last executing test programs: 7.743001987s ago: executing program 2 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x1000000) 7.590835576s ago: executing program 2 (id=1005): socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x7, 0x6b1, 0xfffffffa, {0x77359400}, {0x77359400}, {0x4}, 0x1, @can={{0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "07fae6ab75574050"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2482, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_setup(0x1, &(0x7f00000004c0)) write(r0, &(0x7f00000004c0)="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", 0xfc) syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x408140) ioprio_set$pid(0x2, 0x0, 0x0) 7.102762361s ago: executing program 3 (id=1007): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/192, 0xc0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0x151041, 0x0) getsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) add_key$user(&(0x7f0000000680), &(0x7f0000002180)={'syz', 0x2}, &(0x7f00000006c0)='b', 0xff61, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xc2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xd, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000580)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xc4}}]}, 0xac}}, 0x20000000) socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "e93b0474e097f3e3", "d8c34b5bd406184eee3efad9d7ee38bb", "5974c4b8", "a577bba1b3b2abdd"}, 0x28) r8 = dup3(r0, r4, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, 0x0, 0x0) close(r4) close_range(r2, r2, 0x2) 7.081774097s ago: executing program 3 (id=1008): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) open_tree(r1, &(0x7f0000000300)='./file1\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {0x0, 0x4102}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000840) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2480b101}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x16, 0x401, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 7.042758085s ago: executing program 3 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) r1 = socket$caif_stream(0x25, 0x1, 0x3) recvmmsg(r1, &(0x7f0000005c80)=[{{&(0x7f0000000800)=@rc={0x1f, @none}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/205, 0xcd}], 0x1, &(0x7f00000009c0)=""/174, 0xae}, 0x10000}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/127, 0x7f}, {&(0x7f0000000b80)=""/49, 0x31}, {&(0x7f0000000bc0)=""/173, 0xad}], 0x3, &(0x7f0000000700)=""/248, 0xf8}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/176, 0xb0}, {&(0x7f0000000ec0)=""/173, 0xad}], 0x4, &(0x7f0000000fc0)=""/231, 0xe7}, 0x2}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000001580)=[{&(0x7f0000001140)=""/21, 0x15}, {&(0x7f0000001180)=""/140, 0x8c}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000001300)=""/252, 0xfc}, {&(0x7f0000001400)=""/121, 0x79}, {&(0x7f0000001480)=""/235, 0xeb}], 0x6, &(0x7f00000015c0)=""/21, 0x15}, 0x140000}, {{&(0x7f0000001600)=@qipcrtr, 0x80, &(0x7f0000003a80)=[{&(0x7f0000001680)=""/149, 0x95}, {&(0x7f0000001740)=""/119, 0x77}, {&(0x7f00000017c0)=""/149, 0x95}, {&(0x7f0000003980)=""/68, 0x44}, {&(0x7f0000003a00)=""/116, 0x74}], 0x5, &(0x7f0000003ac0)=""/175, 0xaf}}, {{&(0x7f0000003b80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003c00)=""/204, 0xcc}], 0x1, &(0x7f0000003d40)=""/17, 0x11}, 0x4}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003d80)}, {&(0x7f0000003dc0)=""/92, 0x5c}], 0x2, &(0x7f0000003e80)=""/214, 0xd6}, 0xfffffffc}, {{&(0x7f0000003f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004000)=""/233, 0xe9}, {&(0x7f0000004100)=""/220, 0xdc}, {&(0x7f0000004200)=""/228, 0xe4}, {&(0x7f0000004300)=""/249, 0xf9}], 0x4}, 0x100}, {{&(0x7f0000004440)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005800)=[{&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/173, 0xad}, {&(0x7f0000005580)=""/61, 0x3d}, {&(0x7f00000055c0)=""/124, 0x7c}, {&(0x7f0000005640)=""/94, 0x5e}, {&(0x7f00000056c0)=""/88, 0x58}, {&(0x7f0000005740)=""/100, 0x64}, {&(0x7f00000057c0)=""/60, 0x3c}], 0x8, &(0x7f0000005840)=""/50, 0x32}, 0x4}, {{&(0x7f0000005880)=@ax25={{0x3, @rose}, [@null, @default, @null, @default, @bcast, @default]}, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005900)=""/72, 0x48}, {&(0x7f0000005980)=""/155, 0x9b}, {&(0x7f0000005a40)=""/47, 0x2f}, {&(0x7f0000005a80)=""/89, 0x59}, {&(0x7f0000005b00)=""/132, 0x84}], 0x5, &(0x7f0000005c00)=""/126, 0x7e}, 0x6}], 0xa, 0x100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/276], 0x18}}, 0x8000) r3 = socket$packet(0x11, 0x3, 0x300) accept4(r3, 0x0, &(0x7f0000000080), 0x80000) socket$inet6(0xa, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) personality(0x400000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast2, 0x0, 0x0, 'ovf\x00', 0x1a, 0x569f, 0x400006b}, 0x2c) 6.777311976s ago: executing program 3 (id=1010): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) sendmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f00000003c0)='N', 0x1}], 0xe0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c0000008400000002fe"], 0xc}}], 0x2, 0x40000) 6.530671465s ago: executing program 3 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000032c0)=""/254, 0xfe}, {&(0x7f00000017c0)=""/4101, 0x1005}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000003140)=""/168, 0xa8}, {&(0x7f0000001380)=""/132, 0x84}, {&(0x7f0000001440)=""/221, 0xdd}, {&(0x7f0000003200)=""/132, 0x84}, {&(0x7f00000015c0)=""/234, 0xea}], 0x8}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x100, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000a00), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r4, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/129, 0x81}], 0x1, 0xfffffffb, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x27) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f2d00000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r9, {0xfff8, 0x4}, {0xd, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x179, 0x179, 0x6, [@enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x9, [{0x1, 0x9, 0x5}, {0x2, 0x0, 0x6}, {0x10, 0x200, 0x40}, {0xd, 0x8, 0x9}, {0x2, 0x9, 0x8}, {0x7, 0xdfe, 0x8001}]}, @typedef={0xc}, @datasec={0x9, 0x5, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x8000}, {0x3, 0x1ff, 0x97e}, {0x2, 0xfffffffb, 0x7f}, {0x3, 0x6, 0x47dd7f85}, {0x1, 0x7}], "dc"}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5}, {0x2, 0x1}, {0x8, 0x5}, {0xd}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xd}, {0xf, 0x1}, {0x9, 0x6}, {0x3, 0x3}]}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0x5, [{0xb, 0x3, 0x5}]}, @enum64={0x10, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x2, 0xde}, {0xd, 0x400, 0x6}, {0xb, 0x2, 0xe5}, {0xa, 0x5, 0x4}, {0x9, 0x9, 0x2}]}, @struct={0xd, 0x0, 0x0, 0x4, 0x1, 0x3}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x2e, 0x61, 0x0]}}, &(0x7f0000000000)=""/88, 0x19a, 0x58, 0x1, 0xfffffffe, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r1, @ANYBLOB="000100"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="020000000204a4ffff00000000000400000000000000000000000000000000200000"], 0x50) 6.226495925s ago: executing program 1 (id=1013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b0000ffffffef000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 5.809455887s ago: executing program 3 (id=1014): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000044000/0x4000)=nil, 0x4000, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x907, 0x6}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000000)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x2b, 0x80801, 0x1) socket$alg(0x26, 0x5, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) socket$inet6(0xa, 0x2, 0x8) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee37108"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) 5.721026351s ago: executing program 1 (id=1016): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e000000000000000006", '\x00', "03000500", "fc599184", ["8bada940ed86af0a00", "c2a4a110cfc1bac26ef76ef7", '\x00', "00113a071fa0fcd9c500"]}) 5.608623008s ago: executing program 2 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000004000c0002"], 0x30}}, 0x0) 4.998586709s ago: executing program 1 (id=1018): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xffff8000}}) 4.909998055s ago: executing program 2 (id=1020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0x8, 0x7fffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$media(0x0, 0x0, 0x101d01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1cf42, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000feffffff04000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x48) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x42c, 0xffffffff, 0x0, 0x0, 0x210, 0xffffffff, 0xffffffff, 0x364, 0x364, 0x364, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffffff, 0x1807ffffe, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffffff], 'bond_slave_1\x00', 'wlan0\x00', {}, {0x8f4197ffdcd793db}, 0x3b, 0xb, 0x1, 0x38}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d2], 0x4, 0x9, 0x3}}]}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x6, 0x7571}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x2f, 0x5, 0x38, 0x1, 0x1, 0x109, 0x1882}}, @common=@hl={{0x24}, {0x2}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0x3b, 0x6, 0x9, 0x8, 0xe, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x21}, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff], 0x2c02, 0x100}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x488) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000000c0)={0x30000015}) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) 4.810324031s ago: executing program 1 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7ffffffffffffffe, 0xffff, 0x7ff, 0xffffffffffffd656, 0x5, 0x10000000000012, 0xc0, 0x1}, &(0x7f0000000200)={0x8001, 0x8, 0xffffffffffffffc0, 0x9, 0x2, 0x23f, 0xe0, 0x2}, &(0x7f0000000240)={0x12a, 0x5, 0x24, 0x7, 0x3, 0x7fff, 0xfffffffffffffffc, 0x5}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f0000000180)={[0xfffffffe, 0x2]}, 0x8}) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0x40184810, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x1947}) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1, 0x400) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0xff0b10f057e46b7e}, 0x20000000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0xc) socket(0x18, 0x6, 0x7) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000340)=0xffffffff, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000840000000200000006000400280000620b0000021681378b5b8a4d032c6610215fffdd730a21c888ad352051e882f5b38e4c966014a41c8966595be4c171353761819a68e3b91b2653b5618caadb868f061d72446006a010a8cff877b2fdbbe6dea5385ab1b93d2813cb13839fe207d14f1079b4b950e473ff020775013128aa5e58884e47cfcc0e14bbc813b4ddc97c2f7b0000", @ANYRES32=r11], 0x1c, 0x60c4}, 0x6) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x7, 0x0, 0x101}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.729345922s ago: executing program 4 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0800250015000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 4.628236539s ago: executing program 4 (id=1024): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0x50, 0xb, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xc, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x3, 0xe4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2b, 0x5, 0xd}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000580)=@string={0x2}}, {0x4, &(0x7f0000000740)=@string={0x4, 0x3, "34db"}}]}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x11, 0x2, 0x1, "bc57499e007105bf0000000100000000e40300", 0x50424752}) r1 = syz_io_uring_setup(0x7d0c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x18d}, &(0x7f0000000100), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x1a, 0xffffffffffffffff, 0x1) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x6802) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000380)=@multiplanar_mmap={0x40, 0x3, 0x4, 0x4000, 0x6, {r3, r4/1000+60000}, {0x3, 0x8, 0x40, 0x9, 0xcf, 0x6, "0e866ec5"}, 0x3, 0x1, {&(0x7f0000000280)=[{0x80, 0x0, {0xc}, 0x5}, {0x0, 0x200, {0x891}, 0x3}]}, 0x3, 0x0, r5}) mmap$snddsp_status(&(0x7f000004a000/0x4000)=nil, 0x1000, 0x1000008, 0x12, r2, 0x82000000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201b911d1ac00406a05f00000000000000109022400010000000009040000020300000009000000000000952d483ca59c44f42e0000090581030000000000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b0000000500000000000000000084"], 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xf2, 0x900) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000740)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$VIDIOC_SUBDEV_G_CROP(r7, 0xc038563b, &(0x7f0000000400)={0x1, 0x0, {0x2, 0x5, 0x3b, 0x9}}) 2.909724389s ago: executing program 2 (id=1027): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000001880)=[{&(0x7f0000000440)=""/164, 0xa4}], 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xe6, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902d40002010650000904000001020d00000524060001052400a9b30d240fedc6f9338fbe469aed7601077487f44f9801020000000300ff000606241a0c001407240a05090558"], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0xbc85, 0x20000}, &(0x7f0000002000), &(0x7f0000000100)) io_uring_enter(r3, 0x48e9, 0x300, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008054}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x11}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_PHYS(r7, 0x4008556c, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000000), 0x4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000), 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x70ad2b, 0x25dfdbfb, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x8044080) socket$netlink(0x10, 0x3, 0xf) 1.086696928s ago: executing program 0 (id=1029): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f00000000c0)=0xfd, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x10000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 1.01901936s ago: executing program 1 (id=1030): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000dc0), 0x386) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x34, r3, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 772.297838ms ago: executing program 4 (id=1031): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x8c010000, 0x18c, 0x203, 0x0, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {0xc}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffc415}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x6, 0x0, 0x40}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) 714.637304ms ago: executing program 1 (id=1032): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe401e96f0025c7465e041c9b2dcfdcd5353a0203010902"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = epoll_create1(0x80000) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x60000015}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x9b64, 0x8000) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x12, 0x0, @val=@netfilter={0x2, 0x0, 0x3, 0x1}}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ppoll(&(0x7f00000000c0)=[{r3, 0xc250}, {r4, 0x8004}, {r2, 0x100}, {r5, 0x8090}, {r1, 0x105c}], 0x5, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 639.172711ms ago: executing program 0 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000003000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0) 621.391951ms ago: executing program 4 (id=1034): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000010ffffffffffff0003000000030005000000000002000300ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000001000000006b3c000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) 466.748495ms ago: executing program 4 (id=1035): r0 = syz_open_dev$video(&(0x7f0000000080), 0x3, 0x32000) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000180)={{0xb, 0x5}, 0x100, './file0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x1d, r3, 0xf423f}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES16=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES32=r2], 0x20000600}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="0101000024"]) 445.458803ms ago: executing program 0 (id=1036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x3, 0x0, 0xd8e3, {0x5, 0x0, 0x7f, 0xfb2, 0x8, 0x60000000}, {0x6f, 0x1, 0x89f, 0x8, 0x4, 0xd}, 0x6d, 0x40, 0x401}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6c2, 0x1, 0x6, 0x0, 0x8, 0x2, 0x10001, 0x2, 0x6de5, 0xac, 0x8, 0x6, 0x1ff, 0x14d, 0x68, 0x8, 0x0, 0x6, 0x400, 0xc, 0x0, 0x3, 0xc8, 0x3, 0x5a778254, 0x0, 0x6, 0x3, 0xa, 0x1000, 0x7, 0x9, 0x1, 0xff, 0x6, 0xf, 0xcb2f, 0x7, 0x9, 0x8a, 0x800, 0x0, 0x5, 0x57d, 0x3, 0x10001, 0x1, 0x2000000, 0x3b5, 0x8, 0x1, 0x7fff, 0xe14, 0x69fd, 0x2, 0x9, 0x8001, 0x2, 0x363b, 0x3, 0x7f, 0xb, 0x10000, 0x7aff, 0x200, 0x4, 0x1, 0xb6e8, 0x7, 0x2, 0x3, 0xb45, 0x8, 0x4, 0x0, 0x7, 0x3, 0x10, 0xe, 0x81, 0xfffffffe, 0x9, 0x0, 0x7, 0x5, 0x1, 0x6, 0xb92, 0x58560105, 0x6, 0x9, 0x3, 0x10, 0xd566, 0xa, 0x100, 0x2, 0x4, 0x15a0, 0x48, 0x7, 0xffff, 0xffff, 0x6, 0xf129, 0x1, 0x0, 0x6, 0x0, 0xffffffff, 0x5, 0xbfb9, 0x2, 0x2b9, 0x0, 0xb, 0x8, 0x9, 0x3, 0x1, 0x8, 0x3, 0x1200000, 0x8, 0x4, 0x5, 0x93bc, 0x1000, 0x48c0, 0x2, 0x9, 0x4, 0x4, 0x5bc, 0x8, 0x4, 0xa148, 0x1, 0xffffff3c, 0x4, 0x100, 0x6c3c, 0x1, 0xff, 0xffffffff, 0x9, 0x80, 0x1, 0x4, 0x1c000, 0x9, 0x1, 0xc2c3, 0x5, 0x79, 0x4, 0x4, 0x6, 0x6, 0x6, 0x80, 0x1, 0xffffffff, 0x7, 0x8, 0x1, 0x7ff, 0xd, 0x7f, 0x80000001, 0xc14a, 0x7fff, 0x8, 0x6, 0x5, 0x0, 0x2, 0x1, 0x8, 0x5, 0x8, 0x3, 0x8, 0x2, 0x6, 0x4, 0x5, 0x0, 0x4, 0x3, 0x48f8, 0x3, 0x3, 0x0, 0x7, 0x5, 0x200, 0x4, 0xfffffeff, 0x6, 0xd8f, 0x3, 0xc387, 0x3, 0x10000, 0x3ff, 0x6, 0x7, 0x4, 0x1000, 0x7ccc, 0xf, 0x8, 0x0, 0x6, 0x1ff, 0x0, 0xa34, 0x4, 0x1ff, 0x87, 0x0, 0x6, 0x1ff, 0x6, 0x4, 0xd1, 0x7, 0xff, 0x80000000, 0x80000001, 0x1, 0x1ff, 0xb, 0x7, 0x53, 0x1ff, 0x7, 0xda6, 0x7ff, 0x4, 0x6, 0x7, 0x7fffffff, 0xffff, 0x84, 0x0, 0x211e, 0x3, 0x2, 0x4, 0x0, 0x4, 0x6, 0x412, 0xb0ec]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x44010}, 0x20000004) 400.521474ms ago: executing program 2 (id=1037): socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x7, 0x6b1, 0xfffffffa, {0x77359400}, {0x77359400}, {0x4}, 0x1, @can={{0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "07fae6ab75574050"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2482, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r0, &(0x7f00000004c0)="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", 0xfc) syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x408140) ioprio_set$pid(0x2, 0x0, 0x0) 357.397243ms ago: executing program 4 (id=1038): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='target '], 0x16) unshare(0x22020400) unshare(0x22020600) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x980912}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x31, 0xffffffffffffffff, 0x877ad000) syz_emit_ethernet(0x2c4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) unshare(0x22020400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x3, 0x0) 262.61201ms ago: executing program 0 (id=1039): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x9253c5b94d3c8d37, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x8}, {0x2, 0xffe0}, {0x1, 0x2}}}, 0x24}}, 0x4044080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x81, 0x10001, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0x2, 0x3}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=@ipv4_getaddr={0x8c, 0x16, 0x200, 0x70bd28, 0x25dfdbfb, {0x2, 0x40, 0x3, 0x0, r4}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010101}, @IFA_LABEL={0x14, 0x3, 'wg2\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LABEL={0x14, 0x3, 'ip6gre0\x00'}, @IFA_LABEL={0x14, 0x3, 'gre0\x00'}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'batadv0\x00', &(0x7f0000000f80)=@ethtool_drvinfo={0x3, "3b3a6e12d52d00eb82cc42f1f00d1b61ab88669e42bdfb3cec88f302de9e1d73", "9e3fe5d75f463d0322b78f5a3995fa1e7546d25aed97fbf6eb197b880bef7d55", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1545ebd0c5b39be0c71d5eb6dab774c0a8f4394f9dfb56b0ccf9f6f1fdfdc1", "78a85ce08babb5877c9ab4909cd318f3ce181dd78515a854b784f51f55030e7f", "510f13cf44b740cd7cd65251"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) sysinfo(&(0x7f00000011c0)=""/201) 130.27475ms ago: executing program 0 (id=1040): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 0s ago: executing program 0 (id=1041): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) (fail_nth: 1) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.276438][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.325375][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.336896][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.346754][ T5927] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 226.392015][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.445292][ T5927] usb 4-1: config 0 descriptor?? [ 226.451520][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.480617][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.499888][ T5932] usbhid 2-1:0.0: can't add hid device: -71 [ 226.512868][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 226.635392][ T5932] usb 2-1: USB disconnect, device number 31 [ 227.220557][ T5927] hid-led 0003:1D34:000A.0008: probe with driver hid-led failed with error -71 [ 227.243121][ T5927] usb 4-1: USB disconnect, device number 18 [ 227.257518][ T8109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.598'. [ 227.471821][ T5932] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 227.491398][ T8120] loop6: detected capacity change from 0 to 63 [ 227.502550][ C1] blk_print_req_error: 7 callbacks suppressed [ 227.502571][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.517892][ C1] buffer_io_error: 7 callbacks suppressed [ 227.517907][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.536864][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.546025][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.567784][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.577714][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.591797][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.601050][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.612470][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.621677][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.632816][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.642035][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.650117][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.659367][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.668331][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 227.673534][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.673558][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.677750][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.687015][ T5932] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 227.690881][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.691933][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.700491][ T5932] usb 3-1: config 0 has no interface number 0 [ 227.708274][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.716235][ T5932] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 227.747664][ T8120] ldm_validate_partition_table(): Disk read failed. [ 227.790367][ T8120] Dev loop6: unable to read RDB block 0 [ 227.797350][ T8120] loop6: unable to read partition table [ 227.821176][ T8120] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 227.851171][ T5932] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 227.866442][ T5932] usb 3-1: config 0 interface 255 has no altsetting 0 [ 227.879872][ T5932] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 227.901322][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.932849][ T5932] usb 3-1: config 0 descriptor?? [ 228.121922][ T5892] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 228.271830][ T5892] usb 4-1: device descriptor read/64, error -71 [ 228.521912][ T5892] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 228.567984][ T8138] program syz.0.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.661834][ T5892] usb 4-1: device descriptor read/64, error -71 [ 228.719259][ T8143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'. [ 228.782388][ T5892] usb usb4-port1: attempt power cycle [ 228.842026][ T5927] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 229.021806][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 229.030526][ T5927] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 229.038941][ T5927] usb 5-1: config 0 has no interface number 0 [ 229.045099][ T5927] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 229.056028][ T5927] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 229.086923][ T5927] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 229.119221][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 229.121834][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.142403][ T5927] usb 5-1: Product: syz [ 229.146735][ T5927] usb 5-1: Manufacturer: syz [ 229.151685][ T5892] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 229.176337][ T5927] usb 5-1: SerialNumber: syz [ 229.176665][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 229.223379][ T5892] usb 4-1: device descriptor read/8, error -71 [ 229.224097][ T5927] usb 5-1: config 0 descriptor?? [ 229.236543][ T8139] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 229.249437][ T8139] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 229.320344][ T5927] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 229.402183][ T5927] ums-sddr09 5-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 229.462669][ T5892] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 229.502837][ T5892] usb 4-1: device descriptor read/8, error -71 [ 229.568075][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.598086][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.612227][ T5892] usb usb4-port1: unable to enumerate USB device [ 229.689023][ T5932] usb 3-1: string descriptor 0 read error: -71 [ 229.697809][ T5901] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 229.708906][ T5932] gspca_main: sq930x-2.14.0 probing 041e:403c [ 229.749232][ T5932] gspca_sq930x: reg_r 001f failed -71 [ 229.764087][ T5932] sq930x 3-1:0.255: probe with driver sq930x failed with error -71 [ 229.791616][ T5932] usb 3-1: USB disconnect, device number 18 [ 229.827283][ T8156] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 229.923314][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.936384][ T5901] usb 1-1: not running at top speed; connect to a high speed hub [ 229.957594][ T5901] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 229.999766][ T5901] usb 1-1: config 4 has no interface number 0 [ 230.027374][ T5901] usb 1-1: config 4 interface 128 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 230.048697][ T5901] usb 1-1: config 4 interface 128 has no altsetting 0 [ 230.069068][ T5901] usb 1-1: string descriptor 0 read error: -22 [ 230.084237][ T5901] usb 1-1: New USB device found, idVendor=0416, idProduct=6660, bcdDevice=cf.cc [ 230.117772][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.143651][ T8152] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 230.223195][ T5901] usb 1-1: Found UVC 0.00 device (0416:6660) [ 230.230507][ T5901] usb 1-1: No valid video chain found. [ 230.389111][ T5901] usb 1-1: USB disconnect, device number 24 [ 230.937351][ T8166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.617'. [ 231.278622][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 231.601456][ T5892] usb 5-1: USB disconnect, device number 22 [ 231.621367][ T8185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.620'. [ 231.722873][ T5901] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 231.925515][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.074661][ T5901] usb 4-1: config 1 interface 0 altsetting 180 endpoint 0x82 is Bulk; changing to Interrupt [ 232.085796][ T5901] usb 4-1: config 1 interface 0 altsetting 180 endpoint 0x3 is Bulk; changing to Interrupt [ 232.139448][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.415430][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 232.426534][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.440279][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.510181][ T8184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.518211][ T8184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.560553][ T5901] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 232.818416][ T5890] usb 4-1: USB disconnect, device number 23 [ 233.475164][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 233.827453][ T8217] netlink: 14 bytes leftover after parsing attributes in process `syz.2.629'. [ 233.865950][ T8210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.988852][ T8214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.009224][ T8214] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 234.024844][ T8214] bond1: (slave vcan1): Error -95 calling set_mac_address [ 234.091189][ T8208] tipc: Started in network mode [ 234.098166][ T8208] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 234.108873][ T8208] tipc: Enabled bearer , priority 10 [ 234.137839][ T8217] tipc: Resetting bearer [ 234.208587][ T8217] tipc: Disabling bearer [ 234.283447][ T8221] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.305879][ T8221] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.316670][ T8221] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.325805][ T8221] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.327248][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'. [ 234.594608][ T8227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.634'. [ 234.967014][ T5890] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 235.132004][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 235.237056][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 235.255908][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 235.286184][ T5890] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 235.317787][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.343855][ T5890] usb 5-1: config 0 descriptor?? [ 235.581049][ T5890] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 235.609132][ T5890] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 235.634580][ T5890] kovaplus 0003:1E7D:2D50.0009: unknown main item tag 0x0 [ 235.653194][ T5836] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 235.698828][ T5890] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 235.778359][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 235.832035][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 235.853447][ T5836] usb 3-1: config index 0 descriptor too short (expected 17170, got 18) [ 235.880905][ T5836] usb 3-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 235.921842][ T5836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 235.945818][ T5836] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 235.960704][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.979802][ T5836] usb 3-1: Product: syz [ 235.989356][ T5836] usb 3-1: Manufacturer: syz [ 236.006358][ T5890] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device [ 236.028142][ T5836] usb 3-1: SerialNumber: syz [ 236.040730][ T5890] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse [ 236.056748][ T5836] usb 3-1: config 0 descriptor?? [ 236.073486][ T5836] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 236.086833][ T5890] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71 [ 236.136365][ T5890] usb 5-1: USB disconnect, device number 23 [ 236.331297][ T8239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.399922][ T5890] usb 3-1: USB disconnect, device number 19 [ 236.412325][ T8260] syzkaller0: entered allmulticast mode [ 236.758338][ T8270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.646'. [ 236.877574][ T5901] IPVS: starting estimator thread 0... [ 237.013422][ T8278] IPVS: using max 32 ests per chain, 76800 per kthread [ 237.084873][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 237.226275][ T8280] bridge0: port 1(vlan2) entered disabled state [ 237.258716][ T8291] netlink: 'syz.3.655': attribute type 3 has an invalid length. [ 237.269646][ T8291] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.655'. [ 237.734222][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 237.768621][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.3.657'. [ 237.802831][ T8299] QAT: Invalid ioctl -805268419 [ 237.814734][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.3.657'. [ 237.825421][ T8299] QAT: Invalid ioctl -2115464132 [ 237.842532][ T8299] QAT: Invalid ioctl -805268419 [ 237.867182][ T8299] QAT: Invalid ioctl -2115464132 [ 238.021933][ T8302] netlink: 84 bytes leftover after parsing attributes in process `syz.3.658'. [ 238.164711][ T8310] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 238.187204][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.194945][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.247071][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.254318][ T8310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.261935][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.269149][ T8310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.285269][ T8310] bridge0: entered allmulticast mode [ 238.318958][ T8310] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 238.397573][ T8310] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 238.451938][ T5890] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 238.468770][ T8321] netlink: 'syz.4.666': attribute type 2 has an invalid length. [ 238.631886][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 238.643305][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 238.678476][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.703683][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 238.720182][ T5890] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 238.730035][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.749854][ T5890] usb 4-1: Product: syz [ 238.759977][ T5890] usb 4-1: Manufacturer: syz [ 238.761823][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 238.785219][ T5890] usb 4-1: SerialNumber: syz [ 238.812861][ T5890] usb 4-1: config 0 descriptor?? [ 238.941840][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 238.952996][ T5901] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 238.972578][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.997748][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.037371][ T5901] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.082675][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 239.104511][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.118601][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 239.140984][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.187354][ T5890] usb 4-1: USB disconnect, device number 24 [ 239.382448][ T5901] usb 5-1: GET_CAPABILITIES returned 0 [ 239.399549][ T5901] usbtmc 5-1:16.0: can't read capabilities [ 239.597006][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 239.619432][ T8321] usbtmc 5-1:16.0: Unable to send data, error -71 [ 239.807283][ T8338] FAULT_INJECTION: forcing a failure. [ 239.807283][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 239.833945][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.0.671 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 239.833972][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.833983][ T8338] Call Trace: [ 239.833990][ T8338] [ 239.833998][ T8338] dump_stack_lvl+0x241/0x360 [ 239.834031][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.834053][ T8338] ? __pfx__printk+0x10/0x10 [ 239.834080][ T8338] ? __pfx___might_resched+0x10/0x10 [ 239.834105][ T8338] should_fail_ex+0x424/0x570 [ 239.834135][ T8338] should_failslab+0xac/0x100 [ 239.834159][ T8338] __kmalloc_cache_noprof+0x73/0x370 [ 239.834180][ T8338] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 239.834205][ T8338] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 239.834233][ T8338] sctp_association_new+0x15ad/0x2540 [ 239.834270][ T8338] sctp_connect_new_asoc+0x31c/0x700 [ 239.834296][ T8338] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 239.834315][ T8338] ? sctp_sendmsg+0xf30/0x3620 [ 239.834342][ T8338] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 239.834362][ T8338] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 239.834382][ T8338] sctp_sendmsg+0x2009/0x3620 [ 239.834426][ T8338] ? __pfx_sctp_sendmsg+0x10/0x10 [ 239.834451][ T8338] ? aa_sk_perm+0x96f/0xac0 [ 239.834488][ T8338] ? inet_sendmsg+0x330/0x390 [ 239.834509][ T8338] __sock_sendmsg+0x1a6/0x270 [ 239.834533][ T8338] ____sys_sendmsg+0x523/0x860 [ 239.834559][ T8338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.834598][ T8338] __sys_sendmmsg+0x4a3/0x7b0 [ 239.834627][ T8338] ? __pfx___sys_sendmmsg+0x10/0x10 [ 239.834649][ T8338] ? __lock_acquire+0xad5/0xd80 [ 239.834706][ T8338] ? vfs_write+0xb29/0xd10 [ 239.834742][ T8338] ? __mutex_unlock_slowpath+0x229/0x800 [ 239.834769][ T8338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.834784][ T8338] ? __fget_files+0x2a/0x420 [ 239.834813][ T8338] ? fput+0x9b/0xd0 [ 239.834826][ T8338] ? ksys_write+0x275/0x2d0 [ 239.834855][ T8338] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 239.834880][ T8338] __do_fast_syscall_32+0xb4/0x110 [ 239.834897][ T8338] ? exc_page_fault+0x5f8/0x920 [ 239.834925][ T8338] do_fast_syscall_32+0x34/0x80 [ 239.834946][ T8338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.834966][ T8338] RIP: 0023:0xf7ff4579 [ 239.834980][ T8338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 239.834992][ T8338] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 239.835011][ T8338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004400 [ 239.835022][ T8338] RDX: 0000000000000002 RSI: 0000000000040000 RDI: 0000000000000000 [ 239.835032][ T8338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.835041][ T8338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.835051][ T8338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.835078][ T8338] [ 240.674324][ T8343] netlink: 44 bytes leftover after parsing attributes in process `syz.3.672'. [ 241.302593][ T8359] netlink: 'syz.3.678': attribute type 3 has an invalid length. [ 241.337443][ T2152] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 241.421842][ T5932] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 241.470362][ T5890] usb 5-1: USB disconnect, device number 24 [ 241.512001][ T2152] usb 2-1: Using ep0 maxpacket: 16 [ 241.521521][ T2152] usb 2-1: config 0 has no interfaces? [ 241.531062][ T2152] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 241.542686][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.555784][ T2152] usb 2-1: Product: syz [ 241.560136][ T2152] usb 2-1: Manufacturer: syz [ 241.568733][ T2152] usb 2-1: SerialNumber: syz [ 241.573640][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 241.585204][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.597449][ T2152] usb 2-1: config 0 descriptor?? [ 241.610060][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.635241][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.652161][ T5932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 241.673973][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.688465][ T5932] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.698169][ T5932] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.706683][ T5932] usb 1-1: Manufacturer: syz [ 241.714521][ T5932] usb 1-1: config 0 descriptor?? [ 241.815395][ T5890] usb 2-1: USB disconnect, device number 32 [ 241.982753][ T5932] rc_core: IR keymap rc-hauppauge not found [ 241.988959][ T5932] Registered IR keymap rc-empty [ 241.995294][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.032161][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.053174][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 242.070017][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 242.087159][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.123080][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.151994][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.181863][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.213562][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.242005][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.262402][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.281996][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.311983][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.332208][ T5932] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.372176][ T5932] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 242.394540][ T5932] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 242.652157][ T5890] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 242.675509][ T5932] IPVS: starting estimator thread 0... [ 242.762088][ T8387] IPVS: using max 38 ests per chain, 91200 per kthread [ 242.791892][ T5890] usb 2-1: device descriptor read/64, error -71 [ 243.042106][ T5890] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 243.145950][ T8402] FAULT_INJECTION: forcing a failure. [ 243.145950][ T8402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.159622][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.3.693 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 243.159647][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.159668][ T8402] Call Trace: [ 243.159674][ T8402] [ 243.159680][ T8402] dump_stack_lvl+0x241/0x360 [ 243.159708][ T8402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.159729][ T8402] ? __pfx__printk+0x10/0x10 [ 243.159758][ T8402] should_fail_ex+0x424/0x570 [ 243.159788][ T8402] _copy_to_user+0x31/0xb0 [ 243.159811][ T8402] put_cmsg_compat+0x418/0x9f0 [ 243.159842][ T8402] ? __pfx_put_cmsg_compat+0x10/0x10 [ 243.159872][ T8402] ? put_cmsg+0x101/0x660 [ 243.159890][ T8402] __sock_recv_cmsgs+0x3e8/0x7e0 [ 243.159906][ T8402] ? __pfx___sock_recv_cmsgs+0x10/0x10 [ 243.159924][ T8402] ? udpv6_recvmsg+0x72d/0x19e0 [ 243.159942][ T8402] ? udpv6_recvmsg+0x72d/0x19e0 [ 243.159963][ T8402] udpv6_recvmsg+0xc22/0x19e0 [ 243.159995][ T8402] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 243.160016][ T8402] ? aa_sk_perm+0x96f/0xac0 [ 243.160036][ T8402] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 243.160054][ T8402] inet6_recvmsg+0x246/0x730 [ 243.160069][ T8402] ? __lock_acquire+0xad5/0xd80 [ 243.160080][ T8402] ? __pfx_inet6_recvmsg+0x10/0x10 [ 243.160092][ T8402] ? aa_sock_msg_perm+0x91/0x160 [ 243.160114][ T8402] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 243.160133][ T8402] sock_recvmsg+0x109/0x280 [ 243.160155][ T8402] ____sys_recvmsg+0x1c8/0x480 [ 243.160179][ T8402] ? __pfx_____sys_recvmsg+0x10/0x10 [ 243.160193][ T8402] ? get_compat_msghdr+0x45e/0x730 [ 243.160233][ T8402] do_recvmmsg+0x53e/0xab0 [ 243.160249][ T8402] ? __pfx_do_recvmmsg+0x10/0x10 [ 243.160285][ T8402] ? rcu_read_lock_any_held+0xbb/0x160 [ 243.160325][ T8402] ? ksys_write+0x24e/0x2d0 [ 243.160363][ T8402] __sys_recvmmsg+0x1aa/0x280 [ 243.160373][ T8402] ? fput+0x9b/0xd0 [ 243.160381][ T8402] ? __pfx___sys_recvmmsg+0x10/0x10 [ 243.160388][ T8402] ? ksys_write+0x275/0x2d0 [ 243.160405][ T8402] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 243.160431][ T8402] __do_fast_syscall_32+0xb4/0x110 [ 243.160448][ T8402] ? exc_page_fault+0x5f8/0x920 [ 243.160476][ T8402] do_fast_syscall_32+0x34/0x80 [ 243.160493][ T8402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.160506][ T8402] RIP: 0023:0xf742d579 [ 243.160516][ T8402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 243.160523][ T8402] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 243.160535][ T8402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000940 [ 243.160541][ T8402] RDX: 0000000000000001 RSI: 0000000000000022 RDI: 0000000000000000 [ 243.160547][ T8402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.160553][ T8402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.160561][ T8402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.160585][ T8402] [ 243.482715][ T5890] usb 2-1: device descriptor read/64, error -71 [ 243.547817][ T8407] FAULT_INJECTION: forcing a failure. [ 243.547817][ T8407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.561520][ T8407] CPU: 1 UID: 0 PID: 8407 Comm: syz.3.695 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 243.561544][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.561557][ T8407] Call Trace: [ 243.561564][ T8407] [ 243.561571][ T8407] dump_stack_lvl+0x241/0x360 [ 243.561601][ T8407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.561623][ T8407] ? __pfx__printk+0x10/0x10 [ 243.561656][ T8407] should_fail_ex+0x424/0x570 [ 243.561686][ T8407] _copy_to_user+0x31/0xb0 [ 243.561707][ T8407] simple_read_from_buffer+0xc4/0x170 [ 243.561731][ T8407] proc_fail_nth_read+0x1ef/0x260 [ 243.561750][ T8407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.561767][ T8407] ? rw_verify_area+0x246/0x630 [ 243.561783][ T8407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.561800][ T8407] vfs_read+0x21f/0xb90 [ 243.561822][ T8407] ? __pfx_vfs_read+0x10/0x10 [ 243.561842][ T8407] ? do_sock_setsockopt+0x3ea/0x710 [ 243.561871][ T8407] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 243.561892][ T8407] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 243.561921][ T8407] ksys_read+0x19d/0x2d0 [ 243.561942][ T8407] ? __pfx_ksys_read+0x10/0x10 [ 243.561963][ T8407] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 243.561979][ T8407] ? lockdep_hardirqs_on+0x9d/0x150 [ 243.561998][ T8407] __do_fast_syscall_32+0xb4/0x110 [ 243.562014][ T8407] ? exc_page_fault+0x5f8/0x920 [ 243.562042][ T8407] do_fast_syscall_32+0x34/0x80 [ 243.562059][ T8407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.562078][ T8407] RIP: 0023:0xf742d579 [ 243.562092][ T8407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 243.562106][ T8407] RSP: 002b:00000000f50b6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 243.562124][ T8407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50b6620 [ 243.562136][ T8407] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 243.562146][ T8407] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 243.562156][ T8407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.562166][ T8407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.562192][ T8407] [ 243.593556][ T5890] usb usb2-port1: attempt power cycle [ 243.800912][ T5836] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 243.965307][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 243.973209][ T5836] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 243.982306][ T5836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.997233][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.029971][ T9] usb 1-1: USB disconnect, device number 25 [ 244.052482][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.102514][ T5836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.154450][ T5890] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 244.168441][ T5836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.191521][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.203718][ T5890] usb 2-1: device descriptor read/8, error -71 [ 244.422208][ T5836] usb 5-1: GET_CAPABILITIES returned 0 [ 244.427752][ T5836] usbtmc 5-1:16.0: can't read capabilities [ 244.441971][ T5890] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 244.476539][ T5890] usb 2-1: device descriptor read/8, error -71 [ 244.592225][ T5890] usb usb2-port1: unable to enumerate USB device [ 244.611405][ T8431] input: syz0 as /devices/virtual/input/input8 [ 244.622057][ T2152] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 244.638836][ T8431] FAULT_INJECTION: forcing a failure. [ 244.638836][ T8431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.653359][ T8431] CPU: 0 UID: 0 PID: 8431 Comm: syz.3.706 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 244.653380][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.653389][ T8431] Call Trace: [ 244.653394][ T8431] [ 244.653400][ T8431] dump_stack_lvl+0x241/0x360 [ 244.653428][ T8431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.653445][ T8431] ? __pfx__printk+0x10/0x10 [ 244.653475][ T8431] should_fail_ex+0x424/0x570 [ 244.653502][ T8431] _copy_from_user+0x2d/0xb0 [ 244.653521][ T8431] input_event_from_user+0x1bf/0x510 [ 244.653540][ T8431] ? __pfx_input_event_from_user+0x10/0x10 [ 244.653559][ T8431] ? input_event+0xad/0xe0 [ 244.653576][ T8431] uinput_write+0x48b/0x12e0 [ 244.653599][ T8431] ? __pfx_uinput_write+0x10/0x10 [ 244.653614][ T8431] ? bpf_lsm_file_permission+0x9/0x10 [ 244.653630][ T8431] ? rw_verify_area+0x246/0x630 [ 244.653643][ T8431] ? __pfx_uinput_write+0x10/0x10 [ 244.653658][ T8431] vfs_write+0x2bc/0xd10 [ 244.653682][ T8431] ? __pfx_vfs_write+0x10/0x10 [ 244.653697][ T8431] ? __fget_files+0x2a/0x420 [ 244.653709][ T8431] ? __fget_files+0x2a/0x420 [ 244.653723][ T8431] ? __fget_files+0x39d/0x420 [ 244.653734][ T8431] ? __fget_files+0x2a/0x420 [ 244.653754][ T8431] ksys_write+0x19d/0x2d0 [ 244.653771][ T8431] ? __pfx_ksys_write+0x10/0x10 [ 244.653787][ T8431] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 244.653802][ T8431] ? lockdep_hardirqs_on+0x9d/0x150 [ 244.653819][ T8431] __do_fast_syscall_32+0xb4/0x110 [ 244.653833][ T8431] ? exc_page_fault+0x5f8/0x920 [ 244.653859][ T8431] do_fast_syscall_32+0x34/0x80 [ 244.653873][ T8431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.653890][ T8431] RIP: 0023:0xf742d579 [ 244.653904][ T8431] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.653916][ T8431] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 244.653931][ T8431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 244.653940][ T8431] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 244.653947][ T8431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.653954][ T8431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.653962][ T8431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.653983][ T8431] [ 244.943815][ T2152] usb 3-1: config 0 has an invalid interface number: 11 but max is 8 [ 244.954258][ T2152] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 244.961878][ T5892] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 244.964277][ T2152] usb 3-1: config 0 has no interface number 0 [ 245.001823][ T2152] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 245.027927][ T2152] usb 3-1: config 0 interface 11 has no altsetting 0 [ 245.039596][ T2152] usb 3-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 245.062073][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.079270][ T2152] usb 3-1: config 0 descriptor?? [ 245.103874][ T2152] keyspan 3-1:0.11: Keyspan 4 port adapter converter detected [ 245.125296][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 245.137467][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 245.148730][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.162489][ T5892] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 245.171589][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.185464][ T5892] usb 1-1: config 0 descriptor?? [ 245.198083][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 245.232886][ T8438] __nla_validate_parse: 1 callbacks suppressed [ 245.232959][ T8438] netlink: 44 bytes leftover after parsing attributes in process `syz.3.707'. [ 245.282020][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 245.302641][ T2152] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 245.335944][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 245.368905][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 245.391305][ T2152] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 245.413934][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 245.436725][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 245.464375][ T2152] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 245.497282][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 245.515934][ T2152] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 245.543778][ T2152] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 245.599686][ T2152] usb 3-1: USB disconnect, device number 20 [ 245.609887][ T5892] sony 0003:12BA:0100.000A: unknown main item tag 0x0 [ 245.649501][ T5892] sony 0003:12BA:0100.000A: unknown main item tag 0x0 [ 245.679597][ T5892] sony 0003:12BA:0100.000A: unknown main item tag 0x0 [ 245.729015][ T5892] sony 0003:12BA:0100.000A: unknown main item tag 0x0 [ 245.750737][ T5892] sony 0003:12BA:0100.000A: unknown main item tag 0x0 [ 245.791559][ T5892] sony 0003:12BA:0100.000A: hidraw0: USB HID vff.ff Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0 [ 245.874134][ T5892] sony 0003:12BA:0100.000A: failed to claim input [ 245.892828][ T2152] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 245.909653][ T5892] usb 1-1: USB disconnect, device number 26 [ 245.986413][ T2152] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 246.046282][ T2152] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 246.102230][ T2152] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 246.136982][ T2152] keyspan 3-1:0.11: device disconnected [ 246.670972][ T8460] dccp_v6_rcv: dropped packet with invalid checksum [ 247.121938][ T5892] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 247.292635][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 247.306923][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.319359][ T5892] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.331368][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.355071][ T5892] usb 2-1: config 0 descriptor?? [ 247.576981][ T5892] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 247.740949][ T8472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.714'. [ 248.162356][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'. [ 248.173156][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 248.494122][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 248.494264][ T30] audit: type=1800 audit(1743684807.547:72): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.719" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=17815 res=0 errno=0 [ 249.152021][ T2152] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 249.314139][ T2152] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 249.323891][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.370838][ T2152] usb 4-1: config 0 descriptor?? [ 249.642714][ T8493] netlink: 'syz.0.725': attribute type 3 has an invalid length. [ 249.655931][ T8399] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 249.769995][ T5932] usb 2-1: USB disconnect, device number 37 [ 249.846059][ T5927] usb 5-1: USB disconnect, device number 25 [ 249.978793][ T8498] x_tables: ip_tables: osf match: only valid for protocol 6 [ 250.813102][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.721'. [ 250.836659][ T8485] netlink: 'syz.3.721': attribute type 7 has an invalid length. [ 250.844518][ T5892] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 250.868751][ T8515] delete_channel: no stack [ 250.888451][ T8485] netlink: 'syz.3.721': attribute type 8 has an invalid length. [ 250.907384][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 251.115228][ T5892] usb 5-1: config 0 has no interfaces? [ 251.129292][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.138708][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.152350][ T5892] usb 5-1: Product: syz [ 251.156678][ T5892] usb 5-1: Manufacturer: syz [ 251.161527][ T5892] usb 5-1: SerialNumber: syz [ 251.187972][ T5892] usb 5-1: config 0 descriptor?? [ 251.321333][ T2152] pegasus 4-1:0.0: can't reset MAC [ 251.329952][ T2152] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 251.350707][ T2152] usb 4-1: USB disconnect, device number 25 [ 251.397001][ T8505] netlink: 'syz.0.727': attribute type 12 has an invalid length. [ 252.042474][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'. [ 252.203378][ T8525] vlan2: entered allmulticast mode [ 252.208684][ T8525] bond0: entered allmulticast mode [ 252.214580][ T8525] bond_slave_0: entered allmulticast mode [ 252.224251][ T8525] bond_slave_1: entered allmulticast mode [ 252.257707][ T8525] bridge0: port 3(vlan2) entered blocking state [ 252.274760][ T8525] bridge0: port 3(vlan2) entered disabled state [ 252.284607][ T2152] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 252.305410][ T8525] vlan2: entered promiscuous mode [ 252.453194][ T8525] bridge0: port 3(vlan2) entered blocking state [ 252.459574][ T8525] bridge0: port 3(vlan2) entered forwarding state [ 252.514193][ T2152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.535193][ T2152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.567991][ T2152] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 252.618308][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.650747][ T2152] usb 3-1: config 0 descriptor?? [ 252.850933][ T8537] fuse: Unknown parameter 'measure' [ 253.071392][ T30] audit: type=1326 audit(1743684812.127:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.1.740" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x0 [ 253.101062][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 253.143623][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.150753][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.165399][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.174840][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.185486][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.193342][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.200525][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.207722][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.215914][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.227234][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.235393][ T2152] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 253.248689][ T2152] hid_mf 0003:0079:1846.000B: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 253.260024][ T2152] hid_mf 0003:0079:1846.000B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 253.349508][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.361216][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.374388][ T9] usb 3-1: USB disconnect, device number 21 [ 253.579936][ T9] usb 5-1: USB disconnect, device number 26 [ 253.971848][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 254.122014][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 254.155796][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 254.168000][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.192833][ T9] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 254.205355][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.234469][ T9] usb 5-1: config 0 descriptor?? [ 255.364492][ T9] sony 0003:12BA:0100.000C: unknown main item tag 0x0 [ 255.375196][ T9] sony 0003:12BA:0100.000C: unknown main item tag 0x0 [ 255.451825][ T9] sony 0003:12BA:0100.000C: unknown main item tag 0x0 [ 255.458849][ T9] sony 0003:12BA:0100.000C: unknown main item tag 0x0 [ 255.483806][ T9] sony 0003:12BA:0100.000C: unknown main item tag 0x0 [ 255.504550][ T9] sony 0003:12BA:0100.000C: hidraw0: USB HID vff.ff Device [HID 12ba:0100] on usb-dummy_hcd.4-1/input0 [ 255.618463][ T9] sony 0003:12BA:0100.000C: failed to claim input [ 255.663015][ T8568] netlink: 'syz.2.747': attribute type 12 has an invalid length. [ 255.672136][ T9] usb 5-1: USB disconnect, device number 27 [ 255.892403][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898902][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.978373][ T8588] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 256.315950][ T8574] netlink: 'syz.1.758': attribute type 12 has an invalid length. [ 256.931302][ T8609] netlink: 'syz.4.755': attribute type 12 has an invalid length. [ 257.757627][ T8623] FAULT_INJECTION: forcing a failure. [ 257.757627][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.796541][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.2.762 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 257.796567][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.796577][ T8623] Call Trace: [ 257.796585][ T8623] [ 257.796593][ T8623] dump_stack_lvl+0x241/0x360 [ 257.796624][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.796647][ T8623] ? __pfx__printk+0x10/0x10 [ 257.796682][ T8623] should_fail_ex+0x424/0x570 [ 257.796712][ T8623] _copy_from_user+0x2d/0xb0 [ 257.796735][ T8623] sctp_setsockopt+0xc9/0x11e0 [ 257.796760][ T8623] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 257.796781][ T8623] do_sock_setsockopt+0x3b1/0x710 [ 257.796812][ T8623] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 257.796835][ T8623] ? __fget_files+0x2a/0x420 [ 257.796852][ T8623] ? __fget_files+0x39d/0x420 [ 257.796866][ T8623] ? __fget_files+0x2a/0x420 [ 257.796890][ T8623] __ia32_sys_setsockopt+0x1f2/0x280 [ 257.796920][ T8623] __do_fast_syscall_32+0xb4/0x110 [ 257.796936][ T8623] ? exc_page_fault+0x5f8/0x920 [ 257.796965][ T8623] do_fast_syscall_32+0x34/0x80 [ 257.796983][ T8623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.797001][ T8623] RIP: 0023:0xf7fa5579 [ 257.797016][ T8623] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 257.797030][ T8623] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 257.797048][ T8623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 257.797059][ T8623] RDX: 0000000000000000 RSI: 0000000080000180 RDI: 0000000000000010 [ 257.797069][ T8623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.797079][ T8623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.797088][ T8623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.797114][ T8623] [ 258.091836][ T5892] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 258.262065][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 258.300010][ T5892] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 258.327119][ T5892] usb 5-1: config 1 interface 0 has no altsetting 0 [ 258.346960][ T5892] usb 5-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.40 [ 258.357099][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.365603][ T5892] usb 5-1: Product: syz [ 258.369969][ T5892] usb 5-1: Manufacturer: syz [ 258.375187][ T5892] usb 5-1: SerialNumber: syz [ 258.403312][ T5892] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 258.416266][ T5892] usb 5-1: no configuration chosen from 1 choice [ 258.605909][ T8647] netlink: 'syz.2.772': attribute type 10 has an invalid length. [ 258.628542][ T8649] netlink: 'syz.0.773': attribute type 10 has an invalid length. [ 258.658816][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.773'. [ 258.691629][ T8649] team0: entered promiscuous mode [ 258.701938][ T8649] team_slave_0: entered promiscuous mode [ 258.720165][ T8649] team_slave_1: entered promiscuous mode [ 258.748870][ T8649] team0: entered allmulticast mode [ 258.763647][ T8649] team_slave_0: entered allmulticast mode [ 258.783663][ T8649] team_slave_1: entered allmulticast mode [ 258.834318][ T8649] bridge0: port 3(team0) entered blocking state [ 258.941174][ T8649] bridge0: port 3(team0) entered disabled state [ 258.973985][ T8649] bridge0: port 3(team0) entered blocking state [ 258.980461][ T8649] bridge0: port 3(team0) entered forwarding state [ 259.281805][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 259.482698][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 259.494666][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 259.504627][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 259.523129][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.536375][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 259.548798][ T8661] dccp_v6_rcv: dropped packet with invalid checksum [ 259.563971][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.587825][ T9] usb 3-1: Product: syz [ 259.642105][ T9] usb 3-1: Manufacturer: syz [ 259.647454][ T9] usb 3-1: SerialNumber: syz [ 259.672218][ T9] usb 3-1: config 0 descriptor?? [ 259.681268][ T9] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 259.700003][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 259.708763][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 259.731370][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 259.767736][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 259.822008][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 259.831831][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 259.840606][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 260.002832][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 260.014499][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 260.038663][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 260.048981][ T8656] netlink: 'syz.1.774': attribute type 12 has an invalid length. [ 260.098526][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 260.137431][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 260.171090][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 260.213418][ T9] usb 3-1: USB disconnect, device number 22 [ 260.236210][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 260.376174][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 260.409598][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 260.424495][ T9] keyspan 3-1:0.0: device disconnected [ 260.438603][ T8662] syz.1.774 (8662) used greatest stack depth: 18616 bytes left [ 260.714728][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 260.746238][ T8674] netlink: 'syz.1.781': attribute type 26 has an invalid length. [ 260.856848][ T9] usb 5-1: USB disconnect, device number 28 [ 260.904459][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 261.048683][ T8680] loop6: detected capacity change from 0 to 63 [ 261.063300][ C0] blk_print_req_error: 11 callbacks suppressed [ 261.063318][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.069887][ T8682] FAULT_INJECTION: forcing a failure. [ 261.069887][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 261.078742][ C0] buffer_io_error: 11 callbacks suppressed [ 261.078763][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.109467][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.118719][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.129263][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.138498][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.144090][ T8685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.787'. [ 261.151507][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.155789][ T8682] CPU: 1 UID: 0 PID: 8682 Comm: syz.2.786 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 261.155811][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.155821][ T8682] Call Trace: [ 261.155828][ T8682] [ 261.155834][ T8682] dump_stack_lvl+0x241/0x360 [ 261.155864][ T8682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.155886][ T8682] ? __pfx__printk+0x10/0x10 [ 261.155907][ T8682] ? __lock_acquire+0xad5/0xd80 [ 261.155934][ T8682] should_fail_ex+0x424/0x570 [ 261.155962][ T8682] should_failslab+0xac/0x100 [ 261.155986][ T8682] kmem_cache_alloc_noprof+0x78/0x390 [ 261.156006][ T8682] ? skb_clone+0x20c/0x390 [ 261.156027][ T8682] skb_clone+0x20c/0x390 [ 261.156047][ T8682] __netlink_deliver_tap+0x3c4/0x7f0 [ 261.156076][ T8682] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.156094][ T8682] netlink_deliver_tap+0x19d/0x1b0 [ 261.156114][ T8682] netlink_unicast+0x7c6/0x9a0 [ 261.156140][ T8682] ? __pfx_netlink_unicast+0x10/0x10 [ 261.156159][ T8682] ? skb_put+0x114/0x1f0 [ 261.156186][ T8682] netlink_sendmsg+0x8c3/0xcd0 [ 261.156217][ T8682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.156239][ T8682] ? __import_iovec+0x585/0x830 [ 261.156259][ T8682] ? aa_sock_msg_perm+0x91/0x160 [ 261.156285][ T8682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.156308][ T8682] __sock_sendmsg+0x221/0x270 [ 261.156330][ T8682] ____sys_sendmsg+0x523/0x860 [ 261.156358][ T8682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.156389][ T8682] __sys_sendmsg+0x271/0x360 [ 261.156410][ T8682] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.156473][ T8682] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 261.156488][ T8682] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.156506][ T8682] __do_fast_syscall_32+0xb4/0x110 [ 261.156522][ T8682] ? exc_page_fault+0x5f8/0x920 [ 261.156549][ T8682] do_fast_syscall_32+0x34/0x80 [ 261.156566][ T8682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.156583][ T8682] RIP: 0023:0xf7fa5579 [ 261.156597][ T8682] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.156611][ T8682] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 261.156628][ T8682] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 261.156639][ T8682] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.156650][ T8682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.156659][ T8682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.156669][ T8682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.156694][ T8682] [ 261.424720][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.433344][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.442605][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.457648][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.467027][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.480617][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.489958][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.498841][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.508125][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.529181][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.538443][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.546795][ T8680] ldm_validate_partition_table(): Disk read failed. [ 261.557307][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.566518][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.592205][ T8680] Dev loop6: unable to read RDB block 0 [ 261.599282][ T8680] loop6: unable to read partition table [ 261.620738][ T8680] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 262.261834][ T5927] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 262.336926][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.796'. [ 262.461764][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 262.493726][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.522291][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.554631][ T5927] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.603815][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.662782][ T5927] usb 1-1: config 0 descriptor?? [ 262.740429][ T5927] hub 1-1:0.0: USB hub found [ 263.021893][ T5892] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 263.061245][ T8732] fuse: Bad value for 'rootmode' [ 263.101879][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 263.266167][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 263.271496][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 263.277745][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 263.311529][ T8736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.361125][ T9] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 263.373227][ T8736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.388159][ T9] usb 5-1: config 0 has no interface number 0 [ 263.397962][ T5892] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 263.415860][ T8736] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 263.441606][ T9] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 263.455144][ T8736] bond1: (slave vcan1): Error -95 calling set_mac_address [ 263.462542][ T5892] usb 4-1: config 0 has no interface number 0 [ 263.462592][ T5892] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 263.462616][ T5892] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 263.492329][ T9] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 263.504437][ T5892] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 263.515142][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.562922][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 263.668423][ T5892] usb 4-1: Product: syz [ 263.714158][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.804'. [ 263.724618][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.804'. [ 263.737860][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.759771][ T8741] dummy0: entered promiscuous mode [ 263.770175][ T5892] usb 4-1: Manufacturer: syz [ 263.813944][ T8741] dummy0: left promiscuous mode [ 263.837689][ T5892] usb 4-1: SerialNumber: syz [ 263.842612][ T9] usb 5-1: Product: syz [ 263.974148][ T9] usb 5-1: Manufacturer: syz [ 264.016127][ T5892] usb 4-1: config 0 descriptor?? [ 264.057049][ T9] usb 5-1: SerialNumber: syz [ 264.244884][ T8728] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 264.253665][ T9] usb 5-1: config 0 descriptor?? [ 264.279946][ T8728] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 264.289064][ T8730] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 264.303117][ T5892] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 264.316022][ T8747] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 264.346547][ T8730] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 264.370396][ T9] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 264.405406][ T5892] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 264.539759][ T9] ums-sddr09 5-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 264.587327][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.613627][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.622264][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.651285][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.767527][ T5927] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 264.917457][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 264.946395][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 265.005796][ T5927] usb 1-1: USB disconnect, device number 27 [ 265.139063][ T30] audit: type=1326 audit(1743684824.197:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.1.814" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x10000000 [ 265.337362][ T8769] FAULT_INJECTION: forcing a failure. [ 265.337362][ T8769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.369006][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz.0.815 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 265.369031][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.369041][ T8769] Call Trace: [ 265.369047][ T8769] [ 265.369061][ T8769] dump_stack_lvl+0x241/0x360 [ 265.369091][ T8769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.369112][ T8769] ? __pfx__printk+0x10/0x10 [ 265.369144][ T8769] should_fail_ex+0x424/0x570 [ 265.369175][ T8769] _copy_to_user+0x31/0xb0 [ 265.369198][ T8769] simple_read_from_buffer+0xc4/0x170 [ 265.369226][ T8769] proc_fail_nth_read+0x1ef/0x260 [ 265.369246][ T8769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.369265][ T8769] ? rw_verify_area+0x246/0x630 [ 265.369283][ T8769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.369301][ T8769] vfs_read+0x21f/0xb90 [ 265.369324][ T8769] ? __pfx___mutex_lock+0x10/0x10 [ 265.369342][ T8769] ? __pfx_vfs_read+0x10/0x10 [ 265.369363][ T8769] ? __fget_files+0x2a/0x420 [ 265.369381][ T8769] ? __fget_files+0x39d/0x420 [ 265.369393][ T8769] ? __fget_files+0x2a/0x420 [ 265.369417][ T8769] ksys_read+0x19d/0x2d0 [ 265.369438][ T8769] ? __pfx_ksys_read+0x10/0x10 [ 265.369458][ T8769] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 265.369475][ T8769] ? lockdep_hardirqs_on+0x9d/0x150 [ 265.369493][ T8769] __do_fast_syscall_32+0xb4/0x110 [ 265.369509][ T8769] ? exc_page_fault+0x5f8/0x920 [ 265.369538][ T8769] do_fast_syscall_32+0x34/0x80 [ 265.369555][ T8769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.369574][ T8769] RIP: 0023:0xf7ff4579 [ 265.369589][ T8769] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 265.369602][ T8769] RSP: 002b:00000000f5116590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 265.369620][ T8769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5116620 [ 265.369632][ T8769] RDX: 000000000000000f RSI: 00000000f747cff4 RDI: 0000000000000000 [ 265.369642][ T8769] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 265.369652][ T8769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.369661][ T8769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.369689][ T8769] [ 265.998514][ T5892] usb 4-1: USB disconnect, device number 26 [ 266.220575][ T5892] usb 5-1: USB disconnect, device number 29 [ 266.318650][ T8785] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 266.377594][ T8785] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 268.265396][ T8802] netlink: 'syz.3.824': attribute type 12 has an invalid length. [ 268.635894][ T8817] fuse: Bad value for 'fd' [ 268.899981][ T8801] syz.3.824 (8801) used greatest stack depth: 18488 bytes left [ 268.993184][ T8823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.830'. [ 269.167299][ T8824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.828'. [ 270.721912][ T8852] netlink: 44 bytes leftover after parsing attributes in process `syz.0.837'. [ 270.855950][ T2152] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 271.074050][ T2152] usb 3-1: config 255 has an invalid interface number: 19 but max is 0 [ 271.082923][ T2152] usb 3-1: config 255 has no interface number 0 [ 271.092701][ T2152] usb 3-1: New USB device found, idVendor=07aa, idProduct=002e, bcdDevice=5c.33 [ 271.102399][ T2152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.111041][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 271.125263][ T2152] usb 3-1: Product: syz [ 271.133943][ T2152] usb 3-1: Manufacturer: syz [ 271.165967][ T2152] usb 3-1: SerialNumber: syz [ 271.512567][ T2152] usb 3-1: USB disconnect, device number 23 [ 271.531853][ T5932] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 271.711816][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 271.790664][ T5932] usb 2-1: config 162 has an invalid interface number: 45 but max is 1 [ 271.835651][ T5932] usb 2-1: config 162 has an invalid interface number: 87 but max is 1 [ 271.881022][ T5932] usb 2-1: config 162 has no interface number 0 [ 271.899682][ T5932] usb 2-1: config 162 has no interface number 1 [ 271.921040][ T5932] usb 2-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.061352][ T5932] usb 2-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 272.221808][ T5932] usb 2-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 272.305743][ T5932] usb 2-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 272.348254][ T5932] usb 2-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 272.398719][ T5932] usb 2-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.468194][ T5932] usb 2-1: config 162 interface 45 has no altsetting 0 [ 272.500461][ T5932] usb 2-1: config 162 interface 87 has no altsetting 0 [ 272.543556][ T5932] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 272.561390][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.783617][ T5932] usb 2-1: Product: syz [ 272.788624][ T5932] usb 2-1: Manufacturer: syz [ 272.807745][ T5932] usb 2-1: SerialNumber: syz [ 272.817222][ T8876] netlink: 'syz.3.844': attribute type 12 has an invalid length. [ 272.889751][ T8889] bridge_slave_0: left allmulticast mode [ 272.939054][ T8889] bridge_slave_0: left promiscuous mode [ 272.955597][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.989635][ T8889] bridge_slave_1: left allmulticast mode [ 272.997944][ T8889] bridge_slave_1: left promiscuous mode [ 273.016308][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.064866][ T8889] bond0: (slave bond_slave_0): Releasing backup interface [ 273.075162][ T8889] bond_slave_0: left promiscuous mode [ 273.097613][ T8889] bond_slave_0: left allmulticast mode [ 273.110812][ T8889] bond0: (slave bond_slave_1): Releasing backup interface [ 273.111994][ T5894] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 273.188558][ T8889] bond_slave_1: left promiscuous mode [ 273.207491][ T8889] bond_slave_1: left allmulticast mode [ 273.232946][ T5932] pl2303 2-1:162.45: required endpoints missing [ 273.240727][ T8889] team0: Port device team_slave_0 removed [ 273.274595][ T5932] pl2303 2-1:162.87: required interrupt-in endpoint missing [ 273.291611][ T5932] usb 2-1: USB disconnect, device number 38 [ 273.321973][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 273.331099][ T5894] usb 5-1: config 0 has an invalid interface number: 234 but max is 2 [ 273.343905][ T5894] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 273.357335][ T5894] usb 5-1: config 0 has no interface number 1 [ 273.358056][ T8889] team0: Port device team_slave_1 removed [ 273.385391][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.402599][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.403065][ T5894] usb 5-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 273.423886][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.439493][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.448759][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.461523][ T5894] usb 5-1: Product: syz [ 273.462974][ T8889] vlan2: left promiscuous mode [ 273.465868][ T5894] usb 5-1: Manufacturer: syz [ 273.471279][ T8889] bond0: left promiscuous mode [ 273.475465][ T5894] usb 5-1: SerialNumber: syz [ 273.497023][ T8889] bridge0: port 3(vlan2) entered disabled state [ 273.510902][ T5894] usb 5-1: config 0 descriptor?? [ 273.511528][ T8889] vlan3: left promiscuous mode [ 273.522952][ T8889] macvlan1: left promiscuous mode [ 273.531483][ T8889] bridge0: port 4(vlan3) entered disabled state [ 273.576582][ T8895] pim6reg: entered allmulticast mode [ 273.588086][ T8894] pim6reg: left allmulticast mode [ 273.703986][ T8899] QAT: Invalid ioctl -805268419 [ 273.717903][ T8899] QAT: Invalid ioctl -2115464132 [ 273.725199][ T8899] QAT: Invalid ioctl -805268419 [ 274.036331][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.082308][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.503192][ T8911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.857'. [ 274.718868][ T5894] usb 5-1: unknown number of interfaces: 2 [ 274.730708][ T5894] usb 5-1: USB disconnect, device number 30 [ 275.412520][ T8901] netlink: 'syz.2.855': attribute type 12 has an invalid length. [ 275.441218][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 275.495198][ T8925] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 275.552305][ T8927] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 275.676794][ T8925] bridge0: port 3(vlan2) entered disabled state [ 275.683270][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.690689][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.817835][ T8925] bridge0: port 3(vlan2) entered blocking state [ 275.824219][ T8925] bridge0: port 3(vlan2) entered forwarding state [ 275.830957][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.838189][ T8925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.845795][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.853162][ T8925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.865461][ T8935] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.914291][ T8925] bridge0: port 3(vlan2) entered disabled state [ 275.920884][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.928245][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.985687][ T8927] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 275.995855][ T8927] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 276.309517][ T8945] tipc: Started in network mode [ 276.331875][ T8945] tipc: Node identity , cluster identity 4711 [ 276.338066][ T8945] tipc: Failed to set node id, please configure manually [ 276.373799][ T8945] tipc: Enabling of bearer rejected, failed to enable media [ 276.619057][ T8952] fuse: Bad value for 'group_id' [ 276.650683][ T8952] fuse: Bad value for 'group_id' [ 276.742302][ T8958] MPI: mpi too large (113288 bits) [ 277.273788][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 277.481938][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 277.718625][ T5932] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 277.873759][ T5932] usb 5-1: device descriptor read/64, error -71 [ 278.250154][ T5932] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 278.328267][ T8991] netlink: 44 bytes leftover after parsing attributes in process `syz.3.881'. [ 278.426270][ T5932] usb 5-1: device descriptor read/64, error -71 [ 278.552895][ T5932] usb usb5-port1: attempt power cycle [ 278.844558][ T8993] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 278.951785][ T5932] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 279.095199][ T5932] usb 5-1: device descriptor read/8, error -71 [ 279.374705][ T5932] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 279.404895][ T5932] usb 5-1: device descriptor read/8, error -71 [ 279.532381][ T5932] usb usb5-port1: unable to enumerate USB device [ 280.051863][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 280.073280][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 280.081043][ T5894] usb 3-1: can't read configurations, error -71 [ 280.463189][ T9013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.699345][ T9002] netlink: 'syz.0.884': attribute type 12 has an invalid length. [ 280.751803][ T5894] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 280.923434][ T5894] usb 3-1: config 213 has an invalid descriptor of length 68, skipping remainder of the config [ 280.941875][ T5894] usb 3-1: config 213 has 0 interfaces, different from the descriptor's value: 1 [ 280.989201][ T5894] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.e7 [ 281.002116][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.028061][ T5894] usb 3-1: Product: syz [ 281.051940][ T5894] usb 3-1: Manufacturer: syz [ 281.056718][ T5894] usb 3-1: SerialNumber: syz [ 281.136504][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 281.145889][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 281.160725][ T9026] team0: entered promiscuous mode [ 281.170165][ T9026] team0: left promiscuous mode [ 281.318157][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.346022][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.422396][ T9007] netlink: 'syz.2.886': attribute type 13 has an invalid length. [ 281.585196][ T9007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.883472][ T5894] usb 3-1: USB disconnect, device number 25 [ 282.730758][ T9057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.897'. [ 283.609725][ T9063] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 283.785820][ T9068] veth1_to_bond: entered allmulticast mode [ 283.792911][ T9068] veth1_to_bond: entered promiscuous mode [ 283.815188][ T9067] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.875441][ T9070] FAULT_INJECTION: forcing a failure. [ 283.875441][ T9070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.920162][ T9070] CPU: 1 UID: 0 PID: 9070 Comm: syz.4.905 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 283.920189][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.920200][ T9070] Call Trace: [ 283.920206][ T9070] [ 283.920214][ T9070] dump_stack_lvl+0x241/0x360 [ 283.920244][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.920265][ T9070] ? __pfx__printk+0x10/0x10 [ 283.920297][ T9070] should_fail_ex+0x424/0x570 [ 283.920325][ T9070] prepare_alloc_pages+0x220/0x610 [ 283.920352][ T9070] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 283.920374][ T9070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.920413][ T9070] alloc_pages_mpol+0x339/0x690 [ 283.920447][ T9070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 283.920478][ T9070] vma_alloc_folio_noprof+0x12d/0x260 [ 283.920503][ T9070] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 283.920534][ T9070] folio_prealloc+0x2e/0x170 [ 283.920551][ T9070] handle_pte_fault+0x2e45/0x61c0 [ 283.920582][ T9070] ? __switch_to+0xe97/0x1c30 [ 283.920608][ T9070] ? __pfx_handle_pte_fault+0x10/0x10 [ 283.920623][ T9070] ? sched_clock_cpu+0x77/0x4d0 [ 283.920644][ T9070] ? __pfx___switch_to+0x10/0x10 [ 283.920674][ T9070] ? __lock_acquire+0xad5/0xd80 [ 283.920715][ T9070] ? mtree_range_walk+0x700/0x8e0 [ 283.920748][ T9070] handle_mm_fault+0x1129/0x1bf0 [ 283.920769][ T9070] ? mt_find+0x28a/0x8f0 [ 283.920811][ T9070] ? __pfx_handle_mm_fault+0x10/0x10 [ 283.920858][ T9070] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 283.920881][ T9070] exc_page_fault+0x2bb/0x920 [ 283.920911][ T9070] asm_exc_page_fault+0x26/0x30 [ 283.920926][ T9070] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 283.920946][ T9070] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 283.920959][ T9070] RSP: 0018:ffffc90005c5f368 EFLAGS: 00050202 [ 283.920975][ T9070] RAX: 0000000100000010 RBX: 0000000080001bcc RCX: 000000000000000c [ 283.920987][ T9070] RDX: 0000000000000000 RSI: ffffc90005c5f420 RDI: 0000000080001bc0 [ 283.920998][ T9070] RBP: ffffc90005c5f4f0 R08: 0000000000000003 R09: fffff52000b8be85 [ 283.921009][ T9070] R10: dffffc0000000000 R11: fffff52000b8be85 R12: 000000000000000c [ 283.921021][ T9070] R13: 00007ffffffff000 R14: ffffc90005c5f420 R15: 0000000080001bc0 [ 283.921050][ T9070] _copy_to_user+0x8b/0xb0 [ 283.921075][ T9070] put_cmsg_compat+0x418/0x9f0 [ 283.921107][ T9070] ? __pfx_put_cmsg_compat+0x10/0x10 [ 283.921127][ T9070] ? __might_fault+0xaa/0x120 [ 283.921157][ T9070] ? put_cmsg+0x101/0x660 [ 283.921185][ T9070] __sock_recv_cmsgs+0x3e8/0x7e0 [ 283.921210][ T9070] ? __pfx___sock_recv_cmsgs+0x10/0x10 [ 283.921231][ T9070] ? udpv6_recvmsg+0x72d/0x19e0 [ 283.921250][ T9070] ? udpv6_recvmsg+0x72d/0x19e0 [ 283.921271][ T9070] udpv6_recvmsg+0xc22/0x19e0 [ 283.921307][ T9070] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 283.921328][ T9070] ? aa_sk_perm+0x96f/0xac0 [ 283.921347][ T9070] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 283.921363][ T9070] inet6_recvmsg+0x246/0x730 [ 283.921381][ T9070] ? __lock_acquire+0xad5/0xd80 [ 283.921397][ T9070] ? __pfx_inet6_recvmsg+0x10/0x10 [ 283.921412][ T9070] ? aa_sock_msg_perm+0x91/0x160 [ 283.921441][ T9070] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 283.921460][ T9070] sock_recvmsg+0x109/0x280 [ 283.921483][ T9070] ____sys_recvmsg+0x1c8/0x480 [ 283.921508][ T9070] ? __pfx_____sys_recvmsg+0x10/0x10 [ 283.921522][ T9070] ? get_compat_msghdr+0x45e/0x730 [ 283.921565][ T9070] do_recvmmsg+0x53e/0xab0 [ 283.921593][ T9070] ? __pfx_do_recvmmsg+0x10/0x10 [ 283.921633][ T9070] ? rcu_read_lock_any_held+0xbb/0x160 [ 283.921673][ T9070] ? ksys_write+0x24e/0x2d0 [ 283.921713][ T9070] __sys_recvmmsg+0x1aa/0x280 [ 283.921729][ T9070] ? fput+0x9b/0xd0 [ 283.921741][ T9070] ? __pfx___sys_recvmmsg+0x10/0x10 [ 283.921753][ T9070] ? ksys_write+0x275/0x2d0 [ 283.921780][ T9070] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 283.921806][ T9070] __do_fast_syscall_32+0xb4/0x110 [ 283.921822][ T9070] ? exc_page_fault+0x5f8/0x920 [ 283.921849][ T9070] do_fast_syscall_32+0x34/0x80 [ 283.921866][ T9070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.921884][ T9070] RIP: 0023:0xf7fb6579 [ 283.921898][ T9070] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.921912][ T9070] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 283.921928][ T9070] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000940 [ 283.921939][ T9070] RDX: 0000000000000001 RSI: 0000000000000022 RDI: 0000000000000000 [ 283.921949][ T9070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.921959][ T9070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.921969][ T9070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.921996][ T9070] [ 284.394800][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.702203][ T5932] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 284.872904][ T5932] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 284.880999][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.891194][ T5932] usb 3-1: config 0 has no interface number 0 [ 284.897557][ T5932] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 284.908981][ T5932] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.927694][ T5932] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 284.951888][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.963663][ T5932] usb 3-1: Product: syz [ 284.973165][ T5932] usb 3-1: Manufacturer: syz [ 284.977845][ T5932] usb 3-1: SerialNumber: syz [ 284.989788][ T5932] usb 3-1: config 0 descriptor?? [ 285.000824][ T9068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.026264][ T5932] vmk80xx 3-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 285.039415][ T5932] vmk80xx 3-1:0.6: probe with driver vmk80xx failed with error -22 [ 285.121851][ T5890] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 285.229011][ T9] usb 3-1: USB disconnect, device number 26 [ 285.235230][ T5892] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 285.254029][ T9068] veth1_to_bond: left promiscuous mode [ 285.260336][ T9093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 285.272091][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 285.274420][ T9068] veth1_to_bond: left allmulticast mode [ 285.285477][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.304491][ T5890] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 285.334895][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.355944][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 285.365039][ T5890] usb 4-1: SerialNumber: syz [ 285.374223][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 285.393571][ T5890] cdc_acm 4-1:1.0: skipping garbage [ 285.404757][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 285.413080][ T5892] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 285.433047][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.447222][ T5892] usb 1-1: config 0 descriptor?? [ 285.456294][ T5892] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 285.479589][ T9100] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 285.502254][ T9100] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.560070][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 285.572812][ T9103] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.642687][ T9104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.917'. [ 285.847363][ T9116] @: renamed from vlan0 (while UP) [ 286.147741][ T9124] input: syz0 as /devices/virtual/input/input9 [ 286.173883][ T9124] FAULT_INJECTION: forcing a failure. [ 286.173883][ T9124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.214354][ T9124] CPU: 1 UID: 0 PID: 9124 Comm: syz.1.924 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 286.214382][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.214392][ T9124] Call Trace: [ 286.214399][ T9124] [ 286.214407][ T9124] dump_stack_lvl+0x241/0x360 [ 286.214430][ T9124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.214444][ T9124] ? __pfx__printk+0x10/0x10 [ 286.214467][ T9124] should_fail_ex+0x424/0x570 [ 286.214496][ T9124] _copy_from_user+0x2d/0xb0 [ 286.214519][ T9124] input_event_from_user+0x1bf/0x510 [ 286.214541][ T9124] ? __pfx_input_event_from_user+0x10/0x10 [ 286.214563][ T9124] ? input_event+0xad/0xe0 [ 286.214575][ T9124] uinput_write+0x48b/0x12e0 [ 286.214591][ T9124] ? __pfx_uinput_write+0x10/0x10 [ 286.214602][ T9124] ? bpf_lsm_file_permission+0x9/0x10 [ 286.214614][ T9124] ? rw_verify_area+0x246/0x630 [ 286.214629][ T9124] ? __pfx_uinput_write+0x10/0x10 [ 286.214648][ T9124] vfs_write+0x2bc/0xd10 [ 286.214679][ T9124] ? __pfx_vfs_write+0x10/0x10 [ 286.214698][ T9124] ? __fget_files+0x2a/0x420 [ 286.214712][ T9124] ? __fget_files+0x2a/0x420 [ 286.214728][ T9124] ? __fget_files+0x39d/0x420 [ 286.214741][ T9124] ? __fget_files+0x2a/0x420 [ 286.214763][ T9124] ksys_write+0x19d/0x2d0 [ 286.214784][ T9124] ? __pfx_ksys_write+0x10/0x10 [ 286.214805][ T9124] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 286.214821][ T9124] ? lockdep_hardirqs_on+0x9d/0x150 [ 286.214839][ T9124] __do_fast_syscall_32+0xb4/0x110 [ 286.214856][ T9124] ? exc_page_fault+0x5f8/0x920 [ 286.214884][ T9124] do_fast_syscall_32+0x34/0x80 [ 286.214895][ T9124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.214907][ T9124] RIP: 0023:0xf7f87579 [ 286.214918][ T9124] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 286.214930][ T9124] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 286.214948][ T9124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 286.214960][ T9124] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 286.214970][ T9124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.214979][ T9124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.214989][ T9124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.215013][ T9124] [ 286.458866][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.654838][ T5932] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.691879][ T5890] usb 4-1: USB disconnect, device number 27 [ 286.758676][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 286.813735][ T5932] usb 5-1: config index 0 descriptor too short (expected 37, got 36) [ 286.823932][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.846272][ T5932] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 286.858128][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.871422][ T9132] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 286.880831][ T5932] usb 5-1: config 0 descriptor?? [ 286.971984][ T5894] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 287.141854][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 287.149237][ T5894] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 287.159164][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.171350][ T5894] usb 3-1: config 0 descriptor?? [ 287.185206][ T5894] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 287.315885][ T5932] elecom 0003:056E:00FF.000D: unknown main item tag 0x0 [ 287.324423][ T2152] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 287.338951][ T5932] elecom 0003:056E:00FF.000D: unknown main item tag 0x0 [ 287.348124][ T5932] elecom 0003:056E:00FF.000D: unknown main item tag 0x0 [ 287.357411][ T5932] elecom 0003:056E:00FF.000D: unknown main item tag 0x0 [ 287.366058][ T5932] elecom 0003:056E:00FF.000D: unknown main item tag 0x0 [ 287.382522][ T5932] elecom 0003:056E:00FF.000D: hidraw0: USB HID vff.fd Device [HID 056e:00ff] on usb-dummy_hcd.4-1/input0 [ 287.511785][ T2152] usb 2-1: Using ep0 maxpacket: 16 [ 287.529645][ T5932] usb 5-1: USB disconnect, device number 35 [ 287.541551][ T2152] usb 2-1: unable to get BOS descriptor or descriptor too short [ 287.581849][ T2152] usb 2-1: config 1 has an invalid interface number: 160 but max is 0 [ 287.609516][ T2152] usb 2-1: config 1 has no interface number 0 [ 287.633740][ T2152] usb 2-1: config 1 interface 160 has no altsetting 0 [ 287.699182][ T5894] gspca_vc032x: reg_w err -71 [ 287.707553][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.727713][ T2152] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 287.751068][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.757811][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.809098][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.839785][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.854466][ T2152] usb 2-1: Product: syz [ 287.858685][ T2152] usb 2-1: Manufacturer: syz [ 287.873610][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.924999][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.930376][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.937413][ T2152] usb 2-1: SerialNumber: syz [ 288.036605][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.049990][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.076747][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.109927][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.186345][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.208171][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.226058][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.278175][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.310327][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.349513][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.360264][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.375881][ T5894] gspca_vc032x: Unknown sensor... [ 288.403316][ T5894] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 288.444794][ T5894] usb 3-1: USB disconnect, device number 27 [ 288.710957][ T9170] netlink: 44 bytes leftover after parsing attributes in process `syz.4.936'. [ 289.024462][ T5894] usb 1-1: USB disconnect, device number 28 [ 289.371901][ T5932] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 289.527449][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 289.549816][ T5932] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 289.559036][ T5894] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 289.574988][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.597266][ T5932] usb 4-1: config 0 descriptor?? [ 289.619730][ T5932] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 289.732843][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 289.745656][ T5894] usb 1-1: config 0 has no interfaces? [ 289.759852][ T9181] netlink: 52 bytes leftover after parsing attributes in process `syz.4.943'. [ 289.762627][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 289.780180][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.788622][ T5894] usb 1-1: Product: syz [ 289.793329][ T5894] usb 1-1: Manufacturer: syz [ 289.798058][ T5894] usb 1-1: SerialNumber: syz [ 289.809233][ T5894] usb 1-1: config 0 descriptor?? [ 289.986342][ T2152] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 290.021485][ T2152] visor 2-1:1.160: Handspring Visor / Palm OS converter detected [ 290.055504][ T2152] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 290.077374][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.087972][ T2152] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 290.098670][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.116422][ T5894] usb 1-1: USB disconnect, device number 29 [ 290.169249][ T2152] usb 2-1: USB disconnect, device number 39 [ 290.240998][ T2152] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 290.257348][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 290.276362][ T2152] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 290.290618][ T9190] netlink: 104 bytes leftover after parsing attributes in process `syz.4.946'. [ 290.301635][ T2152] visor 2-1:1.160: device disconnected [ 290.309311][ T9190] netlink: 104 bytes leftover after parsing attributes in process `syz.4.946'. [ 290.489467][ T9196] fuse: Bad value for 'group_id' [ 290.505377][ T9196] fuse: Bad value for 'group_id' [ 290.527907][ T30] audit: type=1326 audit(1743684849.587:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 290.551410][ T30] audit: type=1326 audit(1743684849.587:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 290.769420][ T30] audit: type=1326 audit(1743684849.587:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 290.908717][ T30] audit: type=1326 audit(1743684849.587:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 290.940507][ T30] audit: type=1326 audit(1743684849.587:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 290.966281][ T9204] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 290.972808][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 291.315905][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 291.392145][ T30] audit: type=1326 audit(1743684849.587:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 291.416852][ T30] audit: type=1326 audit(1743684849.587:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 291.450329][ T9204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.472250][ T5932] gspca_sonixj: i2c_w8 err -110 [ 291.491920][ T5932] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 291.543924][ T9211] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 291.550586][ T9211] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 291.557974][ T9208] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 291.564594][ T9208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.582455][ T9208] vhci_hcd vhci_hcd.0: Device attached [ 291.592377][ T30] audit: type=1326 audit(1743684849.637:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 291.592725][ T2152] vhci_hcd: vhci_device speed not set [ 291.619521][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.629531][ T9211] vhci_hcd vhci_hcd.0: Device attached [ 291.670920][ T30] audit: type=1326 audit(1743684849.637:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 291.733690][ T30] audit: type=1326 audit(1743684849.647:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 291.737244][ T9208] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.817410][ T9222] netlink: 44 bytes leftover after parsing attributes in process `syz.1.952'. [ 291.847489][ T9211] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.861912][ T9204] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 291.868571][ T9204] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.905898][ T9225] trusted_key: encrypted_key: insufficient parameters specified [ 291.922763][ T9225] netlink: 'syz.4.953': attribute type 4 has an invalid length. [ 291.992207][ T9204] vhci_hcd vhci_hcd.0: Device attached [ 291.998258][ T2152] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 291.999970][ T9226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 292.087746][ T5890] usb 4-1: USB disconnect, device number 28 [ 292.177331][ T9204] vhci_hcd vhci_hcd.0: port 0 already used [ 292.329006][ T9212] vhci_hcd: connection closed [ 292.330056][ T9210] vhci_hcd: connection closed [ 292.331118][ T9221] vhci_hcd: connection closed [ 292.337131][ T9205] vhci_hcd: connection reset by peer [ 292.488949][ T53] vhci_hcd: stop threads [ 292.497022][ T53] vhci_hcd: release socket [ 292.513222][ T53] vhci_hcd: disconnect device [ 292.519656][ T53] vhci_hcd: stop threads [ 292.537672][ T53] vhci_hcd: release socket [ 292.572625][ T53] vhci_hcd: disconnect device [ 292.580304][ T53] vhci_hcd: stop threads [ 292.585891][ T53] vhci_hcd: release socket [ 292.590616][ T53] vhci_hcd: disconnect device [ 292.599818][ T53] vhci_hcd: stop threads [ 292.701744][ T53] vhci_hcd: release socket [ 292.706314][ T53] vhci_hcd: disconnect device [ 292.955164][ T9233] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 293.182933][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 293.267038][ T9245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.434104][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.961'. [ 293.444894][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 293.584240][ T5927] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 293.783450][ T5927] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 293.792718][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.803191][ T5927] usb 3-1: config 0 descriptor?? [ 293.809915][ T5927] cp210x 3-1:0.0: cp210x converter detected [ 293.862216][ T9259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.307608][ T5927] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 294.568166][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.577417][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.850061][ T5927] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 294.881880][ T5927] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 294.917231][ T5927] usb 3-1: cp210x converter now attached to ttyUSB0 [ 294.950744][ T5927] usb 3-1: USB disconnect, device number 28 [ 294.988015][ T9274] dccp_v6_rcv: dropped packet with invalid checksum [ 295.195654][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.212313][ T5927] cp210x 3-1:0.0: device disconnected [ 295.362793][ T9256] netlink: 'syz.4.964': attribute type 12 has an invalid length. [ 295.601331][ T9282] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 295.719633][ T9257] syz.4.964 (9257) used greatest stack depth: 18304 bytes left [ 295.779402][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.969'. [ 295.952320][ T9293] IPv6: NLM_F_REPLACE set, but no existing node found! [ 296.032597][ T9298] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.977'. [ 296.291885][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 296.301813][ T5892] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 296.451918][ T5890] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 296.459686][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 296.468002][ T5892] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 296.480940][ T9] usb 2-1: config index 0 descriptor too short (expected 10465, got 27) [ 296.490928][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.499296][ T9] usb 2-1: config 90 has too many interfaces: 73, using maximum allowed: 32 [ 296.515328][ T5892] usb 3-1: config 0 descriptor?? [ 296.532674][ T9] usb 2-1: config 90 has an invalid descriptor of length 0, skipping remainder of the config [ 296.547590][ T9] usb 2-1: config 90 has 1 interface, different from the descriptor's value: 73 [ 296.557109][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 296.567289][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.604477][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 296.625344][ T5890] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 296.646855][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.676309][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 296.700433][ T5890] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.711432][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.719571][ T5890] usb 5-1: Product: syz [ 296.724085][ T5890] usb 5-1: Manufacturer: syz [ 296.728716][ T5890] usb 5-1: SerialNumber: syz [ 296.737084][ T9304] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 296.980315][ T5890] usb 5-1: 0:2 : does not exist [ 297.013358][ T5890] usb 5-1: USB disconnect, device number 36 [ 297.052157][ T5891] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 297.161876][ T2152] vhci_hcd: vhci_device speed not set [ 297.195603][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.219010][ T5891] usb 4-1: config 0 has no interfaces? [ 297.236266][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 297.248793][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.265814][ T5891] usb 4-1: Product: syz [ 297.270234][ T5891] usb 4-1: Manufacturer: syz [ 297.275464][ T5891] usb 4-1: SerialNumber: syz [ 297.289925][ T5891] usb 4-1: config 0 descriptor?? [ 297.391765][ T5894] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 297.553902][ T5892] usb 3-1: Cannot set autoneg [ 297.564209][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 297.578515][ T5892] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 297.601954][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 297.610842][ T5892] usb 3-1: USB disconnect, device number 29 [ 297.645717][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.663556][ T5894] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 297.674115][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.688107][ T5894] usb 1-1: Product: syz [ 297.692852][ T5894] usb 1-1: Manufacturer: syz [ 297.698062][ T5894] usb 1-1: SerialNumber: syz [ 297.725432][ T5894] usb 1-1: config 0 descriptor?? [ 297.737158][ T5846] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 297.751272][ T9311] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 297.768062][ T5894] option 1-1:0.0: GSM modem (1-port) converter detected [ 297.981986][ T5927] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 297.996466][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.008957][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.109026][ T5894] usb 1-1: USB disconnect, device number 30 [ 298.135915][ T5894] option 1-1:0.0: device disconnected [ 298.162035][ T9] gspca_vc032x: reg_w err -110 [ 298.163388][ T5927] usb 5-1: config 0 has no interfaces? [ 298.178437][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.181102][ T9] vc032x 2-1:90.0: probe with driver vc032x failed with error -110 [ 298.207260][ T5927] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.218710][ T5927] usb 5-1: Manufacturer: syz [ 298.236745][ T5927] usb 5-1: config 0 descriptor?? [ 298.344368][ T9320] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 298.486534][ T5846] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 298.538565][ T9] usb 5-1: USB disconnect, device number 37 [ 298.606499][ T9328] FAULT_INJECTION: forcing a failure. [ 298.606499][ T9328] name failslab, interval 1, probability 0, space 0, times 0 [ 298.619499][ T9328] CPU: 0 UID: 0 PID: 9328 Comm: syz.0.989 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 298.619524][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.619534][ T9328] Call Trace: [ 298.619542][ T9328] [ 298.619549][ T9328] dump_stack_lvl+0x241/0x360 [ 298.619579][ T9328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.619602][ T9328] ? __pfx__printk+0x10/0x10 [ 298.619646][ T9328] should_fail_ex+0x424/0x570 [ 298.619681][ T9328] should_failslab+0xac/0x100 [ 298.619705][ T9328] __kmalloc_cache_noprof+0x73/0x370 [ 298.619726][ T9328] ? sctp_add_bind_addr+0x89/0x3a0 [ 298.619750][ T9328] sctp_add_bind_addr+0x89/0x3a0 [ 298.619773][ T9328] sctp_copy_local_addr_list+0x313/0x500 [ 298.619793][ T9328] ? sctp_copy_local_addr_list+0xad/0x500 [ 298.619812][ T9328] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 298.619834][ T9328] ? sctp_v4_is_any+0x35/0x60 [ 298.619851][ T9328] ? sctp_copy_one_addr+0x94/0x360 [ 298.619873][ T9328] sctp_bind_addr_copy+0xad/0x3b0 [ 298.619891][ T9328] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 298.619918][ T9328] sctp_connect_new_asoc+0x337/0x700 [ 298.619942][ T9328] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 298.619964][ T9328] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 298.619989][ T9328] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 298.620008][ T9328] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 298.620028][ T9328] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 298.620049][ T9328] sctp_sendmsg+0x2009/0x3620 [ 298.620092][ T9328] ? __pfx_sctp_sendmsg+0x10/0x10 [ 298.620114][ T9328] ? aa_sk_perm+0x96f/0xac0 [ 298.620149][ T9328] ? inet_sendmsg+0x330/0x390 [ 298.620165][ T9328] __sock_sendmsg+0x1a6/0x270 [ 298.620179][ T9328] ____sys_sendmsg+0x523/0x860 [ 298.620193][ T9328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.620211][ T9328] __sys_sendmmsg+0x4a3/0x7b0 [ 298.620226][ T9328] ? __pfx___sys_sendmmsg+0x10/0x10 [ 298.620238][ T9328] ? __lock_acquire+0xad5/0xd80 [ 298.620269][ T9328] ? vfs_write+0xb29/0xd10 [ 298.620289][ T9328] ? __mutex_unlock_slowpath+0x229/0x800 [ 298.620305][ T9328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.620314][ T9328] ? __fget_files+0x2a/0x420 [ 298.620329][ T9328] ? fput+0x9b/0xd0 [ 298.620338][ T9328] ? ksys_write+0x275/0x2d0 [ 298.620354][ T9328] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 298.620369][ T9328] __do_fast_syscall_32+0xb4/0x110 [ 298.620381][ T9328] ? exc_page_fault+0x5f8/0x920 [ 298.620398][ T9328] do_fast_syscall_32+0x34/0x80 [ 298.620407][ T9328] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.620419][ T9328] RIP: 0023:0xf7ff4579 [ 298.620429][ T9328] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.620436][ T9328] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 298.620448][ T9328] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004400 [ 298.620455][ T9328] RDX: 0000000000000002 RSI: 0000000000040000 RDI: 0000000000000000 [ 298.620461][ T9328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.620466][ T9328] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.620472][ T9328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.620487][ T9328] [ 298.976621][ T5890] usb 2-1: USB disconnect, device number 40 [ 299.084021][ T5892] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 299.219786][ T9336] netlink: 44 bytes leftover after parsing attributes in process `syz.0.991'. [ 299.243561][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 299.255220][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 299.266345][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 299.276226][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 299.293665][ T5892] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 299.304066][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.312355][ T5892] usb 3-1: Product: syz [ 299.316708][ T5892] usb 3-1: Manufacturer: syz [ 299.321431][ T5892] usb 3-1: SerialNumber: syz [ 299.356852][ T5892] usb 3-1: config 0 descriptor?? [ 299.366916][ T5892] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 299.507722][ T9338] program syz.4.992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.572123][ T5927] usb 3-1: USB disconnect, device number 30 [ 299.730088][ T2152] usb 4-1: USB disconnect, device number 29 [ 299.911837][ T5892] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 300.382729][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 300.394463][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.402389][ T5892] usb 5-1: can't read configurations, error -61 [ 300.542250][ T5892] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 300.590963][ T9353] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.702095][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 300.713748][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.721435][ T5892] usb 5-1: can't read configurations, error -61 [ 300.730885][ T5892] usb usb5-port1: attempt power cycle [ 300.736508][ T9355] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 301.017771][ T9344] netlink: 'syz.3.994': attribute type 12 has an invalid length. [ 301.080901][ T9364] loop2: detected capacity change from 0 to 7 [ 301.107588][ T9364] Dev loop2: unable to read RDB block 7 [ 301.121922][ T9364] loop2: unable to read partition table [ 301.127849][ T9364] loop2: partition table beyond EOD, truncated [ 301.134322][ T5892] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 301.157832][ T9364] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.195273][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 301.205697][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.215638][ T5892] usb 5-1: can't read configurations, error -61 [ 301.321948][ T2152] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 301.372098][ T5892] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 301.442194][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 301.453779][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.461616][ T5892] usb 5-1: can't read configurations, error -61 [ 301.484859][ T5892] usb usb5-port1: unable to enumerate USB device [ 301.504015][ T2152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.534909][ T2152] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 6 [ 301.574514][ T2152] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 301.584622][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=9 [ 301.594028][ T2152] usb 1-1: SerialNumber: syz [ 301.605749][ T2152] usb 1-1: config 0 descriptor?? [ 302.292465][ T9388] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 302.653847][ T9386] netlink: 'syz.2.1005': attribute type 12 has an invalid length. [ 302.911351][ T9401] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 302.927753][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 303.233876][ T9401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.455519][ T9414] FAULT_INJECTION: forcing a failure. [ 303.455519][ T9414] name failslab, interval 1, probability 0, space 0, times 0 [ 303.558738][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.4.1015 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 303.558756][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.558763][ T9414] Call Trace: [ 303.558768][ T9414] [ 303.558773][ T9414] dump_stack_lvl+0x241/0x360 [ 303.558793][ T9414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.558806][ T9414] ? __pfx__printk+0x10/0x10 [ 303.558822][ T9414] ? __pfx___might_resched+0x10/0x10 [ 303.558836][ T9414] should_fail_ex+0x424/0x570 [ 303.558855][ T9414] should_failslab+0xac/0x100 [ 303.558870][ T9414] __kmalloc_noprof+0xdf/0x4d0 [ 303.558883][ T9414] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 303.558893][ T9414] ? apparmor_capable+0x13b/0x1b0 [ 303.558905][ T9414] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 303.558918][ T9414] genl_rcv_msg+0x819/0xf00 [ 303.558937][ T9414] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.558949][ T9414] ? __dev_queue_xmit+0x1780/0x3f60 [ 303.558959][ T9414] ? kasan_save_track+0x3f/0x80 [ 303.558968][ T9414] ? __kasan_slab_alloc+0x66/0x80 [ 303.558982][ T9414] ? __do_fast_syscall_32+0xb4/0x110 [ 303.559002][ T9414] ? __lock_acquire+0xad5/0xd80 [ 303.559019][ T9414] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 303.559040][ T9414] netlink_rcv_skb+0x208/0x480 [ 303.559052][ T9414] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.559066][ T9414] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.559089][ T9414] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.559104][ T9414] genl_rcv+0x28/0x40 [ 303.559116][ T9414] netlink_unicast+0x7f8/0x9a0 [ 303.559131][ T9414] ? __pfx_netlink_unicast+0x10/0x10 [ 303.559143][ T9414] ? skb_put+0x114/0x1f0 [ 303.559159][ T9414] netlink_sendmsg+0x8c3/0xcd0 [ 303.559178][ T9414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.559191][ T9414] ? __import_iovec+0x585/0x830 [ 303.559202][ T9414] ? aa_sock_msg_perm+0x91/0x160 [ 303.559218][ T9414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.559229][ T9414] __sock_sendmsg+0x221/0x270 [ 303.559242][ T9414] ____sys_sendmsg+0x523/0x860 [ 303.559257][ T9414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.559279][ T9414] __sys_sendmsg+0x271/0x360 [ 303.559290][ T9414] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.559326][ T9414] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 303.559336][ T9414] ? lockdep_hardirqs_on+0x9d/0x150 [ 303.559346][ T9414] __do_fast_syscall_32+0xb4/0x110 [ 303.559355][ T9414] ? exc_page_fault+0x5f8/0x920 [ 303.559372][ T9414] do_fast_syscall_32+0x34/0x80 [ 303.559382][ T9414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.559393][ T9414] RIP: 0023:0xf7fb6579 [ 303.559403][ T9414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.559410][ T9414] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 303.559421][ T9414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 303.559428][ T9414] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.559434][ T9414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.559439][ T9414] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.559445][ T9414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.559459][ T9414] [ 304.272055][ T5894] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 304.444264][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1023'. [ 304.502241][ T9436] x_tables: duplicate underflow at hook 2 [ 304.602792][ T5901] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 304.611851][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 304.628639][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.676361][ T2152] usb 1-1: USB disconnect, device number 31 [ 304.682375][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.695942][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 304.739320][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 304.753895][ T5894] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 304.770888][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.787156][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.806890][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 305.173605][ T9442] netlink: 'syz.0.1025': attribute type 12 has an invalid length. [ 305.213564][ T5894] hub 4-1:1.0: bad descriptor, ignoring hub [ 305.250479][ T5894] hub 4-1:1.0: probe with driver hub failed with error -5 [ 305.260441][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.276540][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 305.288988][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 305.300126][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.321837][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 305.336802][ T5901] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.347832][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.356738][ T5894] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 305.362762][ T5894] cdc_wdm 4-1:1.0: Unknown control protocol [ 305.424004][ T5901] usb 2-1: config 0 descriptor?? [ 305.457006][ T9430] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 305.532742][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.542232][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.841797][ T5890] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 305.873687][ T5892] usb 4-1: USB disconnect, device number 30 [ 305.884519][ T5901] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 305.899743][ T5901] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 305.935578][ T5901] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 305.995573][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.042972][ T5890] usb 5-1: not running at top speed; connect to a high speed hub [ 306.089337][ T5890] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.118279][ T5890] usb 5-1: config 1 interface 0 has no altsetting 0 [ 306.134840][ T5890] usb 5-1: language id specifier not provided by device, defaulting to English [ 306.164278][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.183019][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.210247][ T5890] usb 5-1: Product: syz [ 306.215732][ T5890] usb 5-1: SerialNumber: syz [ 306.981383][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.006459][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.459392][ T5890] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 307.475162][ T5890] usb 5-1: USB disconnect, device number 42 [ 307.482139][ T9458] netlink: 'syz.0.1026': attribute type 12 has an invalid length. [ 308.061472][ T2152] usb 2-1: USB disconnect, device number 41 [ 308.584660][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'. [ 308.682294][ T5894] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 308.852097][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 308.870015][ T5894] usb 2-1: no configurations [ 308.879064][ T5894] usb 2-1: can't read configurations, error -22 [ 308.903012][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1039'. [ 309.032631][ T5894] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 309.168469][ T9490] FAULT_INJECTION: forcing a failure. [ 309.168469][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 309.192692][ T9490] CPU: 1 UID: 0 PID: 9490 Comm: syz.0.1041 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 309.192719][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.192729][ T9490] Call Trace: [ 309.192736][ T9490] [ 309.192743][ T9490] dump_stack_lvl+0x241/0x360 [ 309.192775][ T9490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.192797][ T9490] ? __pfx__printk+0x10/0x10 [ 309.192819][ T9490] ? up_write+0x1ab/0x590 [ 309.192842][ T9490] ? __pfx___might_resched+0x10/0x10 [ 309.192864][ T9490] should_fail_ex+0x424/0x570 [ 309.192892][ T9490] should_failslab+0xac/0x100 [ 309.192917][ T9490] kmem_cache_alloc_noprof+0x78/0x390 [ 309.192938][ T9490] ? mas_alloc_nodes+0x267/0x7e0 [ 309.192959][ T9490] mas_alloc_nodes+0x267/0x7e0 [ 309.192983][ T9490] mas_preallocate+0x5ea/0x950 [ 309.193012][ T9490] ? __pfx_mas_preallocate+0x10/0x10 [ 309.193033][ T9490] ? __lock_acquire+0xad5/0xd80 [ 309.193057][ T9490] ? __asan_memset+0x23/0x50 [ 309.193074][ T9490] ? init_multi_vma_prep+0x3e3/0x460 [ 309.193102][ T9490] commit_merge+0x25a/0x730 [ 309.193130][ T9490] ? __pfx_commit_merge+0x10/0x10 [ 309.193159][ T9490] ? vma_expand+0x272/0x890 [ 309.193180][ T9490] vma_expand+0x638/0x890 [ 309.193205][ T9490] ? __pfx_vma_expand+0x10/0x10 [ 309.193234][ T9490] vma_merge_new_range+0x63a/0x7d0 [ 309.193258][ T9490] ? mas_find+0x950/0xbb0 [ 309.193288][ T9490] vma_merge_extend+0x43b/0x4c0 [ 309.193310][ T9490] ? __pfx_vma_merge_extend+0x10/0x10 [ 309.193348][ T9490] ? __vm_enough_memory+0x119/0x380 [ 309.193373][ T9490] __se_sys_mremap+0x24c0/0x2c00 [ 309.193419][ T9490] ? __pfx___se_sys_mremap+0x10/0x10 [ 309.193444][ T9490] ? ksys_write+0x24e/0x2d0 [ 309.193479][ T9490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.193495][ T9490] ? __fget_files+0x2a/0x420 [ 309.193514][ T9490] ? __fget_files+0x2a/0x420 [ 309.193548][ T9490] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 309.193563][ T9490] ? lockdep_hardirqs_on+0x9d/0x150 [ 309.193574][ T9490] ? __ia32_sys_mremap+0x20/0xc0 [ 309.193594][ T9490] __do_fast_syscall_32+0xb4/0x110 [ 309.193610][ T9490] ? exc_page_fault+0x5f8/0x920 [ 309.193688][ T9490] do_fast_syscall_32+0x34/0x80 [ 309.193707][ T9490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.193726][ T9490] RIP: 0023:0xf7ff4579 [ 309.193740][ T9490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 309.193755][ T9490] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 309.193773][ T9490] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000001000 [ 309.193785][ T9490] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000080001000 [ 309.193796][ T9490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.193805][ T9490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.193816][ T9490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.193843][ T9490] [ 309.193928][ T9490] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 309.497927][ T9490] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 309.506516][ T9490] CPU: 1 UID: 0 PID: 9490 Comm: syz.0.1041 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 309.518145][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.528198][ T9490] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00 [ 309.533919][ T9490] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 d8 0d ab ff 85 db 0f 84 7b 01 00 00 e8 cb 0a ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 36 2f 15 00 4c 8b 34 25 20 00 [ 309.553525][ T9490] RSP: 0018:ffffc900059b7b20 EFLAGS: 00010246 [ 309.559591][ T9490] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92000b36fc6 [ 309.567558][ T9490] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 309.575522][ T9490] RBP: ffffc900059b7ed0 R08: ffffffff821d2375 R09: 1ffffffff1dcbd76 [ 309.583490][ T9490] R10: dffffc0000000000 R11: fffffbfff1dcbd77 R12: 0000000080000000 [ 309.591452][ T9490] R13: ffff88802582f500 R14: 0000000000000003 R15: ffffc900059b7cb0 [ 309.599416][ T9490] FS: 0000000000000000(0000) GS:ffff888125099000(0063) knlGS:00000000f5116b40 [ 309.608335][ T9490] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 309.614918][ T9490] CR2: 00000000f5115fac CR3: 000000004dfde000 CR4: 00000000003526f0 [ 309.622881][ T9490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.630880][ T9490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.638840][ T9490] Call Trace: [ 309.642114][ T9490] [ 309.645058][ T9490] ? __pfx___se_sys_mremap+0x10/0x10 [ 309.650435][ T9490] ? ksys_write+0x24e/0x2d0 [ 309.654959][ T9490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.660939][ T9490] ? __fget_files+0x2a/0x420 [ 309.665522][ T9490] ? __fget_files+0x2a/0x420 [ 309.670105][ T9490] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 309.676683][ T9490] ? lockdep_hardirqs_on+0x9d/0x150 [ 309.681867][ T9490] ? __ia32_sys_mremap+0x20/0xc0 [ 309.686796][ T9490] __do_fast_syscall_32+0xb4/0x110 [ 309.691897][ T9490] ? exc_page_fault+0x5f8/0x920 [ 309.696756][ T9490] do_fast_syscall_32+0x34/0x80 [ 309.701606][ T9490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.707927][ T9490] RIP: 0023:0xf7ff4579 [ 309.712002][ T9490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 309.731601][ T9490] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 309.740091][ T9490] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000001000 [ 309.748055][ T9490] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000080001000 [ 309.756024][ T9490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.763987][ T9490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.771958][ T9490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.779944][ T9490] [ 309.782973][ T9490] Modules linked in: [ 309.787997][ T9490] ---[ end trace 0000000000000000 ]--- [ 309.811935][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 309.862591][ T9490] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00 [ 309.868596][ T9490] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 d8 0d ab ff 85 db 0f 84 7b 01 00 00 e8 cb 0a ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 36 2f 15 00 4c 8b 34 25 20 00 [ 309.898087][ T5894] usb 2-1: no configurations [ 309.902913][ T5894] usb 2-1: can't read configurations, error -22 [ 309.917197][ T5894] usb usb2-port1: attempt power cycle [ 309.924289][ T9490] RSP: 0018:ffffc900059b7b20 EFLAGS: 00010246 [ 309.930546][ T9490] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92000b36fc6 [ 309.938863][ T9490] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 309.949697][ T9490] RBP: ffffc900059b7ed0 R08: ffffffff821d2375 R09: 1ffffffff1dcbd76 [ 309.958414][ T9490] R10: dffffc0000000000 R11: fffffbfff1dcbd77 R12: 0000000080000000 [ 309.966961][ T9490] R13: ffff88802582f500 R14: 0000000000000003 R15: ffffc900059b7cb0 [ 309.975393][ T9490] FS: 0000000000000000(0000) GS:ffff888125099000(0063) knlGS:00000000f5116b40 [ 309.985034][ T9490] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 309.993763][ T9490] CR2: 00000000f50a5da4 CR3: 000000004dfde000 CR4: 00000000003526f0 [ 310.031925][ T9490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.045735][ T9490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.078432][ T9490] Kernel panic - not syncing: Fatal exception [ 310.084916][ T9490] Kernel Offset: disabled [ 310.089240][ T9490] Rebooting in 86400 seconds..