last executing test programs: 7.903370655s ago: executing program 4 (id=412): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) r3 = inotify_init() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xa000032a) readv(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_opts(r1, 0x0, 0x5, &(0x7f0000000180)="9d07306083842008944b3e259660e3ef8d2808da157ec32c9fd972a09aecb4f1df477d5211a50a2cb690923519881a9a8357065f6f3ad191de92460f971e5610c94fed904b0fc7d72bf31277724ad0e6d41b55c7ba28ce673f1126ab552a19eaf254ffcb3e1ad72af0e97bb3e044a724ac7223e39898c6217f3a801c60efcb47ecd09fd0e568aedf464d912530fb353475cf7802c5f54979b07ac2d3bb0511fca4a98642f9138cb0fcde726e48b03dc7", 0xb0) keyctl$setperm(0x5, r4, 0x1080420) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'nr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newneigh={0x24, 0x1c, 0x400, 0x70bd28, 0x25dfdbfe, {0x1c, 0x0, 0x0, r5, 0x0, 0x10}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000) keyctl$join(0x1, &(0x7f0000000900)={'syz', 0x3}) pwritev2(r0, &(0x7f0000022e80)=[{&(0x7f0000000240)="8a", 0x1}], 0x1, 0x0, 0x0, 0x0) 7.493461303s ago: executing program 4 (id=413): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) syz_open_dev$sndpcmp(0x0, 0x2, 0x200) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) socket$can_bcm(0x1d, 0x2, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) ftruncate(0xffffffffffffffff, 0x8000000000000000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0xffffffff, 0x21, 0x0, 0x0) 5.939508344s ago: executing program 0 (id=419): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000040)=0x6, 0x4) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x11, @multicast2, 0x4e21, 0x1, 'sed\x00', 0x20, 0x7, 0x29}, 0x2c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x4}, 0x18) 5.939062492s ago: executing program 2 (id=420): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r3, &(0x7f0000002080)=0xfffffffffffffff8, 0x23b) socket$key(0xf, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r8, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) 5.774208212s ago: executing program 1 (id=421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 5.724773421s ago: executing program 0 (id=422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x9, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x6, "00008000"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x74) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3620d79370152cc4", "288f7d849bfe3e48f72c7d08eb25be0ec006f99cf2fc47cb0e036eafe8c73010", "18950d90", "d6c47fdc1b634a92"}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x18, 0x72, 0x101, 0x70bd22, 0x25dfdbfb, {0x7, 0x0, 0xffff}}, 0x18}}, 0x800) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 5.564748919s ago: executing program 4 (id=423): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0xf5, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00100000010400004a"]) 5.319176618s ago: executing program 1 (id=424): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xfffa}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)={0x354, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x622}, @TIPC_NLA_NODE_ID={0xb, 0x3, "d4020589a4ff08"}, @TIPC_NLA_NODE_ID={0x74, 0x3, "b091e941523b2d1b9d4c278979a63474e8afe1d48ea48a2e26cb92d4cddbdec95a9d548f848b173e2f25e1674616e6f88d0c93c97d88e0bbbb2b08dc6aff973b39ac37910e57b83a58e84cbb322b85f880c7e40db33ac070fb21e08725df2fade097c2fbeb4b14ce91843d54f3187360"}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "4fe557f9a68fc566f35bf4222e6b231a55243e3a168205d0ff4ee6dfe51599cb666cbb91c51111b04701805af24181ac07f1eb7f0056cd619e12dd2750ec0b2e5eb22a2920079e9e7927620f865882c5dfdcb0a49f64be45395c0d8427c62c6f82d15fdd9b899a533708e48d9de5af7f444f9652475644fe8c80b4c642142f31f821199308ffbf2cbc0e9e3b4ca97cd52d5bcd4ab58430511d5c"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x822}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff7899}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa68}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x157c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x69}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc632}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe59}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x354}}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e24, 0x2, @mcast1={0xff, 0x7}, 0x800003ff}}, {{0xa, 0x4e26, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0xeb2}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000740)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 5.263410683s ago: executing program 4 (id=425): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x630e, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8010000190001000076214a951089cd107156e4dbaacec7000000fddbdf257f000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000001020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000160000000000000000fe07000000000000000000007f000001000000000000000000000000000000003200000000000000fc0000000000000000000000000000000000800003000000000000000000000000000000fe8000000000000000000000000000aa000004d46c00000000000000e0000001000000000000000000000000030000000500"/368], 0x1b8}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000880)={"d96e37e6", 0x17, 0x81, 0x4, 0xfffffffb, 0x0, "742f22409e83b3c8996917529d9d72", "35907f28", "8160a2cc", "e85f1bf5", ["61ef964c266379023e2831bc", "978813b0ef09d3cb17c188bf", "48d5f642665908a067a2f959", "448d518b14e59694de626f42"]}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "a4d1"}]}], {0x14}}, 0x8c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904"], 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000004cb2000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000200000008000340000000000c00014000000000000004000800044000000000140000001000010000000000000000000000000a"], 0xc0}}, 0x0) socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x264c}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "22997c988e05d7b36a6d8967ba5e0126df8d9f5b0f1ce50ef9133b9db0305c37", "6fa12c76762d4a8301609f2eab6c6d8d", {"906e8aad8a25f12efbfcd16775e54ebb", "194c2891420a7f28cfc2815957580658"}}}}}}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r10, &(0x7f0000000280)=[{&(0x7f0000000500)=""/196, 0xc4}], 0x1, 0x200000, 0x1) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="7400000010000104fcffffff0000000000000000cf8ba90e7586ef73eff8ca2d379568b6bca72fac9b5840", @ANYRES32=0x0, @ANYRESOCT=r8], 0x74}, 0x1, 0x0, 0x0, 0x40084}, 0x20004090) 4.918209428s ago: executing program 2 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000011404"], 0x50) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000002f80)={0x28000000, 0x9}) r4 = dup(r2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x6, 0x521140) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000180)={0x3, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r6, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="e0abd4"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r9], 0x48}}, 0x4) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 4.851451116s ago: executing program 1 (id=427): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000011c0)=""/60) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000580)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702711e629acda76933ddd0c20574eb4d", 0x18}, {&(0x7f00000002c0)="c27d037369597e", 0x7}], 0x3, 0xfffffffe, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x5, @loopback, 0x2}]}, &(0x7f0000000180)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x42) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000008000000bf00400068bdb443caa2abd13d511971a6cd02a70a5a2fcacad24b49cf6a5d2739a4025a533920fb39dfa3e4be21e36207b15e5c9928d197ec3ea7835de2f8dcb81f92d6d538cd9396a97bc2e02c179e9e2fe83a4e20426b777e46e1701ba17956229f7b717b7370b87fd2051c8be4854af7a6c1e0f4285da6e6bbd3e84500086ee4c650febe88de332640d9b03c5ebcd5a5299c3f67"]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) mkdir(0x0, 0xf6ff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000001000)=ANY=[@ANYRESDEC=0x0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) 4.770407073s ago: executing program 3 (id=428): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet(0x2, 0x800, 0xfffff9c0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$unix(r1, &(0x7f0000000140)="4ba1943c821808dd42b6299e57a62c068ffcea92560e0cd5f9b17fe7c3702a7096e84a7411ac06ea2532ba2d88a4ddfec5767b8422f7ab9e407276bfdfa5c04b8a51a31b8a8018056923df949744b1fae7433fec24387c34ff2137f17422b57db48a750182c0963f0d8c5116ba2dd3598c9017e1da50dd6a904751b986aecef69a3457a634cdbe6e82fef2d5ef3622892c2cea46e3f2ce0d6884bcf93a6b22e5c57f14ce2745bc3b756d1fb4d6fe850331609eed89f1cf1c1541194a465c8cacc58395dcabe52649e91b37ce9af9e2416c33aa6b857839e8e0e9492faae77b3b510f2a9375", 0xe5, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, @empty, @empty, 0x0, 0x40, 0x0, 0x2}}) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x22, 0xa, 0x1, "3258c54601cccfcf1e009200090000000000001300deffffff00000000b28d00", 0x32314d59}) 4.405900761s ago: executing program 3 (id=429): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) close(r0) 4.329393663s ago: executing program 2 (id=430): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd012000002"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@getsadinfo={0x54, 0x23, 0x100, 0x70bd27, 0x25dfdbfb, 0x0, [@lifetime_val={0x24, 0x9, {0x4ce, 0xfffffffffffffffa, 0x2}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e23, @in=@local}}]}, 0x54}}, 0x880) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x82b, 0x4) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.027547972s ago: executing program 3 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001f40)={0x1c, r1, 0x211, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 3.965810101s ago: executing program 2 (id=432): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "24a60c4617ae2f78fd429dfb11b5ee1e"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "80f0f7befbcbfe615aa05eee915a100a"}]}}]}, 0x5c}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032a007000ffdbdf250a000000000000001e0001000500160087"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xa, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000012c0)=0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000006"], 0x38}}, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) 3.177644699s ago: executing program 3 (id=433): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0xd, 0xffffffffffffffff}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r4, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r7, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r6, 0xff08, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "8cda6546d2f563ba", "66b43257a40da56982c19217e44e1a1c", "4d8bbf0e", "dcc5110b06dc61f0"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", "0202004d", "5460b4c38a406346"}, 0x1f) syz_emit_ethernet(0x11, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@generic={0x8c4fe011e2c484de, "8eec93"}}}, 0x0) 3.141838391s ago: executing program 1 (id=434): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000100003042cbd7000fcdbdf2500007400", @ANYRES32=r2, @ANYBLOB="00000000104000001c0012800b00010062726964676500030c0002800600270001"], 0x7c}}, 0x0) 3.071594997s ago: executing program 0 (id=435): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1000253cf5ffffff", @ANYRES64=0x3], 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x9, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1fe, 0x1, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x100000000, r2}) 2.887611589s ago: executing program 1 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x40000000015, 0x5, 0xfffffff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_secret(0x0) memfd_secret(0x80000) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x101, 0x0, {0x400e802, 0x1, 0x9, 0xfff}}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r7], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x30, r8, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8894}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x0) 2.83057031s ago: executing program 0 (id=437): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x8, @empty, 0x5}, 0x1c, 0x0}}], 0x1, 0xff00) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'veth1_vlan\x00'}}, 0x1e) 2.551604896s ago: executing program 0 (id=438): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x34, 0x2, 0x0, "d52b3d000000fa44966262631e8ac11e0000000000000000000000000100"}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x760b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffff, 0x9, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x18, &(0x7f0000000240)={0x40, 0x23, 0x45, {0x45, 0x21, "61639c545d2ce9daa7602655267cdd9118690800000051939610aab1b0d2c51a0f7925ba09f4d51207b2909bceb485a8995d91250000002000"/67}}, 0x0, 0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xbd, 0x7, 0x49}]}, 0x8) 2.291653056s ago: executing program 1 (id=439): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x4040840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/26) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa007, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, 0x0, 0x0) r10 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x4, 0x3, 0x288, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x56, 0x0, r6, 0x0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001540)="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", 0x109e}], 0x1, &(0x7f0000000440)=[{0x60, 0xff, 0x5, "093f0e70f569c8c1eac7a4db12432f265675450e05c9bd3399c0b31fa4dcfc5d5bfce633da93c9788c653c0e4831ff06fc819c4d272de2125970528a8e50a38354f2e1fbc5e3767c23c24b5191ae83433eab"}], 0x60}, 0x0, 0xbf0c495888dbccb3}) io_uring_enter(r10, 0x40f9, 0x217, 0xa5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, 0x0, 0x0) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r13, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="2030681e8bce86e70e11000000097b1c6ec115e686d434dbf598e91c1b3f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd32) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', './file0', [{0x20, ':+%(1(*+^'}]}, 0x15) 1.98550868s ago: executing program 2 (id=440): socket$packet(0x11, 0x3, 0x300) socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000100)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.829306351s ago: executing program 4 (id=441): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read(r0, &(0x7f0000000000)=""/7, 0xfffffffffffffea8) 1.399323339s ago: executing program 4 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r4, 0x8}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r6, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x80800) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x440}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "1c"}, @local=@item_4={0x3, 0x2, 0x0, "b7e31a19"}]}}, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1.044920176s ago: executing program 3 (id=443): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x34, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2082800, 0x6, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80000) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x20, &(0x7f0000000140)={'nicvf0\x00', @ifru_mtu=0x8}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score_adj\x00') writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="2c000180"], 0x44}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x35c, 0xffffffff, 0x1cc, 0x0, 0x1cc, 0xfeffffff, 0xffffffff, 0x294, 0x294, 0x294, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x3b}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x1000001ff], [0x0, 0xff000000], 'sit0\x00', 'veth0_to_batadv\x00', {}, {}, 0x3b, 0x0, 0x4, 0x2}, 0x0, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x51b2, 0x200000}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="fb1e544e05a6cc8bd76c38b5e2d8d95a3e3eada6b445ac20fcccbf37f015f6c10a487373bd5ca6f20d55306ec4d6e427d545940a8d229ba62f184f744d7308cef8f4c6bb928dadeca866fd74ad3e8596ba409c72ddc3648149190fcdf4ee103aaf0af7b9670c8cb8e7d7fd7bf627a0ba6e3e0385a83f31d74f549098278f871335d3a54721b74b3cb7f7a31e67fa1b53e94ad4361d3aae141bea8556d3d1c71b62f7", 0xa2, 0x40050, &(0x7f0000000340)={0xa, 0x4e22, 0x3, @mcast1, 0x7ff}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x2e52, 0xf, 0x8518, 0x5, 0x8, 0x3, 0x4}, 0x1c) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x1008, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x800, 0x8) 110.69666ms ago: executing program 2 (id=444): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xefff, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 39.407583ms ago: executing program 0 (id=445): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000011c0)=""/60) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000580)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702711e629acda76933ddd0c20574eb4d", 0x18}, {&(0x7f00000002c0)="c27d037369597e", 0x7}], 0x3, 0xfffffffe, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x5, @loopback, 0x2}]}, &(0x7f0000000180)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x42) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000008000000bf00400068bdb443caa2abd13d511971a6cd02a70a5a2fcacad24b49cf6a5d2739a4025a533920fb39dfa3e4be21e36207b15e5c9928d197ec3ea7835de2f8dcb81f92d6d538cd9396a97bc2e02c179e9e2fe83a4e20426b777e46e1701ba17956229f7b717b7370b87fd2051c8be4854af7a6c1e0f4285da6e6bbd3e84500086ee4c650febe88de332640d9b03c5ebcd5a5299c3f67"]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) mkdir(0x0, 0xf6ff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000001000)=ANY=[@ANYRESDEC=0x0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) 0s ago: executing program 3 (id=446): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xfffffffb}, &(0x7f0000000280)=0x8) r1 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x218240, 0x198) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x40000, 0x40610021, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5}}, 0x50) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xdffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0xfffffffd, r4, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x1000000, 0x0, 0x0, 0x0, 0xfffff9, 0x800005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000007feffffff00000000"]}, 0xe0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x101000) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000040)={0xc5, 0x0, r6}) sendto$inet6(r5, 0x0, 0x0, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @empty, 0x5}, 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0)=@int=0xc1e, 0x4) kernel console output (not intermixed with test programs): .210383][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 122.245215][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.296991][ T9] usb 4-1: config 0 descriptor?? [ 122.363427][ T6243] sctp: [Deprecated]: syz.2.95 (pid 6243) Use of int in maxseg socket option. [ 122.363427][ T6243] Use struct sctp_assoc_value instead [ 122.440902][ T6243] process 'syz.2.95' launched './file0' with NULL argv: empty string added [ 122.809193][ T6254] FAULT_INJECTION: forcing a failure. [ 122.809193][ T6254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.811896][ T9] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 122.831961][ T6253] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 122.850200][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.2.96 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 122.850229][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.850241][ T6254] Call Trace: [ 122.850248][ T6254] [ 122.850256][ T6254] dump_stack_lvl+0x189/0x250 [ 122.850289][ T6254] ? __pfx____ratelimit+0x10/0x10 [ 122.850315][ T6254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.850340][ T6254] ? __pfx__printk+0x10/0x10 [ 122.850362][ T6254] ? __might_fault+0xb0/0x130 [ 122.850387][ T6254] should_fail_ex+0x414/0x560 [ 122.850419][ T6254] _copy_from_user+0x2d/0xb0 [ 122.850443][ T6254] move_addr_to_kernel+0x7e/0x160 [ 122.850471][ T6254] get_compat_msghdr+0x3bd/0x4a0 [ 122.850500][ T6254] ? __pfx_get_compat_msghdr+0x10/0x10 [ 122.850535][ T6254] ___sys_sendmsg+0x193/0x2a0 [ 122.850559][ T6254] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.850617][ T6254] ? __fget_files+0x2a/0x420 [ 122.850637][ T6254] ? __fget_files+0x3a0/0x420 [ 122.850668][ T6254] __sys_sendmmsg+0x28e/0x430 [ 122.850695][ T6254] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.850727][ T6254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.850771][ T6254] ? ksys_write+0x22a/0x250 [ 122.850808][ T6254] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 122.850834][ T6254] __do_fast_syscall_32+0xb6/0x2b0 [ 122.850861][ T6254] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.850890][ T6254] do_fast_syscall_32+0x34/0x80 [ 122.850916][ T6254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.850937][ T6254] RIP: 0023:0xf7fa4539 [ 122.850954][ T6254] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 122.850969][ T6254] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 122.850989][ T6254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800056c0 [ 122.851001][ T6254] RDX: 0000000000000001 RSI: 0000000020000082 RDI: 0000000000000000 [ 122.851012][ T6254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.851022][ T6254] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.851032][ T6254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.851059][ T6254] [ 122.903415][ T9] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 123.587942][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.640752][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.950798][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 123.980941][ T9] usb 1-1: config index 0 descriptor too short (expected 60030, got 77) [ 123.989356][ T9] usb 1-1: config 189 has too many interfaces: 78, using maximum allowed: 32 [ 124.010722][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.029973][ T9] usb 1-1: config 189 has an invalid descriptor of length 147, skipping remainder of the config [ 124.098836][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.126838][ T9] usb 1-1: config 189 has 0 interfaces, different from the descriptor's value: 78 [ 124.158664][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.173435][ T10] usb 5-1: Product: syz [ 124.173910][ T3082] usb 4-1: USB disconnect, device number 7 [ 124.177736][ T10] usb 5-1: Manufacturer: syz [ 124.540167][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 124.586409][ T10] usb 5-1: SerialNumber: syz [ 124.597362][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.617069][ T10] usb 5-1: config 0 descriptor?? [ 124.630068][ T9] usb 1-1: Product: syz [ 124.634270][ T9] usb 1-1: Manufacturer: syz [ 124.663964][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.682690][ T9] usb 1-1: SerialNumber: syz [ 124.708277][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 125.285614][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 125.544487][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 125.554551][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 125.735094][ T6264] syz.4.99 uses obsolete (PF_INET,SOCK_PACKET) [ 126.170231][ T6292] netlink: 52 bytes leftover after parsing attributes in process `syz.3.108'. [ 126.270134][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.338018][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 126.346827][ T10] em28xx 5-1:0.0: board has no eeprom [ 126.432347][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 126.470923][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 126.499071][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 126.544262][ T5891] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 126.616849][ T10] usb 5-1: USB disconnect, device number 4 [ 126.626791][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.671591][ T880] em28xx 5-1:0.0: Binding DVB extension [ 126.678298][ T5891] usb 2-1: Product: syz [ 126.716181][ T5891] usb 2-1: Manufacturer: syz [ 126.721234][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 126.730265][ T5891] usb 2-1: SerialNumber: syz [ 126.777891][ T5891] usb 2-1: config 0 descriptor?? [ 126.868330][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057f12c00: rx timeout, send abort [ 127.006242][ T6294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.007715][ T9] usb 1-1: USB disconnect, device number 4 [ 127.013737][ T6294] IPv6: NLM_F_CREATE should be set when creating new route [ 127.027369][ T5891] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 127.166285][ T880] em28xx 5-1:0.0: Registering input extension [ 127.318512][ T10] em28xx 5-1:0.0: Closing input extension [ 127.368915][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057f13000: rx timeout, send abort [ 127.377802][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057f12c00: abort rx timeout. Force session deactivation [ 127.394194][ T10] em28xx 5-1:0.0: Freeing device [ 127.783692][ T5891] usb write operation failed. (-71) [ 127.806365][ T5891] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.839379][ T5891] dvbdev: DVB: registering new adapter (Terratec H7) [ 127.863921][ T5891] usb 2-1: media controller created [ 127.877038][ T5891] usb read operation failed. (-71) [ 127.877399][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057f13000: abort rx timeout. Force session deactivation [ 127.883954][ T5891] usb write operation failed. (-71) [ 127.947663][ T5891] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 127.962400][ T10] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 128.004624][ T5891] usb 2-1: USB disconnect, device number 5 [ 128.142717][ T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.184283][ T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 128.229368][ T10] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.293196][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.311378][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 128.324604][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.353441][ T10] usb 5-1: config 0 descriptor?? [ 128.359207][ T6305] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.406107][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.690213][ T5893] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.807056][ T10] hid (null): invalid report_size -938219617 [ 128.821532][ T10] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 128.852981][ T5893] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 128.861196][ T5893] usb 3-1: config 0 has no interface number 0 [ 128.867548][ T5893] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 128.877830][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 128.887453][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.898441][ T5893] usb 3-1: config 0 descriptor?? [ 128.904683][ T6323] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.915458][ T5893] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 128.950130][ T3082] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.014353][ T5893] usb 5-1: USB disconnect, device number 5 [ 129.122508][ T3082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.134037][ T3082] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.140094][ T10] usb 3-1: USB disconnect, device number 5 [ 129.149360][ T3082] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 129.171615][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.190554][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 129.191502][ T3082] usb 4-1: config 0 descriptor?? [ 129.361924][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.371582][ T9] usb 1-1: config 179 has no interface number 0 [ 129.377932][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 129.393743][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 129.405156][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 129.419857][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.434119][ T9] usb 1-1: config 179 interface 65 has no altsetting 0 [ 129.441138][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 129.450247][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.464619][ T6331] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 129.480438][ T6331] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 129.505489][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 129.604505][ T5188] input input7: unable to receive magic message: -110 [ 129.653826][ T3082] maltron 0003:058F:9410.0005: item fetching failed at offset 0/7 [ 129.684969][ T3082] maltron 0003:058F:9410.0005: probe with driver maltron failed with error -22 [ 129.720078][ T5188] input input7: unable to receive magic message: -32 [ 129.791411][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.824822][ T5188] input input7: unable to receive magic message: -32 [ 129.890225][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.939487][ T5945] input input7: unable to receive magic message: -32 [ 130.282108][ T5188] input input7: unable to receive magic message: -32 [ 130.338579][ T5188] input input7: unable to receive magic message: -32 [ 130.353128][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 130.353148][ T30] audit: type=1326 audit(1749037039.078:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 130.390267][ T6345] FAULT_INJECTION: forcing a failure. [ 130.390267][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 130.409173][ T5872] usb 1-1: USB disconnect, device number 6 [ 130.409206][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.440121][ T3082] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.451071][ T5872] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 130.470120][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.2.126 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 130.470148][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.470159][ T6345] Call Trace: [ 130.470167][ T6345] [ 130.470176][ T6345] dump_stack_lvl+0x189/0x250 [ 130.470210][ T6345] ? __pfx____ratelimit+0x10/0x10 [ 130.470239][ T6345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.470268][ T6345] ? __pfx__printk+0x10/0x10 [ 130.470296][ T6345] ? __pfx___might_resched+0x10/0x10 [ 130.470314][ T6345] ? fs_reclaim_acquire+0x7d/0x100 [ 130.470342][ T6345] should_fail_ex+0x414/0x560 [ 130.470376][ T6345] should_failslab+0xa8/0x100 [ 130.470401][ T6345] kmem_cache_alloc_noprof+0x73/0x3c0 [ 130.470420][ T6345] ? audit_log_start+0x126/0x870 [ 130.470446][ T6345] audit_log_start+0x126/0x870 [ 130.470473][ T6345] ? __pfx_audit_log_start+0x10/0x10 [ 130.470499][ T6345] ? migrate_enable+0x29c/0x3c0 [ 130.470525][ T6345] ? __pfx_migrate_enable+0x10/0x10 [ 130.470552][ T6345] audit_seccomp+0x64/0x190 [ 130.470569][ T6345] ? clear_bhb_loop+0x60/0xb0 [ 130.470589][ T6345] ? clear_bhb_loop+0xe/0xb0 [ 130.470613][ T6345] __seccomp_filter+0x9aa/0x1a40 [ 130.470641][ T6345] ? preempt_schedule_thunk+0x16/0x30 [ 130.470667][ T6345] ? __pfx___seccomp_filter+0x10/0x10 [ 130.470685][ T6345] ? __asan_memset+0x22/0x50 [ 130.470713][ T6345] ? signal_setup_done+0x230/0x310 [ 130.470747][ T6345] ? arch_do_signal_or_restart+0x46b/0x750 [ 130.470779][ T6345] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 130.470814][ T6345] ? rcu_is_watching+0x15/0xb0 [ 130.470837][ T6345] ? __secure_computing+0xe2/0x2a0 [ 130.470859][ T6345] syscall_trace_enter+0xaa/0x160 [ 130.470887][ T6345] ? asm_int80_emulation+0x1a/0x20 [ 130.470906][ T6345] do_int80_emulation+0x101/0x390 [ 130.470950][ T6345] ? clear_bhb_loop+0x60/0xb0 [ 130.470969][ T6345] ? clear_bhb_loop+0x60/0xb0 [ 130.470992][ T6345] asm_int80_emulation+0x1a/0x20 [ 130.471011][ T6345] RIP: 0023:0xf7fa4558 [ 130.471028][ T6345] Code: 00 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 <90> 90 90 90 90 90 90 90 b8 ad 00 00 00 cd 80 90 90 90 90 90 90 90 [ 130.471044][ T6345] RSP: 002b:00000000f50c5eb4 EFLAGS: 00000206 ORIG_RAX: 0000000000000077 [ 130.471066][ T6345] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 130.471078][ T6345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.471089][ T6345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.471099][ T6345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.471111][ T6345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.471145][ T6345] [ 130.473526][ T6345] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 130.689864][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.774004][ T30] audit: type=1326 audit(1749037039.078:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 130.799098][ T30] audit: type=1326 audit(1749037039.078:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 130.832841][ T30] audit: type=1326 audit(1749037039.078:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 130.862973][ T30] audit: type=1326 audit(1749037039.078:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 130.898498][ T30] audit: type=1326 audit(1749037039.108:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 130.945633][ T30] audit: type=1326 audit(1749037039.108:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 131.012220][ T3082] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.022781][ T3082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.048282][ T3082] usb 5-1: Product: syz [ 131.060018][ T3082] usb 5-1: Manufacturer: syz [ 131.074321][ T6345] audit: out of memory in audit_log_start [ 131.084567][ T3082] usb 5-1: SerialNumber: syz [ 131.531829][ T30] audit: type=1326 audit(1749037039.108:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 131.578211][ T3082] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.711062][ T5893] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.755498][ T5891] usb 4-1: USB disconnect, device number 8 [ 132.130455][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 132.150792][ T6351] block device autoloading is deprecated and will be removed. [ 132.457381][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.492638][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 132.596103][ T10] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.647189][ T5896] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 132.682801][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 132.751144][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 132.751425][ T5893] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 132.760412][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.760437][ T10] usb 2-1: Product: syz [ 132.760452][ T10] usb 2-1: Manufacturer: syz [ 132.760468][ T10] usb 2-1: SerialNumber: syz [ 132.888073][ T5893] ath9k_htc: Failed to initialize the device [ 132.897719][ T5896] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.913857][ T5896] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.039470][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.046373][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.097644][ T5896] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.146353][ T5893] usb 5-1: ath9k_htc: USB layer deinitialized [ 133.155031][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.428696][ T5896] usb 3-1: usb_control_msg returned -32 [ 133.479475][ T5896] usbtmc 3-1:16.0: can't read capabilities [ 133.500279][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.680233][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 133.715805][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 133.730906][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 133.741969][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.772852][ T9] usb 4-1: Product: syz [ 133.795973][ T5896] usb 5-1: USB disconnect, device number 6 [ 133.831077][ T9] usb 4-1: Manufacturer: syz [ 133.853291][ T9] usb 4-1: SerialNumber: syz [ 133.893596][ T9] usb 4-1: config 0 descriptor?? [ 133.924899][ T6363] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 133.956872][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.005702][ T6372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.134'. [ 134.028628][ T5896] usb 3-1: USB disconnect, device number 6 [ 134.160165][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 134.190225][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 134.230822][ T10] usb 2-1: USB disconnect, device number 6 [ 134.347230][ T9] usb 4-1: USB disconnect, device number 9 [ 134.483338][ T6308] udevd[6308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.110459][ T6399] fuse: Unknown parameter 'Xd(5'Z;`|' [ 135.144464][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 136.350013][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.527296][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 136.596378][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 136.617187][ T6423] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[6423] [ 136.628289][ T9] usb 1-1: config 0 has no interface number 0 [ 136.628345][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 136.650754][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 136.830194][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 136.838379][ T9] usb 1-1: Product: syz [ 136.843227][ T9] usb 1-1: SerialNumber: syz [ 136.890538][ T9] usb 1-1: config 0 descriptor?? [ 137.135501][ T9] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 137.416403][ T9] usb 1-1: USB disconnect, device number 7 [ 138.070067][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.221206][ T10] usb 2-1: device descriptor read/64, error -71 [ 138.336287][ T5832] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.480014][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.533589][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.548078][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.622049][ T10] usb 2-1: device descriptor read/64, error -71 [ 138.678466][ T5832] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 138.711757][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.744387][ T10] usb usb2-port1: attempt power cycle [ 138.826262][ T5832] usb 5-1: config 0 descriptor?? [ 138.899758][ T6445] usb usb8: usbfs: process 6445 (syz.0.154) did not claim interface 0 before use [ 139.181313][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.211912][ T10] usb 2-1: device descriptor read/8, error -71 [ 139.252259][ T6432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.330735][ T5891] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.338517][ T5832] usbhid 5-1:0.0: can't add hid device: -71 [ 139.347920][ T5832] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.366795][ T5832] usb 5-1: USB disconnect, device number 7 [ 139.450003][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.471999][ T10] usb 2-1: device descriptor read/8, error -71 [ 139.564724][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 139.593210][ T5891] usb 4-1: config index 0 descriptor too short (expected 115, got 36) [ 139.604396][ T10] usb usb2-port1: unable to enumerate USB device [ 139.620093][ T5891] usb 4-1: config 119 has too many interfaces: 95, using maximum allowed: 32 [ 139.639299][ T5891] usb 4-1: config 119 has an invalid descriptor of length 111, skipping remainder of the config [ 139.660083][ T5891] usb 4-1: config 119 has 0 interfaces, different from the descriptor's value: 95 [ 139.700362][ T5891] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 139.730383][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.592085][ T5872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.750134][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 141.760581][ T5872] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 141.784671][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.831498][ T5872] usb 3-1: config 0 descriptor?? [ 141.862517][ T5872] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 142.558357][ T6481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.163'. [ 142.716152][ T5891] usb 4-1: string descriptor 0 read error: -71 [ 142.752506][ T5891] usb 4-1: USB disconnect, device number 10 [ 142.820086][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.150074][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 143.158021][ T5893] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 143.166903][ T5893] usb 1-1: config 0 has no interface number 0 [ 143.184945][ T5893] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 143.209609][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'. [ 143.286414][ T5872] gspca_nw80x: reg_w err -71 [ 143.293656][ T5872] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 143.299048][ T6482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.336749][ T5872] usb 3-1: USB disconnect, device number 7 [ 143.357189][ T5893] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 143.369819][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.390313][ T5893] usb 1-1: Product: syz [ 143.398043][ T5893] usb 1-1: Manufacturer: syz [ 143.402782][ T5893] usb 1-1: SerialNumber: syz [ 143.410447][ T5891] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.421407][ T5893] usb 1-1: config 0 descriptor?? [ 143.550973][ T5891] usb 4-1: device descriptor read/64, error -71 [ 143.665372][ T5893] msi2500 1-1:0.246: Registered as swradio24 [ 143.679406][ T5893] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 143.733249][ T5893] usb 1-1: USB disconnect, device number 8 [ 143.807912][ T5891] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 144.000478][ T5891] usb 4-1: device descriptor read/64, error -71 [ 144.120548][ T5891] usb usb4-port1: attempt power cycle [ 144.301480][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.345438][ T6497] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 144.350027][ T5872] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.398780][ T6497] Cannot find set identified by id 0 to match [ 144.461613][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 144.470862][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.484054][ T5891] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 144.495806][ T10] usb 3-1: config 0 has no interfaces? [ 144.516778][ T10] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 144.520162][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 144.527331][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.543588][ T5872] usb 2-1: config 1 has an invalid interface number: 233 but max is 0 [ 144.544329][ T5891] usb 4-1: device descriptor read/8, error -71 [ 144.553824][ T5872] usb 2-1: config 1 has no interface number 0 [ 144.558132][ T10] usb 3-1: Product: syz [ 144.577485][ T5872] usb 2-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 144.587811][ T10] usb 3-1: Manufacturer: syz [ 144.596659][ T10] usb 3-1: SerialNumber: syz [ 144.613617][ T5872] usb 2-1: config 1 interface 233 has no altsetting 0 [ 144.614105][ T10] usb 3-1: config 0 descriptor?? [ 144.659547][ T5872] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 144.689248][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.713499][ T5872] usb 2-1: Product: syz [ 144.717741][ T5872] usb 2-1: Manufacturer: syz [ 144.722977][ T5872] usb 2-1: SerialNumber: syz [ 144.744369][ T6495] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 144.801524][ T5891] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.856611][ T5891] usb 4-1: device descriptor read/8, error -71 [ 144.970260][ T5891] usb usb4-port1: unable to enumerate USB device [ 144.998546][ T5872] imon_raw 2-1:1.233: IR endpoint missing [ 145.000391][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 145.036912][ T5872] usb 2-1: USB disconnect, device number 11 [ 145.097556][ T6511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.170'. [ 145.303289][ T6511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.170'. [ 145.590168][ T5891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.845406][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 145.858024][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.880084][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.903565][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.919630][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 145.929449][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.955131][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.966095][ T5891] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.169051][ T5891] usb 5-1: Manufacturer: syz [ 146.219262][ T5891] usb 5-1: config 0 descriptor?? [ 146.365958][ T6517] capability: warning: `syz.3.173' uses deprecated v2 capabilities in a way that may be insecure [ 146.672390][ T5891] rc_core: IR keymap rc-hauppauge not found [ 146.697851][ T5891] Registered IR keymap rc-empty [ 146.717447][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.771527][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.822209][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 146.823787][ T6517] Cannot find add_set index 1 as target [ 146.857805][ T6519] capability: warning: `syz.3.173' uses 32-bit capabilities (legacy support in use) [ 146.878671][ T5893] psmouse serio2: Failed to reset mouse on : -5 [ 146.891337][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 146.951464][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.020680][ T5832] usb 3-1: USB disconnect, device number 8 [ 147.070867][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.102615][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.160185][ T880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.169581][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.210396][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.246065][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.271408][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.310451][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.321707][ T6530] program syz.2.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.331275][ T880] usb 1-1: Using ep0 maxpacket: 32 [ 147.336863][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.347178][ T6530] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 147.360196][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 147.373910][ T880] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 147.386662][ T5891] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 147.396570][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.404988][ T5891] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 147.425875][ T880] usb 1-1: config 0 descriptor?? [ 147.451447][ T880] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 147.540353][ T6530] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 147.674711][ T6530] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 147.691940][ T6530] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 147.921808][ T5891] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 148.090396][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 148.106252][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 148.138639][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.154377][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.172294][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.205255][ T5891] usb 4-1: Product: syz [ 148.218970][ T5891] usb 4-1: Manufacturer: syz [ 148.227395][ T5891] usb 4-1: SerialNumber: syz [ 148.242699][ T5891] usb 4-1: config 0 descriptor?? [ 148.272768][ T5891] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.307458][ T5891] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 148.410854][ T5872] usb 5-1: USB disconnect, device number 8 [ 148.706801][ T880] gspca_nw80x: reg_w err -71 [ 148.714190][ T880] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 148.760275][ T880] usb 1-1: USB disconnect, device number 9 [ 148.837370][ T6540] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 148.877969][ T5891] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 148.888800][ T5891] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 148.901087][ T6540] Cannot find set identified by id 0 to match [ 149.190032][ T3082] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.249001][ T6544] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.181'. [ 149.374697][ T3082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.410213][ T3082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.469848][ T3082] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 149.479119][ T3082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.489954][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 149.489972][ T30] audit: type=1326 audit(1749037058.178:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 149.521036][ T5891] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 149.541170][ T5891] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 149.563403][ T5891] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 149.590420][ T3082] usb 5-1: config 0 descriptor?? [ 149.594204][ T30] audit: type=1326 audit(1749037058.188:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 149.674720][ T6547] qrtr: Invalid version 75 [ 149.680022][ T30] audit: type=1326 audit(1749037058.188:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 149.753074][ T30] audit: type=1326 audit(1749037058.188:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 149.797088][ T30] audit: type=1326 audit(1749037058.198:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 149.880089][ T30] audit: type=1326 audit(1749037058.298:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 150.025797][ T30] audit: type=1326 audit(1749037058.308:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 150.025849][ T30] audit: type=1326 audit(1749037058.308:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 150.025892][ T30] audit: type=1326 audit(1749037058.308:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 150.025935][ T30] audit: type=1326 audit(1749037058.398:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.0.182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 150.129220][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.158402][ T6553] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 150.260456][ T5891] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 150.260482][ T5891] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 150.437293][ T5891] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 150.454197][ T5891] usb 4-1: USB disconnect, device number 15 [ 150.489641][ T3082] usbhid 5-1:0.0: can't add hid device: -71 [ 150.517633][ T3082] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 150.585132][ T3082] usb 5-1: USB disconnect, device number 9 [ 150.620154][ T5893] misc userio: Buffer overflowed, userio client isn't keeping up [ 151.327446][ T6580] FAULT_INJECTION: forcing a failure. [ 151.327446][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 151.341308][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.1.190 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 151.341337][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.341348][ T6580] Call Trace: [ 151.341367][ T6580] [ 151.341375][ T6580] dump_stack_lvl+0x189/0x250 [ 151.341411][ T6580] ? __pfx____ratelimit+0x10/0x10 [ 151.341440][ T6580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.341471][ T6580] ? __pfx__printk+0x10/0x10 [ 151.341500][ T6580] ? __pfx___might_resched+0x10/0x10 [ 151.341515][ T6580] ? fs_reclaim_acquire+0x7d/0x100 [ 151.341546][ T6580] should_fail_ex+0x414/0x560 [ 151.341582][ T6580] should_failslab+0xa8/0x100 [ 151.341606][ T6580] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 151.341626][ T6580] ? rcu_is_watching+0x15/0xb0 [ 151.341643][ T6580] ? key_alloc+0x34d/0x1080 [ 151.341680][ T6580] kmemdup_noprof+0x2b/0x70 [ 151.341709][ T6580] key_alloc+0x34d/0x1080 [ 151.341753][ T6580] keyring_alloc+0x45/0xb0 [ 151.341780][ T6580] look_up_user_keyrings+0x216/0x620 [ 151.341816][ T6580] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 151.341840][ T6580] ? __key_instantiate_and_link+0x419/0x4d0 [ 151.341886][ T6580] call_sbin_request_key+0x1cf/0xb30 [ 151.341919][ T6580] ? request_key_auth_free_preparse+0x9/0x10 [ 151.341953][ T6580] ? __pfx_call_sbin_request_key+0x10/0x10 [ 151.341982][ T6580] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 151.342052][ T6580] ? __pfx_request_key_auth_new+0x10/0x10 [ 151.342099][ T6580] request_key_and_link+0xe75/0x14a0 [ 151.342140][ T6580] ? __pfx_request_key_and_link+0x10/0x10 [ 151.342180][ T6580] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 151.342209][ T6580] ? __pfx_keyring_search_iterator+0x10/0x10 [ 151.342239][ T6580] ? down_read+0x1ad/0x2e0 [ 151.342266][ T6580] __se_sys_request_key+0x22c/0x340 [ 151.342296][ T6580] ? __pfx___se_sys_request_key+0x10/0x10 [ 151.342327][ T6580] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 151.342366][ T6580] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.342397][ T6580] __do_fast_syscall_32+0xb6/0x2b0 [ 151.342427][ T6580] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.342459][ T6580] do_fast_syscall_32+0x34/0x80 [ 151.342487][ T6580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.342511][ T6580] RIP: 0023:0xf7fb2539 [ 151.342529][ T6580] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.342545][ T6580] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 000000000000011f [ 151.342567][ T6580] RAX: ffffffffffffffda RBX: 0000000080000700 RCX: 0000000080000740 [ 151.342581][ T6580] RDX: 0000000080000780 RSI: 00000000fffffffe RDI: 0000000000000000 [ 151.342594][ T6580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.342604][ T6580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.342614][ T6580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.342646][ T6580] [ 152.000099][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.073204][ T5893] input: PS/2 Generic Mouse as /devices/serio2/input/input9 [ 152.127269][ T6596] program syz.3.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.231379][ T880] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.250091][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 152.259777][ T6596] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 152.271955][ T6596] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 152.300087][ T5891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.320021][ T5893] psmouse serio2: Failed to enable mouse on [ 152.333434][ T6596] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 152.347368][ T5896] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 152.367024][ T6596] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 152.400030][ T880] usb 1-1: Using ep0 maxpacket: 8 [ 152.408221][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.409138][ T880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.460122][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 152.469556][ T5891] usb 5-1: config 0 has no interfaces? [ 152.475134][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.491573][ T880] usb 1-1: config 3 has an invalid interface number: 232 but max is 0 [ 152.501332][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.502269][ T5896] usb 3-1: config 0 descriptor?? [ 152.616226][ T880] usb 1-1: config 3 has no interface number 0 [ 152.627940][ T880] usb 1-1: config 3 interface 232 has no altsetting 0 [ 152.733494][ T5896] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 152.761077][ T5891] usb 5-1: config 0 descriptor?? [ 152.867219][ T880] usb 1-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=be.13 [ 152.876862][ T880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.962919][ T880] usb 1-1: Product: syz [ 152.971185][ T880] usb 1-1: Manufacturer: syz [ 152.975836][ T880] usb 1-1: SerialNumber: syz [ 153.023580][ T6594] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 153.139002][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.286117][ T6602] netlink: 'syz.4.193': attribute type 25 has an invalid length. [ 153.294446][ T6602] netlink: 'syz.4.193': attribute type 7 has an invalid length. [ 153.888039][ T5896] gspca_nw80x: reg_w err -71 [ 153.893569][ T5896] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 153.920893][ T5896] usb 3-1: USB disconnect, device number 9 [ 154.247561][ T6614] netlink: 52 bytes leftover after parsing attributes in process `syz.3.200'. [ 154.874601][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.970990][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.974180][ T6617] sctp: [Deprecated]: syz.2.201 (pid 6617) Use of int in maxseg socket option. [ 154.974180][ T6617] Use struct sctp_assoc_value instead [ 155.123400][ T5832] usb 5-1: USB disconnect, device number 10 [ 155.170498][ T880] usb 1-1: USB disconnect, device number 10 [ 155.260271][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.671056][ T9] usb 2-1: config 0 has no interfaces? [ 155.803257][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.833554][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.863564][ T9] usb 2-1: Product: syz [ 155.867812][ T9] usb 2-1: Manufacturer: syz [ 155.881446][ T6630] FAULT_INJECTION: forcing a failure. [ 155.881446][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.898891][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.3.206 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 155.898920][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.898930][ T6630] Call Trace: [ 155.898935][ T6630] [ 155.898941][ T6630] dump_stack_lvl+0x189/0x250 [ 155.898963][ T6630] ? __pfx____ratelimit+0x10/0x10 [ 155.898981][ T6630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.898998][ T6630] ? __pfx__printk+0x10/0x10 [ 155.899017][ T6630] should_fail_ex+0x414/0x560 [ 155.899038][ T6630] _copy_from_user+0x2d/0xb0 [ 155.899053][ T6630] get_user_ifreq+0xa4/0x180 [ 155.899071][ T6630] inet_ioctl+0x38c/0x4c0 [ 155.899085][ T6630] ? __pfx_inet_ioctl+0x10/0x10 [ 155.899106][ T6630] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 155.899123][ T6630] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.899142][ T6630] sock_do_ioctl+0xd9/0x300 [ 155.899160][ T6630] ? __pfx_sock_do_ioctl+0x10/0x10 [ 155.899177][ T6630] ? __lock_acquire+0xab9/0xd20 [ 155.899200][ T6630] compat_sock_ioctl+0xb8d/0xc80 [ 155.899219][ T6630] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 155.899237][ T6630] ? __fget_files+0x3a0/0x420 [ 155.899250][ T6630] ? __fget_files+0x2a/0x420 [ 155.899264][ T6630] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 155.899287][ T6630] __ia32_compat_sys_ioctl+0x543/0x840 [ 155.899307][ T6630] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 155.899324][ T6630] ? __fget_files+0x3a0/0x420 [ 155.899340][ T6630] ? fput+0xa0/0xd0 [ 155.899355][ T6630] ? ksys_write+0x22a/0x250 [ 155.899371][ T6630] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 155.899389][ T6630] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.899406][ T6630] __do_fast_syscall_32+0xb6/0x2b0 [ 155.899424][ T6630] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.899441][ T6630] do_fast_syscall_32+0x34/0x80 [ 155.899458][ T6630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.899471][ T6630] RIP: 0023:0xf710e539 [ 155.899482][ T6630] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 155.899493][ T6630] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 155.899508][ T6630] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000008914 [ 155.899516][ T6630] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.899523][ T6630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.899538][ T6630] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.899545][ T6630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.899561][ T6630] [ 156.165223][ T9] usb 2-1: SerialNumber: syz [ 156.181065][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.210116][ T5896] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 156.451264][ T9] usb 2-1: config 0 descriptor?? [ 156.601329][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 156.612844][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.631270][ T5896] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 156.646373][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.677395][ T5896] usb 5-1: Product: syz [ 156.687537][ T5896] usb 5-1: Manufacturer: syz [ 156.707826][ T5896] usb 5-1: SerialNumber: syz [ 156.749634][ T5896] usb 5-1: config 0 descriptor?? [ 156.760170][ T6621] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 157.001820][ T5896] usb 5-1: USB disconnect, device number 11 [ 157.085446][ T6639] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 157.093511][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 157.488523][ T6648] fuse: Unknown parameter 'root2Hmode' [ 157.491367][ T3082] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 157.677116][ T6650] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[6650] [ 157.820154][ T3082] usb 4-1: Using ep0 maxpacket: 32 [ 157.834587][ T3082] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 157.872973][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.882713][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 158.069464][ T3082] usb 4-1: config 0 descriptor?? [ 158.081822][ T3082] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 158.518338][ T5931] usb 2-1: USB disconnect, device number 12 [ 158.790133][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.960037][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 158.974663][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.010095][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 159.043364][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 159.089373][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 159.152734][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.177371][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.189279][ T9] usb 1-1: SerialNumber: syz [ 159.202770][ T6657] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.216184][ T6657] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.410078][ T5931] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.417995][ T5896] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.461608][ T3082] gspca_nw80x: reg_w err -71 [ 159.466390][ T3082] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 159.486553][ T3082] usb 4-1: USB disconnect, device number 16 [ 159.646764][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.221'. [ 159.784954][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 159.792786][ T5931] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 160.323797][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.342839][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 160.374831][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.427465][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.445836][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 160.458586][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.477934][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.489782][ T5931] usb 2-1: Product: syz [ 160.502821][ T5931] usb 2-1: Manufacturer: syz [ 160.510903][ T5896] usb 3-1: Product: syz [ 160.520466][ T5896] usb 3-1: Manufacturer: syz [ 160.525136][ T5931] usb 2-1: SerialNumber: syz [ 160.535723][ T5896] usb 3-1: SerialNumber: syz [ 160.551928][ T5931] usb 2-1: config 0 descriptor?? [ 160.566372][ T5896] usb 3-1: config 0 descriptor?? [ 160.599035][ T5931] usb 2-1: selecting invalid altsetting 0 [ 160.611886][ T5896] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.639208][ T5896] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 160.658732][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 160.703391][ T9] usb 1-1: USB disconnect, device number 11 [ 160.846137][ T5931] usb 2-1: USB disconnect, device number 13 [ 160.975764][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.170030][ T3082] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 161.253955][ T5896] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 161.273501][ T5896] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 161.432393][ T6694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.225'. [ 161.447097][ T3082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.509063][ T3082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.535319][ T3082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 161.546025][ T3082] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.565206][ T3082] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 161.592321][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.634130][ T3082] usb 4-1: config 0 descriptor?? [ 161.658686][ T6685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.660009][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 161.985449][ T6696] FAULT_INJECTION: forcing a failure. [ 161.985449][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 162.044505][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.0.227 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 162.044533][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.044544][ T6696] Call Trace: [ 162.044552][ T6696] [ 162.044561][ T6696] dump_stack_lvl+0x189/0x250 [ 162.044596][ T6696] ? __pfx____ratelimit+0x10/0x10 [ 162.044630][ T6696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.044658][ T6696] ? __pfx__printk+0x10/0x10 [ 162.044685][ T6696] ? __pfx___might_resched+0x10/0x10 [ 162.044703][ T6696] ? fs_reclaim_acquire+0x7d/0x100 [ 162.044732][ T6696] should_fail_ex+0x414/0x560 [ 162.044776][ T6696] should_failslab+0xa8/0x100 [ 162.044800][ T6696] __kmalloc_cache_noprof+0x70/0x3d0 [ 162.044819][ T6696] ? nft_connlimit_do_init+0x11b/0x2e0 [ 162.044839][ T6696] ? rcu_is_watching+0x15/0xb0 [ 162.044861][ T6696] nft_connlimit_do_init+0x11b/0x2e0 [ 162.044881][ T6696] ? nft_connlimit_init+0x17/0x30 [ 162.044904][ T6696] nft_set_elem_expr_alloc+0x1db/0x590 [ 162.044935][ T6696] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 162.044979][ T6696] ? nft_rhash_init+0x2b3/0x3a0 [ 162.045003][ T6696] ? __pfx_nft_rhash_init+0x10/0x10 [ 162.045024][ T6696] ? __pfx_nft_rhash_key+0x10/0x10 [ 162.045043][ T6696] ? __pfx_nft_rhash_obj+0x10/0x10 [ 162.045063][ T6696] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 162.045089][ T6696] nft_set_expr_alloc+0x68/0x760 [ 162.045106][ T6696] ? kfree+0x18e/0x440 [ 162.045130][ T6696] nf_tables_newset+0x1c47/0x2530 [ 162.045171][ T6696] ? __pfx_nf_tables_newset+0x10/0x10 [ 162.045220][ T6696] ? __nla_parse+0x40/0x60 [ 162.045245][ T6696] nfnetlink_rcv+0x112f/0x2520 [ 162.045311][ T6696] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 162.045358][ T6696] ? ref_tracker_free+0x63a/0x7d0 [ 162.045410][ T6696] ? __netlink_deliver_tap+0x807/0x850 [ 162.045444][ T6696] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.045475][ T6696] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.045503][ T6696] netlink_unicast+0x75b/0x8d0 [ 162.045536][ T6696] netlink_sendmsg+0x805/0xb30 [ 162.045568][ T6696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.045594][ T6696] ? __import_iovec+0x5d4/0x7f0 [ 162.045615][ T6696] ? aa_sock_msg_perm+0x94/0x160 [ 162.045647][ T6696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.045672][ T6696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.045694][ T6696] __sock_sendmsg+0x219/0x270 [ 162.045727][ T6696] ____sys_sendmsg+0x505/0x830 [ 162.045759][ T6696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.045804][ T6696] ___sys_sendmsg+0x21f/0x2a0 [ 162.045829][ T6696] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.045897][ T6696] ? __fget_files+0x2a/0x420 [ 162.045919][ T6696] ? __fget_files+0x3a0/0x420 [ 162.045954][ T6696] __sys_sendmsg+0x164/0x220 [ 162.045979][ T6696] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.046036][ T6696] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 162.046066][ T6696] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.046096][ T6696] __do_fast_syscall_32+0xb6/0x2b0 [ 162.046124][ T6696] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.046156][ T6696] do_fast_syscall_32+0x34/0x80 [ 162.046185][ T6696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.046207][ T6696] RIP: 0023:0xf7fc7539 [ 162.046226][ T6696] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 162.046242][ T6696] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 162.046263][ T6696] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 162.046277][ T6696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.046288][ T6696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.046299][ T6696] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 162.046311][ T6696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.046342][ T6696] [ 162.511342][ T5896] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 162.519755][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 162.529668][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 162.538018][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 162.547884][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 162.872458][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 162.902806][ T5896] usb 3-1: USB disconnect, device number 10 [ 162.924001][ T6705] FAULT_INJECTION: forcing a failure. [ 162.924001][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 163.010370][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.0.229 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 163.010404][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.010418][ T6705] Call Trace: [ 163.010426][ T6705] [ 163.010435][ T6705] dump_stack_lvl+0x189/0x250 [ 163.010480][ T6705] ? __pfx____ratelimit+0x10/0x10 [ 163.010508][ T6705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.010538][ T6705] ? __pfx__printk+0x10/0x10 [ 163.010567][ T6705] ? __pfx___might_resched+0x10/0x10 [ 163.010585][ T6705] ? fs_reclaim_acquire+0x7d/0x100 [ 163.010616][ T6705] should_fail_ex+0x414/0x560 [ 163.010650][ T6705] should_failslab+0xa8/0x100 [ 163.010675][ T6705] kmem_cache_alloc_noprof+0x73/0x3c0 [ 163.010695][ T6705] ? __kernfs_new_node+0xd7/0x7e0 [ 163.010725][ T6705] __kernfs_new_node+0xd7/0x7e0 [ 163.010749][ T6705] ? __lock_acquire+0xab9/0xd20 [ 163.010783][ T6705] ? __pfx___kernfs_new_node+0x10/0x10 [ 163.010809][ T6705] ? kernfs_root+0x1c/0x230 [ 163.010841][ T6705] ? kernfs_root+0x1c/0x230 [ 163.010862][ T6705] ? kernfs_root+0x1c/0x230 [ 163.010883][ T6705] ? kernfs_root+0x1c/0x230 [ 163.010910][ T6705] kernfs_new_node+0x102/0x210 [ 163.010941][ T6705] __kernfs_create_file+0x4b/0x2e0 [ 163.010975][ T6705] sysfs_add_file_mode_ns+0x238/0x300 [ 163.011007][ T6705] internal_create_group+0x66d/0x1110 [ 163.011047][ T6705] ? __pfx_rwsem_wake+0x10/0x10 [ 163.011069][ T6705] ? __pfx_internal_create_group+0x10/0x10 [ 163.011094][ T6705] ? kernfs_add_one+0xf0/0x520 [ 163.011129][ T6705] sysfs_create_groups+0x59/0x120 [ 163.011157][ T6705] device_add_attrs+0x13f/0x5a0 [ 163.011190][ T6705] ? __pfx_device_add_attrs+0x10/0x10 [ 163.011220][ T6705] ? device_add_class_symlinks+0x21f/0x240 [ 163.011248][ T6705] device_add+0x496/0xb50 [ 163.011278][ T6705] input_register_device+0x9ca/0x10b0 [ 163.011312][ T6705] uinput_create_device+0x422/0x670 [ 163.011348][ T6705] uinput_ioctl_handler+0x3f0/0x1570 [ 163.011379][ T6705] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 163.011424][ T6705] ? __fget_files+0x2a/0x420 [ 163.011459][ T6705] __ia32_compat_sys_ioctl+0x543/0x840 [ 163.011500][ T6705] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 163.011531][ T6705] ? __fget_files+0x3a0/0x420 [ 163.011561][ T6705] ? fput+0xa0/0xd0 [ 163.011588][ T6705] ? ksys_write+0x22a/0x250 [ 163.011617][ T6705] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 163.011646][ T6705] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.011678][ T6705] __do_fast_syscall_32+0xb6/0x2b0 [ 163.011708][ T6705] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.011740][ T6705] do_fast_syscall_32+0x34/0x80 [ 163.011769][ T6705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.011792][ T6705] RIP: 0023:0xf7fc7539 [ 163.011811][ T6705] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 163.011828][ T6705] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 163.011851][ T6705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 163.011866][ T6705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.011878][ T6705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.011889][ T6705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 163.011901][ T6705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.011931][ T6705] [ 163.513081][ T6708] FAULT_INJECTION: forcing a failure. [ 163.513081][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 163.564974][ T6708] CPU: 0 UID: 0 PID: 6708 Comm: syz.1.230 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 163.565006][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.565018][ T6708] Call Trace: [ 163.565025][ T6708] [ 163.565034][ T6708] dump_stack_lvl+0x189/0x250 [ 163.565069][ T6708] ? __pfx____ratelimit+0x10/0x10 [ 163.565098][ T6708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.565127][ T6708] ? __pfx__printk+0x10/0x10 [ 163.565151][ T6708] ? __pfx___might_resched+0x10/0x10 [ 163.565169][ T6708] ? fs_reclaim_acquire+0x7d/0x100 [ 163.565206][ T6708] should_fail_ex+0x414/0x560 [ 163.565240][ T6708] should_failslab+0xa8/0x100 [ 163.565265][ T6708] kmem_cache_alloc_noprof+0x73/0x3c0 [ 163.565284][ T6708] ? security_file_alloc+0x34/0x330 [ 163.565315][ T6708] security_file_alloc+0x34/0x330 [ 163.565341][ T6708] init_file+0x93/0x2f0 [ 163.565369][ T6708] alloc_empty_file+0x6e/0x1d0 [ 163.565395][ T6708] alloc_file_pseudo+0x13d/0x210 [ 163.565425][ T6708] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 163.565458][ T6708] ? alloc_anon_inode+0x1c1/0x360 [ 163.565477][ T6708] ? bpf_lsm_inode_init_security_anon+0x9/0x20 [ 163.565506][ T6708] __anon_inode_getfile+0x241/0x360 [ 163.565533][ T6708] ? __pfx___anon_inode_getfile+0x10/0x10 [ 163.565566][ T6708] io_uring_create+0x703/0xb60 [ 163.565595][ T6708] __se_sys_io_uring_setup+0x264/0x270 [ 163.565626][ T6708] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 163.565671][ T6708] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 163.565701][ T6708] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.565730][ T6708] __do_fast_syscall_32+0xb6/0x2b0 [ 163.565760][ T6708] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.565790][ T6708] do_fast_syscall_32+0x34/0x80 [ 163.565819][ T6708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.565842][ T6708] RIP: 0023:0xf7fb2539 [ 163.565859][ T6708] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 163.565877][ T6708] RSP: 002b:00000000f50b550c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 163.565899][ T6708] RAX: ffffffffffffffda RBX: 0000000000000239 RCX: 0000000080000380 [ 163.565913][ T6708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.565924][ T6708] RBP: 0000000080000180 R08: 0000000000000000 R09: 0000000000000000 [ 163.565935][ T6708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 163.565947][ T6708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.565987][ T6708] [ 164.059092][ T3082] usbhid 4-1:0.0: can't add hid device: -71 [ 164.068807][ T3082] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 164.157137][ T3082] usb 4-1: USB disconnect, device number 17 [ 164.445658][ T6717] geneve2: entered promiscuous mode [ 164.505886][ T6718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.231'. [ 164.513105][ T5896] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 164.741862][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 164.755263][ T5896] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 164.765354][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.792906][ T5896] usb 2-1: config 0 descriptor?? [ 164.802648][ T5896] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 165.721855][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 166.039535][ T5896] gspca_nw80x: reg_w err -71 [ 166.045908][ T5896] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 166.057406][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 166.059179][ T5896] usb 2-1: USB disconnect, device number 14 [ 166.089438][ T9] usb 5-1: config 2 has an invalid interface number: 226 but max is 3 [ 166.125772][ T5872] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.130455][ T9] usb 5-1: config 2 has an invalid interface number: 24 but max is 3 [ 166.166016][ T9] usb 5-1: config 2 has an invalid interface number: 19 but max is 3 [ 166.183474][ T9] usb 5-1: config 2 has an invalid interface number: 226 but max is 3 [ 166.200176][ T9] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 166.214898][ T9] usb 5-1: config 2 has 3 interfaces, different from the descriptor's value: 4 [ 166.229351][ T9] usb 5-1: config 2 has no interface number 0 [ 166.245382][ T9] usb 5-1: config 2 has no interface number 1 [ 166.259696][ T9] usb 5-1: config 2 has no interface number 2 [ 166.266510][ T3082] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 166.285803][ T9] usb 5-1: config 2 interface 226 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 166.300124][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 166.310473][ T5872] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 166.332115][ T5872] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.344227][ T6733] kAFS: unable to lookup cell '.,' [ 166.359289][ T9] usb 5-1: config 2 interface 226 altsetting 148 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 166.372823][ T5872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.399570][ T9] usb 5-1: config 2 interface 226 altsetting 148 has a duplicate endpoint with address 0x1, skipping [ 166.411127][ T5872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.426348][ T5872] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.436863][ T9] usb 5-1: config 2 interface 226 altsetting 148 endpoint 0xC has an invalid bInterval 25, changing to 4 [ 166.451285][ T5872] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.472710][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.479228][ T9] usb 5-1: config 2 interface 226 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 166.518724][ T9] usb 5-1: config 2 interface 226 altsetting 148 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 166.549035][ T9] usb 5-1: config 2 interface 226 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 166.575312][ T9] usb 5-1: config 2 interface 226 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 166.681917][ T9] usb 5-1: config 2 interface 226 altsetting 148 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 166.696028][ T9] usb 5-1: config 2 interface 24 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 166.708043][ T9] usb 5-1: config 2 interface 24 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 166.719596][ T9] usb 5-1: config 2 interface 24 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 166.745992][ T9] usb 5-1: config 2 interface 24 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 166.764730][ T9] usb 5-1: config 2 interface 24 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 166.854256][ T9] usb 5-1: config 2 interface 24 altsetting 4 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 166.876892][ T5872] usb 3-1: usb_control_msg returned -71 [ 166.883306][ T5872] usbtmc 3-1:16.0: can't read capabilities [ 166.889724][ T9] usb 5-1: config 2 interface 24 altsetting 4 has a duplicate endpoint with address 0x8A, skipping [ 166.909337][ T9] usb 5-1: config 2 interface 24 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 166.937153][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 166.976418][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 166.998204][ T5872] usb 3-1: USB disconnect, device number 11 [ 167.045296][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 167.077076][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0x8, skipping [ 167.395093][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 167.417957][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 167.477805][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 167.499627][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 167.585689][ T9] usb 5-1: config 2 interface 19 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 167.736768][ T9] usb 5-1: config 2 interface 19 altsetting 14 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.768205][ T9] usb 5-1: config 2 interface 19 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 167.825771][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 168.092372][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 168.231136][ T9] usb 5-1: config 2 interface 19 altsetting 14 has a duplicate endpoint with address 0x8, skipping [ 168.290856][ T9] usb 5-1: config 2 interface 226 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 168.303360][ T9] usb 5-1: config 2 interface 226 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 168.314647][ T9] usb 5-1: config 2 interface 226 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 168.325839][ T9] usb 5-1: config 2 interface 226 altsetting 1 endpoint 0x6 has invalid maxpacket 2007, setting to 64 [ 168.337041][ T9] usb 5-1: config 2 interface 226 altsetting 1 has an endpoint descriptor with address 0x34, changing to 0x4 [ 168.348974][ T9] usb 5-1: config 2 interface 226 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 168.360834][ T9] usb 5-1: config 2 interface 226 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 168.373449][ T9] usb 5-1: config 2 interface 226 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 168.384613][ T9] usb 5-1: config 2 interface 226 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 168.395776][ T9] usb 5-1: config 2 interface 226 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 168.406818][ T9] usb 5-1: config 2 interface 226 has no altsetting 0 [ 168.413829][ T9] usb 5-1: config 2 interface 24 has no altsetting 0 [ 168.460209][ T9] usb 5-1: config 2 interface 19 has no altsetting 0 [ 168.508322][ T9] usb 5-1: string descriptor 0 read error: -71 [ 168.683544][ T9] usb 5-1: New USB device found, idVendor=0856, idProduct=ac34, bcdDevice= 5.f8 [ 168.772871][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.820555][ T9] usb 5-1: can't set config #2, error -71 [ 168.884501][ T9] usb 5-1: USB disconnect, device number 13 [ 168.920575][ T6760] netlink: 52 bytes leftover after parsing attributes in process `syz.3.244'. [ 169.702029][ T5872] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 169.901335][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 169.908677][ T5872] usb 3-1: config index 0 descriptor too short (expected 115, got 36) [ 169.917277][ T5872] usb 3-1: config 119 has too many interfaces: 95, using maximum allowed: 32 [ 169.926227][ T5872] usb 3-1: config 119 has an invalid descriptor of length 111, skipping remainder of the config [ 169.936812][ T5872] usb 3-1: config 119 has 0 interfaces, different from the descriptor's value: 95 [ 169.946165][ T5872] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 169.955726][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.032300][ T6783] input: syz0 as /devices/virtual/input/input11 [ 170.481813][ T6783] netlink: 'syz.1.250': attribute type 6 has an invalid length. [ 170.489628][ T6783] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.844470][ T6800] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[6800] [ 171.966173][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 172.790002][ T5872] usb 3-1: string descriptor 0 read error: -71 [ 172.834299][ T5872] usb 3-1: USB disconnect, device number 12 [ 173.519987][ T5872] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 174.230154][ T5896] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.291602][ T6833] program syz.0.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.308051][ T6833] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 174.318805][ T6833] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 174.440934][ T5896] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.471979][ T6833] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 174.484624][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.484654][ T5896] usb 2-1: config 0 has no interface number 0 [ 174.515924][ T6833] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 174.542132][ T5896] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 174.583621][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.620106][ T5896] usb 2-1: Product: syz [ 174.631710][ T5896] usb 2-1: Manufacturer: syz [ 174.636455][ T5896] usb 2-1: SerialNumber: syz [ 174.913793][ T5896] usb 2-1: config 0 descriptor?? [ 175.186276][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.260659][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.326696][ T5832] usb 2-1: USB disconnect, device number 15 [ 177.260001][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 178.190388][ T6859] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[6859] [ 178.395135][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'. [ 178.672545][ T6861] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[6861] [ 178.895278][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 178.940130][ T6865] fuse: Bad value for 'fd' [ 180.200058][ T9] usb 4-1: device descriptor read/64, error -71 [ 180.258717][ T6881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.450193][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.490083][ T5931] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.534563][ T880] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.562855][ T6890] program syz.4.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.573777][ T6891] program syz.4.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.589467][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 180.709168][ T5931] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.709310][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.728228][ T5931] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 180.728996][ T880] usb 3-1: Using ep0 maxpacket: 32 [ 180.745503][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.795075][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.808335][ T880] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 180.820539][ T880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.820705][ T5931] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.828576][ T880] usb 3-1: Product: syz [ 180.865953][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 180.877989][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.878612][ T5931] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.902012][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.984564][ T880] usb 3-1: Manufacturer: syz [ 180.984563][ T5931] usb 1-1: Product: syz [ 180.984590][ T5931] usb 1-1: Manufacturer: syz [ 180.989211][ T880] usb 3-1: SerialNumber: syz [ 181.027195][ T5931] cdc_wdm 1-1:1.0: skipping garbage [ 181.033041][ T5931] cdc_wdm 1-1:1.0: skipping garbage [ 181.038506][ T5931] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 181.051114][ T9] usb 4-1: config 0 descriptor?? [ 181.080013][ T880] usb 3-1: config 0 descriptor?? [ 181.420118][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.433067][ T5896] usb 1-1: USB disconnect, device number 13 [ 181.615410][ T9] hid-generic 0003:04F3:0754.0006: failed to start in urb: -90 [ 181.720841][ T880] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 181.743994][ T880] airspy 3-1:0.0: Could not detect board [ 181.760742][ T9] hid-generic 0003:04F3:0754.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.3-1/input0 [ 181.787249][ T880] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 181.796565][ T6874] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 181.812876][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.831341][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.850691][ T880] usb 3-1: USB disconnect, device number 14 [ 181.866101][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.909178][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.256063][ T880] usb 4-1: USB disconnect, device number 19 [ 183.108592][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'. [ 183.750948][ T5872] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.183791][ T6924] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[6924] [ 184.437299][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 185.495719][ T6939] program syz.0.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.512439][ T6939] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 185.530915][ T6939] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 185.560805][ T6939] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 185.580042][ T6939] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 185.638011][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 185.740604][ T6942] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.291'. [ 185.754679][ T6941] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.291'. [ 186.889441][ T6964] program syz.4.298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.890296][ T5931] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 186.908527][ T5896] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 186.942912][ T6964] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 186.950977][ T6964] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 186.961597][ T6964] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 186.974197][ T6964] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 187.072225][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.086951][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.097969][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.109206][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.122663][ T5896] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.131916][ T5931] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 187.141071][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.149194][ T5896] usb 3-1: Product: syz [ 187.155722][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.163818][ T5896] usb 3-1: Manufacturer: syz [ 187.169714][ T5896] usb 3-1: SerialNumber: syz [ 187.175316][ T5931] usb 1-1: config 0 descriptor?? [ 187.210030][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 187.370260][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 187.410172][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 187.432869][ T5896] usb 3-1: 0:2 : does not exist [ 187.438027][ T43] usb 4-1: config 0 has no interface number 0 [ 187.458926][ T5896] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 187.474498][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 187.528585][ T5896] usb 3-1: USB disconnect, device number 15 [ 187.549494][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 187.570222][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.578837][ T43] usb 4-1: Product: syz [ 187.600032][ T43] usb 4-1: Manufacturer: syz [ 187.606497][ T43] usb 4-1: SerialNumber: syz [ 187.665022][ T5888] udevd[5888]: setting mode of /dev/bus/usb/003/015 to 020664 failed: No such file or directory [ 187.686365][ T5931] kovaplus 0003:1E7D:2D50.0007: item fetching failed at offset 2/5 [ 187.766542][ T43] usb 4-1: config 0 descriptor?? [ 187.784626][ T5888] udevd[5888]: setting owner of /dev/bus/usb/003/015 to uid=0, gid=0 failed: No such file or directory [ 187.796457][ T5931] kovaplus 0003:1E7D:2D50.0007: parse failed [ 187.818439][ T5931] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -22 [ 187.837936][ T43] smsc75xx v1.0.0 [ 187.867297][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 187.879464][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.947209][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 187.951486][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.958984][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.367173][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 188.380772][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.295'. [ 188.447679][ T6954] vlan2: entered allmulticast mode [ 188.467653][ T6954] macvtap0: entered allmulticast mode [ 188.491682][ T6954] veth0_macvtap: entered allmulticast mode [ 188.666709][ T10] usb 1-1: USB disconnect, device number 14 [ 189.090132][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.706016][ T6992] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 189.838044][ T6992] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 189.881857][ T880] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 189.981755][ T10] usb 4-1: USB disconnect, device number 20 [ 190.081142][ T880] usb 2-1: not running at top speed; connect to a high speed hub [ 190.097083][ T880] usb 2-1: config 197 has an invalid interface number: 250 but max is 2 [ 190.106386][ T880] usb 2-1: config 197 has an invalid interface number: 81 but max is 2 [ 190.128586][ T880] usb 2-1: config 197 has an invalid interface number: 194 but max is 2 [ 190.155340][ T880] usb 2-1: config 197 has no interface number 0 [ 190.198156][ T880] usb 2-1: config 197 has no interface number 1 [ 190.386091][ T880] usb 2-1: config 197 has no interface number 2 [ 190.435579][ T880] usb 2-1: config 197 interface 81 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 190.559590][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.577654][ T880] usb 2-1: config 197 interface 194 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 190.622648][ T880] usb 2-1: config 197 interface 194 altsetting 64 endpoint 0x2 has invalid maxpacket 80, setting to 64 [ 190.637180][ T880] usb 2-1: config 197 interface 194 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 190.658728][ T880] usb 2-1: config 197 interface 194 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 190.692799][ T880] usb 2-1: config 197 interface 194 altsetting 64 has a duplicate endpoint with address 0x5, skipping [ 190.742662][ T880] usb 2-1: config 197 interface 194 altsetting 64 endpoint 0x8F has invalid maxpacket 20639, setting to 64 [ 190.804738][ T880] usb 2-1: config 197 interface 194 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 190.895710][ T880] usb 2-1: config 197 interface 194 altsetting 64 endpoint 0x7 has invalid wMaxPacketSize 0 [ 190.938528][ T880] usb 2-1: config 197 interface 194 altsetting 64 endpoint 0xA has invalid maxpacket 1552, setting to 64 [ 191.050105][ T880] usb 2-1: config 197 interface 81 has no altsetting 0 [ 191.121582][ T880] usb 2-1: config 197 interface 194 has no altsetting 0 [ 191.183203][ T880] usb 2-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=98.24 [ 191.208534][ T880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.321957][ T880] usb 2-1: Product: ఊ [ 191.358454][ T880] usb 2-1: Manufacturer: 㐉 [ 191.378300][ T880] usb 2-1: SerialNumber: щ [ 191.396161][ T880] usb 2-1: Interface #81 referenced by multiple IADs [ 191.843584][ T6988] No such timeout policy "syz0" [ 191.859778][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.908413][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.926471][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.942199][ T7010] No such timeout policy "syz0" [ 191.967199][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.247761][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.270397][ T5891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 192.282653][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.443562][ T880] cdc_subset 2-1:197.250: probe with driver cdc_subset failed with error -22 [ 192.487491][ T880] cdc_subset 2-1:197.81: probe with driver cdc_subset failed with error -22 [ 192.541911][ T880] cdc_subset 2-1:197.194: probe with driver cdc_subset failed with error -22 [ 192.590278][ T880] usb 2-1: USB disconnect, device number 17 [ 193.164568][ T7027] netlink: 96 bytes leftover after parsing attributes in process `syz.0.317'. [ 193.190089][ T880] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.873550][ T880] usb 4-1: Using ep0 maxpacket: 8 [ 193.898376][ T880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.950930][ T880] usb 4-1: config 0 has no interfaces? [ 193.981491][ T880] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.000897][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.008685][ T880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.035033][ T880] usb 4-1: Product: syz [ 194.047665][ T880] usb 4-1: Manufacturer: syz [ 194.064701][ T880] usb 4-1: SerialNumber: syz [ 194.203731][ T880] usb 4-1: config 0 descriptor?? [ 194.274279][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 194.377671][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 194.400012][ T43] usb 2-1: config 0 has no interface number 0 [ 194.430073][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 194.440926][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.447501][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.531621][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 194.591839][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.639942][ T43] usb 2-1: Product: syz [ 194.644185][ T43] usb 2-1: Manufacturer: syz [ 194.648840][ T43] usb 2-1: SerialNumber: syz [ 194.702296][ T7042] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 194.703430][ T5931] usb 4-1: USB disconnect, device number 21 [ 194.754077][ T43] usb 2-1: config 0 descriptor?? [ 194.826939][ T43] smsc75xx v1.0.0 [ 194.877399][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 194.954153][ T43] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 195.522761][ T7043] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.531390][ T7043] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.625410][ T7057] geneve2: entered promiscuous mode [ 195.655250][ T7043] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.677452][ T7043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.684472][ T7043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.696646][ T7043] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.709448][ T7043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.723352][ T7043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.746947][ T7057] netlink: 52 bytes leftover after parsing attributes in process `syz.4.322'. [ 195.925933][ T7043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.991267][ T7043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.000613][ T7043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 196.091926][ T7043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 196.098851][ T7043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.135494][ T7043] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.144577][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'. [ 196.191086][ T7043] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.207525][ T5931] usb 2-1: USB disconnect, device number 18 [ 196.760017][ T5931] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 196.990257][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.742312][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.803282][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.872071][ T5832] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.928576][ T7090] netlink: 172 bytes leftover after parsing attributes in process `syz.2.333'. [ 198.031002][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.050180][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 198.110115][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.189612][ T5832] usb 5-1: config index 0 descriptor too short (expected 115, got 36) [ 198.280400][ T5832] usb 5-1: config 119 has too many interfaces: 95, using maximum allowed: 32 [ 198.326047][ T5832] usb 5-1: config 119 has an invalid descriptor of length 111, skipping remainder of the config [ 198.514164][ T5832] usb 5-1: config 119 has 0 interfaces, different from the descriptor's value: 95 [ 198.568635][ T5832] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 198.616630][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.070135][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.541499][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 199.604980][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'. [ 199.640057][ T5891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 199.871286][ T7113] netlink: 112 bytes leftover after parsing attributes in process `syz.1.341'. [ 199.880450][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.933161][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 199.944178][ T5891] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 199.955447][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.010291][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 200.023558][ T5891] usb 3-1: config 0 has no interface number 0 [ 200.062928][ T5891] usb 3-1: config 0 interface 184 has no altsetting 0 [ 200.113089][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.193008][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.204287][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.227562][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.300238][ T5891] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 200.330164][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 200.452021][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.461333][ T5832] usb 5-1: string descriptor 0 read error: -71 [ 200.488213][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.506827][ T5891] usb 3-1: Product: syz [ 200.515889][ T5832] usb 5-1: USB disconnect, device number 16 [ 200.533488][ T5891] usb 3-1: Manufacturer: syz [ 200.558652][ T9] usb 4-1: config 0 descriptor?? [ 200.564892][ T5891] usb 3-1: SerialNumber: syz [ 200.591105][ T5891] usb 3-1: config 0 descriptor?? [ 200.642263][ T5891] smsc75xx v1.0.0 [ 200.673778][ T7118] netlink: 'syz.4.343': attribute type 4 has an invalid length. [ 200.680346][ T5891] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 200.728822][ T5891] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 201.064428][ T9] logitech-djreceiver 0003:046D:C534.0008: unbalanced delimiter at end of report description [ 201.080217][ T9] logitech-djreceiver 0003:046D:C534.0008: logi_dj_probe: parse failed [ 201.091327][ T9] logitech-djreceiver 0003:046D:C534.0008: probe with driver logitech-djreceiver failed with error -22 [ 201.109993][ T5872] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 201.151223][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.260245][ T5872] usb 1-1: device descriptor read/64, error -71 [ 201.300532][ T5896] usb 4-1: USB disconnect, device number 22 [ 201.530117][ T5872] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 201.680484][ T5872] usb 1-1: device descriptor read/64, error -71 [ 201.967409][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.976087][ T5872] usb usb1-port1: attempt power cycle [ 202.032322][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.190507][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.221019][ T9] usb 3-1: USB disconnect, device number 17 [ 202.282361][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.390214][ T5872] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 202.440490][ T5872] usb 1-1: device descriptor read/8, error -71 [ 202.699973][ T5872] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 202.750643][ T5872] usb 1-1: device descriptor read/8, error -71 [ 203.170412][ T5872] usb usb1-port1: unable to enumerate USB device [ 203.610079][ T9] IPVS: starting estimator thread 0... [ 203.793166][ T7156] IPVS: using max 45 ests per chain, 108000 per kthread [ 204.779949][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 205.170263][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 205.186156][ T9] usb 3-1: config index 0 descriptor too short (expected 115, got 36) [ 205.202648][ T9] usb 3-1: config 119 has too many interfaces: 95, using maximum allowed: 32 [ 205.237009][ T9] usb 3-1: config 119 has an invalid descriptor of length 111, skipping remainder of the config [ 205.278130][ T9] usb 3-1: config 119 has 0 interfaces, different from the descriptor's value: 95 [ 205.309128][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 205.347539][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.520190][ T5872] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 205.713354][ T5872] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 205.722527][ T5872] usb 1-1: config 4 has no interface number 0 [ 205.737396][ T7175] program syz.4.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.768165][ T5872] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 205.781562][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.818236][ T5872] usb 1-1: Product: syz [ 205.845199][ T5872] usb 1-1: Manufacturer: syz [ 205.864018][ T5872] usb 1-1: SerialNumber: syz [ 205.887758][ T7178] netlink: 68 bytes leftover after parsing attributes in process `syz.3.360'. [ 205.903739][ T5872] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 206.120230][ T5872] vp7045: USB control message 'out' went wrong. [ 206.142276][ T5872] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 206.171716][ T5872] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 206.186533][ T5872] usb 1-1: USB disconnect, device number 19 [ 206.240759][ T5891] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 206.400163][ T880] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 206.412660][ T5891] usb 4-1: config 0 has no interfaces? [ 206.428800][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 206.452107][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.472422][ T5891] usb 4-1: Product: syz [ 206.483743][ T5891] usb 4-1: Manufacturer: syz [ 206.489684][ T5891] usb 4-1: SerialNumber: syz [ 206.507651][ T5891] usb 4-1: config 0 descriptor?? [ 206.570221][ T880] usb 2-1: Using ep0 maxpacket: 32 [ 206.577699][ T880] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.596740][ T880] usb 2-1: config 0 has no interface number 0 [ 206.606904][ T880] usb 2-1: config 0 interface 184 has no altsetting 0 [ 206.625246][ T880] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.637501][ T880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.646314][ T880] usb 2-1: Product: syz [ 206.652356][ T880] usb 2-1: Manufacturer: syz [ 206.657086][ T880] usb 2-1: SerialNumber: syz [ 206.675796][ T880] usb 2-1: config 0 descriptor?? [ 206.690644][ T9] usb 3-1: string descriptor 0 read error: -71 [ 206.701257][ T880] smsc75xx v1.0.0 [ 206.704964][ T880] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 206.725998][ T9] usb 3-1: USB disconnect, device number 18 [ 206.745449][ T880] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 206.897666][ T880] usb 2-1: USB disconnect, device number 20 [ 207.074421][ T7193] loop2: detected capacity change from 0 to 7 [ 207.087643][ T7193] Dev loop2: unable to read RDB block 7 [ 207.093968][ T7193] loop2: unable to read partition table [ 207.100097][ T7193] loop2: partition table beyond EOD, truncated [ 207.106649][ T7193] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 207.343524][ T7195] fuse: Bad value for 'fd' [ 207.541374][ T880] IPVS: starting estimator thread 0... [ 207.641485][ T7199] IPVS: using max 46 ests per chain, 110400 per kthread [ 208.063949][ T7210] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.091443][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 208.103278][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.371'. [ 208.720003][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 208.948994][ T7227] netlink: 52 bytes leftover after parsing attributes in process `syz.2.374'. [ 209.018860][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 209.028976][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.098042][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.122079][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.130459][ T9] usb 2-1: Product: syz [ 209.134674][ T9] usb 2-1: Manufacturer: syz [ 209.144863][ T9] usb 2-1: SerialNumber: syz [ 209.255775][ T5891] usb 4-1: USB disconnect, device number 23 [ 209.339991][ T5872] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 209.533823][ T9] usb 2-1: config 0 descriptor?? [ 209.540523][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 209.568821][ T9] usb 2-1: selecting invalid altsetting 0 [ 209.623317][ T5872] usb 1-1: config index 0 descriptor too short (expected 115, got 36) [ 209.700779][ T5872] usb 1-1: config 119 has too many interfaces: 95, using maximum allowed: 32 [ 209.779566][ T5872] usb 1-1: config 119 has an invalid descriptor of length 111, skipping remainder of the config [ 209.914939][ T7241] xt_socket: unknown flags 0x4 [ 209.920109][ T5872] usb 1-1: config 119 has 0 interfaces, different from the descriptor's value: 95 [ 209.920167][ T5872] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 209.920192][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.218471][ T5931] usb 2-1: USB disconnect, device number 21 [ 211.729984][ T5931] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 211.863741][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.889370][ T5872] usb 1-1: string descriptor 0 read error: -71 [ 211.920801][ T5872] usb 1-1: USB disconnect, device number 20 [ 211.982257][ T5931] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 212.046181][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.130744][ T43] usb 5-1: config 0 has no interfaces? [ 212.150803][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 212.288130][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.297907][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.326267][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.359907][ T43] usb 5-1: Product: syz [ 212.374436][ T43] usb 5-1: Manufacturer: syz [ 212.379173][ T5931] usb 2-1: Product: syz [ 212.415748][ T5931] usb 2-1: Manufacturer: syz [ 212.420924][ T43] usb 5-1: SerialNumber: syz [ 212.437139][ T5931] usb 2-1: SerialNumber: syz [ 212.448305][ T43] usb 5-1: config 0 descriptor?? [ 212.490457][ T5931] usb 2-1: config 0 descriptor?? [ 212.524961][ T5931] usb 2-1: selecting invalid altsetting 0 [ 212.531407][ T5872] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 212.702075][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.711363][ T5872] usb 1-1: not running at top speed; connect to a high speed hub [ 212.773967][ T5872] usb 1-1: config 24 has an invalid interface number: 219 but max is 0 [ 212.803713][ T5872] usb 1-1: config 24 has no interface number 0 [ 212.840505][ T5872] usb 1-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 212.937375][ T5872] usb 1-1: config 24 interface 219 has no altsetting 0 [ 212.953243][ T5872] usb 1-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 212.965704][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.982261][ T9] usb 2-1: USB disconnect, device number 22 [ 212.999985][ T5872] usb 1-1: Product: syz [ 213.028365][ T5872] usb 1-1: Manufacturer: syz [ 213.111167][ T5872] usb 1-1: SerialNumber: syz [ 213.142890][ T7255] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 213.266696][ T43] usb 5-1: can't set config #0, error -71 [ 213.371609][ T7255] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 213.371751][ T43] usb 5-1: USB disconnect, device number 17 [ 213.710536][ T7263] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 213.720109][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.794443][ T5872] usb 1-1: Could not find all expected endpoints [ 213.855219][ T5872] usb 1-1: USB disconnect, device number 21 [ 213.968868][ T7268] netlink: 112 bytes leftover after parsing attributes in process `syz.4.384'. [ 214.534776][ T7276] batman_adv: batadv0: Adding interface: ip6gretap1 [ 214.542712][ T7276] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.577263][ T7276] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 214.650991][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.669321][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.708812][ T9] IPVS: starting estimator thread 0... [ 214.810691][ T7285] IPVS: using max 24 ests per chain, 57600 per kthread [ 214.811715][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.848266][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.966434][ T7291] netlink: 52 bytes leftover after parsing attributes in process `syz.3.388'. [ 214.988242][ T7282] batman_adv: batadv0: Removing interface: ip6gretap1 [ 215.898402][ T7301] bridge0: port 3(vxlan0) entered blocking state [ 215.906527][ T7301] bridge0: port 3(vxlan0) entered disabled state [ 215.916257][ T7301] vxlan0: entered allmulticast mode [ 215.924490][ T7301] vxlan0: entered promiscuous mode [ 216.380053][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 216.565671][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 216.585885][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.647931][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.669602][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.706353][ T9] usb 4-1: Product: syz [ 216.723801][ T9] usb 4-1: Manufacturer: syz [ 216.738565][ T9] usb 4-1: SerialNumber: syz [ 216.883701][ T9] usb 4-1: config 0 descriptor?? [ 216.907514][ T7312] netlink: 112 bytes leftover after parsing attributes in process `syz.1.396'. [ 216.943388][ T9] usb 4-1: selecting invalid altsetting 0 [ 217.284417][ T5891] usb 4-1: USB disconnect, device number 24 [ 217.821572][ T7326] binder: 7325:7326 ioctl 4018620d 0 returned -22 [ 218.151633][ T7333] program syz.2.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.228943][ T7333] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 218.242380][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.270203][ T7333] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 218.294666][ T7333] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 218.358502][ T7333] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 219.456445][ T7343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.406'. [ 219.722631][ T7353] netlink: 112 bytes leftover after parsing attributes in process `syz.2.409'. [ 219.897553][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 219.930188][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 219.996079][ T7339] bridge_slave_1: left allmulticast mode [ 220.004293][ T7339] bridge_slave_1: left promiscuous mode [ 220.012335][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.059561][ T7339] bridge_slave_0: left allmulticast mode [ 220.060003][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 220.060019][ T30] audit: type=1326 audit(1749037128.778:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7fc00000 [ 220.093936][ T7339] bridge_slave_0: left promiscuous mode [ 220.099804][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.140117][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 220.160116][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.174475][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 220.214824][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.254944][ T9] usb 1-1: config 0 descriptor?? [ 220.301551][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 221.200076][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 221.260024][ T5188] bcm5974 1-1:0.0: could not read from device [ 221.296523][ T5188] bcm5974 1-1:0.0: could not read from device [ 221.320519][ T9] usb 1-1: USB disconnect, device number 22 [ 221.406813][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.432865][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.447574][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.457934][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.472570][ T10] usb 5-1: Product: syz [ 221.477535][ T10] usb 5-1: Manufacturer: syz [ 221.513706][ T5945] udevd[5945]: Error opening device "/dev/input/event4": No such file or directory [ 221.525594][ T10] usb 5-1: SerialNumber: syz [ 221.542680][ T7376] x_tables: ip_tables: esp match: only valid for protocol 50 [ 221.566450][ T10] usb 5-1: config 0 descriptor?? [ 221.581338][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 221.616097][ T10] usb 5-1: selecting invalid altsetting 0 [ 221.622297][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 221.641066][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 221.712820][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 221.830090][ T5872] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 222.002526][ T5872] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.015310][ T5872] usb 4-1: config 0 has no interface number 0 [ 222.030906][ T5872] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 222.052315][ T9] usb 5-1: USB disconnect, device number 18 [ 222.068520][ T5872] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 222.140721][ T5872] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.168460][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.238931][ T5872] usb 4-1: config 0 descriptor?? [ 222.250789][ T7378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.328284][ T5872] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 222.610979][ T43] usb 4-1: USB disconnect, device number 25 [ 222.611076][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 222.773936][ T7401] vcan0: tx address claim with dest, not broadcast [ 222.787562][ T7401] program syz.4.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.797060][ T5872] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 222.972705][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.983826][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.015939][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.037955][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.053504][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.074545][ T5872] usb 1-1: config 0 descriptor?? [ 223.222136][ T30] audit: type=1326 audit(1749037131.928:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.2.420" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7fc00000 [ 223.380477][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.521040][ T5872] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x6 [ 223.537708][ T5872] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 223.550474][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 223.562444][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.581822][ T5872] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 223.625550][ T7414] program syz.1.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.636834][ T7414] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 223.644842][ T7414] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 223.656188][ T7414] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 223.670243][ T7414] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 223.679606][ T43] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.702274][ T43] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.728762][ T43] usb 5-1: Product: syz [ 223.751891][ T43] usb 5-1: Manufacturer: syz [ 223.756578][ T43] usb 5-1: SerialNumber: syz [ 223.796583][ T43] usb 5-1: config 0 descriptor?? [ 223.820418][ T10] usb 1-1: USB disconnect, device number 23 [ 224.012126][ T7420] [U]  [ 224.046864][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 224.124804][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 224.178719][ T7425] FAULT_INJECTION: forcing a failure. [ 224.178719][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 224.202303][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.3.431 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 224.202332][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.202344][ T7425] Call Trace: [ 224.202352][ T7425] [ 224.202361][ T7425] dump_stack_lvl+0x189/0x250 [ 224.202408][ T7425] ? __pfx____ratelimit+0x10/0x10 [ 224.202439][ T7425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.202468][ T7425] ? __pfx__printk+0x10/0x10 [ 224.202494][ T7425] ? __pfx___might_resched+0x10/0x10 [ 224.202514][ T7425] ? fs_reclaim_acquire+0x7d/0x100 [ 224.202546][ T7425] should_fail_ex+0x414/0x560 [ 224.202583][ T7425] should_failslab+0xa8/0x100 [ 224.202610][ T7425] __kmalloc_noprof+0xcb/0x4f0 [ 224.202630][ T7425] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 224.202657][ T7425] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 224.202693][ T7425] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 224.202729][ T7425] genl_family_rcv_msg_doit+0xb8/0x300 [ 224.202765][ T7425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 224.202795][ T7425] ? rcu_is_watching+0x15/0xb0 [ 224.202818][ T7425] ? apparmor_capable+0x137/0x1b0 [ 224.202844][ T7425] ? bpf_lsm_capable+0x9/0x20 [ 224.202863][ T7425] ? security_capable+0x7e/0x2e0 [ 224.202899][ T7425] genl_rcv_msg+0x60e/0x790 [ 224.202935][ T7425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.202960][ T7425] ? ref_tracker_free+0x63a/0x7d0 [ 224.202977][ T7425] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 224.203003][ T7425] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 224.203023][ T7425] ? __pfx_nl80211_post_doit+0x10/0x10 [ 224.203050][ T7425] ? __pfx_ref_tracker_free+0x10/0x10 [ 224.203084][ T7425] netlink_rcv_skb+0x208/0x470 [ 224.203109][ T7425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.203137][ T7425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.203181][ T7425] ? down_read+0x1ad/0x2e0 [ 224.203205][ T7425] genl_rcv+0x28/0x40 [ 224.203229][ T7425] netlink_unicast+0x75b/0x8d0 [ 224.203261][ T7425] netlink_sendmsg+0x805/0xb30 [ 224.203297][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.203324][ T7425] ? __import_iovec+0x5d4/0x7f0 [ 224.203348][ T7425] ? aa_sock_msg_perm+0x94/0x160 [ 224.203388][ T7425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.203414][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.203440][ T7425] __sock_sendmsg+0x219/0x270 [ 224.203475][ T7425] ____sys_sendmsg+0x505/0x830 [ 224.203507][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.203549][ T7425] ___sys_sendmsg+0x21f/0x2a0 [ 224.203578][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.203645][ T7425] ? __fget_files+0x2a/0x420 [ 224.203669][ T7425] ? __fget_files+0x3a0/0x420 [ 224.203705][ T7425] __sys_sendmsg+0x164/0x220 [ 224.203734][ T7425] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.203777][ T7425] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 224.203808][ T7425] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.203839][ T7425] __do_fast_syscall_32+0xb6/0x2b0 [ 224.203880][ T7425] do_fast_syscall_32+0x34/0x80 [ 224.203910][ T7425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.203936][ T7425] RIP: 0023:0xf710e539 [ 224.203955][ T7425] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 224.203974][ T7425] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 224.203997][ T7425] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 224.204012][ T7425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.204025][ T7425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.204037][ T7425] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.204051][ T7425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.204084][ T7425] [ 224.731199][ T7404] netlink: 84 bytes leftover after parsing attributes in process `syz.4.425'. [ 225.238840][ T7432] netlink: 64 bytes leftover after parsing attributes in process `syz.1.434'. [ 225.420611][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 225.593255][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 225.609385][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.638424][ T10] usb 3-1: config 0 descriptor?? [ 225.722252][ T9] usb 5-1: USB disconnect, device number 19 [ 226.040113][ T880] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 226.173217][ T10] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 226.210680][ T10] usb 3-1: USB disconnect, device number 19 [ 226.240098][ T880] usb 1-1: Using ep0 maxpacket: 16 [ 226.249110][ T880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.330001][ T5872] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 226.409352][ T880] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 226.459452][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.470235][ T5872] usb 2-1: device descriptor read/64, error -71 [ 226.655229][ T880] usb 1-1: config 0 descriptor?? [ 226.710014][ T5872] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 226.900202][ T5872] usb 2-1: device descriptor read/64, error -71 [ 227.023214][ T5872] usb usb2-port1: attempt power cycle [ 227.100570][ T5931] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 227.224390][ T880] hid (null): invalid report_count 43536 [ 227.263048][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.284757][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 227.296432][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.309570][ T5931] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 227.328181][ T880] redragon 0003:0C45:760B.000A: unknown main item tag 0x6 [ 227.337267][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.374256][ T5931] usb 5-1: config 0 descriptor?? [ 227.380047][ T5872] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 227.391609][ T7456] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 227.401276][ T5872] usb 2-1: device descriptor read/8, error -71 [ 227.432704][ T880] redragon 0003:0C45:760B.000A: unknown main item tag 0x0 [ 227.509056][ T880] redragon 0003:0C45:760B.000A: unknown main item tag 0x0 [ 227.540145][ T880] redragon 0003:0C45:760B.000A: unknown main item tag 0x0 [ 227.547553][ T880] redragon 0003:0C45:760B.000A: unknown main item tag 0x5 [ 227.557430][ T880] redragon 0003:0C45:760B.000A: invalid report_count 43536 [ 227.564821][ T880] redragon 0003:0C45:760B.000A: item 0 2 1 9 parsing failed [ 227.573607][ T880] redragon 0003:0C45:760B.000A: probe with driver redragon failed with error -22 [ 227.647073][ T880] usb 1-1: USB disconnect, device number 24 [ 227.660490][ T5872] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 227.750854][ T5872] usb 2-1: device descriptor read/8, error -71 [ 227.818658][ T5931] kye 0003:0458:5014.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 227.877280][ T5931] kye 0003:0458:5014.000B: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 227.933684][ T5872] usb usb2-port1: unable to enumerate USB device [ 227.971562][ T5931] kye 0003:0458:5014.000B: tablet-enabling feature report not found [ 227.999944][ T5931] kye 0003:0458:5014.000B: tablet enabling failed [ 228.142741][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 228.193884][ T7460] ================================================================== [ 228.201982][ T7460] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 228.210230][ T7460] Read of size 7 at addr ffff88805e4ef240 by task fido_id/7460 [ 228.217864][ T7460] [ 228.220188][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: fido_id Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 228.220204][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.220212][ T7460] Call Trace: [ 228.220218][ T7460] [ 228.220223][ T7460] dump_stack_lvl+0x189/0x250 [ 228.220243][ T7460] ? rcu_is_watching+0x15/0xb0 [ 228.220254][ T7460] ? __kasan_check_byte+0x12/0x40 [ 228.220267][ T7460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.220293][ T7460] ? rcu_is_watching+0x15/0xb0 [ 228.220303][ T7460] ? lock_release+0x4b/0x3e0 [ 228.220318][ T7460] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 228.220333][ T7460] ? __virt_addr_valid+0x1c8/0x5c0 [ 228.220346][ T7460] ? __virt_addr_valid+0x4a5/0x5c0 [ 228.220357][ T7460] print_report+0xd2/0x2b0 [ 228.220372][ T7460] ? report_descriptor_read+0xb5/0x100 [ 228.220385][ T7460] kasan_report+0x118/0x150 [ 228.220397][ T7460] ? report_descriptor_read+0xb5/0x100 [ 228.220412][ T7460] kasan_check_range+0x2b0/0x2c0 [ 228.220429][ T7460] ? report_descriptor_read+0xb5/0x100 [ 228.220443][ T7460] __asan_memcpy+0x29/0x70 [ 228.220458][ T7460] report_descriptor_read+0xb5/0x100 [ 228.220472][ T7460] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 228.220485][ T7460] kernfs_fop_read_iter+0x3fb/0x640 [ 228.220503][ T7460] vfs_read+0x4d0/0x980 [ 228.220516][ T7460] ? __pfx_vfs_read+0x10/0x10 [ 228.220527][ T7460] ? do_sys_openat2+0x154/0x1c0 [ 228.220541][ T7460] ? kmem_cache_free+0x18f/0x400 [ 228.220556][ T7460] ksys_read+0x145/0x250 [ 228.220567][ T7460] ? __pfx_ksys_read+0x10/0x10 [ 228.220578][ T7460] ? do_syscall_64+0xbe/0x3b0 [ 228.220596][ T7460] do_syscall_64+0xfa/0x3b0 [ 228.220612][ T7460] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.220628][ T7460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.220639][ T7460] ? clear_bhb_loop+0x60/0xb0 [ 228.220652][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.220664][ T7460] RIP: 0033:0x7f88822a7407 [ 228.220675][ T7460] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 228.220687][ T7460] RSP: 002b:00007ffc2a653310 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 228.220701][ T7460] RAX: ffffffffffffffda RBX: 00007f8882a88880 RCX: 00007f88822a7407 [ 228.220710][ T7460] RDX: 0000000000001000 RSI: 00007ffc2a653360 RDI: 0000000000000004 [ 228.220718][ T7460] RBP: 00005617d41cd730 R08: 0000000000000000 R09: 0000000000000000 [ 228.220726][ T7460] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617d41cc930 [ 228.220733][ T7460] R13: 00007ffc2a653360 R14: 0000000000000004 R15: 00005617a63254d8 [ 228.220745][ T7460] [ 228.220750][ T7460] [ 228.479755][ T7460] Allocated by task 5931: [ 228.484095][ T7460] kasan_save_track+0x3e/0x80 [ 228.488783][ T7460] __kasan_kmalloc+0x93/0xb0 [ 228.493400][ T7460] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 228.499827][ T7460] kmemdup_noprof+0x2b/0x70 [ 228.504351][ T7460] hid_open_report+0x208/0xee0 [ 228.509123][ T7460] kye_probe+0x21/0x5f0 [ 228.513276][ T7460] hid_device_probe+0x39d/0x710 [ 228.518129][ T7460] really_probe+0x26a/0x9a0 [ 228.522631][ T7460] __driver_probe_device+0x18c/0x2f0 [ 228.527909][ T7460] driver_probe_device+0x4f/0x430 [ 228.532931][ T7460] __device_attach_driver+0x2ce/0x530 [ 228.538299][ T7460] bus_for_each_drv+0x251/0x2e0 [ 228.543147][ T7460] __device_attach+0x2b8/0x400 [ 228.547907][ T7460] bus_probe_device+0x185/0x260 [ 228.552749][ T7460] device_add+0x7b6/0xb50 [ 228.557074][ T7460] hid_add_device+0x398/0x540 [ 228.561745][ T7460] usbhid_probe+0xe13/0x12a0 [ 228.566333][ T7460] usb_probe_interface+0x641/0xbc0 [ 228.571438][ T7460] really_probe+0x26a/0x9a0 [ 228.575940][ T7460] __driver_probe_device+0x18c/0x2f0 [ 228.581656][ T7460] driver_probe_device+0x4f/0x430 [ 228.586676][ T7460] __device_attach_driver+0x2ce/0x530 [ 228.592045][ T7460] bus_for_each_drv+0x251/0x2e0 [ 228.596898][ T7460] __device_attach+0x2b8/0x400 [ 228.601658][ T7460] bus_probe_device+0x185/0x260 [ 228.606500][ T7460] device_add+0x7b6/0xb50 [ 228.610833][ T7460] usb_set_configuration+0x1a87/0x20e0 [ 228.616287][ T7460] usb_generic_driver_probe+0x8d/0x150 [ 228.621737][ T7460] usb_probe_device+0x1c1/0x390 [ 228.626582][ T7460] really_probe+0x26a/0x9a0 [ 228.631082][ T7460] __driver_probe_device+0x18c/0x2f0 [ 228.636364][ T7460] driver_probe_device+0x4f/0x430 [ 228.641385][ T7460] __device_attach_driver+0x2ce/0x530 [ 228.646754][ T7460] bus_for_each_drv+0x251/0x2e0 [ 228.651594][ T7460] __device_attach+0x2b8/0x400 [ 228.656351][ T7460] bus_probe_device+0x185/0x260 [ 228.661194][ T7460] device_add+0x7b6/0xb50 [ 228.665523][ T7460] usb_new_device+0xa39/0x16c0 [ 228.670298][ T7460] hub_event+0x2941/0x4a00 [ 228.674703][ T7460] process_scheduled_works+0xade/0x17b0 [ 228.680246][ T7460] worker_thread+0x8a0/0xda0 [ 228.684827][ T7460] kthread+0x711/0x8a0 [ 228.688890][ T7460] ret_from_fork+0x3f9/0x770 [ 228.693475][ T7460] ret_from_fork_asm+0x1a/0x30 [ 228.698231][ T7460] [ 228.700547][ T7460] The buggy address belongs to the object at ffff88805e4ef240 [ 228.700547][ T7460] which belongs to the cache kmalloc-8 of size 8 [ 228.714418][ T7460] The buggy address is located 0 bytes inside of [ 228.714418][ T7460] freed 8-byte region [ffff88805e4ef240, ffff88805e4ef248) [ 228.728124][ T7460] [ 228.730459][ T7460] The buggy address belongs to the physical page: [ 228.736873][ T7460] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e4efa40 pfn:0x5e4ef [ 228.746953][ T7460] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 228.754512][ T7460] page_type: f5(slab) [ 228.758523][ T7460] raw: 00fff00000000000 ffff88801a441500 0000000000000000 dead000000000001 [ 228.767120][ T7460] raw: ffff88805e4efa40 0000000080800072 00000000f5000000 0000000000000000 [ 228.775707][ T7460] page dumped because: kasan: bad access detected [ 228.782134][ T7460] page_owner tracks the page as allocated [ 228.787840][ T7460] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5847, tgid 5847 (syz-executor), ts 94197307872, free_ts 94197283158 [ 228.807210][ T7460] post_alloc_hook+0x240/0x2a0 [ 228.811985][ T7460] get_page_from_freelist+0x21e4/0x22c0 [ 228.817556][ T7460] __alloc_frozen_pages_noprof+0x181/0x370 [ 228.823390][ T7460] alloc_pages_mpol+0x232/0x4a0 [ 228.828275][ T7460] allocate_slab+0x8a/0x3b0 [ 228.832774][ T7460] ___slab_alloc+0xbfc/0x1480 [ 228.837463][ T7460] __kmalloc_node_noprof+0x2fd/0x4e0 [ 228.843032][ T7460] __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 228.848931][ T7460] vmalloc_noprof+0xb2/0xf0 [ 228.853434][ T7460] xt_compat_init_offsets+0xd3/0x1c0 [ 228.858745][ T7460] compat_table_info+0x99/0xa90 [ 228.863596][ T7460] do_ip6t_get_ctl+0x80c/0x1180 [ 228.868456][ T7460] nf_getsockopt+0x26e/0x290 [ 228.873073][ T7460] ipv6_getsockopt+0x1ed/0x290 [ 228.877846][ T7460] do_sock_getsockopt+0x35d/0x650 [ 228.882881][ T7460] __sys_getsockopt+0x128/0x1d0 [ 228.887755][ T7460] page last free pid 5847 tgid 5847 stack trace: [ 228.894085][ T7460] __free_frozen_pages+0xc71/0xe70 [ 228.899207][ T7460] kasan_populate_vmalloc+0x18a/0x1a0 [ 228.904577][ T7460] alloc_vmap_area+0xd51/0x1490 [ 228.909438][ T7460] __get_vm_area_node+0x1f8/0x300 [ 228.914453][ T7460] __vmalloc_node_range_noprof+0x301/0x12f0 [ 228.920346][ T7460] vmalloc_noprof+0xb2/0xf0 [ 228.924839][ T7460] xt_compat_init_offsets+0xd3/0x1c0 [ 228.930120][ T7460] compat_table_info+0x99/0xa90 [ 228.934965][ T7460] do_ip6t_get_ctl+0x80c/0x1180 [ 228.939809][ T7460] nf_getsockopt+0x26e/0x290 [ 228.944402][ T7460] ipv6_getsockopt+0x1ed/0x290 [ 228.949161][ T7460] do_sock_getsockopt+0x35d/0x650 [ 228.954185][ T7460] __sys_getsockopt+0x128/0x1d0 [ 228.959026][ T7460] __ia32_compat_sys_socketcall+0x824/0x9c0 [ 228.964916][ T7460] __do_fast_syscall_32+0xb6/0x2b0 [ 228.970044][ T7460] do_fast_syscall_32+0x34/0x80 [ 228.974983][ T7460] [ 228.977302][ T7460] Memory state around the buggy address: [ 228.982933][ T7460] ffff88805e4ef100: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 228.990997][ T7460] ffff88805e4ef180: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 228.999064][ T7460] >ffff88805e4ef200: fa fc fc fc fa fc fc fc fb fc fc fc fa fc fc fc [ 229.007129][ T7460] ^ [ 229.013283][ T7460] ffff88805e4ef280: 00 fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc [ 229.021341][ T7460] ffff88805e4ef300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 229.029391][ T7460] ================================================================== [ 229.093349][ T5931] usb 5-1: USB disconnect, device number 20 [ 229.178492][ T7460] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.185764][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: fido_id Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 229.197187][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.207370][ T7460] Call Trace: [ 229.210678][ T7460] [ 229.213637][ T7460] dump_stack_lvl+0x99/0x250 [ 229.218262][ T7460] ? __asan_memcpy+0x40/0x70 [ 229.222890][ T7460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.228226][ T7460] ? __pfx__printk+0x10/0x10 [ 229.232839][ T7460] panic+0x2db/0x790 [ 229.236749][ T7460] ? __pfx_preempt_schedule+0x10/0x10 [ 229.242142][ T7460] ? __pfx_panic+0x10/0x10 [ 229.246572][ T7460] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 229.252474][ T7460] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 229.258817][ T7460] ? report_descriptor_read+0xb5/0x100 [ 229.264294][ T7460] check_panic_on_warn+0x89/0xb0 [ 229.269328][ T7460] ? report_descriptor_read+0xb5/0x100 [ 229.274799][ T7460] end_report+0x78/0x160 [ 229.279045][ T7460] kasan_report+0x129/0x150 [ 229.283559][ T7460] ? report_descriptor_read+0xb5/0x100 [ 229.289025][ T7460] kasan_check_range+0x2b0/0x2c0 [ 229.293975][ T7460] ? report_descriptor_read+0xb5/0x100 [ 229.299443][ T7460] __asan_memcpy+0x29/0x70 [ 229.303870][ T7460] report_descriptor_read+0xb5/0x100 [ 229.309175][ T7460] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 229.314641][ T7460] kernfs_fop_read_iter+0x3fb/0x640 [ 229.319856][ T7460] vfs_read+0x4d0/0x980 [ 229.324033][ T7460] ? __pfx_vfs_read+0x10/0x10 [ 229.328716][ T7460] ? do_sys_openat2+0x154/0x1c0 [ 229.333576][ T7460] ? kmem_cache_free+0x18f/0x400 [ 229.338522][ T7460] ksys_read+0x145/0x250 [ 229.342775][ T7460] ? __pfx_ksys_read+0x10/0x10 [ 229.347545][ T7460] ? do_syscall_64+0xbe/0x3b0 [ 229.352239][ T7460] do_syscall_64+0xfa/0x3b0 [ 229.356892][ T7460] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.362203][ T7460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.368409][ T7460] ? clear_bhb_loop+0x60/0xb0 [ 229.373091][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.378993][ T7460] RIP: 0033:0x7f88822a7407 [ 229.383416][ T7460] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 229.403048][ T7460] RSP: 002b:00007ffc2a653310 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 229.411498][ T7460] RAX: ffffffffffffffda RBX: 00007f8882a88880 RCX: 00007f88822a7407 [ 229.419555][ T7460] RDX: 0000000000001000 RSI: 00007ffc2a653360 RDI: 0000000000000004 [ 229.427543][ T7460] RBP: 00005617d41cd730 R08: 0000000000000000 R09: 0000000000000000 [ 229.435553][ T7460] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617d41cc930 [ 229.443550][ T7460] R13: 00007ffc2a653360 R14: 0000000000000004 R15: 00005617a63254d8 [ 229.451545][ T7460] [ 229.454895][ T7460] Kernel Offset: disabled [ 229.459215][ T7460] Rebooting in 86400 seconds..