last executing test programs: 11.577563578s ago: executing program 3 (id=1451): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000100)='\nY', 0x2}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000700000000000000"], 0x18}], 0x1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f00000000c0)="0f01df263ef3a5baf8f766b8dc9b538466efbafc0cb8a400ef3e260f7970000f9a562bba430066b800680000715d8f8f6d36d8c2360fc72df0f79d0500", 0x3d}], 0x1, 0x74, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r9, 0x80184153, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r11, &(0x7f0000000700)={0x2, 0x0, @multicast2}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) futex(&(0x7f0000000000)=0x3, 0x8, 0x0, 0x0, 0x0, 0x2) 11.337840662s ago: executing program 0 (id=1452): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0xba6}}]}]}]}, 0x50}}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000005c0)=[{{&(0x7f0000003080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10, 0x117, 0x2}}], 0x10, 0x840}}], 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x23, 0x102, {0x102, 0xd, "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"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000240)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "8935b206940a1d99eedce5794e1532ca"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfd, 0x0, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x84, 0x401}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0xb, 0xe, "5f98346b", "b0fb92ba"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x18, 0x0, 0x8, 0x0, 0x9, 0xb, 0x10}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x8, "09bc49a80ce7abe0"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x57ad}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000540)={0x40, 0xb, 0x2, "187a"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "c5e8"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xc1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x78, &(0x7f0000000040)={0x40, 0x9, 0x8, "d019eed4d6000000"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0}, 0x0) 11.295794715s ago: executing program 3 (id=1453): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x323, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x0, 0x7ffe, r2, 0x0, 0x0, 0x400000000}]) sendmsg$nl_route(r2, 0x0, 0x240088c5) mount$fuse(0x0, 0x0, 0x0, 0x9b087c, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYRES64=r3, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r3]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0xfffff79e, @mcast1, 0xfffffdfc}}, 0x0, 0x0, 0x9, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) sysinfo(&(0x7f0000000280)=""/81) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000300)="2f6b05000000eff3983834e807f718fbce8e83bdc26a7ad2000000", 0x14, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha1-ni\x00'}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @private=0xa010102}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x40, 0x11, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, r8, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xf}}]}}]}, 0x40}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40) 11.188145202s ago: executing program 4 (id=1454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'vcan0\x00', 0x10b}) read$FUSE(r2, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = socket(0x10, 0x1, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESDEC=r3], 0x48}, 0x1, 0x0, 0x0, 0x404c851}, 0x2000c010) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000000a1ffffff0000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005200010000000000000c000100feffffff00"/32], 0x20}}, 0x4000044) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003e236bb40f00a57d30000010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0xf}, {0xf, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x1000}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x44}}, 0x60040) r11 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r11, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x0, 0x0, 0x884], [0x6], [0xfb]], '\x00', [{0x8001}, {0x0, 0x102}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x6}, {}, {0x1}, {}, {0x0, 0x2}, {0x0, 0x2}], '\x00', 0x7f}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.459071877s ago: executing program 0 (id=1455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x7, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x845, 0x0, 0x8, 0x8000000000000000, 0x2, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x1200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 8.656038909s ago: executing program 0 (id=1457): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000000c0)=0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') io_setup(0x5, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) truncate(0x0, 0x89) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) futex_waitv(&(0x7f0000000a40)=[{0x3ff, &(0x7f0000000040)=0x8000000000000000, 0x2}, {0x7, 0x0, 0x2}, {0x200000000, 0x0, 0x2}, {0x7, &(0x7f0000000180)=0x4e, 0x2}, {0xfffffffffffffffa, &(0x7f00000001c0)=0x5, 0x2}, {0xc9e6, &(0x7f0000000280)=0x2, 0x82}, {0x3, &(0x7f00000002c0)=0x3, 0x82}, {0x2, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x2, &(0x7f0000000400)=0x4, 0x82}, {0x1, &(0x7f0000000440)=0x6, 0x2}, {0x1, &(0x7f0000000480)=0x2, 0x82}, {0x8, &(0x7f00000004c0)=0x8, 0x82}, {0x19, 0x0, 0x2}, {0xa, &(0x7f0000000540)=0xe, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0x8, &(0x7f00000005c0)=0x8000000000000001, 0x2}, {0x6, &(0x7f0000000600)=0x5, 0x2}, {0x9, &(0x7f0000000680)=0x3, 0xae71c2198a35c111}, {0x4, &(0x7f0000000580), 0x82}, {0x200, &(0x7f0000000700)=0x3, 0x82}, {0x3, &(0x7f0000000740)=0x2}, {0x1, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x7f, &(0x7f00000008c0)=0x2, 0x2}, {0x0, 0x0, 0x2}, {0x78, 0x0, 0x82}, {0x800, &(0x7f00000009c0)=0x7, 0x2}, {0x4, &(0x7f0000000a00)=0x7f, 0x2}], 0x1d, 0x0, 0x0, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r7, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x84}}, 0x0) fcntl$addseals(r2, 0x409, 0x2) preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000300)=""/138, 0x8a}], 0x2, 0x100, 0x0) 7.724321163s ago: executing program 2 (id=1458): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 7.503957116s ago: executing program 4 (id=1459): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3c8b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.375262002s ago: executing program 4 (id=1461): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xb, {{0xa, 0x0, 0x76171c1, @mcast2}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000}}, {{0xa, 0x4e22, 0x3ff, @loopback, 0x4}}, {{0xa, 0x4e23, 0x2, @loopback, 0x6}}]}, 0x210) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x4010, r0, 0xb0a62000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0xf0f046, 0x8}) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6004c2ad00101100fc010000000000000000000000000001ff0200000000000000000000000035781dbe0e22001090780200000000000000"], 0x0) 7.069312648s ago: executing program 4 (id=1462): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xfff3, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xc9}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2000000, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 7.039927553s ago: executing program 3 (id=1463): socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0xfbfdffff, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) 6.620032435s ago: executing program 4 (id=1464): unshare(0x24040000) unshare(0x2c020400) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="020101090c00000000000000007b5eccdd001000ffffffff000004d6000000000200010000b0010004007f00000003001700322000000a004e2200000006ff0200000000000000000000000000010500000000000000"], 0x60}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000001740)={0x1, 0x0, 0x0, 0x4}) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001a40)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000001080)=""/85, 0x0}) r2 = getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000023c0), 0xa0482, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000ffffff014d564b"]) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x68000080) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002500)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r7, 0x0) syz_open_dev$swradio(&(0x7f0000001700), 0x1, 0x2) recvmmsg(r7, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000012c0)=[@in6={0xa, 0x4e24, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd1}, @in6={0xa, 0x0, 0x0, @empty, 0x802}], 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_setup(0x25e, &(0x7f0000000080)) 5.77849306s ago: executing program 2 (id=1465): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 67) 5.684852096s ago: executing program 2 (id=1466): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x2, 0x3404, 0xffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) fchdir(r2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) unshare(0x28000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c0002"], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r7, 0x2f, 0xe, 0x2, 0x1, 0x1c, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x80, 0x40, 0x3, 0x81}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) r9 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "b5a4be350e761cb133a663b4ab379afe4b31d4783348b29e914224431b1f7740ca9a249fc145a1b6b32fe51de473baa1fa13e42d0de1ee6cb76262"}, 0x4f) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f0000000380)=""/13, 0xd}, {&(0x7f0000000400)=""/33, 0x21}], 0x7, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x40000030) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=@newqdisc={0x4c, 0x24, 0x100, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x7, 0xfff1}, {0xffff, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcb}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x30}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x24045044) getsockname$packet(r11, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001840)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)=@delchain={0x24, 0x25, 0x400, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, r12, {0xfff3, 0xe}, {0x2, 0xfff1}, {0x9011337298583cd6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000095}, 0x4044) 5.217801595s ago: executing program 0 (id=1467): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/250, 0xfa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xd, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000480)=0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x202}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x7b}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) timer_create(0x7, &(0x7f0000000700)={0x0, 0x33}, &(0x7f0000000740)=0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x8000416a, &(0x7f00000003c0)={0x0, 0x80d490, 0xa, 0x1}, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000020100c0"]) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) timer_settime(r3, 0x0, &(0x7f00000007c0)={{r4, r5+10000000}}, &(0x7f0000000800)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x700, 0x0, 0x0, 0x4, {{0x25, 0x4, 0x1, 0x21, 0x94, 0x68, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0x34, 0xe0, 0x1, 0xc, [{@remote, 0x22}, {@remote, 0xd3}, {@multicast1, 0x7}, {@loopback, 0x5}, {@private=0xa010102, 0x751}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8}]}, @generic={0x86, 0x2}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xc, "1350f78baea69cc6b291"}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0x6, [{@multicast1, 0x8}, {@broadcast, 0x800}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xfffffffe}, {@multicast1, 0x7}]}, @end, @lsrr={0x83, 0xf, 0x13, [@multicast1, @loopback, @broadcast]}, @generic={0x7, 0x4, "e8d2"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', r10, 0x2f, 0x5, 0x0, 0x2, 0x44, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00', 0x7840, 0x80, 0x9, 0x9f2}}) 5.128173591s ago: executing program 2 (id=1468): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x37}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x9, 0xd2, {0xd2, 0x1, "22bec4c53d28c9e14ba5f664318bc30d125a2816a568b0dc067cbe5c4af7a91aaf4946633ad9e207882e376b9cfe94c45fbdac8c35f16781681c5009c5b7e2bea81ef1598d2697c05e701c1e954478d355f73dbe94767cab684bc2bd9aeb5e848bb65178de5b9dbb8eb6e642adbdfa4a355b9e01388d1568ed21afaebaf649dffa142e0b68cdc26baab18c8fbfc0aa388dbedc6cce2556928ed3d3aa1834f41d78a1ef00447b2cd7777b50e8ae305160ada3e15fa710efa3c9914a7b29597af391b4168197e9f18013db202243bf1438"}}, &(0x7f0000000440)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000580)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="200c6b730fa3b9e543692cac319bcdb731d67f45eb403dee18160e1e3006a2b87f2dd51403c382f9ac28dd0d79f0b11a1896d5c5b7c26dc7192eb1d6c1e08bc9f8792895fcae8b"], &(0x7f0000000140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000002c0)={0x20, 0x0, 0x68, {0x66, "33b5314769f759424499eb2ecb686113e42f215ffbe019da069a598d257b67cfe95fc88246d6343b62f474884effe25e54fc0649f5819099598dfcc130b7f80c88f2c6c35da3821df0e436e2afa6ad282758c859d34e8321eeca0b2fc871740db8e9a68ea3f2"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0xfe}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x7}}) r3 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40, 0xe2, 0x8}, 0x18) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000140)='nl80211\x00', &(0x7f0000000180), 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e24, 0x9, @private1, 0x7}}, 0x0, 0x0, 0x30, 0x0, "399d8913bd482fa5cc01c74f8200a33074a3fd0f681d65a17880e84d430346fe99760b190684cb1f42a7d4c1b2bfb6c10cf8c70a1b94d1305d837717dddbc7b57b17b68ac5a44cb1253099729efab68e"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x54, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x4}, {0x8}]}]}, 0x54}}, 0x40000) 4.876841994s ago: executing program 0 (id=1469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x300}]) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsmount(r2, 0x0, 0xf) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000800108d0450ce000000000001090224000100000000000000000103000000092103000001220500090581030004b80000"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.728812944s ago: executing program 1 (id=1470): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x80}}, 0x0) getsockname$netlink(r1, &(0x7f0000000080), &(0x7f0000000140)=0xc) write$snapshot(r0, &(0x7f0000000040)="20d6df94c55e45ca4bd38af588dbd844d6dcf330118d5bb24ccc5bf48323a7728a3f4aec", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00ebfffe", @ANYRES16=r3, @ANYBLOB="010008000000fbdbdf250100000000000000014100000018001700000000000000006574683a6970766c616e3100"], 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) 3.476441431s ago: executing program 3 (id=1471): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x8) 3.434458151s ago: executing program 3 (id=1472): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pread64(r0, &(0x7f0000000180)=""/11, 0xb, 0xfffffffffffffffe) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) (async) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200de0010f3044d074000010203010902240001010330050904000801030101000921ff000f4cbb359b7b1bce528a010122b0"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000020000000000000000de0000000000000095", @ANYRES32=r2, @ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000b75a3e1e05298a6dfeae352520fadf8299920a92092c4f8baad16d79fd9e78b391e7c0237a9b26994b03fea07a970661b3b1b8d4", @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf258200000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000280)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000300)={0x3, 0xfffffffa}, 0x8) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x2, 0xc) 2.765790411s ago: executing program 3 (id=1473): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x323, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x0, 0x7ffe, r2, 0x0, 0x0, 0x400000000}]) sendmsg$nl_route(r2, 0x0, 0x240088c5) mount$fuse(0x0, 0x0, 0x0, 0x9b087c, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYRES64=r3, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r3]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0xfffff79e, @mcast1, 0xfffffdfc}}, 0x0, 0x0, 0x9, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) sysinfo(&(0x7f0000000280)=""/81) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000300)="2f6b05000000eff3983834e807f718fbce8e83bdc26a7ad2000000", 0x14, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha1-ni\x00'}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @private=0xa010102}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x40, 0x11, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, r8, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xf}}]}}]}, 0x40}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40) 2.324377725s ago: executing program 1 (id=1474): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x8) (fail_nth: 3) 1.814476126s ago: executing program 1 (id=1475): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000001, 0x2) write(r0, &(0x7f0000000080)="b07056b6433f4ce48e90823059c8b9ea7c56e4e2f875e0adc75ecc990b831d158b1102e49734b5d8e59f1209350220", 0x26) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0xffffffffffffff40, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x412}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001840)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0x250, 0x198, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @rand_addr=0x64010102, 0x0, 0x0, 'macsec0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x6, 0xc02205c30f4512fa, 0x18}, 0x600, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x10001, 'system_u:object_r:klogd_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'bond_slave_0\x00'}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'erspan0\x00', 'wg2\x00', {0xff}, {0xff}, 0x67, 0x1, 0x1a}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 1.641249502s ago: executing program 2 (id=1476): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x7ff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) getpid() r0 = socket$rxrpc(0x21, 0x2, 0x6) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f00000001c0)=@caif=@rfm, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/204}, {&(0x7f00000003c0)=""/82}], 0x0, &(0x7f0000000300)=""/173}, 0x7}], 0x10123, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0405626, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = creat(0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @mcast1}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 1.424106178s ago: executing program 4 (id=1477): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000000c0)=0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') io_setup(0x5, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) truncate(0x0, 0x89) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) futex_waitv(&(0x7f0000000a40)=[{0x3ff, &(0x7f0000000040)=0x8000000000000000, 0x2}, {0x7, 0x0, 0x2}, {0x200000000, 0x0, 0x2}, {0x7, &(0x7f0000000180)=0x4e, 0x2}, {0xfffffffffffffffa, &(0x7f00000001c0)=0x5, 0x2}, {0xc9e6, &(0x7f0000000280)=0x2, 0x82}, {0x3, &(0x7f00000002c0)=0x3, 0x82}, {0x2, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x2, &(0x7f0000000400)=0x4, 0x82}, {0x1, &(0x7f0000000440)=0x6, 0x2}, {0x1, &(0x7f0000000480)=0x2, 0x82}, {0x8, &(0x7f00000004c0)=0x8, 0x82}, {0x19, 0x0, 0x2}, {0xa, &(0x7f0000000540)=0xe, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0x8, &(0x7f00000005c0)=0x8000000000000001, 0x2}, {0x6, &(0x7f0000000600)=0x5, 0x2}, {0x9, &(0x7f0000000680)=0x3, 0xae71c2198a35c111}, {0x4, &(0x7f0000000580), 0x82}, {0x200, &(0x7f0000000700)=0x3, 0x82}, {0x3, &(0x7f0000000740)=0x2}, {0x1, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x7f, &(0x7f00000008c0)=0x2, 0x2}, {0x0, 0x0, 0x2}, {0x78, 0x0, 0x82}, {0x800, &(0x7f00000009c0)=0x7, 0x2}, {0x4, &(0x7f0000000a00)=0x7f, 0x2}], 0x1d, 0x0, 0x0, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r7, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x84}}, 0x0) fcntl$addseals(r2, 0x409, 0x2) preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000300)=""/138, 0x8a}], 0x2, 0x100, 0x0) 1.423770689s ago: executing program 0 (id=1478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0xfffffffffffffffc}) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x2a101, 0x0) write$tcp_mem(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0xfffffffe, 0x1, 0x0, 0x0, 0x1ff], [0xfb, 0x0, 0x0, 0x3]], '\x00', [{0x0, 0x1}, {}, {0x1, 0x8000}, {0xe, 0x69, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x3}, {}, {}, {0x10001, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x100000}]}) socket(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 1.140866993s ago: executing program 1 (id=1479): socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000"], 0x80}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x598, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 689.169728ms ago: executing program 1 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000001200000000000000000000000010000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000feffff070000000000000000"], 0x60) r2 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x3, 0x2b0}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000140000000c0007"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 226.947304ms ago: executing program 1 (id=1481): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009d, 0x0, 0x9}]}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write(r4, &(0x7f0000000000)="e27379e9c6932ba9562a7f233727de5f08b3b949c804debe84704a2ddac5309eab3ffc36be5fd0d70310fa60", 0x2c) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) 0s ago: executing program 2 (id=1482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000ce785be76a5858220100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad00000000000000180000000000000044fc00de3c8fa347b75187c6fb5845feb68e455e74ac45ac07e8988926c7ca9fb4bc27c8be923ec65ccbf056faa82ed2d7198c70954a20f0d5039d6f8659370f5f003eb4e7e0451978b32ea3c2a8a41b09576898", 0x64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x48010) kernel console output (not intermixed with test programs): [ T9346] loop6: detected capacity change from 0 to 7 [ 320.146170][ T9346] Dev loop6: unable to read RDB block 7 [ 320.155228][ T9346] loop6: unable to read partition table [ 320.166642][ T9346] loop6: partition table beyond EOD, truncated [ 320.213002][ T9346] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 320.237593][ T10] usb 5-1: SerialNumber: syz [ 320.439455][ T10] usb 5-1: config 0 descriptor?? [ 321.325074][ T976] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 321.403946][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.602199][ T976] usb 3-1: config 0 has no interfaces? [ 321.779523][ T976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.790997][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.804741][ T976] usb 3-1: Product: syz [ 321.822833][ T976] usb 3-1: Manufacturer: syz [ 321.831933][ T976] usb 3-1: SerialNumber: syz [ 321.845576][ T30] audit: type=1326 audit(1744844392.057:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.1.1128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x0 [ 321.884063][ T976] usb 3-1: config 0 descriptor?? [ 322.218699][ T9365] xt_TCPMSS: Only works on TCP SYN packets [ 322.352231][ T10] usb 5-1: USB disconnect, device number 57 [ 322.405769][ T9390] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1131'. [ 322.425231][ T5890] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 322.646709][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.666145][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 322.680704][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.696850][ T5890] usb 4-1: config 0 descriptor?? [ 322.845980][ T9401] program syz.4.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.883322][ T9403] input: syz1 as /devices/virtual/input/input18 [ 323.029328][ T5844] udevd[5844]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 323.275233][ T5890] (null): keene_cmd_main failed (-110) [ 323.301052][ T5890] video4linux radio48: keene_cmd_main failed (-32) [ 323.347102][ T5890] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 323.431916][ T9411] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1139'. [ 323.461864][ T9411] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 323.518156][ T9415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.814287][ T9421] netlink: 'syz.4.1142': attribute type 15 has an invalid length. [ 323.965201][ T9423] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1143'. [ 324.224161][ T30] audit: type=1326 audit(1744844394.427:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9427 comm="syz.4.1145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ad98e169 code=0x0 [ 324.294273][ T10] usb 3-1: USB disconnect, device number 48 [ 324.547409][ T9440] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 324.567324][ T9440] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 324.717082][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 325.015079][ T5906] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 325.165012][ T5906] usb 2-1: device descriptor read/64, error -71 [ 325.175156][ T9452] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1154'. [ 325.242873][ T5886] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 325.264244][ T976] usb 4-1: USB disconnect, device number 50 [ 325.410027][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.425039][ T5906] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 325.444538][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.651597][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.675157][ T5906] usb 2-1: device descriptor read/64, error -71 [ 325.724391][ T5886] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.744441][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.786057][ T5906] usb usb2-port1: attempt power cycle [ 325.812584][ T5886] usb 3-1: config 0 descriptor?? [ 325.885018][ T976] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 326.135017][ T5906] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 326.155714][ T5906] usb 2-1: device descriptor read/8, error -71 [ 326.183119][ T976] usb 4-1: config 0 has no interfaces? [ 326.187639][ T9465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.278220][ T5886] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 326.294561][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 326.337659][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.351721][ T5886] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 326.376246][ T976] usb 4-1: Product: syz [ 326.380442][ T976] usb 4-1: Manufacturer: syz [ 326.394998][ T5906] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 326.436593][ T5906] usb 2-1: device descriptor read/8, error -71 [ 326.444634][ T976] usb 4-1: SerialNumber: syz [ 326.495138][ T976] usb 4-1: config 0 descriptor?? [ 326.554381][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.571619][ T5906] usb usb2-port1: unable to enumerate USB device [ 326.573806][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.662240][ T976] usb 3-1: USB disconnect, device number 49 [ 326.749089][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.759382][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.948008][ T9475] tipc: Started in network mode [ 326.965192][ T9475] tipc: Node identity 2d00ff7f0000000009, cluster identity 4711 [ 327.617252][ T30] audit: type=1326 audit(1744844397.817:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.0.1164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2e18e169 code=0x0 [ 327.901934][ T9490] netlink: 'syz.1.1166': attribute type 72 has an invalid length. [ 328.121864][ T9494] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 328.366278][ T976] usb 4-1: USB disconnect, device number 51 [ 328.520453][ T9500] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1172'. [ 328.636206][ T9500] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 328.655475][ T9505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.703800][ T5887] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 328.898415][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.913603][ T5887] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.935794][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.957069][ T5887] usb 2-1: config 0 descriptor?? [ 328.967461][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 329.345074][ T5906] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 329.385095][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 329.525759][ T5906] usb 1-1: config 0 has no interfaces? [ 329.652352][ T5906] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 329.677449][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.694779][ T5906] usb 1-1: Product: syz [ 329.707086][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.710114][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 329.726102][ T5906] usb 1-1: Manufacturer: syz [ 329.737674][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.748631][ T5906] usb 1-1: SerialNumber: syz [ 329.765535][ T9522] netlink: 'syz.3.1179': attribute type 72 has an invalid length. [ 329.787282][ T5906] usb 1-1: config 0 descriptor?? [ 329.803468][ T5887] pwc: recv_control_msg error -71 req 04 val 1000 [ 329.827299][ T5887] pwc: recv_control_msg error -71 req 04 val 1300 [ 329.847131][ T5887] pwc: recv_control_msg error -71 req 04 val 1400 [ 329.854323][ T5887] pwc: recv_control_msg error -71 req 02 val 2000 [ 329.861812][ T5886] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 329.874979][ T5887] pwc: recv_control_msg error -71 req 02 val 2100 [ 329.887710][ T5887] pwc: recv_control_msg error -71 req 04 val 1500 [ 329.915258][ T5887] pwc: recv_control_msg error -71 req 02 val 2500 [ 329.940996][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 329.955613][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.963245][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.972272][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.979855][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 330.008313][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.077785][ T5887] pwc: Registered as video103. [ 330.115236][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.129148][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 330.151215][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 330.195924][ T5887] usb 2-1: USB disconnect, device number 51 [ 330.213407][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 330.260140][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.355086][ T5906] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 330.379268][ T5886] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.410148][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.442020][ T5886] usb 5-1: config 0 descriptor?? [ 330.473737][ T9520] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 330.515275][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 330.535542][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 330.571725][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.606996][ T30] audit: type=1326 audit(1744844400.817:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.1184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f5b8e169 code=0x0 [ 330.667355][ T5906] usb 4-1: Product: syz [ 330.671823][ T5906] usb 4-1: Manufacturer: syz [ 330.677198][ T5906] usb 4-1: SerialNumber: syz [ 330.698824][ T5906] usb 4-1: config 0 descriptor?? [ 330.940436][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 330.940436][ T5906] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 330.986327][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 331.099352][ T5886] usb 5-1: USB disconnect, device number 58 [ 331.215389][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 331.385459][ T10] usb 2-1: config 0 has no interfaces? [ 331.397019][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 331.419719][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.436455][ T10] usb 2-1: Product: syz [ 331.440853][ T10] usb 2-1: Manufacturer: syz [ 331.450354][ T10] usb 2-1: SerialNumber: syz [ 331.478959][ T10] usb 2-1: config 0 descriptor?? [ 331.995459][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 332.280900][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 332.291994][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 332.318100][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 332.318140][ T47] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 332.340713][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 332.364139][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.379862][ T10] usb 5-1: Product: syz [ 332.384360][ T10] usb 5-1: Manufacturer: syz [ 332.391441][ T10] usb 5-1: SerialNumber: syz [ 332.428983][ T10] usb 5-1: config 0 descriptor?? [ 332.642848][ T10] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 332.711796][ T24] usb 1-1: USB disconnect, device number 69 [ 332.802027][ T47] usb 3-1: config 0 has no interfaces? [ 332.819460][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 332.837720][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.905007][ T47] usb 3-1: Product: syz [ 332.924369][ T47] usb 3-1: Manufacturer: syz [ 332.946558][ T47] usb 3-1: SerialNumber: syz [ 332.976916][ T47] usb 3-1: config 0 descriptor?? [ 333.012503][ T9552] FAULT_INJECTION: forcing a failure. [ 333.012503][ T9552] name failslab, interval 1, probability 0, space 0, times 0 [ 333.065213][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.0.1189 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 333.065241][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.065251][ T9552] Call Trace: [ 333.065258][ T9552] [ 333.065324][ T9552] dump_stack_lvl+0x241/0x360 [ 333.065368][ T9552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.065394][ T9552] ? __pfx__printk+0x10/0x10 [ 333.065431][ T9552] should_fail_ex+0x424/0x570 [ 333.065456][ T9552] should_failslab+0xac/0x100 [ 333.065483][ T9552] __kmalloc_cache_noprof+0x73/0x370 [ 333.065509][ T9552] ? sctp_add_bind_addr+0x89/0x3a0 [ 333.065539][ T9552] sctp_add_bind_addr+0x89/0x3a0 [ 333.065565][ T9552] sctp_copy_local_addr_list+0x313/0x500 [ 333.065589][ T9552] ? sctp_copy_local_addr_list+0xad/0x500 [ 333.065606][ T9552] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 333.065628][ T9552] ? sctp_v4_is_any+0x35/0x60 [ 333.065680][ T9552] ? sctp_copy_one_addr+0x94/0x360 [ 333.065708][ T9552] sctp_bind_addr_copy+0xad/0x3b0 [ 333.065731][ T9552] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 333.065754][ T9552] sctp_connect_new_asoc+0x337/0x700 [ 333.065770][ T9552] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 333.065781][ T9552] ? sctp_sendmsg+0xf30/0x3620 [ 333.065797][ T9552] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 333.065814][ T9552] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 333.065839][ T9552] sctp_sendmsg+0x2009/0x3620 [ 333.065875][ T9552] ? __pfx_sctp_sendmsg+0x10/0x10 [ 333.065896][ T9552] ? aa_sk_perm+0x96f/0xac0 [ 333.065926][ T9552] ? inet_sendmsg+0x330/0x390 [ 333.065944][ T9552] __sock_sendmsg+0x1a6/0x270 [ 333.065974][ T9552] __sys_sendto+0x365/0x4c0 [ 333.065997][ T9552] ? __pfx___sys_sendto+0x10/0x10 [ 333.066025][ T9552] ? __fget_files+0x2a/0x420 [ 333.066049][ T9552] ? ksys_write+0x275/0x2d0 [ 333.066071][ T9552] __x64_sys_sendto+0xde/0x100 [ 333.066085][ T9552] do_syscall_64+0xf3/0x230 [ 333.066104][ T9552] ? clear_bhb_loop+0x45/0xa0 [ 333.066128][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.066145][ T9552] RIP: 0033:0x7fcd2e18e169 [ 333.066162][ T9552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.066177][ T9552] RSP: 002b:00007fcd2ef4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 333.066196][ T9552] RAX: ffffffffffffffda RBX: 00007fcd2e3b5fa0 RCX: 00007fcd2e18e169 [ 333.066206][ T9552] RDX: 0000000000004164 RSI: 0000200000000500 RDI: 0000000000000004 [ 333.066214][ T9552] RBP: 00007fcd2ef4b090 R08: 0000200000000000 R09: 0000000000000010 [ 333.066223][ T9552] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 333.066230][ T9552] R13: 0000000000000000 R14: 00007fcd2e3b5fa0 R15: 00007fcd2e4dfa28 [ 333.066250][ T9552] [ 333.396823][ T9549] vlan2: entered promiscuous mode [ 333.423002][ T5906] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 333.535385][ T5906] usb 4-1: USB disconnect, device number 52 [ 333.755673][ T24] usb 2-1: USB disconnect, device number 52 [ 333.756254][ T5886] usb 5-1: USB disconnect, device number 59 [ 333.977096][ T9561] netlink: 'syz.0.1191': attribute type 72 has an invalid length. [ 333.995040][ T9564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.345174][ T24] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 334.414731][ T9571] FAULT_INJECTION: forcing a failure. [ 334.414731][ T9571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.434931][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.0.1195 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 334.434958][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.434969][ T9571] Call Trace: [ 334.434977][ T9571] [ 334.434985][ T9571] dump_stack_lvl+0x241/0x360 [ 334.435018][ T9571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.435045][ T9571] ? __pfx__printk+0x10/0x10 [ 334.435073][ T9571] should_fail_ex+0x424/0x570 [ 334.435090][ T9571] _copy_from_user+0x2d/0xb0 [ 334.435110][ T9571] copy_msghdr_from_user+0xb3/0x580 [ 334.435134][ T9571] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 334.435150][ T9571] ? __fget_files+0x2a/0x420 [ 334.435164][ T9571] ? __fget_files+0x2a/0x420 [ 334.435181][ T9571] __sys_sendmsg+0x20a/0x360 [ 334.435198][ T9571] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.435244][ T9571] ? do_syscall_64+0xb6/0x230 [ 334.435262][ T9571] do_syscall_64+0xf3/0x230 [ 334.435281][ T9571] ? clear_bhb_loop+0x45/0xa0 [ 334.435297][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.435310][ T9571] RIP: 0033:0x7fcd2e18e169 [ 334.435321][ T9571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.435332][ T9571] RSP: 002b:00007fcd2ef4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.435346][ T9571] RAX: ffffffffffffffda RBX: 00007fcd2e3b5fa0 RCX: 00007fcd2e18e169 [ 334.435355][ T9571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 334.435364][ T9571] RBP: 00007fcd2ef4b090 R08: 0000000000000000 R09: 0000000000000000 [ 334.435372][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.435380][ T9571] R13: 0000000000000000 R14: 00007fcd2e3b5fa0 R15: 00007fcd2e4dfa28 [ 334.435398][ T9571] [ 334.637020][ T24] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 334.659620][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.843732][ T24] usb 2-1: New USB device found, idVendor=0810, idProduct=4001, bcdDevice= 0.00 [ 334.892239][ T30] audit: type=1326 audit(1744844405.097:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.3.1196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b35f8e169 code=0x0 [ 334.894955][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 335.017120][ T5886] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 335.027260][ T24] usb 2-1: SerialNumber: syz [ 335.079311][ T24] usb 2-1: config 0 descriptor?? [ 335.179095][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.194767][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 335.233933][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 335.264797][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.325070][ T5886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.356952][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.405906][ T5886] usb 1-1: config 0 descriptor?? [ 335.438064][ T9575] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 335.456056][ T24] usb 3-1: USB disconnect, device number 50 [ 335.873543][ T5886] usbhid 1-1:0.0: can't add hid device: -71 [ 335.888700][ T5886] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 335.897153][ T9591] netlink: 'syz.3.1199': attribute type 6 has an invalid length. [ 335.901600][ T5886] usb 1-1: USB disconnect, device number 70 [ 336.004985][ T5887] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 336.167403][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 336.191722][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.232947][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 336.244208][ T5887] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.258892][ T5887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.268789][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.402524][ T5887] usbtmc 5-1:16.0: bulk endpoints not found [ 336.465048][ T5886] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 336.604454][ T5887] usb 5-1: USB disconnect, device number 60 [ 336.646549][ T5886] usb 3-1: config 0 has no interfaces? [ 336.665139][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 336.678382][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.690415][ T5886] usb 3-1: Product: syz [ 336.728532][ T5886] usb 3-1: Manufacturer: syz [ 336.764142][ T5886] usb 3-1: SerialNumber: syz [ 336.800798][ T5886] usb 3-1: config 0 descriptor?? [ 337.110232][ T5887] usb 2-1: USB disconnect, device number 53 [ 337.505175][ T5886] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 337.530812][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.655283][ T47] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 337.725051][ T5886] usb 4-1: device descriptor read/64, error -71 [ 337.864996][ T47] usb 1-1: device descriptor read/64, error -71 [ 337.995074][ T5886] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 338.104979][ T47] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 338.135170][ T5886] usb 4-1: device descriptor read/64, error -71 [ 338.288124][ T47] usb 1-1: device descriptor read/64, error -71 [ 338.288812][ T5886] usb usb4-port1: attempt power cycle [ 338.419240][ T47] usb usb1-port1: attempt power cycle [ 338.471030][ T30] audit: type=1326 audit(1744844408.677:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.4.1209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ad98e169 code=0x0 [ 338.649284][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1210'. [ 338.685231][ T5886] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 338.705488][ T5886] usb 4-1: device descriptor read/8, error -71 [ 338.837005][ T47] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 338.905995][ T47] usb 1-1: device descriptor read/8, error -71 [ 338.945046][ T5886] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 338.978987][ T5886] usb 4-1: device descriptor read/8, error -71 [ 339.049459][ T9632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1212'. [ 339.095503][ T5886] usb usb4-port1: unable to enumerate USB device [ 339.165056][ T47] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 339.186149][ T47] usb 1-1: device descriptor read/8, error -71 [ 339.308761][ T47] usb usb1-port1: unable to enumerate USB device [ 339.655267][ T47] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 339.817231][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 339.832120][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 339.893782][ T5886] usb 3-1: USB disconnect, device number 51 [ 339.974923][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.049700][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.167548][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.185399][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.220552][ T47] usb 5-1: config 0 descriptor?? [ 340.275931][ T9637] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 340.745503][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 340.752273][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 340.848548][ T47] usb 5-1: USB disconnect, device number 61 [ 341.475324][ T47] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 341.665071][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 341.676926][ T47] usb 4-1: config 0 has no interfaces? [ 341.715823][ T47] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 341.854954][ T5887] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 342.020651][ T47] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 342.104981][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 342.117464][ T47] usb 4-1: Product: syz [ 342.121675][ T47] usb 4-1: Manufacturer: syz [ 342.139922][ T5887] usb 5-1: config 0 has no interfaces? [ 342.148882][ T5887] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.165878][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.184671][ T47] usb 4-1: SerialNumber: syz [ 342.219760][ T47] usb 4-1: config 0 descriptor?? [ 342.221990][ T5887] usb 5-1: Product: syz [ 342.259487][ T30] audit: type=1326 audit(1744844412.467:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9667 comm="syz.0.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2e18e169 code=0x0 [ 342.281666][ T5886] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 342.289531][ T5887] usb 5-1: Manufacturer: syz [ 342.294452][ T5887] usb 5-1: SerialNumber: syz [ 342.304646][ T10] usb 3-1: config 0 has no interfaces? [ 342.329987][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.345428][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.365600][ T10] usb 3-1: Product: syz [ 342.369798][ T10] usb 3-1: Manufacturer: syz [ 342.382569][ T5887] usb 5-1: config 0 descriptor?? [ 342.398818][ T10] usb 3-1: SerialNumber: syz [ 342.525472][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 342.531341][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.532048][ T10] usb 3-1: config 0 descriptor?? [ 342.546945][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.589044][ T5886] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 342.631119][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 342.702646][ T9651] syz_tun: entered promiscuous mode [ 342.730182][ T9651] macsec1: entered promiscuous mode [ 342.763764][ T5886] usb 2-1: Product: syz [ 342.785211][ T9651] syz_tun: left promiscuous mode [ 342.810994][ T5886] usb 2-1: Manufacturer: syz [ 342.887669][ T9673] @: renamed from vlan0 (while UP) [ 342.911718][ T9664] xt_TCPMSS: Only works on TCP SYN packets [ 342.924533][ T5890] usb 4-1: USB disconnect, device number 57 [ 342.981398][ T5886] usb 2-1: SerialNumber: syz [ 343.036034][ T5886] usb 2-1: config 0 descriptor?? [ 343.564952][ T5886] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 343.655051][ T9683] dccp_close: ABORT with 48 bytes unread [ 343.748312][ T5886] usb 1-1: config 0 has no interfaces? [ 343.759432][ T5886] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 343.771289][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.817383][ T5886] usb 1-1: Product: syz [ 343.857435][ T5886] usb 1-1: Manufacturer: syz [ 343.901505][ T5886] usb 1-1: SerialNumber: syz [ 343.968473][ T5886] usb 1-1: config 0 descriptor?? [ 344.507423][ T5890] usb 5-1: USB disconnect, device number 62 [ 345.429824][ T5886] usb 2-1: USB disconnect, device number 54 [ 345.680951][ T5887] usb 3-1: USB disconnect, device number 52 [ 346.289472][ T30] audit: type=1326 audit(1744844416.497:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.1.1234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x0 [ 346.710373][ T47] usb 1-1: USB disconnect, device number 75 [ 346.895831][ T9726] fuse: Bad value for 'group_id' [ 346.901483][ T9726] fuse: Bad value for 'group_id' [ 347.595102][ T47] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 347.686831][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 347.724997][ T47] usb 1-1: device descriptor read/64, error -71 [ 347.854973][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 347.905731][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 347.929093][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 348.093088][ T47] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 348.235100][ T5887] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 348.245036][ T47] usb 1-1: device descriptor read/64, error -71 [ 348.321115][ T10] usb 3-1: Product: syz [ 348.335333][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 348.355320][ T47] usb usb1-port1: attempt power cycle [ 348.375426][ T10] usb 3-1: Manufacturer: syz [ 348.496236][ T10] usb 3-1: SerialNumber: syz [ 348.547865][ T10] usb 3-1: config 0 descriptor?? [ 348.575573][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 348.605580][ T5887] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 348.627791][ T5887] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.674332][ T5887] usb 2-1: config 1 interface 0 has no altsetting 0 [ 348.691521][ T24] usb 4-1: config 0 has no interfaces? [ 348.705107][ T47] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 348.715333][ T5887] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 348.753925][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.838178][ T5887] usb 2-1: Product: 蚾挞菡掓㠬ᛧ㟑΃޵灿뿃花获茇ࢻ᱓꧝騈콩瀆淖씯퍓惗쎐땹㗎袵戦爠咜෹虑劣釷蛾돂ᩉ쇺⡍䇞漇䀸錗罆摗쵒ﭸ㢥嚋耟୴涆䕿緳⮥ꍰ틍ﵭ๥ꖸ녅ᕧ䃹 [ 348.845634][ T47] usb 1-1: device descriptor read/8, error -71 [ 349.152610][ T47] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 349.238796][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 349.251171][ T5887] usb 2-1: Manufacturer: ⿷﮹ᕧ歾遣怟⭨樸蜨մ燎怒쳧Ổ콚튅荓或䓭ꪦ햵诂과깏ㅇ⚱謱謎ժ㫅鳞⑗㉪ꊯ뱺⶯寵ڮ醑胏ä玠━⮏碁⶛暥婋⤒ⳤ㾊 [ 349.288541][ T47] usb 1-1: device descriptor read/8, error -71 [ 349.305232][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.313693][ T5887] usb 2-1: SerialNumber: п [ 349.323807][ T24] usb 4-1: Product: syz [ 349.329468][ T24] usb 4-1: Manufacturer: syz [ 349.373597][ T9748] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 349.391198][ T9748] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 349.404990][ T24] usb 4-1: SerialNumber: syz [ 349.415488][ T47] usb usb1-port1: unable to enumerate USB device [ 349.461402][ T24] usb 4-1: config 0 descriptor?? [ 349.820021][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 349.850872][ T9750] xt_TCPMSS: Only works on TCP SYN packets [ 350.105956][ T9746] can: request_module (can-proto-5) failed. [ 350.187476][ T5887] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 350.224745][ T5887] usb 2-1: USB disconnect, device number 55 [ 350.285645][ T5887] usblp0: removed [ 350.465516][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 350.494949][ T10] usb 3-1: USB disconnect, device number 53 [ 350.688967][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 350.715885][ T24] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 350.741004][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.807123][ T24] usb 5-1: config 0 descriptor?? [ 350.828511][ T24] usb 5-1: invalid MIDI EP [ 350.837139][ T24] usb 5-1: snd-bcd2000: error during probing [ 350.857392][ T24] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 350.937141][ T30] audit: type=1326 audit(1744844421.147:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2e18e169 code=0x0 [ 351.087517][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.116147][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.162238][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.185022][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.262526][ T9763] netlink: 'syz.4.1247': attribute type 29 has an invalid length. [ 351.290096][ T24] usb 5-1: USB disconnect, device number 63 [ 351.371761][ T47] usb 4-1: USB disconnect, device number 58 [ 351.725926][ T9786] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1253'. [ 352.151945][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 352.342605][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 352.624967][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 352.642910][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 352.652974][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 352.703633][ T10] usb 5-1: Product: syz [ 352.724020][ T10] usb 5-1: Manufacturer: syz [ 352.764694][ T10] usb 5-1: SerialNumber: syz [ 352.809926][ T10] usb 5-1: config 0 descriptor?? [ 354.151756][ T9819] tipc: Enabled bearer , priority 0 [ 354.393626][ T9826] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1266'. [ 354.572713][ T30] audit: type=1326 audit(1744844424.777:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.0.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2e18e169 code=0x0 [ 354.894060][ T9835] fuse: Unknown parameter 'rooTmode' [ 355.264971][ T47] tipc: Node number set to 604045183 [ 355.274998][ T5887] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 355.468387][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 355.477716][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.506037][ T5887] usb 3-1: config 0 descriptor?? [ 355.521214][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 355.582126][ T9844] netlink: 'syz.0.1271': attribute type 21 has an invalid length. [ 355.612294][ T9844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1271'. [ 355.721125][ T5195] bcm5974 3-1:0.0: could not read from device [ 355.727555][ T47] usb 3-1: USB disconnect, device number 54 [ 355.734052][ T5195] bcm5974 3-1:0.0: could not read from device [ 355.756872][ T5844] bcm5974 3-1:0.0: could not read from device [ 355.770154][ T5195] bcm5974 3-1:0.0: could not read from device [ 355.905170][ T5887] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 355.949762][ T5844] udevd[5844]: Error opening device "/dev/input/event4": No such file or directory [ 355.973910][ T10] usb 5-1: USB disconnect, device number 64 [ 356.022122][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 356.056479][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1279, setting to 1024 [ 356.073465][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 356.074084][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 356.103686][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 356.121291][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 356.125190][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 356.149921][ T5887] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 356.161875][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.173894][ T5887] usb 1-1: Product: syz [ 356.180389][ T5887] usb 1-1: Manufacturer: syz [ 356.188914][ T5887] usb 1-1: SerialNumber: syz [ 356.189140][ T5844] udevd[5844]: Unable to EVIOCGABS device "/dev/input/event4" [ 356.209084][ T5887] usb 1-1: config 0 descriptor?? [ 356.224572][ T9844] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 356.243097][ T9844] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 356.282518][ T5887] option 1-1:0.0: GSM modem (1-port) converter detected [ 356.343425][ T5887] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 356.457973][ T9851] SET target dimension over the limit! [ 356.479849][ T5887] usb 1-1: USB disconnect, device number 80 [ 356.509949][ T5887] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 356.536359][ T5887] option 1-1:0.0: device disconnected [ 356.614728][ T9858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.622417][ T9860] FAULT_INJECTION: forcing a failure. [ 356.622417][ T9860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.640579][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.2.1277 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 356.640604][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 356.640615][ T9860] Call Trace: [ 356.640623][ T9860] [ 356.640630][ T9860] dump_stack_lvl+0x241/0x360 [ 356.640664][ T9860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.640690][ T9860] ? __pfx__printk+0x10/0x10 [ 356.640727][ T9860] should_fail_ex+0x424/0x570 [ 356.640752][ T9860] _copy_from_iter+0x43c/0x1c70 [ 356.640788][ T9860] ? __pfx__copy_from_iter+0x10/0x10 [ 356.640817][ T9860] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 356.640849][ T9860] vhost_chr_write_iter+0x265/0xd00 [ 356.640885][ T9860] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 356.640909][ T9860] ? kstrtouint+0xfc/0x190 [ 356.640936][ T9860] ? __lock_acquire+0xad5/0xd80 [ 356.640960][ T9860] do_iter_readv_writev+0x71f/0x9d0 [ 356.640989][ T9860] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 356.641017][ T9860] ? bpf_lsm_file_permission+0x9/0x10 [ 356.641038][ T9860] ? rw_verify_area+0x246/0x630 [ 356.641060][ T9860] vfs_writev+0x38d/0xbc0 [ 356.641098][ T9860] ? __lock_acquire+0xad5/0xd80 [ 356.641118][ T9860] ? __pfx_vfs_writev+0x10/0x10 [ 356.641165][ T9860] ? __fget_files+0x2a/0x420 [ 356.641184][ T9860] ? __fget_files+0x39d/0x420 [ 356.641199][ T9860] ? __fget_files+0x2a/0x420 [ 356.641223][ T9860] __x64_sys_pwritev+0x1ba/0x2d0 [ 356.641248][ T9860] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 356.641276][ T9860] ? do_syscall_64+0xb6/0x230 [ 356.641302][ T9860] do_syscall_64+0xf3/0x230 [ 356.641324][ T9860] ? clear_bhb_loop+0x45/0xa0 [ 356.641346][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.641363][ T9860] RIP: 0033:0x7ff9f5b8e169 [ 356.641379][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.641393][ T9860] RSP: 002b:00007ff9f695f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 356.641411][ T9860] RAX: ffffffffffffffda RBX: 00007ff9f5db5fa0 RCX: 00007ff9f5b8e169 [ 356.641424][ T9860] RDX: 0000000000000003 RSI: 0000200000000580 RDI: 0000000000000003 [ 356.641435][ T9860] RBP: 00007ff9f695f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.641445][ T9860] R10: 00000000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 356.641456][ T9860] R13: 0000000000000000 R14: 00007ff9f5db5fa0 R15: 00007ff9f5edfa28 [ 356.641482][ T9860] [ 356.889008][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.995252][ T47] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 357.168001][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 357.183087][ T47] usb 2-1: config 1 interface 0 altsetting 121 bulk endpoint 0x82 has invalid maxpacket 32 [ 357.198212][ T5888] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 357.221693][ T47] usb 2-1: config 1 interface 0 altsetting 121 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.276173][ T47] usb 2-1: config 1 interface 0 has no altsetting 0 [ 357.294573][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.315039][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.366172][ T47] usb 2-1: Product: syz [ 357.398963][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.416217][ T47] usb 2-1: Manufacturer: syz [ 357.425258][ T47] usb 2-1: SerialNumber: syz [ 357.438294][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.470680][ T9853] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.498239][ T9853] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.505767][ T5888] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 357.523540][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.552751][ T5888] usb 3-1: config 0 descriptor?? [ 357.586022][ T30] audit: type=1326 audit(1744844427.787:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b35f8e169 code=0x0 [ 357.730860][ T47] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 357.783664][ T47] usb 2-1: USB disconnect, device number 56 [ 358.005374][ T5888] holtek 0003:1241:5015.000D: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 358.022897][ T5888] holtek 0003:1241:5015.000D: no inputs found [ 358.182768][ T9885] FAULT_INJECTION: forcing a failure. [ 358.182768][ T9885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.196712][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.4.1286 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 358.196731][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.196739][ T9885] Call Trace: [ 358.196744][ T9885] [ 358.196756][ T9885] dump_stack_lvl+0x241/0x360 [ 358.196780][ T9885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.196798][ T9885] ? __pfx__printk+0x10/0x10 [ 358.196823][ T9885] should_fail_ex+0x424/0x570 [ 358.196839][ T9885] prepare_alloc_pages+0x220/0x610 [ 358.196858][ T9885] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 358.196875][ T9885] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.196890][ T9885] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 358.196915][ T9885] alloc_pages_mpol+0x339/0x690 [ 358.196936][ T9885] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 358.196960][ T9885] vma_alloc_folio_noprof+0x12d/0x260 [ 358.196979][ T9885] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 358.197005][ T9885] folio_prealloc+0x2e/0x170 [ 358.197019][ T9885] handle_pte_fault+0x2e45/0x61c0 [ 358.197045][ T9885] ? __pfx_handle_pte_fault+0x10/0x10 [ 358.197066][ T9885] ? rcu_is_watching+0x15/0xb0 [ 358.197084][ T9885] ? __lock_acquire+0xad5/0xd80 [ 358.197107][ T9885] ? __lock_acquire+0xad5/0xd80 [ 358.197122][ T9885] ? do_raw_spin_lock+0x151/0x370 [ 358.197146][ T9885] handle_mm_fault+0x1129/0x1bf0 [ 358.197182][ T9885] ? __pfx_handle_mm_fault+0x10/0x10 [ 358.197200][ T9885] ? follow_page_pte+0x9ff/0x15e0 [ 358.197221][ T9885] ? vma_is_secretmem+0xd/0x50 [ 358.197237][ T9885] ? check_vma_flags+0x51b/0x590 [ 358.197259][ T9885] __get_user_pages+0x1adc/0x4180 [ 358.197291][ T9885] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 358.197320][ T9885] ? __pfx___get_user_pages+0x10/0x10 [ 358.197371][ T9885] faultin_page_range+0x204/0x850 [ 358.197397][ T9885] ? __asan_memset+0x23/0x50 [ 358.197416][ T9885] ? blk_start_plug+0x70/0x1b0 [ 358.197439][ T9885] madvise_do_behavior+0x23a/0x4640 [ 358.197457][ T9885] ? is_bpf_text_address+0x288/0x2a0 [ 358.197471][ T9885] ? is_bpf_text_address+0x26/0x2a0 [ 358.197488][ T9885] ? kernel_text_address+0xa7/0xe0 [ 358.197509][ T9885] ? kstrtoull+0x1d3/0x2f0 [ 358.197530][ T9885] ? __pfx_kstrtoull+0x10/0x10 [ 358.197555][ T9885] ? __pfx_madvise_do_behavior+0x10/0x10 [ 358.197587][ T9885] ? kstrtouint+0xfc/0x190 [ 358.197614][ T9885] ? __lock_acquire+0xad5/0xd80 [ 358.197646][ T9885] ? __lock_acquire+0xad5/0xd80 [ 358.197676][ T9885] ? down_read+0x813/0xa50 [ 358.197695][ T9885] ? __mutex_unlock_slowpath+0x229/0x800 [ 358.197793][ T9885] ? __pfx_down_read+0x10/0x10 [ 358.197818][ T9885] ? __fget_files+0x2a/0x420 [ 358.197840][ T9885] __x64_sys_madvise+0x185/0x220 [ 358.197862][ T9885] ? __pfx___x64_sys_madvise+0x10/0x10 [ 358.197888][ T9885] ? do_syscall_64+0xb6/0x230 [ 358.197906][ T9885] do_syscall_64+0xf3/0x230 [ 358.197922][ T9885] ? clear_bhb_loop+0x45/0xa0 [ 358.197937][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.197954][ T9885] RIP: 0033:0x7f85ad98e169 [ 358.197966][ T9885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.197977][ T9885] RSP: 002b:00007f85ae758038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 358.198003][ T9885] RAX: ffffffffffffffda RBX: 00007f85adbb5fa0 RCX: 00007f85ad98e169 [ 358.198012][ T9885] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 358.198020][ T9885] RBP: 00007f85ae758090 R08: 0000000000000000 R09: 0000000000000000 [ 358.198028][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.198035][ T9885] R13: 0000000000000000 R14: 00007f85adbb5fa0 R15: 00007f85adcdfa28 [ 358.198054][ T9885] [ 358.573683][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.583021][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.604017][ T5886] usb 3-1: USB disconnect, device number 55 [ 358.968611][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 359.125633][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 359.136559][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 359.166734][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.175447][ T10] usb 5-1: Product: syz [ 359.179828][ T10] usb 5-1: Manufacturer: syz [ 359.184437][ T10] usb 5-1: SerialNumber: syz [ 359.189436][ T5886] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 359.208259][ T10] usb 5-1: config 0 descriptor?? [ 359.227091][ T10] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 359.338633][ T5924] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 359.404954][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 359.416380][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.426645][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 359.445129][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 359.456322][ T5886] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 359.475910][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.495863][ T9898] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 359.506195][ T5886] hub 1-1:1.0: bad descriptor, ignoring hub [ 359.514436][ T5886] hub 1-1:1.0: probe with driver hub failed with error -5 [ 359.529512][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 359.537924][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 359.547337][ T5886] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 359.553539][ T5886] cdc_wdm 1-1:1.0: Unknown control protocol [ 359.561680][ T9905] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1293'. [ 359.585065][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 359.595106][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 359.603258][ T5924] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 359.613271][ T5924] usb 4-1: config 0 has no interface number 0 [ 359.614586][ T24] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 359.624846][ T5924] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 359.639722][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.658471][ T24] usb 2-1: config 0 has no interface number 0 [ 359.659286][ T5924] usb 4-1: config 0 descriptor?? [ 359.671523][ T24] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 359.687112][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.707739][ T24] usb 2-1: config 0 descriptor?? [ 359.747704][ T10] gspca_sunplus: reg_w_riv err -110 [ 359.753302][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 359.795491][ T5924] viperboard 4-1:0.143: version 0.00 found at bus 004 address 059 [ 359.827046][ T24] viperboard 2-1:0.143: version 0.00 found at bus 002 address 057 [ 359.842028][ T5924] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 359.861928][ T5924] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 359.907806][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.931513][ T24] viperboard-i2c viperboard-i2c.4.auto: failure setting i2c_bus_freq to 100 [ 359.962374][ T24] viperboard-i2c viperboard-i2c.4.auto: probe with driver viperboard-i2c failed with error -5 [ 359.987663][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.008988][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.015761][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.022692][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.029397][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.035905][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.042813][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.049553][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.056241][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.062712][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.069403][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.075649][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.082318][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.088963][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.095558][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.101827][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.108421][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.114800][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.121458][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.127936][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 360.135561][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 360.163241][ T9909] "syz.0.1291" (9909) uses obsolete ecb(arc4) skcipher [ 360.353637][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.368007][ T24] usb 4-1: USB disconnect, device number 59 [ 360.411988][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.548797][ T5888] usb 2-1: USB disconnect, device number 57 [ 360.875096][ T5886] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 361.055527][ T5886] usb 3-1: config 0 has no interfaces? [ 361.078082][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 361.087844][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.113980][ T5886] usb 3-1: Product: syz [ 361.137589][ T5886] usb 3-1: Manufacturer: syz [ 361.148969][ T5886] usb 3-1: SerialNumber: syz [ 361.215309][ T5924] usb 5-1: USB disconnect, device number 65 [ 361.299260][ T5886] usb 3-1: config 0 descriptor?? [ 361.521156][ T30] audit: type=1326 audit(1744844431.727:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.4.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ad98e169 code=0x0 [ 361.682195][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1297'. [ 362.117717][ T5886] usb 1-1: USB disconnect, device number 81 [ 362.510131][ T9941] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1304'. [ 362.605263][ T5886] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 362.828947][ T5886] usb 4-1: config 0 has no interfaces? [ 362.837360][ T5886] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 362.849395][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.858746][ T5886] usb 4-1: Product: syz [ 362.863276][ T5886] usb 4-1: Manufacturer: syz [ 362.874196][ T5886] usb 4-1: SerialNumber: syz [ 362.888018][ T5886] usb 4-1: config 0 descriptor?? [ 363.121811][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.166853][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.232948][ T10] usb 4-1: USB disconnect, device number 60 [ 363.595748][ T5887] usb 3-1: USB disconnect, device number 56 [ 363.685839][ T47] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 363.758240][ T30] audit: type=1326 audit(1744844433.967:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.1.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x0 [ 363.835065][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 363.848974][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 363.886901][ T47] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 363.905556][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.947566][ T47] usb 5-1: Product: syz [ 363.960554][ T9975] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1316'. [ 363.965544][ T47] usb 5-1: Manufacturer: syz [ 363.974392][ T47] usb 5-1: SerialNumber: syz [ 364.019103][ T47] usb 5-1: config 0 descriptor?? [ 364.034394][ T47] gs_usb 5-1:0.0: Required endpoints not found [ 364.160126][ T9986] FAULT_INJECTION: forcing a failure. [ 364.160126][ T9986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.200676][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.3.1320 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 364.200705][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.200717][ T9986] Call Trace: [ 364.200724][ T9986] [ 364.200732][ T9986] dump_stack_lvl+0x241/0x360 [ 364.200765][ T9986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.200790][ T9986] ? __pfx__printk+0x10/0x10 [ 364.200826][ T9986] should_fail_ex+0x424/0x570 [ 364.200849][ T9986] _copy_from_user+0x2d/0xb0 [ 364.200877][ T9986] copy_msghdr_from_user+0xb3/0x580 [ 364.200909][ T9986] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 364.200931][ T9986] ? __fget_files+0x2a/0x420 [ 364.200950][ T9986] ? __fget_files+0x2a/0x420 [ 364.200973][ T9986] __sys_sendmsg+0x20a/0x360 [ 364.200997][ T9986] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.201062][ T9986] ? do_syscall_64+0xb6/0x230 [ 364.201088][ T9986] do_syscall_64+0xf3/0x230 [ 364.201110][ T9986] ? clear_bhb_loop+0x45/0xa0 [ 364.201145][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.201162][ T9986] RIP: 0033:0x7f3b35f8e169 [ 364.201177][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.201192][ T9986] RSP: 002b:00007f3b36e6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.201211][ T9986] RAX: ffffffffffffffda RBX: 00007f3b361b5fa0 RCX: 00007f3b35f8e169 [ 364.201224][ T9986] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 364.201235][ T9986] RBP: 00007f3b36e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 364.201246][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.201256][ T9986] R13: 0000000000000000 R14: 00007f3b361b5fa0 R15: 00007f3b362dfa28 [ 364.201282][ T9986] [ 364.626248][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1321'. [ 364.836529][ T9994] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 365.220215][ T9998] libceph: resolve '. [ 365.220215][ T9998] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 365.220215][ T9998] ' (ret=-3): failed [ 366.174415][T10016] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1329'. [ 366.835011][ T5887] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 366.865166][ T24] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 366.896753][ T5888] usb 5-1: USB disconnect, device number 66 [ 367.000851][ T5887] usb 2-1: config 0 has no interfaces? [ 367.014825][ T5887] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 367.039573][ T24] usb 3-1: config 7 interface 0 has no altsetting 0 [ 367.051374][ T24] usb 3-1: string descriptor 0 read error: -22 [ 367.064537][ T24] usb 3-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 367.080225][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.090292][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.100512][ T5887] usb 2-1: Product: syz [ 367.114126][ T24] usb 3-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 367.128515][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 367.145675][ T24] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 367.154341][ T5887] usb 2-1: Manufacturer: syz [ 367.154365][ T24] usb 3-1: media controller created [ 367.192020][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.201212][ T5887] usb 2-1: SerialNumber: syz [ 367.245834][ T5887] usb 2-1: config 0 descriptor?? [ 367.492478][T10027] xt_TCPMSS: Only works on TCP SYN packets [ 367.746546][ T24] usb 3-1: USB disconnect, device number 57 [ 367.774286][ T8163] udevd[8163]: setting mode of /dev/bus/usb/003/057 to 020664 failed: No such file or directory [ 367.822801][ T8163] udevd[8163]: setting owner of /dev/bus/usb/003/057 to uid=0, gid=0 failed: No such file or directory [ 367.874965][ T5887] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 367.975640][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 368.057039][ T5887] usb 1-1: device descriptor read/64, error -71 [ 368.168421][ T10] usb 5-1: config 0 has no interfaces? [ 368.244923][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d8.3b [ 368.265002][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.278884][ T10] usb 5-1: Product: syz [ 368.284333][ T10] usb 5-1: Manufacturer: syz [ 368.290403][ T10] usb 5-1: SerialNumber: syz [ 368.304093][ T10] usb 5-1: config 0 descriptor?? [ 368.315198][ T5887] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 368.465121][ T5887] usb 1-1: device descriptor read/64, error -71 [ 368.522725][T10041] netlink: 'syz.4.1335': attribute type 21 has an invalid length. [ 368.533303][T10041] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1335'. [ 368.585512][ T5887] usb usb1-port1: attempt power cycle [ 368.968671][ T5887] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 368.995830][ T5887] usb 1-1: device descriptor read/8, error -71 [ 369.089520][T10053] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 369.230814][T10058] netlink: 'syz.2.1341': attribute type 72 has an invalid length. [ 369.239149][ T5887] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 369.289759][ T5887] usb 1-1: device descriptor read/8, error -71 [ 369.406821][ T5887] usb usb1-port1: unable to enumerate USB device [ 370.067537][ T5887] usb 2-1: USB disconnect, device number 58 [ 370.175897][ T5924] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 370.340874][ T5924] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.353393][ T5924] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.363697][ T5924] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.373617][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.401181][T10065] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 370.421967][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.460002][ T10] usb 5-1: USB disconnect, device number 67 [ 370.475017][ T5887] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 370.646228][ T5924] usb 4-1: USB disconnect, device number 61 [ 370.656083][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 370.678877][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.694294][T10077] input: syz1 as /devices/virtual/input/input22 [ 370.717753][ T5887] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 370.718001][T10077] input: failed to attach handler leds to device input22, error: -6 [ 370.728493][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.778310][ T5887] usb 2-1: Product: syz [ 370.782607][ T5887] usb 2-1: Manufacturer: syz [ 370.797981][ T5888] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 370.822182][ T5887] usb 2-1: SerialNumber: syz [ 370.846080][ T5887] usb 2-1: config 0 descriptor?? [ 370.860690][ T5887] gs_usb 2-1:0.0: Required endpoints not found [ 370.945074][ T5888] usb 3-1: device descriptor read/64, error -71 [ 371.054185][T10082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1348'. [ 371.195055][ T5888] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 371.455198][ T5888] usb 3-1: device descriptor read/64, error -71 [ 371.646338][ T5888] usb usb3-port1: attempt power cycle [ 371.936067][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 372.097189][ T5888] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 372.158570][ T5888] usb 3-1: device descriptor read/8, error -71 [ 372.464941][ T5888] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 372.505683][ T5888] usb 3-1: device descriptor read/8, error -71 [ 372.642868][ T5888] usb usb3-port1: unable to enumerate USB device [ 373.125114][ T5888] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 373.199645][T10103] vivid-000: disconnect [ 373.207334][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'. [ 373.297129][ T5888] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 373.306426][ T5888] usb 1-1: config 8 has no interface number 0 [ 373.312743][ T5888] usb 1-1: config 8 interface 177 has no altsetting 0 [ 373.319901][ T5888] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 373.329649][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.475060][ T47] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 373.557202][ T5888] usb 1-1: string descriptor 0 read error: -71 [ 373.572451][ T5888] ir_toy 1-1:8.177: required endpoints not found [ 373.579426][ T5888] usb 1-1: USB disconnect, device number 86 [ 373.605735][ T5906] usb 2-1: USB disconnect, device number 59 [ 373.638828][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 373.652353][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.652402][ T47] usb 5-1: New USB device found, idVendor=066d, idProduct=c24f, bcdDevice= 0.00 [ 373.652425][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.667836][ T47] usb 5-1: config 0 descriptor?? [ 374.083417][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 374.083512][T10101] vivid-000: reconnect [ 374.089772][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.131922][ T47] usb 5-1: USB disconnect, device number 68 [ 375.518481][T10143] batadv_slave_0: left promiscuous mode [ 375.608240][T10143] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 375.645456][ T5890] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 375.669620][T10143] vlan2: left promiscuous mode [ 375.674598][T10143] dummy0: left promiscuous mode [ 375.695260][ T976] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 375.708419][T10143] geneve2: left promiscuous mode [ 375.843052][ T5890] usb 3-1: config 0 has no interfaces? [ 375.874772][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 375.886419][ T976] usb 1-1: config 0 interface 0 has no altsetting 0 [ 375.916930][ T5890] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 375.927237][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.944667][ T976] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 375.952448][ T5890] usb 3-1: Product: syz [ 375.958235][ T5890] usb 3-1: Manufacturer: syz [ 375.962899][ T5890] usb 3-1: SerialNumber: syz [ 376.132517][ T5890] usb 3-1: config 0 descriptor?? [ 376.142658][T10156] bond0: entered promiscuous mode [ 376.154431][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.238082][ T976] usb 1-1: Product: syz [ 376.269383][ T976] usb 1-1: Manufacturer: syz [ 376.318114][ T976] usb 1-1: SerialNumber: syz [ 376.445145][ T976] usb 1-1: config 0 descriptor?? [ 376.532332][ T976] gs_usb 1-1:0.0: Required endpoints not found [ 376.799599][T10146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1363'. [ 377.016820][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.033385][T10169] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 377.055705][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.095566][T10169] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1371'. [ 377.567700][T10181] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1372'. [ 377.953503][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'. [ 378.238862][T10184] bridge0: entered promiscuous mode [ 378.257537][T10184] macvlan2: entered allmulticast mode [ 378.292543][T10184] bridge0: entered allmulticast mode [ 378.336213][T10184] bridge0: left allmulticast mode [ 378.363802][T10184] bridge0: left promiscuous mode [ 378.413811][ T976] usb 3-1: USB disconnect, device number 62 [ 378.503061][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1373'. [ 378.662197][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.668727][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.799958][T10194] FAULT_INJECTION: forcing a failure. [ 378.799958][T10194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.890757][T10194] CPU: 1 UID: 0 PID: 10194 Comm: syz.1.1375 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 378.890790][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.890804][T10194] Call Trace: [ 378.890813][T10194] [ 378.890822][T10194] dump_stack_lvl+0x241/0x360 [ 378.890861][T10194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.890890][T10194] ? __pfx__printk+0x10/0x10 [ 378.890947][T10194] should_fail_ex+0x424/0x570 [ 378.890974][T10194] _copy_to_user+0x31/0xb0 [ 378.891015][T10194] sctp_getsockopt_scheduler+0x42b/0x5a0 [ 378.891052][T10194] ? __pfx_sctp_getsockopt_scheduler+0x10/0x10 [ 378.891090][T10194] sctp_getsockopt+0xb21/0xbb0 [ 378.891106][T10194] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 378.891142][T10194] do_sock_getsockopt+0x391/0x740 [ 378.891167][T10194] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 378.891184][T10194] ? __fget_files+0x2a/0x420 [ 378.891203][T10194] ? __fget_files+0x39d/0x420 [ 378.891217][T10194] ? __fget_files+0x2a/0x420 [ 378.891240][T10194] __x64_sys_getsockopt+0x2a3/0x370 [ 378.891267][T10194] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 378.891292][T10194] ? do_syscall_64+0xb6/0x230 [ 378.891317][T10194] do_syscall_64+0xf3/0x230 [ 378.891339][T10194] ? clear_bhb_loop+0x45/0xa0 [ 378.891361][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.891378][T10194] RIP: 0033:0x7f7d6218e169 [ 378.891394][T10194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.891409][T10194] RSP: 002b:00007f7d62ffd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 378.891429][T10194] RAX: ffffffffffffffda RBX: 00007f7d623b5fa0 RCX: 00007f7d6218e169 [ 378.891442][T10194] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 378.891453][T10194] RBP: 00007f7d62ffd090 R08: 0000200000000180 R09: 0000000000000000 [ 378.891464][T10194] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 378.891475][T10194] R13: 0000000000000000 R14: 00007f7d623b5fa0 R15: 00007f7d624dfa28 [ 378.891502][T10194] [ 379.158524][T10198] netlink: 'syz.3.1377': attribute type 2 has an invalid length. [ 379.199356][T10198] : entered promiscuous mode [ 379.275215][ T5924] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 379.436920][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 379.447162][ T5924] usb 3-1: config 0 has no interfaces? [ 379.459493][ T5924] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 379.477295][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.487333][ T5924] usb 3-1: Product: syz [ 379.491554][ T5924] usb 3-1: Manufacturer: syz [ 379.498293][ T5924] usb 3-1: SerialNumber: syz [ 379.522059][ T5924] usb 3-1: config 0 descriptor?? [ 379.563598][ T5906] usb 1-1: USB disconnect, device number 87 [ 379.605845][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 379.624995][ T976] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 379.895607][ T5906] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 379.959285][ T976] usb 4-1: config index 0 descriptor too short (expected 1285, got 202) [ 380.112990][ T5906] usb 1-1: config 16 interface 0 has no altsetting 0 [ 380.121203][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 380.133581][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 380.154954][ T976] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 380.176940][ T976] usb 4-1: config 48 has no interfaces? [ 380.179938][ T5906] usb 1-1: Manufacturer: syz [ 380.187659][ T5887] usb 3-1: USB disconnect, device number 63 [ 380.206983][ T976] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.218246][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.228692][ T976] usb 4-1: Product: syz [ 380.233656][ T976] usb 4-1: Manufacturer: syz [ 380.239471][ T976] usb 4-1: SerialNumber: syz [ 380.459552][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.468924][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.504230][ T5906] (null): keene_cmd_main failed (-71) [ 380.520040][ T5906] video4linux radio48: keene_cmd_main failed (-71) [ 380.527451][ T5906] radio-keene 1-1:16.0: V4L2 device registered as radio48 [ 380.541693][ T5906] usb 1-1: USB disconnect, device number 88 [ 380.617455][ T976] usb 4-1: USB disconnect, device number 62 [ 381.087137][T10225] netlink: 'syz.4.1382': attribute type 10 has an invalid length. [ 381.121923][T10225] veth1_macvtap: left promiscuous mode [ 381.127647][ T976] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 381.284940][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 381.294113][ T976] usb 3-1: config 64 has an invalid interface number: 113 but max is 0 [ 381.307623][ T976] usb 3-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 381.311880][T10236] FAULT_INJECTION: forcing a failure. [ 381.311880][T10236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.338435][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.0.1389 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 381.338467][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.338479][T10236] Call Trace: [ 381.338487][T10236] [ 381.338495][T10236] dump_stack_lvl+0x241/0x360 [ 381.338546][T10236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.338574][T10236] ? __pfx__printk+0x10/0x10 [ 381.338609][T10236] should_fail_ex+0x424/0x570 [ 381.338633][T10236] _copy_to_user+0x31/0xb0 [ 381.338662][T10236] simple_read_from_buffer+0xc4/0x170 [ 381.338694][T10236] proc_fail_nth_read+0x1ef/0x260 [ 381.338717][T10236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.338739][T10236] ? rw_verify_area+0x246/0x630 [ 381.338758][T10236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.338779][T10236] vfs_read+0x21f/0xb90 [ 381.338890][T10236] ? __pfx___mutex_lock+0x10/0x10 [ 381.338917][T10236] ? __pfx_vfs_read+0x10/0x10 [ 381.338941][T10236] ? __fget_files+0x2a/0x420 [ 381.338959][T10236] ? __fget_files+0x39d/0x420 [ 381.338972][T10236] ? __fget_files+0x2a/0x420 [ 381.338994][T10236] ksys_read+0x19d/0x2d0 [ 381.339015][T10236] ? __pfx_ksys_read+0x10/0x10 [ 381.339045][T10236] ? do_syscall_64+0xb6/0x230 [ 381.339073][T10236] do_syscall_64+0xf3/0x230 [ 381.339096][T10236] ? clear_bhb_loop+0x45/0xa0 [ 381.339119][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.339137][T10236] RIP: 0033:0x7fcd2e18cb7c [ 381.339153][T10236] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 381.339169][T10236] RSP: 002b:00007fcd2ef4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.339188][T10236] RAX: ffffffffffffffda RBX: 00007fcd2e3b5fa0 RCX: 00007fcd2e18cb7c [ 381.339201][T10236] RDX: 000000000000000f RSI: 00007fcd2ef4b0a0 RDI: 0000000000000004 [ 381.339213][T10236] RBP: 00007fcd2ef4b090 R08: 0000000000000000 R09: 0000000000000000 [ 381.339224][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.339235][T10236] R13: 0000000000000000 R14: 00007fcd2e3b5fa0 R15: 00007fcd2e4dfa28 [ 381.339262][T10236] [ 381.560956][ T5924] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 381.571145][ T976] usb 3-1: config 64 has an invalid interface association descriptor of length 2, skipping [ 381.594135][ T976] usb 3-1: config 64 has no interface number 0 [ 381.601812][ T976] usb 3-1: config 64 interface 113 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 381.634935][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 381.644929][ T5887] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 381.778679][ T976] usb 3-1: config 64 interface 113 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 381.802903][ T976] usb 3-1: config 64 interface 113 altsetting 6 bulk endpoint 0xB has invalid maxpacket 1024 [ 381.820361][ T976] usb 3-1: config 64 interface 113 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 381.832480][ T976] usb 3-1: config 64 interface 113 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 381.844203][ T5924] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 381.854626][ T5924] usb 2-1: config 0 has no interface number 0 [ 381.861896][ T5924] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 381.872665][ T976] usb 3-1: config 64 interface 113 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 381.883763][ T5924] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 381.893298][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.901395][ T976] usb 3-1: config 64 interface 113 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 381.913469][ T976] usb 3-1: config 64 interface 113 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 381.925365][ T5924] usb 2-1: config 0 descriptor?? [ 381.930734][ T976] usb 3-1: config 64 interface 113 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 381.945739][ T5924] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input23 [ 381.956676][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 381.963943][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 381.975596][ T976] usb 3-1: config 64 interface 113 altsetting 6 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 381.987594][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 381.996549][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.016796][ T5887] usb 5-1: config 0 has no interfaces? [ 382.022439][ T976] usb 3-1: config 64 interface 113 altsetting 6 has a duplicate endpoint with address 0x85, skipping [ 382.035940][ T976] usb 3-1: config 64 interface 113 altsetting 6 endpoint 0x2 has an invalid bInterval 222, changing to 7 [ 382.048246][ T976] usb 3-1: config 64 interface 113 altsetting 6 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 382.062469][ T10] usb 4-1: config 0 descriptor?? [ 382.067623][ T5887] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 382.077071][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.077645][ T47] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 382.089009][ T5887] usb 5-1: Product: syz [ 382.097218][ T976] usb 3-1: config 64 interface 113 has no altsetting 0 [ 382.124943][ T5887] usb 5-1: Manufacturer: syz [ 382.129717][ T5887] usb 5-1: SerialNumber: syz [ 382.137088][ T976] usb 3-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=49.22 [ 382.152964][ T5924] usb 2-1: USB disconnect, device number 60 [ 382.164406][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.176964][ T976] usb 3-1: Product: syz [ 382.186381][ T5887] usb 5-1: config 0 descriptor?? [ 382.192454][ T976] usb 3-1: Manufacturer: ꔲ刽 [ 382.199667][ T976] usb 3-1: SerialNumber: syz [ 382.219430][T10219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 382.237589][T10219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 382.245136][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 382.252339][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.261746][ T47] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 382.271717][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.279955][ T47] usb 1-1: Product: syz [ 382.284396][ T47] usb 1-1: Manufacturer: syz [ 382.289154][ T47] usb 1-1: SerialNumber: syz [ 382.300999][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 382.301041][ T47] usb 1-1: config 0 descriptor?? [ 382.314180][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 382.316296][ T47] gs_usb 1-1:0.0: Required endpoints not found [ 382.327041][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 382.337843][ T10] usb 4-1: media controller created [ 382.364045][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.475464][ T976] option 3-1:64.113: GSM modem (1-port) converter detected [ 382.506039][ T976] usb 3-1: USB disconnect, device number 64 [ 382.538358][ T976] option 3-1:64.113: device disconnected [ 382.708035][T10248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1393'. [ 383.212247][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 383.594974][ T10] stb0899_attach: Driver disabled by Kconfig [ 383.601252][ T10] az6027: no front-end attached [ 383.601252][ T10] [ 383.614289][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 383.665426][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 383.685254][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 383.692870][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 383.931666][ T10] usb 5-1: USB disconnect, device number 69 [ 384.894522][ T10] usb 4-1: USB disconnect, device number 63 [ 384.968146][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 385.069837][T10267] FAULT_INJECTION: forcing a failure. [ 385.069837][T10267] name failslab, interval 1, probability 0, space 0, times 0 [ 385.092751][ T976] usb 1-1: USB disconnect, device number 89 [ 385.140621][T10267] CPU: 1 UID: 0 PID: 10267 Comm: syz.1.1397 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 385.140647][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.140658][T10267] Call Trace: [ 385.140666][T10267] [ 385.140673][T10267] dump_stack_lvl+0x241/0x360 [ 385.140716][T10267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.140741][T10267] ? __pfx__printk+0x10/0x10 [ 385.140770][T10267] ? __pfx___might_resched+0x10/0x10 [ 385.140798][T10267] should_fail_ex+0x424/0x570 [ 385.140823][T10267] should_failslab+0xac/0x100 [ 385.140848][T10267] __kmalloc_cache_noprof+0x73/0x370 [ 385.140873][T10267] ? netdevice_event+0x3f4/0x8e0 [ 385.140896][T10267] netdevice_event+0x3f4/0x8e0 [ 385.140919][T10267] ? __up_read+0x2c4/0x6b0 [ 385.140942][T10267] ? __pfx_netdevice_event+0x10/0x10 [ 385.140959][T10267] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 385.140978][T10267] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 385.140999][T10267] ? __pfx_add_default_gids+0x10/0x10 [ 385.141014][T10267] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 385.141034][T10267] ? __pfx_add_netdev_ips+0x10/0x10 [ 385.141051][T10267] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 385.141072][T10267] ? cfg802154_netdev_notifier_call+0xde/0x910 [ 385.141098][T10267] notifier_call_chain+0x1a5/0x3f0 [ 385.141129][T10267] __dev_notify_flags+0x209/0x410 [ 385.141152][T10267] ? __pfx___dev_notify_flags+0x10/0x10 [ 385.141168][T10267] ? __dev_change_flags+0x517/0x700 [ 385.141190][T10267] ? __pfx___dev_change_flags+0x10/0x10 [ 385.141206][T10267] ? validate_linkmsg+0x8ba/0xa40 [ 385.141233][T10267] ? nla_strscpy+0x102/0x180 [ 385.141258][T10267] netif_change_flags+0xf0/0x1a0 [ 385.141281][T10267] do_setlink+0xee3/0x4390 [ 385.141296][T10267] ? rtnl_newlink+0x1842/0x1fe0 [ 385.141319][T10267] ? rtnetlink_rcv_msg+0x80f/0xd70 [ 385.141341][T10267] ? netlink_rcv_skb+0x208/0x480 [ 385.141369][T10267] ? do_syscall_64+0xf3/0x230 [ 385.141408][T10267] ? __pfx_do_setlink+0x10/0x10 [ 385.141439][T10267] ? call_rcu+0x7a4/0xad0 [ 385.141460][T10267] ? lockdep_hardirqs_on+0x9d/0x150 [ 385.141494][T10267] ? __pfx_call_rcu+0x10/0x10 [ 385.141520][T10267] ? __nf_unregister_net_hook+0x5fb/0x810 [ 385.141552][T10267] ? nf_unregister_net_hooks+0x122/0x140 [ 385.141578][T10267] ? ipvlan_set_port_mode+0x30e/0x3f0 [ 385.141615][T10267] ? ipvlan_nl_changelink+0x254/0x2e0 [ 385.141636][T10267] rtnl_newlink+0x17e2/0x1fe0 [ 385.141665][T10267] ? stack_depot_save_flags+0x44/0x940 [ 385.141703][T10267] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.141726][T10267] ? __netlink_deliver_tap+0x561/0x7f0 [ 385.141791][T10267] ? kasan_quarantine_put+0xdc/0x230 [ 385.141809][T10267] ? lockdep_hardirqs_on+0x9d/0x150 [ 385.141833][T10267] ? nlmon_xmit+0xaf/0x100 [ 385.141867][T10267] ? __local_bh_enable_ip+0x168/0x200 [ 385.141883][T10267] ? lockdep_hardirqs_on+0x9d/0x150 [ 385.141911][T10267] ? aa_get_newest_label+0x101/0x6f0 [ 385.141942][T10267] ? __lock_acquire+0xad5/0xd80 [ 385.141980][T10267] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.142006][T10267] rtnetlink_rcv_msg+0x80f/0xd70 [ 385.142030][T10267] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 385.142059][T10267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.142091][T10267] ? ref_tracker_free+0x63e/0x7e0 [ 385.142117][T10267] netlink_rcv_skb+0x208/0x480 [ 385.142143][T10267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.142170][T10267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.142212][T10267] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.142239][T10267] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.142267][T10267] netlink_unicast+0x7f8/0x9a0 [ 385.142299][T10267] ? __pfx_netlink_unicast+0x10/0x10 [ 385.142323][T10267] ? skb_put+0x114/0x1f0 [ 385.142345][T10267] netlink_sendmsg+0x8c3/0xcd0 [ 385.142379][T10267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.142401][T10267] ? aa_sock_msg_perm+0x91/0x160 [ 385.142422][T10267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.142438][T10267] __sock_sendmsg+0x221/0x270 [ 385.142460][T10267] ____sys_sendmsg+0x523/0x860 [ 385.142479][T10267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.142491][T10267] ? __fget_files+0x2a/0x420 [ 385.142505][T10267] ? __fget_files+0x2a/0x420 [ 385.142522][T10267] __sys_sendmsg+0x271/0x360 [ 385.142538][T10267] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.142586][T10267] ? do_syscall_64+0xb6/0x230 [ 385.142603][T10267] do_syscall_64+0xf3/0x230 [ 385.142618][T10267] ? clear_bhb_loop+0x45/0xa0 [ 385.142634][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.142647][T10267] RIP: 0033:0x7f7d6218e169 [ 385.142664][T10267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.142679][T10267] RSP: 002b:00007f7d62ffd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.142705][T10267] RAX: ffffffffffffffda RBX: 00007f7d623b5fa0 RCX: 00007f7d6218e169 [ 385.142718][T10267] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 385.142730][T10267] RBP: 00007f7d62ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 385.142740][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.142751][T10267] R13: 0000000000000000 R14: 00007f7d623b5fa0 R15: 00007f7d624dfa28 [ 385.142779][T10267] [ 385.915363][ T47] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 386.165081][ T5888] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 386.187908][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 386.198860][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 386.210960][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 386.225586][ T47] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 386.234969][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.242975][ T47] usb 4-1: Product: syz [ 386.267693][ T47] usb 4-1: Manufacturer: syz [ 386.272939][ T47] usb 4-1: SerialNumber: syz [ 386.300083][ T47] usb 4-1: config 0 descriptor?? [ 386.311898][T10272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.329581][ T47] usb 4-1: ucan: probing device on interface #0 [ 386.342866][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.354741][ T47] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 386.361705][ T5888] usb 1-1: config 3 has an invalid interface number: 19 but max is 0 [ 386.372963][ T47] usb 4-1: ucan: probe failed; try to update the device firmware [ 386.380741][ T5888] usb 1-1: config 3 has an invalid interface number: 4 but max is 0 [ 386.400319][ T5888] usb 1-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 386.412287][ T5888] usb 1-1: config 3 has no interface number 0 [ 386.418455][ T5888] usb 1-1: config 3 has no interface number 1 [ 386.425180][ T5888] usb 1-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 386.443745][ T5888] usb 1-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 386.460843][ T5888] usb 1-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 386.472647][ T5888] usb 1-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 386.513527][ T5888] usb 1-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 386.542126][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.584601][ T5888] usb 1-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 386.596176][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.632707][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1398'. [ 386.643318][ T5888] usb 1-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 386.694086][ T5888] usb 1-1: config 3 interface 19 has no altsetting 0 [ 386.710539][ T5888] usb 1-1: config 3 interface 4 has no altsetting 0 [ 386.736773][ T5888] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 386.746251][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.754342][ T5888] usb 1-1: Product: syz [ 386.759217][ T5888] usb 1-1: Manufacturer: syz [ 386.764067][ T5888] usb 1-1: SerialNumber: syz [ 386.822309][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.831655][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.875073][ T976] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 387.038629][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 387.086853][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.097032][ T976] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 387.109209][ T976] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 387.139188][ T5888] pl2303 1-1:3.19: required endpoints missing [ 387.149947][ T976] usb 3-1: config 8 has no interface number 0 [ 387.170570][ T976] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.191993][ T5888] pl2303 1-1:3.4: required interrupt-in endpoint missing [ 387.207867][ T5888] usb 1-1: USB disconnect, device number 90 [ 387.310963][ T976] usb 3-1: config 8 interface 132 has no altsetting 0 [ 387.367266][ T976] usb 3-1: string descriptor 0 read error: -22 [ 387.373993][ T976] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 387.415228][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.428974][ T976] usb-storage 3-1:8.132: USB Mass Storage device detected [ 387.446378][ T976] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 388.200965][ T976] usb 4-1: USB disconnect, device number 64 [ 388.274194][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 388.715243][ T976] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 388.764980][ T5924] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 388.896674][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 388.908963][ T976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 388.921247][ T976] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 388.951497][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 388.962998][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.980113][ T5924] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 388.999504][ T5924] usb 5-1: config 0 has no interface number 0 [ 389.012437][ T976] usb 4-1: Product: syz [ 389.029542][ T976] usb 4-1: Manufacturer: syz [ 389.046958][ T5924] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 389.080226][ T976] usb 4-1: SerialNumber: syz [ 389.093835][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.133795][ T976] usb 4-1: config 0 descriptor?? [ 389.160032][ T976] gs_usb 4-1:0.0: Required endpoints not found [ 389.167908][ T5924] usb 5-1: config 0 descriptor?? [ 389.295138][ T47] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 389.375524][ T5924] viperboard 5-1:0.143: version 0.00 found at bus 005 address 070 [ 389.427614][ T5924] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 389.447637][ T47] usb 2-1: config 0 has no interfaces? [ 389.454267][ T5924] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 389.459293][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 389.500021][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.509831][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.515483][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.607251][ T47] usb 2-1: Product: syz [ 389.611460][ T47] usb 2-1: Manufacturer: syz [ 389.695798][ T5924] usb 3-1: USB disconnect, device number 65 [ 389.744983][ T47] usb 2-1: SerialNumber: syz [ 389.776985][ T976] usb 5-1: USB disconnect, device number 70 [ 389.795848][ T47] usb 2-1: config 0 descriptor?? [ 389.951525][T10330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1412'. [ 390.827440][T10340] xt_TCPMSS: Only works on TCP SYN packets [ 391.858772][T10344] program syz.4.1415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.090489][ T5890] usb 4-1: USB disconnect, device number 65 [ 392.671162][ T5888] usb 2-1: USB disconnect, device number 61 [ 393.073670][ T976] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 393.112898][ T976] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 393.134620][ T976] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 393.184031][ T976] hid-generic 0000:0004:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 393.425044][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 393.433364][ T5924] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 393.607895][ T5924] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 393.617898][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.630393][ T5924] usb 2-1: config 0 has no interface number 0 [ 393.673380][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.730649][ T5924] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.783951][ T10] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 393.850856][ T5924] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 393.902104][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.912051][ T5924] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 393.924668][ T10] usb 4-1: config 0 descriptor?? [ 393.930623][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.947547][ T5924] usb 2-1: config 0 descriptor?? [ 393.955480][T10362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.972129][ T5924] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input25 [ 394.205348][ T5924] usb 2-1: USB disconnect, device number 62 [ 394.257557][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'. [ 395.500042][ T30] audit: type=1326 audit(1744844465.697:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 395.613484][T10382] sctp: [Deprecated]: syz.1.1426 (pid 10382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.613484][T10382] Use struct sctp_sack_info instead [ 395.654285][ T30] audit: type=1326 audit(1744844465.697:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 395.788656][ T30] audit: type=1326 audit(1744844465.697:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 395.795030][ T5887] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 395.817221][ T30] audit: type=1326 audit(1744844465.697:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 395.958315][ T30] audit: type=1326 audit(1744844465.697:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 396.015373][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 396.030766][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.041017][ T5887] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 396.048633][ T30] audit: type=1326 audit(1744844465.697:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 396.053762][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.115305][ T30] audit: type=1326 audit(1744844465.697:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 396.146157][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 396.159914][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 396.192603][ T5887] usb 5-1: Product: syz [ 396.192790][T10387] netlink: 'syz.2.1428': attribute type 13 has an invalid length. [ 396.220743][ T5887] usb 5-1: Manufacturer: syz [ 396.221794][ T30] audit: type=1326 audit(1744844465.697:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 396.235033][ T5887] usb 5-1: SerialNumber: syz [ 396.288934][ T30] audit: type=1326 audit(1744844465.757:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 396.307408][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 396.354716][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 396.382944][ T5887] usb 5-1: config 0 descriptor?? [ 396.397356][ T5887] gs_usb 5-1:0.0: Required endpoints not found [ 396.435161][ T30] audit: type=1326 audit(1744844465.757:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6218e169 code=0x7ffc0000 [ 396.453317][ T10] usb 4-1: USB disconnect, device number 66 [ 396.789005][T10397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1431'. [ 397.455062][T10397] team0 (unregistering): Port device team_slave_0 removed [ 397.486521][T10397] team0 (unregistering): Port device team_slave_1 removed [ 397.597074][T10412] xt_TCPMSS: Only works on TCP SYN packets [ 397.625896][ T47] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 397.854578][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 397.864732][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 397.876596][ T47] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 397.890862][ T47] usb 4-1: config 0 has no interface number 0 [ 397.905037][ T47] usb 4-1: config 0 interface 93 has no altsetting 0 [ 397.915668][ T47] usb 4-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 397.925542][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.937516][ T47] usb 4-1: Product: syz [ 397.941808][ T47] usb 4-1: Manufacturer: syz [ 397.961100][ T47] usb 4-1: SerialNumber: syz [ 398.015262][ T47] usb 4-1: config 0 descriptor?? [ 398.174379][T10416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1436'. [ 398.261648][T10416] vlan2: entered promiscuous mode [ 398.268659][ T47] usb 4-1: unknown interface protocol 0x1a, assuming v1 [ 398.282904][ T47] usb 4-1: cannot find UAC_HEADER [ 398.357285][ T47] snd-usb-audio 4-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 398.432518][ T47] usb 4-1: USB disconnect, device number 67 [ 398.467408][T10418] FAULT_INJECTION: forcing a failure. [ 398.467408][T10418] name failslab, interval 1, probability 0, space 0, times 0 [ 398.507501][T10418] CPU: 1 UID: 0 PID: 10418 Comm: syz.2.1437 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 398.507552][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.507563][T10418] Call Trace: [ 398.507575][T10418] [ 398.507583][T10418] dump_stack_lvl+0x241/0x360 [ 398.507618][T10418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.507644][T10418] ? __pfx__printk+0x10/0x10 [ 398.507673][T10418] ? __pfx___might_resched+0x10/0x10 [ 398.507706][T10418] should_fail_ex+0x424/0x570 [ 398.507730][T10418] should_failslab+0xac/0x100 [ 398.507757][T10418] __kmalloc_cache_noprof+0x73/0x370 [ 398.507781][T10418] ? rtnl_newlink+0x144/0x1fe0 [ 398.507813][T10418] rtnl_newlink+0x144/0x1fe0 [ 398.507837][T10418] ? stack_depot_save_flags+0x44/0x940 [ 398.507863][T10418] ? kasan_save_track+0x51/0x80 [ 398.507881][T10418] ? kasan_save_track+0x3f/0x80 [ 398.507898][T10418] ? kasan_save_free_info+0x40/0x50 [ 398.507912][T10418] ? __kasan_slab_free+0x59/0x70 [ 398.507933][T10418] ? __pfx_rtnl_newlink+0x10/0x10 [ 398.507955][T10418] ? __netlink_deliver_tap+0x561/0x7f0 [ 398.507979][T10418] ? netlink_deliver_tap+0x19d/0x1b0 [ 398.508002][T10418] ? netlink_unicast+0x7c6/0x9a0 [ 398.508022][T10418] ? netlink_sendmsg+0x8c3/0xcd0 [ 398.508045][T10418] ? __sock_sendmsg+0x221/0x270 [ 398.508087][T10418] ? ____sys_sendmsg+0x523/0x860 [ 398.508105][T10418] ? __sys_sendmsg+0x271/0x360 [ 398.508151][T10418] ? do_syscall_64+0xf3/0x230 [ 398.508177][T10418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.508249][T10418] ? kasan_quarantine_put+0xdc/0x230 [ 398.508271][T10418] ? lockdep_hardirqs_on+0x9d/0x150 [ 398.508300][T10418] ? nlmon_xmit+0xaf/0x100 [ 398.508342][T10418] ? __local_bh_enable_ip+0x168/0x200 [ 398.508362][T10418] ? lockdep_hardirqs_on+0x9d/0x150 [ 398.508395][T10418] ? aa_get_newest_label+0x101/0x6f0 [ 398.508433][T10418] ? __lock_acquire+0xad5/0xd80 [ 398.508483][T10418] ? __pfx_rtnl_newlink+0x10/0x10 [ 398.508506][T10418] rtnetlink_rcv_msg+0x80f/0xd70 [ 398.508526][T10418] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 398.508551][T10418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 398.508577][T10418] ? ref_tracker_free+0x63e/0x7e0 [ 398.508599][T10418] netlink_rcv_skb+0x208/0x480 [ 398.508622][T10418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 398.508645][T10418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.508679][T10418] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.508701][T10418] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.508724][T10418] netlink_unicast+0x7f8/0x9a0 [ 398.508750][T10418] ? __pfx_netlink_unicast+0x10/0x10 [ 398.508771][T10418] ? skb_put+0x114/0x1f0 [ 398.508788][T10418] netlink_sendmsg+0x8c3/0xcd0 [ 398.508819][T10418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.508843][T10418] ? aa_sock_msg_perm+0x91/0x160 [ 398.508868][T10418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.508888][T10418] __sock_sendmsg+0x221/0x270 [ 398.508910][T10418] ____sys_sendmsg+0x523/0x860 [ 398.508933][T10418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.508947][T10418] ? __fget_files+0x2a/0x420 [ 398.508963][T10418] ? __fget_files+0x2a/0x420 [ 398.508983][T10418] __sys_sendmsg+0x271/0x360 [ 398.509002][T10418] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.509057][T10418] ? do_syscall_64+0xb6/0x230 [ 398.509078][T10418] do_syscall_64+0xf3/0x230 [ 398.509096][T10418] ? clear_bhb_loop+0x45/0xa0 [ 398.509114][T10418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.509128][T10418] RIP: 0033:0x7ff9f5b8e169 [ 398.509142][T10418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.509155][T10418] RSP: 002b:00007ff9f695f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.509172][T10418] RAX: ffffffffffffffda RBX: 00007ff9f5db5fa0 RCX: 00007ff9f5b8e169 [ 398.509183][T10418] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 398.509195][T10418] RBP: 00007ff9f695f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.509206][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.509215][T10418] R13: 0000000000000000 R14: 00007ff9f5db5fa0 R15: 00007ff9f5edfa28 [ 398.509250][T10418] [ 399.483337][ T8163] udevd[8163]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.93/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.529471][ T10] usb 5-1: USB disconnect, device number 71 [ 399.943527][T10437] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 400.775006][T10444] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1445'. [ 401.228017][T10446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.253533][T10455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.395433][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 401.534996][ T10] usb 2-1: device descriptor read/64, error -71 [ 401.646969][T10460] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 401.775263][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 401.865004][ T5887] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 401.936019][ T10] usb 2-1: device descriptor read/64, error -71 [ 402.032463][T10469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1453'. [ 402.042320][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 402.049106][ T10] usb usb2-port1: attempt power cycle [ 402.055007][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 402.075230][ T5924] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 402.100148][ T5887] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 402.111276][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.119721][ T5887] usb 3-1: Product: syz [ 402.124294][ T5887] usb 3-1: Manufacturer: syz [ 402.135131][T10471] netlink: 'syz.4.1454': attribute type 10 has an invalid length. [ 402.208802][ T5887] usb 3-1: SerialNumber: syz [ 402.333583][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 402.346878][ T5887] usb 3-1: config 0 descriptor?? [ 402.360775][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.372833][ T5887] gs_usb 3-1:0.0: Required endpoints not found [ 402.383474][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.428745][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 402.437509][ T5886] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 402.445352][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 402.465654][ T10] usb 2-1: device descriptor read/8, error -71 [ 402.477927][ T5924] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 402.506675][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.542612][ T5924] usb 1-1: config 0 descriptor?? [ 402.735217][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 402.779625][ T10] usb 2-1: device descriptor read/8, error -71 [ 402.912104][ T10] usb usb2-port1: unable to enumerate USB device [ 403.172546][ T5924] usbhid 1-1:0.0: can't add hid device: -71 [ 403.191730][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 403.226190][ T5924] usb 1-1: USB disconnect, device number 91 [ 403.788014][T10476] FAULT_INJECTION: forcing a failure. [ 403.788014][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 403.806099][T10476] CPU: 0 UID: 0 PID: 10476 Comm: syz.0.1455 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 403.806124][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.806132][T10476] Call Trace: [ 403.806138][T10476] [ 403.806143][T10476] dump_stack_lvl+0x241/0x360 [ 403.806169][T10476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.806187][T10476] ? __pfx__printk+0x10/0x10 [ 403.806208][T10476] ? __pfx___might_resched+0x10/0x10 [ 403.806229][T10476] should_fail_ex+0x424/0x570 [ 403.806247][T10476] should_failslab+0xac/0x100 [ 403.806267][T10476] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 403.806285][T10476] ? dup_task_struct+0x57/0x870 [ 403.806302][T10476] dup_task_struct+0x57/0x870 [ 403.806314][T10476] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.806327][T10476] ? lockdep_hardirqs_on+0x9d/0x150 [ 403.806344][T10476] copy_process+0x5dc/0x3d10 [ 403.806375][T10476] ? __pfx_copy_process+0x10/0x10 [ 403.806392][T10476] ? __raw_spin_lock_init+0x45/0x100 [ 403.806416][T10476] vhost_task_create+0x244/0x320 [ 403.806434][T10476] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 403.806448][T10476] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 403.806463][T10476] ? __pfx_vhost_task_create+0x10/0x10 [ 403.806479][T10476] ? stack_trace_save+0x11a/0x1d0 [ 403.806503][T10476] ? __pfx_vhost_task_fn+0x10/0x10 [ 403.806526][T10476] ? kasan_save_track+0x51/0x80 [ 403.806539][T10476] ? kasan_save_free_info+0x40/0x50 [ 403.806550][T10476] ? __kasan_slab_free+0x59/0x70 [ 403.806563][T10476] ? kfree+0x198/0x430 [ 403.806577][T10476] ? tomoyo_path_number_perm+0x5fd/0x790 [ 403.806593][T10476] ? security_file_ioctl+0xc6/0x2a0 [ 403.806609][T10476] kvm_mmu_post_init_vm+0x14e/0x2c0 [ 403.806627][T10476] kvm_arch_vcpu_ioctl_run+0xed/0x1910 [ 403.806650][T10476] ? __lock_acquire+0xad5/0xd80 [ 403.806665][T10476] ? __mutex_trylock_common+0x184/0x2e0 [ 403.806684][T10476] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 403.806703][T10476] ? __pfx___mutex_trylock_common+0x10/0x10 [ 403.806722][T10476] ? rcu_is_watching+0x15/0xb0 [ 403.806738][T10476] ? look_up_lock_class+0x7b/0x170 [ 403.806755][T10476] ? register_lock_class+0x54/0x330 [ 403.806771][T10476] ? __lock_acquire+0xad5/0xd80 [ 403.806787][T10476] ? do_raw_write_lock+0x14a/0x4f0 [ 403.806817][T10476] kvm_vcpu_ioctl+0xa24/0x1030 [ 403.806840][T10476] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 403.806862][T10476] ? __lock_acquire+0xad5/0xd80 [ 403.806886][T10476] ? __fget_files+0x2a/0x420 [ 403.806897][T10476] ? __fget_files+0x2a/0x420 [ 403.806910][T10476] ? __fget_files+0x2a/0x420 [ 403.806923][T10476] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 403.806942][T10476] __se_sys_ioctl+0xf1/0x160 [ 403.806958][T10476] do_syscall_64+0xf3/0x230 [ 403.806974][T10476] ? clear_bhb_loop+0x45/0xa0 [ 403.806990][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.807002][T10476] RIP: 0033:0x7fcd2e18e169 [ 403.807013][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.807023][T10476] RSP: 002b:00007fcd2ef4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.807037][T10476] RAX: ffffffffffffffda RBX: 00007fcd2e3b5fa0 RCX: 00007fcd2e18e169 [ 403.807046][T10476] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 403.807054][T10476] RBP: 00007fcd2ef4b090 R08: 0000000000000000 R09: 0000000000000000 [ 403.807062][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.807069][T10476] R13: 0000000000000000 R14: 00007fcd2e3b5fa0 R15: 00007fcd2e4dfa28 [ 403.807087][T10476] [ 404.184967][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.695809][T10484] xt_TCPMSS: Only works on TCP SYN packets [ 405.439561][ T10] usb 3-1: USB disconnect, device number 66 [ 405.641626][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.650445][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 405.665333][ T5886] usb 5-1: can't read configurations, error -71 [ 405.905044][ T10] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 406.076665][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.086072][ T10] usb 3-1: config 0 has no interface number 0 [ 406.142370][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 406.193139][T10503] netlink: 'syz.4.1462': attribute type 16 has an invalid length. [ 406.216179][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.242302][ T10] usb 3-1: Product: syz [ 406.253647][T10503] netlink: 'syz.4.1462': attribute type 17 has an invalid length. [ 406.283506][ T10] usb 3-1: Manufacturer: syz [ 406.302540][ T10] usb 3-1: SerialNumber: syz [ 406.340648][T10503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.361428][T10503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.392434][ T10] usb 3-1: config 0 descriptor?? [ 406.422654][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 406.465173][ T5890] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 406.683300][ T5890] usb 2-1: config 0 has no interfaces? [ 406.715170][ T5890] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 406.743831][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.803393][ T5890] usb 2-1: Product: syz [ 406.839576][ T10] gspca_spca1528: reg_w err -71 [ 406.855479][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 406.905050][ T5886] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 406.936116][ T5890] usb 2-1: Manufacturer: syz [ 406.947775][ T10] usb 3-1: USB disconnect, device number 67 [ 406.995350][ T5890] usb 2-1: SerialNumber: syz [ 407.066083][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 407.073889][ T5890] usb 2-1: config 0 descriptor?? [ 407.080180][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 407.093521][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 407.113355][ T5886] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 407.123092][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.135734][ T5886] usb 5-1: Product: syz [ 407.139994][ T5886] usb 5-1: Manufacturer: syz [ 407.151672][ T5886] usb 5-1: SerialNumber: syz [ 407.194803][ T5886] usb 5-1: config 0 descriptor?? [ 407.550301][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 407.577855][T10500] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1460'. [ 407.614258][T10500] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 407.661405][ T5886] usb 5-1: no audio or video endpoints found [ 407.723297][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1466'. [ 408.335199][ T5906] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 408.525154][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 408.538696][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.547604][ T5906] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 408.557284][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.565583][ T5906] usb 3-1: Product: syz [ 408.574587][ T5906] usb 3-1: Manufacturer: syz [ 408.586859][ T5906] usb 3-1: SerialNumber: syz [ 408.607595][ T5906] usb 3-1: config 0 descriptor?? [ 408.653558][ T5906] gs_usb 3-1:0.0: Required endpoints not found [ 409.016478][ T5906] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 409.204907][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 409.291341][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.317548][ T5906] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.337216][ T5906] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 409.358789][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.380605][ T5906] usb 1-1: config 0 descriptor?? [ 409.427110][ T5886] usb 2-1: USB disconnect, device number 67 [ 409.616636][T10530] netlink: 'syz.1.1470': attribute type 7 has an invalid length. [ 409.625747][T10530] netlink: 'syz.1.1470': attribute type 8 has an invalid length. [ 410.398092][T10528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.414093][T10528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 410.442369][T10528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.466271][T10528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 410.489651][T10528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.498537][T10528] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 410.512331][T10528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.568483][T10528] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 410.634530][T10545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1473'. [ 410.645884][T10528] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.661692][T10528] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 410.894344][T10547] FAULT_INJECTION: forcing a failure. [ 410.894344][T10547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.911379][T10547] CPU: 0 UID: 0 PID: 10547 Comm: syz.1.1474 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 410.911405][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.911417][T10547] Call Trace: [ 410.911425][T10547] [ 410.911432][T10547] dump_stack_lvl+0x241/0x360 [ 410.911466][T10547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.911492][T10547] ? __pfx__printk+0x10/0x10 [ 410.911528][T10547] should_fail_ex+0x424/0x570 [ 410.911552][T10547] prepare_alloc_pages+0x220/0x610 [ 410.911579][T10547] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 410.911603][T10547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.911642][T10547] alloc_pages_mpol+0x339/0x690 [ 410.911671][T10547] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 410.911706][T10547] vma_alloc_folio_noprof+0x12d/0x260 [ 410.911734][T10547] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 410.911769][T10547] folio_prealloc+0x2e/0x170 [ 410.911787][T10547] handle_pte_fault+0x2e45/0x61c0 [ 410.911820][T10547] ? rcu_is_watching+0x15/0xb0 [ 410.911929][T10547] ? __pfx_handle_pte_fault+0x10/0x10 [ 410.911950][T10547] ? __lock_acquire+0xad5/0xd80 [ 410.911976][T10547] ? __lock_acquire+0xad5/0xd80 [ 410.911997][T10547] ? __lock_acquire+0xad5/0xd80 [ 410.912036][T10547] ? mtree_range_walk+0x700/0x8e0 [ 410.912065][T10547] handle_mm_fault+0x1129/0x1bf0 [ 410.912090][T10547] ? mt_find+0x28a/0x8f0 [ 410.912145][T10547] ? __pfx_handle_mm_fault+0x10/0x10 [ 410.912195][T10547] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 410.912224][T10547] exc_page_fault+0x2bb/0x920 [ 410.912267][T10547] asm_exc_page_fault+0x26/0x30 [ 410.912284][T10547] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 410.912302][T10547] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 410.912317][T10547] RSP: 0018:ffffc9000c237898 EFLAGS: 00050206 [ 410.912333][T10547] RAX: ffff88805225c001 RBX: 0000000000000043 RCX: 0000000000000043 [ 410.912345][T10547] RDX: 0000000000000000 RSI: ffff88805225c008 RDI: 0000200000001600 [ 410.912357][T10547] RBP: ffffc9000c237a08 R08: ffff88805225c04a R09: 1ffff1100a44b809 [ 410.912370][T10547] R10: dffffc0000000000 R11: ffffed100a44b80a R12: 0000000000000000 [ 410.912382][T10547] R13: ffffc9000c237bd0 R14: ffff88805225c008 R15: 0000200000001643 [ 410.912412][T10547] _copy_to_iter+0x4d2/0x1c90 [ 410.912449][T10547] ? __pfx__copy_to_iter+0x10/0x10 [ 410.912473][T10547] ? traverse+0x521/0x550 [ 410.912506][T10547] seq_read_iter+0x2e5/0xda0 [ 410.912530][T10547] ? aa_file_perm+0x3f1/0xf60 [ 410.912571][T10547] seq_read+0x3ab/0x4f0 [ 410.912598][T10547] ? __pfx_seq_read+0x10/0x10 [ 410.912643][T10547] ? __pfx_seq_read+0x10/0x10 [ 410.912662][T10547] proc_reg_read+0x201/0x2f0 [ 410.912684][T10547] ? __pfx_proc_reg_read+0x10/0x10 [ 410.912732][T10547] vfs_read+0x21f/0xb90 [ 410.912760][T10547] ? __pfx_vfs_read+0x10/0x10 [ 410.912780][T10547] ? __fget_files+0x2a/0x420 [ 410.912795][T10547] ? __fget_files+0x2a/0x420 [ 410.912923][T10547] ? __fget_files+0x39d/0x420 [ 410.912953][T10547] ? __fget_files+0x2a/0x420 [ 410.912979][T10547] __x64_sys_pread64+0x1b5/0x250 [ 410.913088][T10547] ? __pfx___x64_sys_pread64+0x10/0x10 [ 410.913128][T10547] ? do_syscall_64+0xb6/0x230 [ 410.913163][T10547] do_syscall_64+0xf3/0x230 [ 410.913186][T10547] ? clear_bhb_loop+0x45/0xa0 [ 410.913208][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.913226][T10547] RIP: 0033:0x7f7d6218e169 [ 410.913241][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.913256][T10547] RSP: 002b:00007f7d62ffd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 410.913273][T10547] RAX: ffffffffffffffda RBX: 00007f7d623b5fa0 RCX: 00007f7d6218e169 [ 410.913286][T10547] RDX: 0000000000001007 RSI: 0000200000001600 RDI: 0000000000000004 [ 410.913297][T10547] RBP: 00007f7d62ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 410.913307][T10547] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 410.913335][T10547] R13: 0000000000000000 R14: 00007f7d623b5fa0 R15: 00007f7d624dfa28 [ 410.913365][T10547] [ 411.333758][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.421555][ T5890] usb 3-1: USB disconnect, device number 68 [ 411.602952][ T10] usb 5-1: USB disconnect, device number 74 [ 411.633974][T10512] usb 1-1: USB disconnect, device number 92 [ 411.695302][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 412.116527][ T47] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 412.174979][ T5906] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 412.317963][ T47] usb 5-1: device descriptor read/64, error -71 [ 412.422146][ T5906] usb 1-1: config 0 has no interfaces? [ 412.433453][ T5906] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 412.449676][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.460141][ T5906] usb 1-1: Product: syz [ 412.469055][ T5906] usb 1-1: Manufacturer: syz [ 412.483082][ T5906] usb 1-1: SerialNumber: syz [ 412.495579][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 412.499049][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 412.527599][ T5906] usb 1-1: config 0 descriptor?? [ 412.575517][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 412.575777][ T47] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 412.633178][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 412.655419][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 412.824998][ T47] usb 5-1: device descriptor read/64, error -71 [ 412.867496][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 412.935209][ T47] usb usb5-port1: attempt power cycle [ 413.182657][T10572] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 413.262591][T10568] [ 413.264986][T10568] ====================================================== [ 413.271998][T10568] WARNING: possible circular locking dependency detected [ 413.279358][T10568] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 413.286462][T10568] ------------------------------------------------------ [ 413.294036][T10568] syz.1.1481/10568 is trying to acquire lock: [ 413.300144][T10568] ffff888011cc8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xda0 [ 413.310892][T10568] [ 413.310892][T10568] but task is already holding lock: [ 413.318270][T10568] ffff888011cc8258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 413.327772][T10568] [ 413.327772][T10568] which lock already depends on the new lock. [ 413.327772][T10568] [ 413.338276][T10568] [ 413.338276][T10568] the existing dependency chain (in reverse order) is: [ 413.347312][T10568] [ 413.347312][T10568] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 413.356295][T10568] lock_acquire+0x116/0x2f0 [ 413.361340][T10568] lock_sock_nested+0x48/0x100 [ 413.366638][T10568] do_ip_setsockopt+0x17e9/0x39c0 [ 413.372190][T10568] ip_setsockopt+0x63/0x100 [ 413.377241][T10568] do_sock_setsockopt+0x3b1/0x710 [ 413.382786][T10568] __x64_sys_setsockopt+0x1ee/0x280 [ 413.388498][T10568] do_syscall_64+0xf3/0x230 [ 413.393529][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.399950][T10568] [ 413.399950][T10568] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 413.407169][T10568] lock_acquire+0x116/0x2f0 [ 413.412209][T10568] __mutex_lock+0x1a5/0x10c0 [ 413.417338][T10568] start_sync_thread+0xde/0x2d60 [ 413.422804][T10568] do_ip_vs_set_ctl+0x48e/0xe50 [ 413.428177][T10568] nf_setsockopt+0x295/0x2c0 [ 413.433409][T10568] smc_setsockopt+0x25c/0xd50 [ 413.438622][T10568] do_sock_setsockopt+0x3b1/0x710 [ 413.444518][T10568] __x64_sys_setsockopt+0x1ee/0x280 [ 413.451715][T10568] do_syscall_64+0xf3/0x230 [ 413.457096][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.463597][T10568] [ 413.463597][T10568] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 413.473868][T10568] validate_chain+0xa69/0x24e0 [ 413.479247][T10568] __lock_acquire+0xad5/0xd80 [ 413.484840][T10568] lock_acquire+0x116/0x2f0 [ 413.489873][T10568] __mutex_lock+0x1a5/0x10c0 [ 413.495099][T10568] smc_switch_to_fallback+0x35/0xda0 [ 413.500914][T10568] smc_sendmsg+0x11f/0x530 [ 413.505858][T10568] __sock_sendmsg+0x221/0x270 [ 413.511169][T10568] __sys_sendto+0x365/0x4c0 [ 413.516237][T10568] __x64_sys_sendto+0xde/0x100 [ 413.521528][T10568] do_syscall_64+0xf3/0x230 [ 413.526582][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.533012][T10568] [ 413.533012][T10568] other info that might help us debug this: [ 413.533012][T10568] [ 413.543561][T10568] Chain exists of: [ 413.543561][T10568] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 413.543561][T10568] [ 413.557477][T10568] Possible unsafe locking scenario: [ 413.557477][T10568] [ 413.564930][T10568] CPU0 CPU1 [ 413.570298][T10568] ---- ---- [ 413.576359][T10568] lock(sk_lock-AF_INET); [ 413.580958][T10568] lock(rtnl_mutex); [ 413.587472][T10568] lock(sk_lock-AF_INET); [ 413.594508][T10568] lock(&smc->clcsock_release_lock); [ 413.599887][T10568] [ 413.599887][T10568] *** DEADLOCK *** [ 413.599887][T10568] [ 413.608684][T10568] 1 lock held by syz.1.1481/10568: [ 413.613795][T10568] #0: ffff888011cc8258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 413.623038][T10568] [ 413.623038][T10568] stack backtrace: [ 413.628925][T10568] CPU: 0 UID: 0 PID: 10568 Comm: syz.1.1481 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 413.628945][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.628954][T10568] Call Trace: [ 413.628960][T10568] [ 413.628967][T10568] dump_stack_lvl+0x241/0x360 [ 413.628992][T10568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.629013][T10568] ? __pfx__printk+0x10/0x10 [ 413.629040][T10568] ? print_lock+0x171/0x1a0 [ 413.629059][T10568] print_circular_bug+0x2e1/0x300 [ 413.629080][T10568] check_noncircular+0x142/0x160 [ 413.629101][T10568] validate_chain+0xa69/0x24e0 [ 413.629123][T10568] ? look_up_lock_class+0x7b/0x170 [ 413.629143][T10568] ? register_lock_class+0x54/0x330 [ 413.629159][T10568] __lock_acquire+0xad5/0xd80 [ 413.629177][T10568] lock_acquire+0x116/0x2f0 [ 413.629191][T10568] ? smc_switch_to_fallback+0x35/0xda0 [ 413.629212][T10568] __mutex_lock+0x1a5/0x10c0 [ 413.629230][T10568] ? smc_switch_to_fallback+0x35/0xda0 [ 413.629248][T10568] ? register_lock_class+0x54/0x330 [ 413.629264][T10568] ? smc_switch_to_fallback+0x35/0xda0 [ 413.629283][T10568] ? __pfx___mutex_lock+0x10/0x10 [ 413.629304][T10568] ? __local_bh_enable_ip+0x168/0x200 [ 413.629319][T10568] ? lockdep_hardirqs_on+0x9d/0x150 [ 413.629337][T10568] ? __local_bh_enable_ip+0x168/0x200 [ 413.629352][T10568] smc_switch_to_fallback+0x35/0xda0 [ 413.629369][T10568] ? do_raw_spin_unlock+0x13c/0x8b0 [ 413.629394][T10568] smc_sendmsg+0x11f/0x530 [ 413.629410][T10568] ? __pfx_smc_sendmsg+0x10/0x10 [ 413.629426][T10568] __sock_sendmsg+0x221/0x270 [ 413.629447][T10568] __sys_sendto+0x365/0x4c0 [ 413.629463][T10568] ? __pfx___sys_sendto+0x10/0x10 [ 413.629475][T10568] ? do_futex+0x37c/0x5a0 [ 413.629510][T10568] __x64_sys_sendto+0xde/0x100 [ 413.629525][T10568] do_syscall_64+0xf3/0x230 [ 413.629544][T10568] ? clear_bhb_loop+0x45/0xa0 [ 413.629560][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.629576][T10568] RIP: 0033:0x7f7d6218e169 [ 413.629591][T10568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.629604][T10568] RSP: 002b:00007f7d62ffd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.629620][T10568] RAX: ffffffffffffffda RBX: 00007f7d623b5fa0 RCX: 00007f7d6218e169 [ 413.629632][T10568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 413.629641][T10568] RBP: 00007f7d62210a68 R08: 0000200000e68000 R09: 0000000000000010 [ 413.629652][T10568] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 413.629662][T10568] R13: 0000000000000000 R14: 00007f7d623b5fa0 R15: 00007f7d624dfa28 [ 413.629677][T10568] [ 413.933401][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 414.005075][ T47] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 414.285912][ T47] usb 5-1: device descriptor read/8, error -71 [ 414.535233][ T47] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 414.556944][ T47] usb 5-1: device descriptor read/8, error -71 [ 414.575080][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 414.585902][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 414.635365][ T5886] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 414.656410][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 414.671218][ T47] usb usb5-port1: unable to enumerate USB device [ 414.735000][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 414.794944][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 414.805635][ T5886] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 414.820280][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.828984][ T5886] usb 3-1: Product: syz [ 414.836897][ T5886] usb 3-1: Manufacturer: syz [ 414.879861][ T5886] usb 3-1: SerialNumber: syz [ 414.902883][ T5886] usb 3-1: config 0 descriptor?? [ 414.918386][ T5886] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 415.698934][ T5890] usb 1-1: USB disconnect, device number 93 [ 416.953754][ T5886] usb 3-1: USB disconnect, device number 69