] usb 3-1: SerialNumber: syz [ 1714.727350][T18068] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1714.729345][T23952] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1714.729380][T23952] usb 3-1: MIDIStreaming interface descriptor not found [ 1714.857096][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1714.857764][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1714.888174][T18068] usb 4-1: Using ep0 maxpacket: 8 [ 1714.891631][T18068] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1714.891682][T18068] usb 4-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1714.901924][T18068] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1714.910393][T18068] usb 4-1: string descriptor 0 read error: -22 [ 1714.910508][T18068] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1714.948438][T18068] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1714.964157][T18068] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1714.964371][T18068] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1714.964397][T18068] usb 4-1: media controller created [ 1714.972377][T23952] usb 3-1: USB disconnect, device number 68 [ 1715.020166][T18068] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1715.312404][T18068] zl10353_read_register: readreg error (reg=127, ret==0) [ 1715.474712][T25325] usb 2-1: USB disconnect, device number 45 [ 1715.496444][T18068] usb 4-1: USB disconnect, device number 23 [ 1716.399131][T31928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1716.399567][T31928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1716.697143][T18068] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1716.866641][T18068] usb 5-1: not running at top speed; connect to a high speed hub [ 1716.866676][T18068] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1716.872471][T18068] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.872495][T18068] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1716.880396][T18068] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1716.880421][T18068] usb 5-1: Product: syz [ 1716.880435][T18068] usb 5-1: Manufacturer: syz [ 1716.968963][T18068] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1716.972044][T18068] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 1717.557958][T31960] IPv6: addrconf: prefix option has invalid lifetime [ 1717.593548][T31962] x_tables: duplicate entry at hook 3 [ 1718.885886][T31995] fuse: Bad value for 'fd' [ 1719.394611][T25325] usb 5-1: USB disconnect, device number 85 [ 1719.702098][T32000] FAULT_INJECTION: forcing a failure. [ 1719.702098][T32000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.702133][T32000] CPU: 0 UID: 0 PID: 32000 Comm: syz.4.8033 Tainted: G L syzkaller #0 PREEMPT(full) [ 1719.702158][T32000] Tainted: [L]=SOFTLOCKUP [ 1719.702166][T32000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1719.702176][T32000] Call Trace: [ 1719.702184][T32000] [ 1719.702193][T32000] dump_stack_lvl+0xe8/0x150 [ 1719.702228][T32000] should_fail_ex+0x410/0x560 [ 1719.702256][T32000] _copy_to_user+0x31/0xb0 [ 1719.702281][T32000] simple_read_from_buffer+0xe1/0x170 [ 1719.702306][T32000] proc_fail_nth_read+0x1bb/0x230 [ 1719.702336][T32000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1719.702364][T32000] ? rw_verify_area+0x24a/0x4c0 [ 1719.702387][T32000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1719.702411][T32000] vfs_read+0x213/0xa80 [ 1719.702436][T32000] ? __pfx___mutex_lock+0x10/0x10 [ 1719.702466][T32000] ? __pfx_vfs_read+0x10/0x10 [ 1719.702488][T32000] ? __fget_files+0x2a/0x420 [ 1719.702506][T32000] ? __fget_files+0x3a2/0x420 [ 1719.702523][T32000] ? __fget_files+0x2a/0x420 [ 1719.702546][T32000] ? fdget+0x1ac/0x250 [ 1719.702572][T32000] ksys_read+0x150/0x270 [ 1719.702602][T32000] ? __pfx_ksys_read+0x10/0x10 [ 1719.702627][T32000] ? __x64_sys_read+0x48/0x90 [ 1719.702652][T32000] do_syscall_64+0x166/0x520 [ 1719.702677][T32000] ? trace_irq_disable+0x3b/0x140 [ 1719.702701][T32000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.702720][T32000] ? clear_bhb_loop+0x70/0xc0 [ 1719.702747][T32000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.702766][T32000] RIP: 0033:0x7fded675fd8e [ 1719.702783][T32000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1719.702799][T32000] RSP: 002b:00007fded75eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1719.702820][T32000] RAX: ffffffffffffffda RBX: 00007fded75ef6c0 RCX: 00007fded675fd8e [ 1719.702834][T32000] RDX: 000000000000000f RSI: 00007fded75ef0a0 RDI: 0000000000000007 [ 1719.702847][T32000] RBP: 00007fded75ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.702858][T32000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.702870][T32000] R13: 00007fded6a26128 R14: 00007fded6a26090 R15: 00007fded6b4fa48 [ 1719.702901][T32000] [ 1720.249624][T31985] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1720.249786][T31985] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1720.249875][T31985] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1720.249959][T31985] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1720.458002][ T4957] Bluetooth: hci0: command 0x0c1a tx timeout [ 1720.844162][T32014] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8038'. [ 1721.148000][T18068] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1721.302999][T18068] usb 5-1: Using ep0 maxpacket: 32 [ 1721.304418][T18068] usb 5-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 1721.350511][T18068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.350538][T18068] usb 5-1: Product: syz [ 1721.350549][T18068] usb 5-1: Manufacturer: syz [ 1721.350563][T18068] usb 5-1: SerialNumber: syz [ 1721.594387][T32014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1721.743751][T18068] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1721.815725][T18068] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1721.833648][T18068] usb 5-1: USB disconnect, device number 86 [ 1722.237837][T26664] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1722.293846][T32038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.294301][T32038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.298015][T25081] Bluetooth: hci1: command 0x0406 tx timeout [ 1722.298054][T25081] Bluetooth: hci5: command 0x0406 tx timeout [ 1722.298334][ T4957] Bluetooth: hci4: command 0x0c1a tx timeout [ 1722.396981][T26664] usb 2-1: Using ep0 maxpacket: 16 [ 1722.398751][T26664] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1722.401680][T26664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.401711][T26664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.401731][T26664] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1722.401771][T26664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.461054][T26664] usb 2-1: config 0 descriptor?? [ 1722.944664][T26664] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00B0/input/input164 [ 1722.968539][T26664] microsoft 0003:045E:07DA.00B0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1723.061046][T32047] syzkaller0: entered promiscuous mode [ 1723.061069][T32047] syzkaller0: entered allmulticast mode [ 1723.295704][T26658] usb 2-1: USB disconnect, device number 46 [ 1723.523325][T32053] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1723.565779][T32052] bridge1: entered promiscuous mode [ 1723.904843][T32062] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8052'. [ 1724.002953][T32060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8053'. [ 1724.005313][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8053'. [ 1724.672194][T29569] IPVS: starting estimator thread 0... [ 1724.675323][T32061] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:21 [ 1724.757412][T32087] IPVS: using max 52 ests per chain, 124800 per kthread [ 1725.564932][T32040] Bluetooth: hci5: unexpected event for opcode 0x0c25 [ 1726.429489][T32125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8070'. [ 1726.547227][T23952] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1726.684975][T32127] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1726.708048][T23952] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1726.708546][T23952] usb 4-1: config 0 has no interfaces? [ 1726.710560][T23952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.710583][T23952] usb 4-1: Product: syz [ 1726.710597][T23952] usb 4-1: Manufacturer: syz [ 1726.710611][T23952] usb 4-1: SerialNumber: syz [ 1726.715056][T23952] usb 4-1: config 0 descriptor?? [ 1726.925759][T32131] FAULT_INJECTION: forcing a failure. [ 1726.925759][T32131] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.925795][T32131] CPU: 1 UID: 0 PID: 32131 Comm: syz.2.8073 Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.925819][T32131] Tainted: [L]=SOFTLOCKUP [ 1726.925826][T32131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1726.925837][T32131] Call Trace: [ 1726.925845][T32131] [ 1726.925854][T32131] dump_stack_lvl+0xe8/0x150 [ 1726.925892][T32131] should_fail_ex+0x410/0x560 [ 1726.925920][T32131] should_failslab+0xa8/0x100 [ 1726.925949][T32131] __kmalloc_cache_noprof+0x9e/0x600 [ 1726.925971][T32131] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1726.926097][T32131] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1726.926128][T32131] __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1726.926155][T32131] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1726.926187][T32131] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1726.926227][T32131] ? rcu_is_watching+0x16/0xb0 [ 1726.926257][T32131] ? __pfx___mutex_lock+0x10/0x10 [ 1726.926285][T32131] ? __kmalloc_noprof+0x387/0x710 [ 1726.926307][T32131] ? __nla_parse+0x40/0x60 [ 1726.926336][T32131] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1726.926365][T32131] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1726.926396][T32131] tipc_nl_bearer_enable+0x22/0x40 [ 1726.926434][T32131] genl_family_rcv_msg_doit+0x233/0x340 [ 1726.926463][T32131] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1726.926498][T32131] ? bpf_lsm_capable+0x9/0x20 [ 1726.926525][T32131] ? security_capable+0x7e/0x2c0 [ 1726.926546][T32131] genl_rcv_msg+0x614/0x7a0 [ 1726.926563][T32131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1726.926577][T32131] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 1726.926600][T32131] netlink_rcv_skb+0x226/0x4a0 [ 1726.926612][T32131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1726.926627][T32131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1726.926647][T32131] ? down_read+0x2b9/0x320 [ 1726.926660][T32131] genl_rcv+0x28/0x40 [ 1726.926673][T32131] netlink_unicast+0x8ef/0xa80 [ 1726.926695][T32131] netlink_sendmsg+0x7f0/0xb20 [ 1726.926711][T32131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.926725][T32131] ? aa_sock_msg_perm+0x144/0x210 [ 1726.926753][T32131] ? apparmor_socket_sendmsg+0x98/0x360 [ 1726.926776][T32131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.926793][T32131] sock_sendmsg_nosec+0x14e/0x190 [ 1726.926816][T32131] ____sys_sendmsg+0x54e/0x850 [ 1726.926847][T32131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.926882][T32131] ? import_iovec+0x73/0xa0 [ 1726.926909][T32131] ___sys_sendmsg+0x2a5/0x360 [ 1726.926932][T32131] ? __lock_acquire+0x747/0x2de0 [ 1726.926961][T32131] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.927026][T32131] ? __fget_files+0x3a2/0x420 [ 1726.927045][T32131] ? __fget_files+0x2a/0x420 [ 1726.927074][T32131] __x64_sys_sendmsg+0x1b1/0x290 [ 1726.927103][T32131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1726.927152][T32131] do_syscall_64+0x166/0x520 [ 1726.927177][T32131] ? trace_irq_disable+0x3b/0x140 [ 1726.927202][T32131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.927222][T32131] ? clear_bhb_loop+0x70/0xc0 [ 1726.927246][T32131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.927265][T32131] RIP: 0033:0x7fbb5799f559 [ 1726.927284][T32131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1726.927300][T32131] RSP: 002b:00007fbb58825028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.927320][T32131] RAX: ffffffffffffffda RBX: 00007fbb57c25fa0 RCX: 00007fbb5799f559 [ 1726.927335][T32131] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1726.927347][T32131] RBP: 00007fbb58825090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.927359][T32131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.927370][T32131] R13: 00007fbb57c26038 R14: 00007fbb57c25fa0 R15: 00007fbb57d4fa48 [ 1726.927399][T32131] [ 1727.531350][T32137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8075'. [ 1727.654428][T32140] kernel profiling enabled (shift: 63) [ 1727.654443][T32140] profiling shift: 63 too large [ 1727.672817][T32140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.673082][T32140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.676484][T32141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.676884][T32141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.716286][T32139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.737516][T32139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.890160][T32120] FAULT_INJECTION: forcing a failure. [ 1727.890160][T32120] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.890193][T32120] CPU: 0 UID: 0 PID: 32120 Comm: syz.3.8068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1727.890218][T32120] Tainted: [L]=SOFTLOCKUP [ 1727.890226][T32120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1727.890236][T32120] Call Trace: [ 1727.890245][T32120] [ 1727.890254][T32120] dump_stack_lvl+0xe8/0x150 [ 1727.890289][T32120] should_fail_ex+0x410/0x560 [ 1727.890325][T32120] should_failslab+0xa8/0x100 [ 1727.890350][T32120] ? skb_clone+0x212/0x3a0 [ 1727.890377][T32120] kmem_cache_alloc_noprof+0x9c/0x600 [ 1727.890399][T32120] ? skb_clone+0x212/0x3a0 [ 1727.890430][T32120] skb_clone+0x212/0x3a0 [ 1727.890459][T32120] __netlink_deliver_tap+0x355/0x6e0 [ 1727.890492][T32120] ? netlink_deliver_tap+0x2e/0x1b0 [ 1727.890513][T32120] netlink_deliver_tap+0x19c/0x1b0 [ 1727.890535][T32120] netlink_unicast+0x8c1/0xa80 [ 1727.890572][T32120] netlink_sendmsg+0x7f0/0xb20 [ 1727.890599][T32120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1727.890624][T32120] ? aa_sock_msg_perm+0x144/0x210 [ 1727.890657][T32120] ? apparmor_socket_sendmsg+0x98/0x360 [ 1727.890683][T32120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1727.890701][T32120] sock_sendmsg_nosec+0x14e/0x190 [ 1727.890723][T32120] ____sys_sendmsg+0x54e/0x850 [ 1727.890756][T32120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1727.890790][T32120] ? import_iovec+0x73/0xa0 [ 1727.890815][T32120] ___sys_sendmsg+0x2a5/0x360 [ 1727.890838][T32120] ? __lock_acquire+0x747/0x2de0 [ 1727.890865][T32120] ? __pfx____sys_sendmsg+0x10/0x10 [ 1727.890926][T32120] ? __fget_files+0x3a2/0x420 [ 1727.890945][T32120] ? __fget_files+0x2a/0x420 [ 1727.890974][T32120] __x64_sys_sendmsg+0x1b1/0x290 [ 1727.891001][T32120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1727.891045][T32120] do_syscall_64+0x166/0x520 [ 1727.891069][T32120] ? trace_irq_disable+0x3b/0x140 [ 1727.891090][T32120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.891110][T32120] ? clear_bhb_loop+0x70/0xc0 [ 1727.891134][T32120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.891152][T32120] RIP: 0033:0x7ff7a3f9f559 [ 1727.891170][T32120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.891187][T32120] RSP: 002b:00007ff7a4dd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1727.891207][T32120] RAX: ffffffffffffffda RBX: 00007ff7a4225fa0 RCX: 00007ff7a3f9f559 [ 1727.891221][T32120] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1727.891234][T32120] RBP: 00007ff7a4dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.891246][T32120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.891258][T32120] R13: 00007ff7a4226038 R14: 00007ff7a4225fa0 R15: 00007ff7a434fa48 [ 1727.891289][T32120] [ 1728.006140][T26658] usb 4-1: USB disconnect, device number 24 [ 1728.629414][T32146] syzkaller0: entered promiscuous mode [ 1728.629432][T32146] syzkaller0: entered allmulticast mode [ 1728.740988][T32153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.741233][T32153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.577038][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1729.653509][T32164] FAULT_INJECTION: forcing a failure. [ 1729.653509][T32164] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.653543][T32164] CPU: 1 UID: 0 PID: 32164 Comm: syz.2.8083 Tainted: G L syzkaller #0 PREEMPT(full) [ 1729.653568][T32164] Tainted: [L]=SOFTLOCKUP [ 1729.653574][T32164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1729.653584][T32164] Call Trace: [ 1729.653591][T32164] [ 1729.653598][T32164] dump_stack_lvl+0xe8/0x150 [ 1729.653633][T32164] should_fail_ex+0x410/0x560 [ 1729.653658][T32164] should_failslab+0xa8/0x100 [ 1729.653683][T32164] ? skb_clone+0x212/0x3a0 [ 1729.653707][T32164] kmem_cache_alloc_noprof+0x9c/0x600 [ 1729.653728][T32164] ? skb_clone+0x212/0x3a0 [ 1729.653753][T32164] ? run_filter+0x23/0x270 [ 1729.653776][T32164] skb_clone+0x212/0x3a0 [ 1729.653798][T32164] ? packet_rcv+0x563/0x16f0 [ 1729.653825][T32164] packet_rcv+0x65d/0x16f0 [ 1729.653856][T32164] dev_queue_xmit_nit+0x5c9/0xac0 [ 1729.653878][T32164] ? dev_queue_xmit_nit+0x2d/0xac0 [ 1729.653909][T32164] dev_hard_start_xmit+0x1c1/0x830 [ 1729.653935][T32164] ? validate_xmit_skb+0xecb/0x1a00 [ 1729.653975][T32164] __dev_queue_xmit+0x14d1/0x3920 [ 1729.654008][T32164] ? __dev_queue_xmit+0x29b/0x3920 [ 1729.654055][T32164] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1729.654092][T32164] ? __copy_skb_header+0xa3/0x4a0 [ 1729.654139][T32164] ? skb_clone+0x246/0x3a0 [ 1729.654179][T32164] __netlink_deliver_tap+0x4f1/0x6e0 [ 1729.654211][T32164] ? netlink_deliver_tap+0x2e/0x1b0 [ 1729.654235][T32164] netlink_deliver_tap+0x19c/0x1b0 [ 1729.654258][T32164] netlink_unicast+0x8c1/0xa80 [ 1729.654296][T32164] netlink_sendmsg+0x7f0/0xb20 [ 1729.654325][T32164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1729.654350][T32164] ? aa_sock_msg_perm+0x144/0x210 [ 1729.654385][T32164] ? apparmor_socket_sendmsg+0x98/0x360 [ 1729.654411][T32164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1729.654428][T32164] sock_sendmsg_nosec+0x14e/0x190 [ 1729.654449][T32164] ____sys_sendmsg+0x54e/0x850 [ 1729.654479][T32164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1729.654513][T32164] ? import_iovec+0x73/0xa0 [ 1729.654537][T32164] ___sys_sendmsg+0x2a5/0x360 [ 1729.654558][T32164] ? __lock_acquire+0x747/0x2de0 [ 1729.654584][T32164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1729.654645][T32164] ? __fget_files+0x3a2/0x420 [ 1729.654664][T32164] ? __fget_files+0x2a/0x420 [ 1729.654693][T32164] __x64_sys_sendmsg+0x1b1/0x290 [ 1729.654722][T32164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1729.654770][T32164] do_syscall_64+0x166/0x520 [ 1729.654795][T32164] ? trace_irq_disable+0x3b/0x140 [ 1729.654820][T32164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.654840][T32164] ? clear_bhb_loop+0x70/0xc0 [ 1729.654863][T32164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.654882][T32164] RIP: 0033:0x7fbb5799f559 [ 1729.654901][T32164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.654917][T32164] RSP: 002b:00007fbb58825028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1729.654938][T32164] RAX: ffffffffffffffda RBX: 00007fbb57c25fa0 RCX: 00007fbb5799f559 [ 1729.654953][T32164] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1729.654965][T32164] RBP: 00007fbb58825090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.654978][T32164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.654990][T32164] R13: 00007fbb57c26038 R14: 00007fbb57c25fa0 R15: 00007fbb57d4fa48 [ 1729.655022][T32164] [ 1730.038245][T32170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.038733][T32170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.224212][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.224266][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.847543][T32172] ip_tables: iptables: counters copy to user failed while replacing table [ 1738.925051][T32182] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1739.294325][T32195] Failed to initialize the IGMP6 control socket (err -105) [ 1739.298449][T26664] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1739.363989][T32205] netlink: 'syz.0.8097': attribute type 1 has an invalid length. [ 1739.427492][T26664] usb 3-1: device descriptor read/64, error -71 [ 1739.471361][T32205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.677024][T26664] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1739.696305][T32215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1739.740364][T32215] ip6gre3: entered promiscuous mode [ 1739.740392][T32215] ip6gre3: entered allmulticast mode [ 1739.819897][T26664] usb 3-1: device descriptor read/64, error -71 [ 1739.839161][T32217] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8099'. [ 1739.878794][T32217] ip6gre2: entered promiscuous mode [ 1739.878817][T32217] ip6gre2: entered allmulticast mode [ 1739.927943][T26664] usb usb3-port1: attempt power cycle [ 1740.128305][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1740.128320][T32219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1740.267561][T26664] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1740.287579][T26664] usb 3-1: device descriptor read/8, error -71 [ 1740.346678][T32221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8101'. [ 1740.537533][T26664] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1740.568419][T26664] usb 3-1: device descriptor read/8, error -71 [ 1740.677236][T26664] usb usb3-port1: unable to enumerate USB device [ 1741.720942][T32237] ip_tables: iptables: counters copy to user failed while replacing table [ 1742.320831][T32253] netlink: 'syz.1.8113': attribute type 10 has an invalid length. [ 1742.336543][T32253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1742.371420][T32253] team0: Port device netdevsim1 added [ 1742.400757][T32253] netlink: 'syz.1.8113': attribute type 10 has an invalid length. [ 1742.423788][T32253] team0: Port device netdevsim1 removed [ 1743.055122][T32255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8108'. [ 1744.550578][T32287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8124'. [ 1744.580063][T26658] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1744.733008][T26658] usb 2-1: Using ep0 maxpacket: 16 [ 1744.733658][T26658] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1744.734758][T26658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.734778][T26658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.734789][T26658] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1744.734812][T26658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.736514][T26658] usb 2-1: config 0 descriptor?? [ 1745.147962][T32302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.160116][T32302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.224865][T26658] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00B1/input/input166 [ 1745.254649][T26658] microsoft 0003:045E:07DA.00B1: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1745.670139][T27517] usb 2-1: USB disconnect, device number 47 [ 1745.885965][T32321] syzkaller1: entered promiscuous mode [ 1745.885981][T32321] syzkaller1: entered allmulticast mode [ 1745.997402][T26664] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1745.997531][T18068] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1746.149109][T18068] usb 3-1: Using ep0 maxpacket: 32 [ 1746.149238][T26664] usb 5-1: Using ep0 maxpacket: 32 [ 1746.150399][T26664] usb 5-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1746.150670][T18068] usb 3-1: New USB device found: idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 1746.152452][T26664] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1746.152473][T26664] usb 5-1: config 0 has no interface number 0 [ 1746.153385][T18068] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.153406][T18068] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1746.157238][T26664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.157262][T26664] usb 5-1: Product: syz [ 1746.157275][T26664] usb 5-1: Manufacturer: syz [ 1746.157289][T26664] usb 5-1: SerialNumber: syz [ 1746.160269][T18068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.160293][T18068] usb 3-1: Product: syz [ 1746.160306][T18068] usb 3-1: Manufacturer: syz [ 1746.160319][T18068] usb 3-1: SerialNumber: syz [ 1746.165466][T26664] usb 5-1: config 0 descriptor?? [ 1746.175599][T26664] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1746.175732][T26664] usb 5-1: selecting invalid altsetting 1 [ 1746.175749][T26664] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1746.313653][T26664] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1746.328232][T26664] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1746.328271][T26664] usb 5-1: media controller created [ 1746.390641][T26664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1746.836034][T32319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.839002][T32319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.374232][T32326] kvm: pic: non byte write [ 1747.585684][T26664] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1747.585739][T26664] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1747.843027][ T29] audit: type=1326 audit(1793007014.588:18433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32316 comm="syz.4.8134" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded679f559 code=0x7ffc0000 [ 1747.843221][ T29] audit: type=1326 audit(1793007014.588:18434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32316 comm="syz.4.8134" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded679f559 code=0x7ffc0000 [ 1747.870029][ T29] audit: type=1326 audit(1793007014.588:18435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32316 comm="syz.4.8134" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fded679f559 code=0x7ffc0000 [ 1747.870080][ T29] audit: type=1326 audit(1793007014.618:18436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32316 comm="syz.4.8134" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded679f559 code=0x7ffc0000 [ 1747.870119][ T29] audit: type=1326 audit(1793007014.618:18437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32316 comm="syz.4.8134" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded679f559 code=0x7ffc0000 [ 1747.926347][T27517] usb 5-1: USB disconnect, device number 87 [ 1748.046102][ T29] audit: type=1326 audit(1793007014.788:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32316 comm="syz.4.8134" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded679f559 code=0x7ffc0000 [ 1748.300072][T32339] syzkaller1: entered promiscuous mode [ 1748.300088][T32339] syzkaller1: entered allmulticast mode [ 1748.883401][ T29] audit: type=1326 audit(1793007015.628:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32343 comm="syz.1.8142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1376f9f559 code=0x7ffc0000 [ 1748.931455][ T29] audit: type=1326 audit(1793007015.678:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32343 comm="syz.1.8142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1376f9f559 code=0x7ffc0000 [ 1748.931925][ T29] audit: type=1326 audit(1793007015.678:18441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32343 comm="syz.1.8142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1376f9f559 code=0x7ffc0000 [ 1748.969492][ T29] audit: type=1326 audit(1793007015.718:18442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32343 comm="syz.1.8142" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1376f9f559 code=0x7ffc0000 [ 1749.360386][T27517] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1749.510419][T27517] usb 2-1: Using ep0 maxpacket: 32 [ 1749.517948][T27517] usb 2-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1749.544474][T27517] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1749.544501][T27517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.544519][T27517] usb 2-1: config 0 has no interface number 0 [ 1749.544556][T27517] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1749.613582][T27517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.613600][T27517] usb 2-1: Product: syz [ 1749.613608][T27517] usb 2-1: Manufacturer: syz [ 1749.613616][T27517] usb 2-1: SerialNumber: syz [ 1749.643610][T27517] usb 2-1: config 0 descriptor?? [ 1749.664510][T27517] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1750.792729][T32374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8149'. [ 1750.939867][T32377] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1752.001479][T27517] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1752.001585][T27517] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 1752.012917][T27517] usb 2-1: USB disconnect, device number 48 [ 1752.209549][T32397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.210013][T32397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.571578][T32415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.573247][T32415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.652342][T32426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8167'. [ 1754.690306][T32417] syzkaller0: entered promiscuous mode [ 1754.690393][T32417] syzkaller0: entered allmulticast mode [ 1755.160825][T32428] Invalid logical block size (-3) [ 1756.646874][T26675] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1756.806924][T26675] usb 5-1: Using ep0 maxpacket: 8 [ 1756.807649][T26675] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1756.809494][T26675] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 1756.809521][T26675] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1756.814425][T26675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.814448][T26675] usb 5-1: Product: Д [ 1756.814459][T26675] usb 5-1: Manufacturer: â ¨ [ 1756.814467][T26675] usb 5-1: SerialNumber: Ñ• [ 1756.943929][T32454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.945525][T32454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.365102][T26664] apple-mfi-fastcharge 3-1: USB disconnect, device number 73 [ 1759.391567][T26675] cdc_ncm 5-1:1.0: bind() failure [ 1759.410533][T26675] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1759.410589][T26675] cdc_ncm 5-1:1.1: bind() failure [ 1759.454802][T26675] usb 5-1: USB disconnect, device number 88 [ 1759.657033][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1765.779737][T32467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8179'. [ 1766.001226][T32471] syzkaller1: entered promiscuous mode [ 1766.001241][T32471] syzkaller1: entered allmulticast mode [ 1766.441816][T32481] ipvlan2: entered allmulticast mode [ 1766.441840][T32481] virt_wifi0: entered allmulticast mode [ 1766.444909][T32481] batman_adv: batadv0: Adding interface: ipvlan2 [ 1766.444927][T32481] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.445570][T32481] batman_adv: batadv0: Interface activated: ipvlan2 [ 1766.758242][T25325] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1766.907700][T25325] usb 3-1: Using ep0 maxpacket: 32 [ 1766.909017][T25325] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1766.910212][T25325] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1766.910234][T25325] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1766.910286][T25325] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1766.912862][T25325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.912884][T25325] usb 3-1: Product: syz [ 1766.912897][T25325] usb 3-1: Manufacturer: syz [ 1766.912908][T25325] usb 3-1: SerialNumber: syz [ 1766.919557][T25325] usb 3-1: config 0 descriptor?? [ 1766.953055][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8191'. [ 1766.953101][T32504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8191'. [ 1766.953126][T32504] netlink: 'syz.1.8191': attribute type 15 has an invalid length. [ 1766.953141][T32504] netlink: 'syz.1.8191': attribute type 18 has an invalid length. [ 1767.287737][T26658] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1767.356029][T25325] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1767.356066][T25325] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1767.419623][T26658] usb 4-1: device descriptor read/64, error -71 [ 1767.651111][T32517] tipc: Started in network mode [ 1767.651129][T32517] tipc: Node identity , cluster identity 4711 [ 1767.651144][T32517] tipc: Failed to set node id, please configure manually [ 1767.651187][T32517] tipc: Enabling of bearer rejected, failed to enable media [ 1767.663906][T26658] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1767.788992][T26658] usb 4-1: device descriptor read/64, error -71 [ 1767.900892][T26658] usb usb4-port1: attempt power cycle [ 1768.083098][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 1768.083128][ T29] audit: type=1400 audit(1793007034.828:19135): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=32523 comm="syz.1.8196" [ 1768.237632][T26658] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1768.258195][T26658] usb 4-1: device descriptor read/8, error -71 [ 1768.500188][T26658] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1768.518014][T26658] usb 4-1: device descriptor read/8, error -71 [ 1768.627874][T26658] usb usb4-port1: unable to enumerate USB device [ 1768.825960][T32535] FAULT_INJECTION: forcing a failure. [ 1768.825960][T32535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.828258][T32535] CPU: 1 UID: 0 PID: 32535 Comm: syz.4.8199 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.828287][T32535] Tainted: [L]=SOFTLOCKUP [ 1768.828295][T32535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1768.828306][T32535] Call Trace: [ 1768.828316][T32535] [ 1768.828326][T32535] dump_stack_lvl+0xe8/0x150 [ 1768.828362][T32535] should_fail_ex+0x410/0x560 [ 1768.828390][T32535] _copy_to_user+0x31/0xb0 [ 1768.828416][T32535] simple_read_from_buffer+0xe1/0x170 [ 1768.828443][T32535] proc_fail_nth_read+0x1bb/0x230 [ 1768.828475][T32535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.828503][T32535] ? rw_verify_area+0x24a/0x4c0 [ 1768.828526][T32535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.828552][T32535] vfs_read+0x213/0xa80 [ 1768.828577][T32535] ? __pfx___mutex_lock+0x10/0x10 [ 1768.828604][T32535] ? __pfx_vfs_read+0x10/0x10 [ 1768.828626][T32535] ? __fget_files+0x2a/0x420 [ 1768.828644][T32535] ? __fget_files+0x3a2/0x420 [ 1768.828661][T32535] ? __fget_files+0x2a/0x420 [ 1768.828684][T32535] ? fdget+0x1ac/0x250 [ 1768.828710][T32535] ksys_read+0x150/0x270 [ 1768.828734][T32535] ? __pfx_ksys_read+0x10/0x10 [ 1768.828766][T32535] do_syscall_64+0x166/0x520 [ 1768.828792][T32535] ? trace_irq_disable+0x3b/0x140 [ 1768.828818][T32535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.828837][T32535] ? clear_bhb_loop+0x70/0xc0 [ 1768.828860][T32535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.828880][T32535] RIP: 0033:0x7fded675fd8e [ 1768.828899][T32535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1768.828916][T32535] RSP: 002b:00007fded75acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1768.828937][T32535] RAX: ffffffffffffffda RBX: 00007fded75ad6c0 RCX: 00007fded675fd8e [ 1768.828950][T32535] RDX: 000000000000000f RSI: 00007fded75ad0a0 RDI: 0000000000000005 [ 1768.828963][T32535] RBP: 00007fded75ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.828976][T32535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.828988][T32535] R13: 00007fded6a26308 R14: 00007fded6a26270 R15: 00007fded6b4fa48 [ 1768.829021][T32535] [ 1769.161886][T32537] netlink: 'syz.1.8201': attribute type 10 has an invalid length. [ 1769.179297][T32537] team0: Port device dummy0 added [ 1769.522094][T26664] usb 3-1: USB disconnect, device number 74 [ 1769.700068][T32552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8205'. [ 1769.721274][T32550] bond0: (slave bond_slave_0): Releasing backup interface [ 1769.736141][T32550] bond0: (slave bond_slave_1): Releasing backup interface [ 1769.759708][T32550] team0: Port device team_slave_0 removed [ 1769.760645][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8204'. [ 1769.760669][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8204'. [ 1769.795783][T32550] team0: Port device team_slave_1 removed [ 1769.796435][T32550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.814679][T32550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1770.147301][T26675] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1770.288770][ T29] audit: type=1400 audit(1793007037.038:19136): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=32567 comm="syz.1.8211" [ 1770.319687][T26675] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1770.331372][T26675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.331415][T26675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.334188][T26675] usb 3-1: config 0 descriptor?? [ 1770.542904][T26675] usbhid 3-1:0.0: can't add hid device: -71 [ 1770.543001][T26675] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1770.548909][T26675] usb 3-1: USB disconnect, device number 75 [ 1770.987536][T26675] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1771.142066][T26675] usb 3-1: New USB device found: idVendor=0c98, idProduct=1140, bcdDevice=1.00 [ 1771.146659][T26675] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1771.146692][T26675] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1771.146720][T26675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.214477][T26675] usb 3-1: config 0 descriptor?? [ 1771.237904][T26675] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1771.629487][T32588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8218'. [ 1771.629508][T32588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8218'. [ 1771.866540][T26675] usb 3-1: USB disconnect, device number 76 [ 1773.047480][T26675] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1773.197928][T26675] usb 3-1: Using ep0 maxpacket: 16 [ 1773.224831][T26675] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1773.224865][T26675] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 1773.250109][T26675] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 1773.254324][T26675] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1773.254353][T26675] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1773.300625][T26675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.300644][T26675] usb 3-1: Product: 龱먜넽쇥맰홲ዳ鰃᭥ἃ䛯é‹á±¶é³‰è–Ÿâ½šìª¦í“ ë¬Œè¼â•±é„§ë‰šà ©ïˆµè¶ƒîœºá§Šä‡µâª¬î§•ç¡ŽÊ›ï¬šè²ï†ï¨‚᧳îŒìˆ®ï¢€è°›è°³ç¤£é‹ˆäƒæ™¤è‚췓든꩔矮仳çŽä“‘玺媪崂狗尦í빺ﻘê«æ´¯ç†“굫裵é½ì•˜á«ºä±ƒì½ â€Ÿê˜ã®µè“¡ã…¢é“æ¯æ§©ë¿»ï•é£¶ïŽ¥Ã˜íŽ¼êŠ¦ïžîŠ®é™ŒÛ€ë„¤ç«‡å½µâ™’겨ᦫãŠâª•ï‡­çœ²ë‘•éº§é·žâ«—ꛘ蜙 [ 1773.300660][T26675] usb 3-1: Manufacturer: à ‡ [ 1773.300667][T26675] usb 3-1: SerialNumber: â°‰ [ 1773.369686][T32600] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1773.668130][T26675] usb 3-1: USB disconnect, device number 77 [ 1773.692192][T32606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8223'. [ 1773.692216][T32606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8223'. [ 1773.793784][T32608] FAULT_INJECTION: forcing a failure. [ 1773.793784][T32608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.793809][T32608] CPU: 1 UID: 0 PID: 32608 Comm: syz.4.8224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1773.793824][T32608] Tainted: [L]=SOFTLOCKUP [ 1773.793828][T32608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1773.793835][T32608] Call Trace: [ 1773.793839][T32608] [ 1773.793844][T32608] dump_stack_lvl+0xe8/0x150 [ 1773.793867][T32608] should_fail_ex+0x410/0x560 [ 1773.793882][T32608] _copy_from_iter+0x1d3/0x1660 [ 1773.793896][T32608] ? __alloc_skb+0x27a/0x7a0 [ 1773.793919][T32608] ? __alloc_skb+0x27a/0x7a0 [ 1773.793941][T32608] ? __alloc_skb+0x27a/0x7a0 [ 1773.793960][T32608] ? __pfx__copy_from_iter+0x10/0x10 [ 1773.793976][T32608] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1773.793994][T32608] ? __alloc_skb+0x27a/0x7a0 [ 1773.794013][T32608] ? __alloc_skb+0x27a/0x7a0 [ 1773.794039][T32608] ? netlink_sendmsg+0x64f/0xb20 [ 1773.794059][T32608] ? skb_put+0x112/0x210 [ 1773.794084][T32608] netlink_sendmsg+0x6bb/0xb20 [ 1773.794110][T32608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1773.794133][T32608] ? aa_sock_msg_perm+0x144/0x210 [ 1773.794153][T32608] ? apparmor_socket_sendmsg+0x98/0x360 [ 1773.794167][T32608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1773.794178][T32608] sock_sendmsg_nosec+0x14e/0x190 [ 1773.794194][T32608] ____sys_sendmsg+0x54e/0x850 [ 1773.794211][T32608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1773.794229][T32608] ? import_iovec+0x73/0xa0 [ 1773.794243][T32608] ___sys_sendmsg+0x2a5/0x360 [ 1773.794258][T32608] ? __lock_acquire+0x747/0x2de0 [ 1773.794274][T32608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1773.794306][T32608] ? __fget_files+0x3a2/0x420 [ 1773.794316][T32608] ? __fget_files+0x2a/0x420 [ 1773.794332][T32608] __x64_sys_sendmsg+0x1b1/0x290 [ 1773.794347][T32608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1773.794372][T32608] do_syscall_64+0x166/0x520 [ 1773.794387][T32608] ? trace_irq_disable+0x3b/0x140 [ 1773.794401][T32608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.794411][T32608] ? clear_bhb_loop+0x70/0xc0 [ 1773.794424][T32608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.794435][T32608] RIP: 0033:0x7fded679f559 [ 1773.794446][T32608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.794455][T32608] RSP: 002b:00007fded7610028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1773.794468][T32608] RAX: ffffffffffffffda RBX: 00007fded6a25fa0 RCX: 00007fded679f559 [ 1773.794476][T32608] RDX: 000000000000400c RSI: 00002000000002c0 RDI: 0000000000000003 [ 1773.794482][T32608] RBP: 00007fded7610090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.794489][T32608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.794496][T32608] R13: 00007fded6a26038 R14: 00007fded6a25fa0 R15: 00007fded6b4fa48 [ 1773.794512][T32608] [ 1774.551754][T32619] ip6gre2: entered promiscuous mode [ 1774.551773][T32619] ip6gre2: entered allmulticast mode [ 1775.605839][T32633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.616302][T32633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.699352][T32646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8235'. [ 1777.262575][T32655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8237'. [ 1777.262593][T32655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8237'. [ 1778.157457][T23952] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1778.307884][T23952] usb 4-1: Using ep0 maxpacket: 16 [ 1778.308610][T23952] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1778.309747][T23952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.309783][T23952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1778.309810][T23952] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1778.309851][T23952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.311779][T23952] usb 4-1: config 0 descriptor?? [ 1778.600838][T32675] loop7: detected capacity change from 0 to 7 [ 1778.699820][T32675] Dev loop7: unable to read RDB block 7 [ 1778.699863][T32675] loop7: unable to read partition table [ 1778.700047][T32675] loop7: partition table beyond EOD, truncated [ 1778.700058][T32675] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1778.747497][T27517] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1778.777487][T32678] Invalid logical block size (4) [ 1778.900608][T27517] usb 5-1: Using ep0 maxpacket: 8 [ 1778.901324][T27517] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1778.902616][T27517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1778.902872][T27517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.953477][T27517] usb 5-1: config 0 descriptor?? [ 1779.001192][T32684] Cannot find del_set index 2 as target [ 1779.048823][T23952] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00B2/input/input168 [ 1779.085886][T23952] microsoft 0003:045E:07DA.00B2: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1779.178028][T27517] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1779.272915][T32687] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8249'. [ 1779.396465][T32687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.409793][T32687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.574297][T26664] usb 4-1: USB disconnect, device number 29 [ 1780.500799][T32711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1780.500818][T32711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8253'. [ 1781.714257][T26664] usb 5-1: USB disconnect, device number 89 [ 1781.938033][T25325] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1782.090727][T25325] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1782.091644][T25325] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1782.091659][T25325] usb 2-1: config 0 has no interface number 0 [ 1782.117989][T25325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.118006][T25325] usb 2-1: Product: syz [ 1782.118014][T25325] usb 2-1: Manufacturer: syz [ 1782.118022][T25325] usb 2-1: SerialNumber: syz [ 1782.149191][T25325] usb 2-1: config 0 descriptor?? [ 1782.204593][T32730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8262'. [ 1782.401782][T25325] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1782.409425][T25325] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1782.409609][T25325] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1782.409649][T25325] usb 2-1: media controller created [ 1782.473790][T25325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1782.533647][T32734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.534808][T32734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.622049][T25325] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 1782.961693][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8265'. [ 1782.961746][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8265'. [ 1783.131126][T32750] netlink: 'syz.4.8266': attribute type 1 has an invalid length. [ 1783.290276][T32750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1783.358206][T32753] xfrm1: entered allmulticast mode [ 1783.467611][T25325] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1783.620781][T25325] usb 5-1: Using ep0 maxpacket: 16 [ 1783.621828][T25325] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1783.624866][T25325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.624896][T25325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.624918][T25325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1783.634053][T25325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.700040][T25325] usb 5-1: config 0 descriptor?? [ 1784.313408][ T304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.313452][T25325] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00B3/input/input169 [ 1784.313859][ T304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.394650][T25325] microsoft 0003:045E:07DA.00B3: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1785.043107][T23952] usb 2-1: USB disconnect, device number 49 [ 1785.537303][T25325] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 1785.648206][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8280'. [ 1785.648231][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8280'. [ 1785.940351][T26664] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1786.067827][T26664] usb 2-1: device descriptor read/64, error -71 [ 1786.318648][T26664] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1786.448407][T26664] usb 2-1: device descriptor read/64, error -71 [ 1786.562914][T26664] usb usb2-port1: attempt power cycle [ 1786.737419][T25325] usb 5-1: device descriptor read/64, error -71 [ 1786.907536][T26664] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1786.921900][ T343] fuse: Bad value for 'rootmode' [ 1786.931168][T26664] usb 2-1: device descriptor read/8, error -71 [ 1786.977417][T25325] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 1786.978143][T25325] usb 5-1: device reset changed ep0 maxpacket size! [ 1786.978723][T27517] usb 5-1: USB disconnect, device number 90 [ 1787.168458][T26664] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1787.188262][T26664] usb 2-1: device descriptor read/8, error -71 [ 1787.247448][T27517] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1787.299322][T26664] usb usb2-port1: unable to enumerate USB device [ 1787.398299][T27517] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1787.399296][T27517] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1787.399323][T27517] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1787.399342][T27517] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1787.399386][T27517] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1787.399420][T27517] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1787.401870][T27517] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1787.401894][T27517] usb 5-1: Product: syz [ 1787.401909][T27517] usb 5-1: Manufacturer: syz [ 1787.450273][T27517] cdc_wdm 5-1:1.0: skipping garbage [ 1787.450293][T27517] cdc_wdm 5-1:1.0: skipping garbage [ 1787.512898][T27517] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1787.512923][T27517] cdc_wdm 5-1:1.0: Unknown control protocol [ 1787.807108][T26664] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1787.825135][T27517] usb 5-1: USB disconnect, device number 91 [ 1787.836922][T26675] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1787.936844][T26664] usb 4-1: device descriptor read/64, error -71 [ 1787.968713][T26675] usb 3-1: device descriptor read/64, error -71 [ 1788.031637][ T355] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8288'. [ 1788.060973][ T355] ip6gre3: entered promiscuous mode [ 1788.060996][ T355] ip6gre3: entered allmulticast mode [ 1788.197523][T26664] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1788.229757][T26675] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1788.328658][T26664] usb 4-1: device descriptor read/64, error -71 [ 1788.367098][T26675] usb 3-1: device descriptor read/64, error -71 [ 1788.438320][T26664] usb usb4-port1: attempt power cycle [ 1788.477188][T26675] usb usb3-port1: attempt power cycle [ 1788.787633][T26664] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1788.808265][T23952] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1788.810339][T26664] usb 4-1: device descriptor read/8, error -71 [ 1788.819998][T26675] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1788.850604][T26675] usb 3-1: device descriptor read/8, error -71 [ 1788.960355][T23952] usb 2-1: New USB device found: idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1788.962123][T23952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1788.962150][T23952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1788.962162][T23952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1788.964153][T23952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.964189][T23952] usb 2-1: Product: syz [ 1788.964202][T23952] usb 2-1: Manufacturer: syz [ 1788.964213][T23952] usb 2-1: SerialNumber: syz [ 1788.990520][T23952] usb 2-1: config 0 descriptor?? [ 1789.024842][ T359] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1789.098418][T26675] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1789.098981][T26664] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1789.130939][T26675] usb 3-1: device descriptor read/8, error -71 [ 1789.132752][T26664] usb 4-1: device descriptor read/8, error -71 [ 1789.237547][T26675] usb usb3-port1: unable to enumerate USB device [ 1789.237726][T26664] usb usb4-port1: unable to enumerate USB device [ 1789.293837][ T359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1789.397990][ T371] syzkaller1: entered promiscuous mode [ 1789.398006][ T371] syzkaller1: entered allmulticast mode [ 1789.777875][ T376] kvm: pic: non byte write [ 1790.218275][ T384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8298'. [ 1791.680969][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.681006][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.810233][T27517] usb 2-1: USB disconnect, device number 54 [ 1792.039389][ T406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8303'. [ 1792.867447][T27517] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1793.023218][T27517] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1793.039560][T27517] usb 3-1: config 0 has no interfaces? [ 1793.055713][T27517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.055731][T27517] usb 3-1: Product: syz [ 1793.055739][T27517] usb 3-1: Manufacturer: syz [ 1793.055746][T27517] usb 3-1: SerialNumber: syz [ 1793.083199][T27517] usb 3-1: config 0 descriptor?? [ 1793.527174][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8310'. [ 1793.527198][ T431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8310'. [ 1793.760123][T27517] usb 3-1: USB disconnect, device number 82 [ 1793.881982][ T443] netlink: 'syz.3.8313': attribute type 1 has an invalid length. [ 1794.148068][T26675] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1794.300132][T26675] usb 4-1: Using ep0 maxpacket: 16 [ 1794.302986][T26675] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1794.351879][T26675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.351910][T26675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1794.351924][T26675] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1794.351948][T26675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.378250][T26675] usb 4-1: config 0 descriptor?? [ 1794.649202][ T450] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1794.655672][ T450] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1794.655834][ T450] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8316'. [ 1795.165438][ T464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8321'. [ 1795.181986][ T464] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8321'. [ 1795.203005][ T464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8321'. [ 1795.413630][ T469] ip_tables: iptables: counters copy to user failed while replacing table [ 1796.284236][ T484] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8328'. [ 1796.911752][ T484] ip6gre4: entered promiscuous mode [ 1796.911776][ T484] ip6gre4: entered allmulticast mode [ 1797.069326][ T489] loop2: detected capacity change from 0 to 7 [ 1797.071934][ T489] Dev loop2: unable to read RDB block 7 [ 1797.071976][ T489] loop2: unable to read partition table [ 1797.072197][ T489] loop2: partition table beyond EOD, truncated [ 1797.073298][ T489] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1797.148165][ T5691] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1797.277916][ T5691] usb 3-1: device descriptor read/64, error -71 [ 1797.517983][ T5691] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1797.628961][T26675] usbhid 4-1:0.0: can't add hid device: -71 [ 1797.629067][T26675] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1797.638830][T26675] usb 4-1: USB disconnect, device number 34 [ 1797.651910][ T5691] usb 3-1: device descriptor read/64, error -71 [ 1797.730650][ T496] syzkaller1: entered promiscuous mode [ 1797.730675][ T496] syzkaller1: entered allmulticast mode [ 1797.757975][ T5691] usb usb3-port1: attempt power cycle [ 1798.097315][ T5691] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1798.118240][ T5691] usb 3-1: device descriptor read/8, error -71 [ 1798.179917][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.180071][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.180208][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.180343][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.180487][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.180634][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.180771][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.180905][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.181039][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.181175][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.312650][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.312772][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.312859][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.312953][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313039][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313116][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313191][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313268][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313347][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313422][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313504][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313579][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313681][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313784][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313860][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.313935][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.362684][ T5691] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1798.384623][ T5691] usb 3-1: device descriptor read/8, error -71 [ 1798.491868][ T5691] usb usb3-port1: unable to enumerate USB device [ 1798.520966][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521077][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521160][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521238][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521318][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521394][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521479][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521555][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521640][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521729][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521821][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521896][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.521978][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.522056][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.522133][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.522209][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.522291][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789126][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789214][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789291][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789367][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789455][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789533][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789610][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789686][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.789800][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.804224][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.804399][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.804540][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.804671][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.804799][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.804938][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.805068][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.805197][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.805325][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.805462][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.805590][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.829407][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1798.829609][ T502] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1799.187887][T26675] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1799.316968][T26675] usb 4-1: device descriptor read/64, error -71 [ 1799.575058][T26675] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1799.717266][T26675] usb 4-1: device descriptor read/64, error -71 [ 1799.827098][T26675] usb usb4-port1: attempt power cycle [ 1799.989475][ T518] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8340'. [ 1800.167402][T26675] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1800.190017][T26675] usb 4-1: device descriptor read/8, error -71 [ 1800.208533][ T29] audit: type=1800 audit(1793007066.948:19137): pid=521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8342" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 1800.373336][ T524] netlink: 'syz.1.8343': attribute type 10 has an invalid length. [ 1800.447817][T26675] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1800.492522][ T509] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1800.500708][T26675] usb 4-1: device descriptor read/8, error -71 [ 1800.598485][T26675] usb usb4-port1: unable to enumerate USB device [ 1800.824563][ T530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1800.940739][ T532] netlink: 'syz.1.8344': attribute type 1 has an invalid length. [ 1801.181782][ T5691] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1801.337633][ T5691] usb 2-1: Using ep0 maxpacket: 16 [ 1801.342441][ T5691] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1801.364260][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.364286][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1801.364306][ T5691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1801.364342][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.420651][ T5691] usb 2-1: config 0 descriptor?? [ 1802.202602][ T542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8348'. [ 1803.619894][ T564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8352'. [ 1804.090491][ T566] tipc: Enabling of bearer rejected, failed to enable media [ 1804.150859][ T568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8353'. [ 1804.614859][ T577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8356'. [ 1804.614876][ T577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8356'. [ 1804.728032][ T579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.728528][ T579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.869650][ T5691] usbhid 2-1:0.0: can't add hid device: -71 [ 1804.869733][ T5691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1804.896461][ T5691] usb 2-1: USB disconnect, device number 55 [ 1805.406102][ T587] syzkaller0: entered promiscuous mode [ 1805.406118][ T587] syzkaller0: entered allmulticast mode [ 1805.420413][ T581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1805.463248][ T29] audit: type=1400 audit(1793007072.208:19138): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=585 comm="syz.3.8361" [ 1807.307212][T25325] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1807.458163][T25325] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1807.459200][T25325] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1807.459228][T25325] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1807.459248][T25325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1807.462610][T25325] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1807.462634][T25325] usb 4-1: Product: syz [ 1807.462647][T25325] usb 4-1: Manufacturer: syz [ 1807.462659][T25325] usb 4-1: SerialNumber: syz [ 1807.538767][T25325] usb 4-1: config 0 descriptor?? [ 1807.542454][T25325] usb 4-1: selecting invalid altsetting 0 [ 1808.329780][T27517] usb 4-1: USB disconnect, device number 39 [ 1808.376537][ T625] netlink: 'syz.2.8370': attribute type 1 has an invalid length. [ 1808.657875][T26675] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1808.807589][T26675] usb 3-1: Using ep0 maxpacket: 16 [ 1808.809961][T26675] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1808.841188][T26675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.841220][T26675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.841242][T26675] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1808.841281][T26675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.850175][T26675] usb 3-1: config 0 descriptor?? [ 1809.428273][T25325] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1809.588834][T25325] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1809.589292][T25325] usb 4-1: config 0 has no interfaces? [ 1809.607844][T25325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.607870][T25325] usb 4-1: Product: syz [ 1809.607885][T25325] usb 4-1: Manufacturer: syz [ 1809.607900][T25325] usb 4-1: SerialNumber: syz [ 1809.637652][T25325] usb 4-1: config 0 descriptor?? [ 1810.310998][T25325] usb 4-1: USB disconnect, device number 40 [ 1810.558328][T26664] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1810.718838][T26664] usb 2-1: Using ep0 maxpacket: 16 [ 1810.721206][T26664] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1810.722458][T26664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.722477][T26664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.722489][T26664] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1810.722530][T26664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.726475][T26664] usb 2-1: config 0 descriptor?? [ 1810.949805][ T29] audit: type=1400 audit(1793007077.698:19139): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=645 comm="syz.3.8378" [ 1811.234637][T26675] usbhid 3-1:0.0: can't add hid device: -71 [ 1811.234721][T26675] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1811.273680][T26675] usb 3-1: USB disconnect, device number 87 [ 1811.289361][T26664] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00B4/input/input171 [ 1811.322377][T26664] microsoft 0003:045E:07DA.00B4: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1811.523548][ T656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1811.718897][T26664] usb 2-1: USB disconnect, device number 56 [ 1812.033582][ T673] bridge0: entered allmulticast mode [ 1812.118943][ T673] ip_tables: iptables: counters copy to user failed while replacing table [ 1812.535371][ T681] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1812.578025][ T681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8385'. [ 1812.902947][ T679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8384'. [ 1813.455372][ T694] FAULT_INJECTION: forcing a failure. [ 1813.455372][ T694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1813.455395][ T694] CPU: 1 UID: 0 PID: 694 Comm: syz.3.8389 Tainted: G L syzkaller #0 PREEMPT(full) [ 1813.455410][ T694] Tainted: [L]=SOFTLOCKUP [ 1813.455414][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1813.455420][ T694] Call Trace: [ 1813.455425][ T694] [ 1813.455430][ T694] dump_stack_lvl+0xe8/0x150 [ 1813.455452][ T694] should_fail_ex+0x410/0x560 [ 1813.455468][ T694] _copy_from_user+0x2d/0xb0 [ 1813.455481][ T694] do_sock_getsockopt+0x1fa/0x640 [ 1813.455500][ T694] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1813.455521][ T694] ? __fget_files+0x3a2/0x420 [ 1813.455532][ T694] ? __fget_files+0x2a/0x420 [ 1813.455546][ T694] __x64_sys_getsockopt+0x1a4/0x240 [ 1813.455564][ T694] do_syscall_64+0x166/0x520 [ 1813.455579][ T694] ? trace_irq_disable+0x3b/0x140 [ 1813.455593][ T694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.455603][ T694] ? clear_bhb_loop+0x70/0xc0 [ 1813.455616][ T694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.455626][ T694] RIP: 0033:0x7ff7a3f9f559 [ 1813.455637][ T694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.455646][ T694] RSP: 002b:00007ff7a4db1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1813.455666][ T694] RAX: ffffffffffffffda RBX: 00007ff7a4226090 RCX: 00007ff7a3f9f559 [ 1813.455674][ T694] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 1813.455680][ T694] RBP: 00007ff7a4db1090 R08: 0000200000000000 R09: 0000000000000000 [ 1813.455688][ T694] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1813.455698][ T694] R13: 00007ff7a4226128 R14: 00007ff7a4226090 R15: 00007ff7a434fa48 [ 1813.455726][ T694] [ 1813.488119][T18068] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1813.488275][T26664] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1813.656905][T18068] usb 2-1: Using ep0 maxpacket: 8 [ 1813.659437][T18068] usb 2-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 1813.659648][T26664] usb 5-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1813.661985][T18068] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1813.662009][T18068] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1813.662028][T18068] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1813.662048][T18068] usb 2-1: config 250 has no interface number 0 [ 1813.662134][T18068] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1813.662158][T18068] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1813.662181][T18068] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1813.662205][T18068] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1813.662248][T18068] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1813.662274][T18068] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1813.680905][T26664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.680932][T26664] usb 5-1: Product: syz [ 1813.680945][T26664] usb 5-1: Manufacturer: syz [ 1813.680959][T26664] usb 5-1: SerialNumber: syz [ 1813.690680][T18068] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1813.690707][T18068] usb 2-1: Product: syz [ 1813.690721][T18068] usb 2-1: SerialNumber: syz [ 1813.725737][T26664] usb 5-1: config 0 descriptor?? [ 1813.767935][T18068] hub 2-1:250.228: bad descriptor, ignoring hub [ 1813.767962][T18068] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1813.881318][T26664] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1813.884883][T26664] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1813.911330][T26664] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1813.911383][T26664] usb 5-1: media controller created [ 1813.951431][T18068] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 57 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1813.976167][T26664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1814.013106][ T690] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1814.054253][ T690] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8388'. [ 1814.104941][T26664] DVB: Unable to find symbol mt352_attach() [ 1814.199699][T26664] DVB: Unable to find symbol nxt6000_attach() [ 1814.199717][T26664] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1814.229310][T26664] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input172 [ 1814.242973][T26664] dvb-usb: schedule remote query interval to 1000 msecs. [ 1814.242997][T26664] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1814.243012][T26664] dvb-usb: bulk message failed: -22 (7/0) [ 1814.243026][T26664] dvb-usb: bulk message failed: -22 (7/0) [ 1814.291861][T26664] usb 5-1: USB disconnect, device number 92 [ 1814.565323][T26664] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1814.620755][ T703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.693140][ T703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.958085][T25325] usb 2-1: USB disconnect, device number 57 [ 1815.018839][T25325] usblp0: removed [ 1815.019337][ T711] veth0: entered promiscuous mode [ 1815.050502][ T711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8394'. [ 1815.059955][ T711] veth0 (unregistering): left promiscuous mode [ 1815.127741][ T29] audit: type=1400 audit(1793007081.878:19140): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=712 comm="syz.2.8393" [ 1815.787838][T26664] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1815.938364][T26664] usb 2-1: Using ep0 maxpacket: 16 [ 1815.939431][T26664] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1815.941190][T26664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.941220][T26664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.941240][T26664] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1815.941277][T26664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.969593][T26664] usb 2-1: config 0 descriptor?? [ 1816.481601][T26664] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00B5/input/input173 [ 1816.494074][T26664] microsoft 0003:045E:07DA.00B5: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1816.755043][ T5691] usb 2-1: USB disconnect, device number 58 [ 1816.777114][T26664] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1816.929457][T26664] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1816.929498][T26664] usb 4-1: too many configurations: 102, using maximum allowed: 8 [ 1816.932636][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1816.932661][T26664] usb 4-1: config 1 has no interface number 0 [ 1816.934424][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1816.934447][T26664] usb 4-1: config 1 has no interface number 0 [ 1816.993244][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1816.993271][T26664] usb 4-1: config 1 has no interface number 0 [ 1816.996563][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1816.996588][T26664] usb 4-1: config 1 has no interface number 0 [ 1817.030544][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1817.030570][T26664] usb 4-1: config 1 has no interface number 0 [ 1817.056215][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1817.056243][T26664] usb 4-1: config 1 has no interface number 0 [ 1817.067223][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1817.067248][T26664] usb 4-1: config 1 has no interface number 0 [ 1817.069025][T26664] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1817.069048][T26664] usb 4-1: config 1 has no interface number 0 [ 1817.089662][T26664] usb 4-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 1817.089687][T26664] usb 4-1: Product: syz [ 1817.089702][T26664] usb 4-1: Manufacturer: syz [ 1817.090513][T26664] usb 4-1: SerialNumber: syz [ 1817.129587][ T736] loop2: detected capacity change from 0 to 7 [ 1817.134267][ T736] Dev loop2: unable to read RDB block 7 [ 1817.134307][ T736] loop2: unable to read partition table [ 1817.135137][ T736] loop2: partition table beyond EOD, truncated [ 1817.135151][ T736] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1817.172063][T26664] usb 4-1: 3:0 : does not exist [ 1817.172077][T26664] usb 4-1: 3:0 : does not exist [ 1817.256932][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1817.395555][T26664] usb 4-1: USB disconnect, device number 41 [ 1818.132742][ T29] audit: type=1400 audit(1793007084.878:19141): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=750 comm="syz.0.8408" [ 1819.035392][ T760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1819.035412][ T760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1819.439628][ T762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.439950][ T762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.482077][ T762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.498074][ T762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.575467][ T762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.576119][ T762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.007452][ T5691] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1820.162213][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 1820.175929][ T5691] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1820.177375][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.177392][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.177404][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1820.177426][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.239959][ T5691] usb 4-1: config 0 descriptor?? [ 1820.743164][ T5691] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00B6/input/input174 [ 1820.767983][ T5691] microsoft 0003:045E:07DA.00B6: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1820.937756][T25325] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1820.970611][ T776] netlink: 'syz.4.8417': attribute type 64 has an invalid length. [ 1821.083439][ T5691] usb 4-1: USB disconnect, device number 42 [ 1821.094403][T25325] usb 2-1: Using ep0 maxpacket: 32 [ 1821.095255][T25325] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1821.117716][T25325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.117753][T25325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.117788][T25325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.121839][T25325] usb 2-1: config 0 descriptor?? [ 1821.163616][T25325] hub 2-1:0.0: USB hub found [ 1821.327837][T25325] hub 2-1:0.0: 1 port detected [ 1821.427994][T27517] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1821.534401][ T765] netlink: 'syz.1.8414': attribute type 10 has an invalid length. [ 1821.555500][T25325] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1821.571874][T25325] usbhid 2-1:0.0: can't add hid device: -71 [ 1821.571945][T25325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1821.578335][T27517] usb 3-1: Using ep0 maxpacket: 16 [ 1821.579177][T27517] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1821.612342][T25325] usb 2-1: USB disconnect, device number 59 [ 1821.632386][T27517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.632415][T27517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.632427][T27517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1821.632451][T27517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.698490][T27517] usb 3-1: config 0 descriptor?? [ 1821.907765][ T793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.909284][ T793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.319154][ T794] kvm: pic: non byte write [ 1822.384970][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1823.112319][ T804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8424'. [ 1823.112343][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8424'. [ 1823.883835][ T821] FAULT_INJECTION: forcing a failure. [ 1823.883835][ T821] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.883976][ T821] CPU: 1 UID: 0 PID: 821 Comm: syz.3.8428 Tainted: G L syzkaller #0 PREEMPT(full) [ 1823.883996][ T821] Tainted: [L]=SOFTLOCKUP [ 1823.884003][ T821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1823.884015][ T821] Call Trace: [ 1823.884024][ T821] [ 1823.884032][ T821] dump_stack_lvl+0xe8/0x150 [ 1823.884067][ T821] should_fail_ex+0x410/0x560 [ 1823.884091][ T821] should_failslab+0xa8/0x100 [ 1823.884108][ T821] __kvmalloc_node_noprof+0x171/0x820 [ 1823.884122][ T821] ? hashlimit_pernet+0x23/0x240 [ 1823.884237][ T821] ? htable_create+0x100/0x810 [ 1823.884250][ T821] ? htable_create+0x100/0x810 [ 1823.884264][ T821] htable_create+0x100/0x810 [ 1823.884280][ T821] hashlimit_mt_check_common+0x6f2/0xa70 [ 1823.884302][ T821] hashlimit_mt_check_v1+0x236/0x380 [ 1823.884322][ T821] ? rcu_is_watching+0x16/0xb0 [ 1823.884351][ T821] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 1823.884382][ T821] ? xt_find_match+0x213/0x260 [ 1823.884429][ T821] xt_check_match+0x602/0xce0 [ 1823.884443][ T821] ? __pfx_xt_check_match+0x10/0x10 [ 1823.884462][ T821] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1823.884499][ T821] ? xt_find_match+0x213/0x260 [ 1823.884535][ T821] translate_table+0x160e/0x2110 [ 1823.884554][ T821] ? __lock_acquire+0x747/0x2de0 [ 1823.884580][ T821] ? __pfx_translate_table+0x10/0x10 [ 1823.884595][ T821] ? lock_acquire+0x115/0x350 [ 1823.884635][ T821] ? _copy_from_user+0x94/0xb0 [ 1823.884663][ T821] do_ip6t_set_ctl+0xa5c/0xe30 [ 1823.884689][ T821] ? rcu_is_watching+0x16/0xb0 [ 1823.884726][ T821] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1823.884769][ T821] ? __mutex_unlock_slowpath+0x731/0x900 [ 1823.884805][ T821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1823.884841][ T821] nf_setsockopt+0x26f/0x290 [ 1823.884858][ T821] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1823.884872][ T821] do_sock_setsockopt+0x17c/0x1b0 [ 1823.884889][ T821] __x64_sys_setsockopt+0x13d/0x1b0 [ 1823.884914][ T821] do_syscall_64+0x166/0x520 [ 1823.884940][ T821] ? trace_irq_disable+0x3b/0x140 [ 1823.884962][ T821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.884980][ T821] ? clear_bhb_loop+0x70/0xc0 [ 1823.885002][ T821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.885019][ T821] RIP: 0033:0x7ff7a3f9f559 [ 1823.885036][ T821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.885052][ T821] RSP: 002b:00007ff7a4dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1823.885072][ T821] RAX: ffffffffffffffda RBX: 00007ff7a4225fa0 RCX: 00007ff7a3f9f559 [ 1823.885087][ T821] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1823.885098][ T821] RBP: 00007ff7a4dd2090 R08: 0000000000000390 R09: 0000000000000000 [ 1823.885110][ T821] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1823.885122][ T821] R13: 00007ff7a4226038 R14: 00007ff7a4225fa0 R15: 00007ff7a434fa48 [ 1823.885151][ T821] [ 1824.654293][T27517] usbhid 3-1:0.0: can't add hid device: -71 [ 1824.654397][T27517] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1824.686419][T27517] usb 3-1: USB disconnect, device number 88 [ 1824.747497][T26658] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1824.900221][T26658] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1824.900743][T26658] usb 4-1: not running at top speed; connect to a high speed hub [ 1824.900773][T26658] usb 4-1: New USB device found: idVendor=10fd, idProduct=de00, bcdDevice=0.01 [ 1824.902063][T26658] usb 4-1: config 4 has an invalid interface number: 135 but max is 0 [ 1824.902086][T26658] usb 4-1: config 4 has no interface number 0 [ 1824.902112][T26658] usb 4-1: config 4 interface 135 has no altsetting 0 [ 1824.904878][T26658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.904901][T26658] usb 4-1: Product: syz [ 1824.904915][T26658] usb 4-1: Manufacturer: syz [ 1824.904927][T26658] usb 4-1: SerialNumber: syz [ 1825.107467][T27517] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1825.173864][ T827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8429'. [ 1825.263008][ T834] netlink: 'syz.1.8433': attribute type 10 has an invalid length. [ 1825.275376][T27517] usb 3-1: Using ep0 maxpacket: 16 [ 1825.281790][T27517] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1825.293612][T27517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.293643][T27517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.293707][T27517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1825.293748][T27517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.346179][T27517] usb 3-1: config 0 descriptor?? [ 1825.360231][ T834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1825.375458][ T837] netlink: 'syz.1.8433': attribute type 10 has an invalid length. [ 1825.397492][ T834] team0: Port device netdevsim1 added [ 1825.470130][ T837] team0: Port device netdevsim1 removed [ 1825.502956][ T837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1825.530600][ T837] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1825.820111][T27517] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00B7/input/input175 [ 1825.874936][T27517] microsoft 0003:045E:07DA.00B7: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1825.953093][ T841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1826.371461][ T5691] usb 3-1: USB disconnect, device number 89 [ 1827.612428][ T847] ip6t_rt: unknown flags B [ 1827.840967][T26658] go7007 4-1:4.135: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1827.864860][T26658] usb 4-1: USB disconnect, device number 43 [ 1828.514573][ T869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.528963][ T869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.566404][ T867] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1828.566438][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1828.763804][ T873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8438'. [ 1829.977722][T23952] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1830.150155][T23952] usb 4-1: Using ep0 maxpacket: 16 [ 1830.150914][T23952] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1830.151812][T23952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.151829][T23952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.151840][T23952] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1830.151863][T23952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.156433][T23952] usb 4-1: config 0 descriptor?? [ 1830.774833][T23952] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00B8/input/input176 [ 1830.809492][T23952] microsoft 0003:045E:07DA.00B8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1831.061438][T26658] usb 4-1: USB disconnect, device number 44 [ 1831.611328][ T899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8449'. [ 1832.867730][T23952] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1833.056357][T23952] usb 5-1: not running at top speed; connect to a high speed hub [ 1833.056381][T23952] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1833.077949][T23952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.085333][T23952] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1833.085350][T23952] usb 5-1: Product: syz [ 1833.085358][T23952] usb 5-1: Manufacturer: syz [ 1833.123199][T23952] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1833.155807][ T917] fuse: Bad value for 'fd' [ 1833.471800][ T924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8455'. [ 1833.725343][ T924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1835.585956][T23952] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1835.586401][T23952] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1835.586433][T23952] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 1835.667539][T23952] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 1835.723188][T23952] usb 5-1: USB disconnect, device number 93 [ 1835.726031][ T948] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8458'. [ 1835.749993][ T948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.750276][ T948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.824999][ T948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8458'. [ 1836.667476][T26658] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1836.784201][ T29] audit: type=1326 audit(1793007103.528:19142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.1.8466" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1376f9f559 code=0x0 [ 1836.828892][T26658] usb 3-1: Using ep0 maxpacket: 8 [ 1836.829422][ T5691] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1836.830223][T26658] usb 3-1: New USB device found: idVendor=077d, idProduct=627a, bcdDevice=0.10 [ 1836.831400][T26658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1836.831416][T26658] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1836.831429][T26658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1836.834593][T26658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.834617][T26658] usb 3-1: Product: syz [ 1836.834631][T26658] usb 3-1: Manufacturer: syz [ 1836.834643][T26658] usb 3-1: SerialNumber: syz [ 1836.836444][T26658] usb 3-1: config 0 descriptor?? [ 1836.863640][T26658] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 1836.933267][T26658] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22 [ 1836.944245][T26658] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1836.977875][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 1836.978577][ T5691] usb 4-1: New USB device found: idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1836.979708][ T5691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.979754][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1836.979778][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1836.986112][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1836.986140][ T5691] usb 4-1: Product: syz [ 1836.986154][ T5691] usb 4-1: Manufacturer: syz [ 1836.986168][ T5691] usb 4-1: SerialNumber: syz [ 1836.993273][ T5691] usb 4-1: config 0 descriptor?? [ 1837.197486][T26658] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1837.266095][ T5691] rc_core: IR keymap rc-imon-rsc not found [ 1837.266114][ T5691] Registered IR keymap rc-empty [ 1837.284160][ T5691] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1837.313278][ T5691] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input177 [ 1837.358206][T26658] usb 2-1: Using ep0 maxpacket: 32 [ 1837.363148][T26658] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1837.363254][T26658] usb 2-1: New USB device found: idVendor=2040, idProduct=7070, bcdDevice=72.4f [ 1837.364384][T26658] usb 2-1: config 1 has an invalid interface number: 104 but max is 1 [ 1837.364484][T26658] usb 2-1: config 1 has an invalid interface number: 55 but max is 1 [ 1837.364496][T26658] usb 2-1: config 1 has no interface number 0 [ 1837.364505][T26658] usb 2-1: config 1 has no interface number 1 [ 1837.364539][T26658] usb 2-1: config 1 interface 55 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1837.364551][T26658] usb 2-1: config 1 interface 55 altsetting 2 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1837.364564][T26658] usb 2-1: config 1 interface 55 altsetting 2 endpoint 0x1 has invalid maxpacket 15584, setting to 1024 [ 1837.364578][T26658] usb 2-1: config 1 interface 55 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1837.364590][T26658] usb 2-1: config 1 interface 55 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1837.364641][T26658] usb 2-1: config 1 interface 104 has no altsetting 0 [ 1837.364650][T26658] usb 2-1: config 1 interface 55 has no altsetting 0 [ 1837.512851][T26658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.512881][T26658] usb 2-1: Product: syz [ 1837.512895][T26658] usb 2-1: Manufacturer: syz [ 1837.512908][T26658] usb 2-1: SerialNumber: syz [ 1837.736919][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1838.086642][T26664] usb 4-1: USB disconnect, device number 45 [ 1838.254261][ T1001] No such timeout policy "syz1" [ 1838.551689][ T1005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8473'. [ 1838.605555][T26664] usb 3-1: USB disconnect, device number 90 [ 1839.325656][ T1024] tipc: Started in network mode [ 1839.325669][ T1024] tipc: Node identity , cluster identity 4711 [ 1839.325681][ T1024] tipc: Failed to set node id, please configure manually [ 1839.325725][ T1024] tipc: Enabling of bearer rejected, failed to enable media [ 1839.447710][T26664] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 1839.603338][T26664] usb 5-1: Invalid ep0 maxpacket: 64 [ 1839.727918][T26664] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 1839.889473][T26664] usb 5-1: Invalid ep0 maxpacket: 64 [ 1839.890314][T26664] usb usb5-port1: attempt power cycle [ 1839.920486][T26658] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 1840.127300][ T1046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8485'. [ 1840.232453][T26658] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1840.239413][T26658] dib0700: firmware download failed at 7 with -71 [ 1840.262019][T26664] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 1840.283986][T26664] usb 5-1: Invalid ep0 maxpacket: 64 [ 1840.311712][T26658] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 1840.330322][T26658] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1840.333746][T26658] dib0700: firmware download failed at 7 with -71 [ 1840.337935][ T5691] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1840.371106][T26658] usb 2-1: USB disconnect, device number 60 [ 1840.417065][T26664] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 1840.439333][T26664] usb 5-1: Invalid ep0 maxpacket: 64 [ 1840.439770][T26664] usb usb5-port1: unable to enumerate USB device [ 1840.493646][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 1840.500639][ T5691] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1840.544711][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.544744][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.544764][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1840.544803][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.592807][ T5691] usb 4-1: config 0 descriptor?? [ 1842.966256][ T1077] kvm: pic: non byte write [ 1843.059875][T23952] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1843.116201][ T5691] usbhid 4-1:0.0: can't add hid device: -71 [ 1843.116266][ T5691] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1843.138977][ T5691] usb 4-1: USB disconnect, device number 46 [ 1843.189339][T23952] usb 2-1: device descriptor read/64, error -71 [ 1843.288502][ T1081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8493'. [ 1843.404153][ T1087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1843.404179][ T1087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1843.437472][T23952] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1843.566846][T23952] usb 2-1: device descriptor read/64, error -71 [ 1843.677823][T23952] usb usb2-port1: attempt power cycle [ 1844.029203][T23952] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1844.065810][T23952] usb 2-1: device descriptor read/8, error -71 [ 1844.306898][T23952] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1844.329078][T23952] usb 2-1: device descriptor read/8, error -71 [ 1844.437185][T23952] usb usb2-port1: unable to enumerate USB device [ 1845.038743][T26658] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1845.198366][T26658] usb 5-1: Using ep0 maxpacket: 16 [ 1845.199061][T26658] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1845.270869][T26658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.270890][T26658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.270902][T26658] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1845.270926][T26658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.298612][T26658] usb 5-1: config 0 descriptor?? [ 1848.372812][T26658] usbhid 5-1:0.0: can't add hid device: -71 [ 1848.372879][T26658] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1848.378564][T26658] usb 5-1: USB disconnect, device number 98 [ 1848.409722][ T1161] x_tables: duplicate entry at hook 3 [ 1848.532821][ T1164] netlink: 'syz.2.8516': attribute type 10 has an invalid length. [ 1848.533567][ T1164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1848.556457][ T1164] team0: Port device netdevsim1 added [ 1848.557458][T18068] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1848.578750][ T5691] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1848.594064][ T1164] netlink: 'syz.2.8516': attribute type 10 has an invalid length. [ 1848.632803][ T1164] team0: Port device netdevsim1 removed [ 1848.645704][ T1164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1848.652109][ T1164] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1848.708250][T18068] usb 4-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=1.00 [ 1848.711378][T18068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.711403][T18068] usb 4-1: Product: syz [ 1848.711417][T18068] usb 4-1: Manufacturer: syz [ 1848.711438][T18068] usb 4-1: SerialNumber: syz [ 1848.755552][ T5691] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1848.766646][ T5691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.766774][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.795714][ T5691] usb 2-1: config 0 descriptor?? [ 1848.815622][ T5691] pwc: Askey VC010 type 2 USB webcam detected. [ 1849.017933][ T1155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8512'. [ 1849.057980][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 1849.058028][ C1] port100 4-1:1.0: NFC: Urb failure (status -71) [ 1849.062338][T18068] port100 4-1:1.0: NFC: Could not get supported command types [ 1849.093010][T18068] usb 4-1: USB disconnect, device number 47 [ 1849.255494][ T5691] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1849.301327][ T5691] pwc: recv_control_msg error -32 req 02 val 2700 [ 1849.302049][ T5691] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1849.304418][ T5691] pwc: recv_control_msg error -32 req 04 val 1000 [ 1849.332260][ T5691] pwc: recv_control_msg error -32 req 04 val 1300 [ 1849.335990][ T5691] pwc: recv_control_msg error -32 req 04 val 1400 [ 1849.342887][ T5691] pwc: recv_control_msg error -32 req 02 val 2000 [ 1849.364549][ T5691] pwc: recv_control_msg error -32 req 02 val 2100 [ 1849.375961][ T5691] pwc: recv_control_msg error -32 req 04 val 1500 [ 1849.385149][ T5691] pwc: recv_control_msg error -32 req 02 val 2500 [ 1849.394220][ T5691] pwc: recv_control_msg error -32 req 02 val 2400 [ 1849.406406][ T5691] pwc: recv_control_msg error -32 req 02 val 2600 [ 1849.669512][ T5691] pwc: recv_control_msg error -71 req 02 val 2800 [ 1849.671983][ T5691] pwc: recv_control_msg error -71 req 04 val 1100 [ 1849.672366][ T5691] pwc: recv_control_msg error -71 req 04 val 1200 [ 1849.676631][ T5691] pwc: Registered as video103. [ 1849.684285][ T5691] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input178 [ 1849.703991][ T5691] usb 2-1: USB disconnect, device number 65 [ 1850.089319][T26664] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1850.160101][T18068] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1850.217015][T26664] usb 3-1: device descriptor read/64, error -71 [ 1850.307502][T18068] usb 5-1: Using ep0 maxpacket: 16 [ 1850.308260][T18068] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1850.310723][T18068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.310755][T18068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.310777][T18068] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1850.310817][T18068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.314657][T18068] usb 5-1: config 0 descriptor?? [ 1850.516857][T26664] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1850.647866][T26664] usb 3-1: device descriptor read/64, error -71 [ 1850.746889][T23952] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1850.764746][T26664] usb usb3-port1: attempt power cycle [ 1850.901960][T23952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1850.902014][T23952] usb 2-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 1850.903295][T23952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.903318][T23952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1850.903377][T23952] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1850.905733][T23952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1850.905758][T23952] usb 2-1: Product: syz [ 1850.905773][T23952] usb 2-1: Manufacturer: syz [ 1850.985437][T23952] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1850.985475][T23952] uvcvideo 2-1:1.0: No valid video chain found. [ 1851.107480][T26664] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1851.128271][T26664] usb 3-1: device descriptor read/8, error -71 [ 1851.366870][T26664] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1851.391236][T26664] usb 3-1: device descriptor read/8, error -71 [ 1851.505938][ T1220] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8532'. [ 1851.522666][T26664] usb usb3-port1: unable to enumerate USB device [ 1851.675719][ T1220] ip6gre3: entered promiscuous mode [ 1851.675997][ T1220] ip6gre3: entered allmulticast mode [ 1852.743412][ T1229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.749014][ T1229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.099403][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.099462][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.182264][T18068] usbhid 5-1:0.0: can't add hid device: -71 [ 1853.182381][T18068] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1853.206946][T26664] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1853.226067][T18068] usb 5-1: USB disconnect, device number 99 [ 1853.388165][T26664] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1853.388921][T26664] usb 3-1: config 0 has no interfaces? [ 1853.393527][T26664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.393551][T26664] usb 3-1: Product: syz [ 1853.393565][T26664] usb 3-1: Manufacturer: syz [ 1853.393579][T26664] usb 3-1: SerialNumber: syz [ 1853.475613][T26664] usb 3-1: config 0 descriptor?? [ 1853.886190][ T1239] ipvlan2: entered allmulticast mode [ 1853.886214][ T1239] virt_wifi0: entered allmulticast mode [ 1853.890610][ T1239] batman_adv: batadv0: Adding interface: ipvlan2 [ 1853.890633][ T1239] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1853.890861][ T1239] batman_adv: batadv0: Interface activated: ipvlan2 [ 1853.902359][ T1239] Cannot find del_set index 2 as target [ 1853.994796][ T5691] usb 2-1: USB disconnect, device number 66 [ 1854.063640][T25325] usb 3-1: USB disconnect, device number 95 [ 1854.450393][ T1253] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8540'. [ 1854.520833][ T1256] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8540'. [ 1854.556752][ C0] [ 1854.559128][ C0] ============================= [ 1854.564015][ C0] [ BUG: Invalid wait context ] [ 1854.568915][ C0] syzkaller #0 Tainted: G L [ 1854.574971][ C0] ----------------------------- [ 1854.579890][ C0] syz.1.8537/1246 is trying to lock: [ 1854.585168][ C0] ffff888031771bc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 1854.594684][ C0] other info that might help us debug this: [ 1854.600567][ C0] context-{2:2} [ 1854.604024][ C0] locks held by syz.1.8537/1246: 4, last CPU#0: [ 1854.610376][ C0] #0: ffff88805560d1a8 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x27f/0xfd0 [ 1854.619691][ C0] #1: ffff888031771b48 (&kvm->arch.xen.xen_lock){+.+.}-{4:4}, at: kvm_xen_vcpu_set_attr+0x4d/0x1230 [ 1854.630559][ C0] #2: ffff888031772118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 1854.640304][ C0] #3: ffff888031772118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 1854.650221][ C0] stack backtrace: [ 1854.653930][ C0] CPU: 0 UID: 0 PID: 1246 Comm: syz.1.8537 Tainted: G L syzkaller #0 PREEMPT(full) [ 1854.664853][ C0] Tainted: [L]=SOFTLOCKUP [ 1854.669164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1854.679209][ C0] Call Trace: [ 1854.682481][ C0] [ 1854.685315][ C0] dump_stack_lvl+0xe8/0x150 [ 1854.689910][ C0] __lock_acquire+0xf5b/0x2de0 [ 1854.694678][ C0] lock_acquire+0x115/0x350 [ 1854.699178][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 1854.704822][ C0] ? xa_load+0x1db/0x210 [ 1854.709060][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 1854.714253][ C0] ? kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 1854.719883][ C0] kvm_xen_set_evtchn_fast+0x208/0x8d0 [ 1854.725371][ C0] ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0 [ 1854.731009][ C0] xen_timer_callback+0x109/0x220 [ 1854.736029][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 1854.741570][ C0] __hrtimer_run_queues+0x371/0xa10 [ 1854.746780][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 1854.751749][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1854.757743][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1854.763380][ C0] [ 1854.766314][ C0] [ 1854.769235][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1854.775220][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1854.781630][ C0] Code: f7 e8 5d 40 a2 f5 f7 c3 00 02 00 00 74 05 e8 30 d7 ce f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 39 93 f5 65 48 8b 05 dc 40 bc 08 48 85 c0 74 18 5b 41 5e c3 [ 1854.801230][ C0] RSP: 0018:ffffc90006def3e8 EFLAGS: 00000206 [ 1854.807295][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 1854.815286][ C0] RDX: 0000000000000007 RSI: ffffffff8e69a4ba RDI: 0000000000000001 [ 1854.823251][ C0] RBP: ffffc90006def528 R08: ffffffff919cf7bf R09: 1ffffffff2339ef7 [ 1854.831215][ C0] R10: dffffc0000000000 R11: fffffbfff2339ef8 R12: 000001afca71678f [ 1854.839178][ C0] R13: ffff88805560e638 R14: ffff8880b8228600 R15: dffffc0000000000 [ 1854.847160][ C0] kvm_xen_start_timer+0x37f/0x5f0 [ 1854.852298][ C0] ? __pfx_kvm_xen_start_timer+0x10/0x10 [ 1854.857945][ C0] ? lock_acquire+0x115/0x350 [ 1854.862623][ C0] ? hrtimer_try_to_cancel+0x1f7/0x680 [ 1854.868078][ C0] kvm_xen_vcpu_set_attr+0xb29/0x1230 [ 1854.873457][ C0] ? kvm_xen_vcpu_set_attr+0x8e/0x1230 [ 1854.878923][ C0] kvm_arch_vcpu_ioctl+0x148b/0x23a0 [ 1854.884215][ C0] ? lock_acquire+0x115/0x350 [ 1854.888889][ C0] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1854.894527][ C0] ? lock_acquire+0x115/0x350 [ 1854.899208][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1854.904406][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1854.909689][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1854.914919][ C0] ? kernel_text_address+0xa5/0xe0 [ 1854.920055][ C0] ? __kernel_text_address+0xd/0x30 [ 1854.925274][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1854.930913][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1854.937067][ C0] ? arch_stack_walk+0xfb/0x150 [ 1854.941932][ C0] ? stack_trace_save+0xa9/0x100 [ 1854.946876][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1854.952261][ C0] ? kasan_save_track+0x4f/0x80 [ 1854.957121][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 1854.962582][ C0] ? __lock_acquire+0x747/0x2de0 [ 1854.967521][ C0] ? kfree+0x1c5/0x650 [ 1854.971589][ C0] ? __se_sys_ioctl+0x47/0x170 [ 1854.976350][ C0] ? do_syscall_64+0x166/0x520 [ 1854.981115][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.987180][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 1854.992729][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1854.998624][ C0] ? rcu_is_watching+0x16/0xb0 [ 1855.003402][ C0] ? trace_contention_end+0x3d/0x140 [ 1855.008703][ C0] ? __mutex_lock+0x305/0x15a0 [ 1855.013472][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1855.018754][ C0] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 1855.023601][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1855.028625][ C0] ? do_vfs_ioctl+0x116f/0x1530 [ 1855.033473][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1855.038496][ C0] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1855.043172][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1855.048371][ C0] ? do_futex+0x3e7/0x4e0 [ 1855.052707][ C0] ? __fget_files+0x2a/0x420 [ 1855.057290][ C0] ? __fget_files+0x2a/0x420 [ 1855.061873][ C0] ? __fget_files+0x2a/0x420 [ 1855.066456][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1855.071395][ C0] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1855.076589][ C0] __se_sys_ioctl+0xfc/0x170 [ 1855.081178][ C0] do_syscall_64+0x166/0x520 [ 1855.085767][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.091825][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1855.096500][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.102394][ C0] RIP: 0033:0x7f1376f9f559 [ 1855.106808][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1855.126410][ C0] RSP: 002b:00007f13751f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1855.134818][ C0] RAX: ffffffffffffffda RBX: 00007f1377226090 RCX: 00007f1376f9f559 [ 1855.142786][ C0] RDX: 0000200000000100 RSI: 000000004048aecb RDI: 0000000000000008 [ 1855.150755][ C0] RBP: 00007f1377036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1855.158722][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1855.166687][ C0] R13: 00007f1377226128 R14: 00007f1377226090 R15: 00007f137734fa48 [ 1855.174664][ C0] [ 1855.894761][ T1256] bridge0: left allmulticast mode [ 1855.896014][ T1256] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8540'. [ 1863.336968][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!