last executing test programs: 10.624264721s ago: executing program 1 (id=1632): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40005) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x41020000, 0x0, 0x0) 10.451113433s ago: executing program 1 (id=1635): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') writev(r0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_connect(0x1, 0xa62, &(0x7f0000000f40)={{0x12, 0x1, 0x300, 0x64, 0x67, 0x7, 0x20, 0x413c, 0x8102, 0x15d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa50, 0x4, 0x5, 0x81, 0x50, 0x1, [{{0x9, 0x4, 0x57, 0x5, 0x7, 0xd, 0x6d, 0x9f, 0x8, [@hid_hid={0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xf88}}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0xd0, "3ae0", 'AP'}]}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x29, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x0, 0x0, [@generic={0xb6, 0x6, "e024a3ded1ab52770eba6a66c5d9dc17dbab2c0b8c931b578764d094cf619b54f90b348508cf2fcf29ba7cda2b5257d7d511e26555e1203775ab4ad219596c4d88efe608f9cce9b7d9da86b2893c11e2c467f3eea5b7bf070a4edca28861209c7299f9f55661a77b22f2ad72091a75f0c59a2af43251087527a70b1ab49c46a31d6d772fc0fb2ff66e5c0e676716b5e226a54c6b57222e0b31a713a13cc30fd4a6576a67faea043965424fadf2d01f798be9de4c"}, @generic={0xf8, 0x11, "1422cf1e3af54f2778e4dd54e08eb0162e37ea737c4cc00e30736bc2d9ff48fe0ec00c0c10fd37c2fbd52f6f62464cbc94383c35c3e9d9864630df03486adcc3d30b9124c1c6806ab5b394d46169222de87101b01b92010c1d071ec31cdbd5dbb427be1f3d9e1ed54f49e5e51e4bdaee2c3608a2bf4ae82605bc8383b76356b776f813880e92d167f6e9d43fe794442312c72b784beceb103800da6a7d00fee384394caf21a9384dc9fc0c7d36c043438f89bf78bc6dccb1f8adc7e9c1bfe372ee47fe2548800bdcba0494f5bfde736302e33dfab3c5326f0d88338aace515ed6daadd06932860265327149f1586e89061dfd583e9c4"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x0, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x8, 0x8, 0x3e, [@generic={0x60, 0x31, "6636353e29c05d66155c32657a2972809a62a9800fc69f4c7b2614865f3ba7edccc6c0b76b77142c3c97c99dc1b8e1630487bddfb3d269f2cc1c5a210bce767b525a651edfca9fb3eae9a17bed69759e4e21ac2f267a84badd1f0c9deecb"}]}}, {{0x9, 0x5, 0x80, 0x9, 0x40, 0x56, 0x5, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0xc}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x0, 0x54, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}, @generic={0x3e, 0x22, "f4c6ce1fa21eb0684260364b88856d9817a9d5c1ea1e4d09b66bdee7bde3edf5ce0b2f08af0ba6d21b1512183ec0fda916690b8b107e8dd57f353396"}]}}]}}, {{0x9, 0x4, 0xc0, 0x9, 0x10, 0x4a, 0xaf, 0x5a, 0x1, [@generic={0xb0, 0xc, "a0c0006986d43849a8c7d583b3b79274e9042b7067a22e01df44fb9115a75a56a2cffaa29eab440eab67fb571e2933238316525463f6bc8e3a9f9ffae9c4da4f94c4fac41ceb7b7f8ec57923040ec6c972dfbcf58249adcd9d036d17f89104ac3454faf51006d9ce2d650893dc4a921b249ee52dc354e8e87cb3d5aa062c1762be0d64161cd8762dae4ba6d5df01ea9164e03135b9f9b1fb38b6e993b2f5c7604799e74de436f18e4c020b040dd6"}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0xb9, 0xf8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0xe}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x90, 0x9, 0x2, [@generic={0x50, 0x31, "e490617d287bde8f94cc905709b307767325916ed8b88bdca393dcf1a1df1cd11499db46e8b68b9a06ff3c0ef05883451d4f7d5b87099684a825b226e74e6508efa8d2e3924beb6aca141f99a8fa"}, @generic={0x15, 0x5, "e8a174f4866a7f926591a40087a67428d37c29"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x6, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x0, 0x7b}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x7e, 0x92, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x7f, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x8, 0xa}}, {{0x9, 0x5, 0x0, 0x1f, 0x400, 0x5, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xd5}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x5d, 0x4}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x5, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7, 0x8}, @generic={0x68, 0xe, "2b68122b3c532c9c8af63d18ee4a94cdf80a8666bac891375d863dd587eb31dca8b7dd30c68220b9eb9383b742c951c32dfe2a59b5bf974abb8c5bd2fb7edaf6b55a67497f362135a80c28d8b90eb438ee451f249d6af523bfa1619ae175d45a6ed31640de25"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1, 0x2, 0x7b}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x2, 0x2, 0x3}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x5, 0x3, 0x0, [@generic={0x75, 0x30, "ea98931a06e15da70f110136ed10564806f390a11d3fcfd2ed3a8351bb2c98233eed66429cfa4b3df022934f82a4fc82e84acf75d358eba4160d8b059fb7439735584a524b0fe7dc2d44f3d8be61acec0f14bdacc534b452f3600298522b009991108e56af46f2ffbe9ad8de482c39d037b3a7"}, @generic={0xca, 0x31, "0871c95460f455816c9c4579e5a6e9c911d3279d097be30a2de00e05aa0c3f6dd67170caf62788c4705c88526abf5b4b970108de39c69d5f66b6aebf7500f5f622c595f0d1bc9c0c97a67310e98188786598137da561c0f4240a758935f3b7cdcae8ed24dc752d425cd963b9fbf5e9d21c4ab330f3fe57eb02a588a67a814e0156c73c0357192a3aa89f50b6cd8f640e35eea1c474838cc4a00dd91370c08d91890a822a205e5739dd8c57265abf90c8bd1672e9dd10488847880fe8f2a23f11e7ec21215c2718f9"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x4, 0xb, 0x8, [@generic={0x7c, 0x30, "6b7a080f96cd6ffd848992b924bb0ba854c2d16371e27310ac271c80fd8cee3782517541233482830cbea48fe7c2ae695a0c3cf479e653da5ca88095231d26f3f4a00d66e1f7d784bfb9bf22f6995eda56f037f44edf39a5bbe6564afa3a66023f52b92320efeea59054e7c72301450b685b7f2ebf005dfddb83"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x64, 0x6, 0x8c, [@generic={0x3e, 0x6, "495df55ba4f8c61e1c0d229d7d374033d96d44871ce9d1166d4af01e70ba36efdcda3af4f7557e4519f88c0e8cf4ba89c33cc7228833325a2a74c549"}]}}]}}, {{0x9, 0x4, 0x2e, 0x2, 0x7, 0xfc, 0x22, 0xa5, 0x1, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0x0, 0xfd, [@generic={0xed, 0x9, "6968d8c43eefccc43b2ff0aeebebcc2fb46ff9fccae71154076d645b5b7c9defd8e93004450e5715f867cbb8db5710ef9fce9edcad4ee5fa5625d362ee195445c9d8701a54f7386092e29069954e106f68e9991d742ece802088b07058628ba3b4c8313a7f3d5a2aed754fe3fb12c0830c9de7ecf4316c53555d09d9e0e6b1d7aa35dd5a82b27d602ddaff394a0bdbac8a50a5bdf6bc604549ce9abbab784979b538f08a483f7fbaf194ca83bb28a4c9108e21c1bc52d2dc9b9a8f33d7616efa93f9f029a6a9a523e11b31f4725b55667245efb072955912d6b92631b215776bd261b7dbdd273af9cf1cd3"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x9, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0xe, 0x1, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x4, 0x7}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x8, 0x8, 0x2a}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0xa, 0x0, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x10}, @generic={0xd1, 0x21, "90185f58055fbff30a2dd246e92afcae2eb1af24827355a202c243b31c3b2fdc01639faae03a5ad7a2f0c8ca5699891c3b8092ddf9976ab7cefe9f2ce13c34d09666b52cf3de785fc35e53a171e06079b6d74972cac83f14741cf0e55bb40039d283def2963bef89caafc434d2bdae8388ba11b6f32cfb34afd289142693fdaeedf9dc52fad399bf04766fe2b91886d41c29361669803776bbbdee91982b88806d70e879d8a7a229d197b340ae784fd5d90bb0f98574b02a370195156edaa4538ab3034e81908f4d861fac5623641a"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x2, 0x92}}]}}, {{0x9, 0x4, 0x8d, 0xfa, 0x5, 0xff, 0x1, 0x33, 0x4, [], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x5, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x31, 0x88, 0x4, [@generic={0x5d, 0x23, "4ef6938f2b2d29833b6fe8a4472ed71ddafb20170c8574b75dedd128d5e5fd40b88d7473bc1af6182e94c05255947901556555ab4526045ca3a9668305503aa75311dbf884ee45f5156be8b4d26a8b1c2d2effef3d9a324ded268f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xb, 0x6, 0x76}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0x36, 0x0, 0x3, [@generic={0x9b, 0x11, "a4ee10c377536349b86e8b549d76a3d221c32ab9a5dc12bfb916ebf6a8dd306e30cc45ed6c542f9fc3c4f1e5894180dacf021eac21fe611b1538a40a4ecce5e5bdbc1165d0318c3f9bb6d51b0d99e2afebb58bc10d5766d60f3f6bb86cf43cbfe16ec97e284d54d8cc3d9a7afedb354f00ad4f98eeea2033b10db5d2cf43dc05ce8a20a38a6227767aa1a1ed6305c2ffa4583854ae17f19908"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x8, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x1ff}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x60, 0x9a, 0x6, 0x10, 0x9}, 0x35, &(0x7f0000000380)={0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x1, 0xc3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x7, 0x0, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xb1ff9b, 0xf, 0x3, [0xff000f, 0x0, 0xff00c0, 0x3f3f]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x452}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioprio_get$pid(0x1, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) bind$unix(r5, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) fanotify_mark(r6, 0x132, 0x40001002, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010102, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x400405, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x800, 0x0, 0x0, 0x10000000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d2, 0x33}, 0x2, @in=@multicast1, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0x5) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) sendfile(r9, r7, 0x0, 0x9) 7.256209993s ago: executing program 1 (id=1645): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f0080007000000020014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001080)={0x7fff, 0x0, 0x2100}) unshare(0x74060900) unshare(0x20000) 6.893110449s ago: executing program 1 (id=1647): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000540)={0x7, @sdr={0x32314d54, 0x7f}}) 6.756839327s ago: executing program 1 (id=1650): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x10, 0x8, 0x800000, 0x8, {{0x5, 0x4, 0x1, 0x18, 0x14, 0x68, 0x0, 0x9, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}}) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) read$char_usb(r5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x5, 0x130, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ce47e70e07"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xcf, 0xe, 0xd}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x7f, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xa, 0x64}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfd, 0x1, 0x1}}}}}}}]}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 5.114211227s ago: executing program 3 (id=1652): r0 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x823, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x20003, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x9, 0x10, 0x0, 0x40009}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000a00)) 4.860979549s ago: executing program 3 (id=1653): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000008010100000a2401000000020102132406000006000000000000000000000000000924030000000500000000000000f8431cfd0924030001030004030624050400fd0904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009051abcef"], 0x0) (async) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000008010100000a2401000000020102132406000006000000000000000000000000000924030000000500000000000000f8431cfd0924030001030004030624050400fd0904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009051abcef"], 0x0) 4.43296633s ago: executing program 4 (id=1657): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x100, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1d}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x68, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x39, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00cef"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x900b0000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.14664004s ago: executing program 4 (id=1658): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x100, 0x0, 0x7}, 0x6, 0x0, &(0x7f0000000040)={{0x3ff, 0x0, 0x2000000}}, 0x2000000, 0x0, 0x40}}) 4.064219255s ago: executing program 2 (id=1659): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x40, 0x48d, 0x8595, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000000)="3a15", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) shutdown(r2, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x5, '\x00\x00'}, @local=@item_4={0x3, 0x2, 0x0, "51cf4df0"}]}}, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa6, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x2, 0x3e}}}}}}}]}}, 0xfffffffffffffffc) 3.901623378s ago: executing program 4 (id=1660): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000}) 3.850420712s ago: executing program 4 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000001600), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x40000d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) syz_open_dev$media(0x0, 0x66, 0x180502) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) geteuid() ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) 3.653308053s ago: executing program 0 (id=1662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="e000000013000100000000008bcd36aa5f9eca00000000cd", @ANYRES32, @ANYBLOB="08000000ac0e98d6ffd9b1c11414aa080100006c597e2f672fda4385a9ed9e33864ad8a80eff51df60e2c2e2cd4038ef968f617efd"], 0xe0}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r3, 0x409, 0x7) writev(r3, &(0x7f00000017c0)=[{&(0x7f0000000000)="d119", 0x2}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) setns(r4, 0x8000000) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="0cb50d57f747f2c2c47b1692e7ce2e56a5cbaad484bcec9fa2291a0dd1f1c209061999230084", @ANYRES64=r2, @ANYRESHEX=r0], 0x20) 3.527129156s ago: executing program 0 (id=1663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r2) io_submit(0x0, 0x0, &(0x7f0000000500)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000005a0001"], 0x24}}, 0x0) 3.357025406s ago: executing program 0 (id=1664): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x71a22000) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e64000000000d0002e00700040006e7000014003500627f6e643000"/56], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) 3.175707942s ago: executing program 3 (id=1665): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x44) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x3b000000, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 3.147336268s ago: executing program 0 (id=1666): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x5, 0x5, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20041844) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40000009, r3, 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x161, 0x40000867, r3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x2, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x32, 0x8, 0x6c, 0x0, 0x0, 0x0, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bbd, 0x4, {0x6, 0x3c, 0x7, 0x5, 0x0, 0x1, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x90}, 0x1, 0x7}, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x400040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r7 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x9, 0x4, 0x0, @mcast1, @mcast2, 0x0, 0x7800, 0xffffff7f, 0x87}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x30, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xe91}], &(0x7f0000000100)='GPL\x00', 0x0, 0x84, &(0x7f0000000140)=""/132, 0x41100, 0x28, '\x00', r9, @fallback=0x8, r6, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xc, 0x8, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000480)=[{0x5, 0x5, 0x1, 0x6}, {0x4, 0x1, 0xb}, {0x4, 0x1, 0x7, 0x2}, {0x2, 0x2, 0x7, 0x2}, {0x1, 0x1, 0x7, 0x6}, {0x4, 0x5, 0xe, 0x1}, {0x0, 0x5, 0xa, 0x2}], 0x10, 0x8, @void, @value}, 0x94) 2.984836154s ago: executing program 3 (id=1667): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r5 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x0, "e89c5b0900f8ff0000000007000000000000005b00", 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000300)={0x28000003}) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) 2.959944071s ago: executing program 0 (id=1668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x19, 0x0, &(0x7f0000000000)) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x881, 0x0, 0x221, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000, 0x48) flock(r7, 0x2) 2.900904892s ago: executing program 4 (id=1669): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x40000000}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 2.798879242s ago: executing program 1 (id=1670): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x3475, 0x7}, {0x81, 0x5}]}, 0x14, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0x1, &(0x7f0000000240)=""/201, &(0x7f0000000000)=0xc9) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0x2a, 0xf, {0x7, 0x25, 0x1, 0x0, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x401}}}}}}}]}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0xffe5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0), 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x2, 0x0) 2.437053137s ago: executing program 4 (id=1671): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01ff7f000000fedbdf250700000018000180140002"], 0x2c}}, 0x40) (async) write$binfmt_aout(r0, &(0x7f0000000080)={{0xcc, 0x2, 0x1, 0x9d, 0x184, 0x686b, 0x385, 0x9}, "78cb712731a21be677d5506b13aeb4288181ad72aa20a9a52ac45cb0e6f5e7e31f03c076fd379ac65f2ccb686a5a7efe87ec8d1f68046b07c11dfbab91e1bdd3b68ef14364cb0c359938a1204a97c59e690bc41bb78827e97142ca045eae872cc6182024ccd78557ff3bf0c244db5abfdbc802ceeb16f2c57d9b2c58d074d11748ae846f6089ac74abb666f48ebb8c71a804d75b95076a52849bf1a718c2a27112300fde4a7eac5b613ccb3d3bdbe3c1c8a0326187eeaf9ee1fa2445afc9cd231806ae572ead0428d2a1c8a3194789e6a61377384ffab24d7156629caa8affec6868d40938", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x805) (async) syz_usb_connect(0x1, 0xc9, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x71, 0x6a, 0x55, 0x10, 0xaf0, 0x6721, 0x615a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x2, 0x2, 0xec, 0x1b, 0xc2, 0x0, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf4, 0x4, 0x0, 0x6, "d00d6d", "f8"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xa8, 0x1, 0x2, "232333c74106"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xab, 0x1002}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x95, 0x2, 0xb, 0xf9, "56a3f1713e22"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0xf000, 0x1, "f6a8d368b7b8a0"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "2093"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x1, 0x101, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x8001}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x40, 0x10}, @country_functional={0xe, 0x24, 0x7, 0x42, 0x2, [0x8, 0x1, 0x2, 0x1]}, @mbim={0xc, 0x24, 0x1b, 0xbaef, 0x734, 0x81, 0x9, 0x0, 0x6}, @acm={0x4}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0xfa, 0x3}}, {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x0, 0x21}}]}}]}}]}}, 0x0) 1.789079934s ago: executing program 0 (id=1672): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETA(0xffffffffffffffff, 0x402c542d, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000decd091a6d0b000007010000f8ffffffb702000008000000b70300000000000085000000a000000085000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x7e}], 0x18}, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x8000000, 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') sendmmsg$alg(r8, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc535", 0x38}, {&(0x7f0000001880)="371f6caa2f6c27730337ec033b03285189", 0x11}], 0x4}], 0x1, 0x840) recvmsg(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f0000000300)=""/161, 0xa1}], 0x2}, 0x40000001) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2}, {}, @raw8={"3ad5e4aa05fd1f1646e53f27"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {}], 0x70) 1.705005752s ago: executing program 2 (id=1673): syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c0002800500020089000000080003400000000008000440000000470800064000000002080001400000ed120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6, 0xff}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda63}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}]}, 0x44}}, 0x20000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x35, 0xffffffffffffffff) keyctl$describe(0x6, r4, &(0x7f00000020c0)=""/4093, 0xffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 1.072197394s ago: executing program 3 (id=1674): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000074d564b5033b457ca0966bb444f68041f9b5819e2a6ea72ca2f7d4041fab66f86b4829c51e7ffa27a53525124facd9d24457635db75063c98e9365fe47d3de6a91cfb1fe2f3f9b381238507519c40c23f1ea429409c3693011f77df8f39a7857d160b7f4b1cce0d585415d61dcc602e81775edc2eaf16b11a3f5b7b2945f7e39d9c749bab2adbec62d146c28b1b8bc14e16cf0fd61fb78004cfb0fed97af710899441c43367aa8741d92c1b55ad0b699ad412d874631b3c78e646e3b34438b0b950ebb471a9730fec6ccbf77967e6db1dfa8678d4efbc9e31506a5a81464197f750c157c3be5fc6342cda7d91b5ce7f7c791b2e97f4bd30c24c5d36220f9a7695c82991c513", @ANYRES16=r0]) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbb0000000000000001ef440001240000000000119078ac141400e000000100004e200010907802000a0000000000e597ce083111b6bb9ce9b43dcb9f9df04187662b19e73aa56f94694ffe96ec2de29bf434387de23fc90409b5e805fa938904b800a9676792560c1c19059ca577fdb7f07d13d97a6c43bd4169a7bedab56ed8134ab89eab0d8129a68ea40d04fb16aee6c871336b7d970bea40a50822c2dca6983e99af70172672aefa1f4554bc30af5290bc1fd4c73cf50364b7bd7c55fb59d98b3cd5061c3043dbb6a44ad31cd1632df8a299b87f6e646330b0b1c34dc091a5e0a708c0aa81d4a11594e13837458067f28a57202782c3b2838e06ab5c279ada162bb592f71edb18f44d40c98588931b28577ed91709449da60d"], 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x248b8, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 690.691238ms ago: executing program 2 (id=1675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000000b80)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_b, @device_a, @random="c766844774ee", {0x5, 0x4}, @value=@ver_80211n={0x0, 0xfe, 0x3}}, 0xd, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x3000000, 0x0, 0x20004000}, 0x8c0) 440.477752ms ago: executing program 2 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x408c4) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140)=0x2, 0x4) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) syz_open_dev$usbfs(&(0x7f00000001c0), 0x2, 0x280002) request_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffa) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x700, 0x10, 0x3, 0xfffffff8, {{0x30, 0x4, 0x0, 0x17, 0xc0, 0x66, 0x0, 0x7f, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x5, 0x7, "f51222718d"}, {0x2, 0xc, "1e02161201860e701ade"}]}, @timestamp={0x44, 0x28, 0xf8, 0x0, 0x5, [0x3, 0xfffffff3, 0x6, 0x997, 0x7, 0x5, 0x7d1b, 0x1, 0x80]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0x4, [0x8, 0x0, 0xdc, 0x33a4, 0x7fff]}, @timestamp_prespec={0x44, 0x34, 0xcc, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x5}, {@multicast1}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa6f}, {@private=0xa010102}, {@broadcast, 0x6}]}, @generic={0x82, 0x10, "7b88959633d626fbe45031ec17fb"}, @noop, @noop, @rr={0x7, 0xb, 0xc8, [@loopback, @multicast2]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0x9d, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000840)={@initdev, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0xb, 0x0, 0xfffffffc, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x700, 0x80, 0x5, 0x400}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'tunl0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x700, 0x10, 0x10, 0x9, {{0x1c, 0x4, 0x3, 0x2, 0x70, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast1, @local, {[@cipso={0x86, 0x3c, 0x0, [{0x7, 0x4, "5cae"}, {0x2, 0x2}, {0x6, 0x3, "ef"}, {0x1, 0xb, "6d3a4926565a718d0d"}, {0x47503477ae08dd96, 0xf, "725a8ddb4cd2391a6a064c02e7"}, {0x7, 0xc, "5a963f4c2e07728cff0b"}, {0x7, 0x4, "08ca"}, {0x5, 0x3, "ae"}]}, @ssrr={0x89, 0x17, 0xe7, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e80)={'gretap0\x00', &(0x7f0000000d00)={'sit0\x00', 0x0, 0x40, 0x7, 0x3, 0x1, {{0x4b, 0x4, 0x2, 0x5, 0x12c, 0x65, 0x0, 0x5, 0x6, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}, {[@cipso={0x86, 0x1f, 0x1, [{0x0, 0x12, "7fb3dee077bf7c604d15fc78c7bfe8df"}, {0x0, 0x7, "03dfc46741"}]}, @timestamp_addr={0x44, 0x2c, 0x5f, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@multicast1, 0x10}, {@multicast1, 0x2}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp={0x44, 0x24, 0xc3, 0x0, 0xc, [0xfffffffb, 0x9, 0x5c3, 0x8001, 0x9, 0xfffffffc, 0x6, 0x900000]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xf, "f6667110b31624c23a7ae1d01f"}, @ra={0x94, 0x4}, @cipso={0x86, 0x16, 0x2, [{0x6, 0x2}, {0x5, 0xe, "85b1ba73bb507f01613d6dc9"}]}, @timestamp_prespec={0x44, 0x54, 0x99, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x9}, {@local, 0xa}, {@multicast2, 0x8000}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x7f1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@rand_addr=0x64010102, 0x9}, {@empty, 0x100}, {@private=0xa010102, 0x6}, {@broadcast, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xb7, 0x1, 0xa, [{@rand_addr=0x64010102, 0x3}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x7fffffff}, {@remote, 0x7}]}, @noop]}}}}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000f80)={0x8f0, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7f, 0x19, 0x8, 0xb}, {0xd70e, 0x39, 0xf6, 0x1}, {0x5, 0x8, 0xbe, 0x7ff}, {0x8000, 0x3, 0x6}, {0x4, 0x7, 0x3, 0x7}, {0x6, 0x5, 0x4, 0x6d69}, {0x7, 0x6, 0xc5, 0x5}, {0xfff8, 0x40, 0x5}, {0x8, 0x80, 0x3, 0x5}]}}}]}}, {{0x8, 0x1, r5}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x120000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r11}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r13}, {0x4}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xf, 0x4, 0x4, 0x4}, {0xe9b, 0x0, 0x6, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200000}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x11e3, 0x10, 0xd, 0x1000}, {0x9d60, 0x4, 0x4, 0x180000}, {0x9, 0x4, 0x5b, 0xba6}, {0x3, 0x7, 0x8, 0x400}]}}}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r16 = socket$rds(0x15, 0x5, 0x0) getsockopt$SO_COOKIE(r16, 0x1, 0x39, &(0x7f0000001900), &(0x7f0000001940)=0x8) 335.825864ms ago: executing program 3 (id=1677): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x47bc, 0xfe, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) 263.462368ms ago: executing program 2 (id=1678): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x5, 0x5, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20041844) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40000009, r3, 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x161, 0x40000867, r3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x2, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x32, 0x8, 0x6c, 0x0, 0x0, 0x0, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bbd, 0x4, {0x6, 0x3c, 0x7, 0x5, 0x0, 0x1, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x90}, 0x1, 0x7}, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x400040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r7 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x9, 0x4, 0x0, @mcast1, @mcast2, 0x0, 0x7800, 0xffffff7f, 0x87}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x30, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xe91}], &(0x7f0000000100)='GPL\x00', 0x0, 0x84, &(0x7f0000000140)=""/132, 0x41100, 0x28, '\x00', r9, @fallback=0x8, r6, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xc, 0x8, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000480)=[{0x5, 0x5, 0x1, 0x6}, {0x4, 0x1, 0xb}, {0x4, 0x1, 0x7, 0x2}, {0x2, 0x2, 0x7, 0x2}, {0x1, 0x1, 0x7, 0x6}, {0x4, 0x5, 0xe, 0x1}, {0x0, 0x5, 0xa, 0x2}], 0x10, 0x8, @void, @value}, 0x94) 0s ago: executing program 2 (id=1679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, 0x0, 0x0, 0x20040000}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x8c}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) pipe(&(0x7f0000000080)) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) syz_open_dev$media(0x0, 0x8000009, 0x8800) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101901) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mlock(&(0x7f00005b1000/0x1000)=nil, 0x1000) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) kernel console output (not intermixed with test programs): 396.737438][ T30] audit: type=1326 audit(1749787264.318:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2058e929 code=0x7ffc0000 [ 396.772486][ T6333] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.782723][ T6333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.791712][ T30] audit: type=1326 audit(1749787264.318:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2058e929 code=0x7ffc0000 [ 396.886092][ T30] audit: type=1326 audit(1749787264.328:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f4e2058e929 code=0x7ffc0000 [ 397.329956][T10154] netlink: 'syz.0.1153': attribute type 21 has an invalid length. [ 397.457476][ T6333] usb 3-1: GET_CAPABILITIES returned 0 [ 397.463074][ T6333] usbtmc 3-1:16.0: can't read capabilities [ 397.483517][ T30] audit: type=1326 audit(1749787264.328:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2058e929 code=0x7ffc0000 [ 397.534897][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.607264][ T30] audit: type=1326 audit(1749787264.328:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10138 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2058e929 code=0x7ffc0000 [ 397.810788][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 397.821689][T10130] usbtmc 3-1:16.0: Unable to send data, error -71 [ 398.775081][T10166] dlm: no locking on control device [ 399.019461][ T10] usb 3-1: USB disconnect, device number 41 [ 399.704687][T10179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1162'. [ 399.747401][T10170] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1159'. [ 399.897316][ T6333] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 400.068795][ T6333] usb 4-1: Using ep0 maxpacket: 8 [ 400.083025][ T6333] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 400.112473][ T6333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.188563][ T6333] pvrusb2: Hardware description: Terratec Grabster AV400 [ 400.225177][ T6333] pvrusb2: ********** [ 400.239986][ T6333] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 400.269072][ T6333] pvrusb2: Important functionality might not be entirely working. [ 400.292013][ T6333] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 400.326176][ T6333] pvrusb2: ********** [ 400.375558][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.407691][ T2346] pvrusb2: Invalid write control endpoint [ 400.418352][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.458927][T10203] netlink: 161024 bytes leftover after parsing attributes in process `syz.4.1170'. [ 400.527747][T10203] net_ratelimit: 31 callbacks suppressed [ 400.527768][T10203] netlink: zone id is out of range [ 400.544616][ T10] usb 4-1: USB disconnect, device number 60 [ 400.645973][T10203] netlink: zone id is out of range [ 400.651184][T10203] netlink: zone id is out of range [ 400.667149][ T2346] pvrusb2: Invalid write control endpoint [ 400.673120][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 400.688284][T10203] netlink: zone id is out of range [ 400.694147][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 400.713577][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 400.713751][T10203] netlink: zone id is out of range [ 400.722556][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 400.755171][ T2346] pvrusb2: Device being rendered inoperable [ 400.773043][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 400.806608][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 400.813506][T10203] netlink: zone id is out of range [ 400.819404][T10203] netlink: zone id is out of range [ 400.837107][ T2346] pvrusb2: Attached sub-driver cx25840 [ 400.876682][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 400.888432][T10203] netlink: zone id is out of range [ 400.905804][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 400.925561][T10203] netlink: zone id is out of range [ 400.930744][T10203] netlink: zone id is out of range [ 401.453620][ T6333] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 401.519134][ T30] audit: type=1326 audit(1749787269.328:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.547100][ T30] audit: type=1326 audit(1749787269.328:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.593914][ T30] audit: type=1326 audit(1749787269.328:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.624182][ T30] audit: type=1326 audit(1749787269.348:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.658806][ T30] audit: type=1326 audit(1749787269.348:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.683876][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 401.691660][ T30] audit: type=1326 audit(1749787269.348:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.720151][ T30] audit: type=1326 audit(1749787269.468:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.753384][ T30] audit: type=1326 audit(1749787269.468:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.780501][ T30] audit: type=1326 audit(1749787269.468:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.832101][ T30] audit: type=1326 audit(1749787269.468:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.4.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 401.886035][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 401.904033][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 401.923719][ T6333] usb 3-1: config index 0 descriptor too short (expected 65535, got 77) [ 401.962840][ T6333] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 401.971895][ T24] usb 4-1: config 220 has no interface number 2 [ 401.978587][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 402.001196][ T6333] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 402.034494][ T6333] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 402.044434][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 402.053648][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 402.070855][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 402.086741][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 402.102303][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.120439][ T24] usb 4-1: Product: syz [ 402.127742][ T24] usb 4-1: Manufacturer: syz [ 402.132776][ T24] usb 4-1: SerialNumber: syz [ 402.184604][ T6333] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 402.206506][ T6333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.232443][ T6333] usb 3-1: Product: syz [ 402.240685][ T6333] usb 3-1: Manufacturer: syz [ 402.256871][ T6333] usb 3-1: SerialNumber: syz [ 402.386397][ T5928] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 402.391382][T10247] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 402.404353][ T24] usb 4-1: selecting invalid altsetting 0 [ 402.421170][ T24] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 402.443545][ T24] usb 4-1: No valid video chain found. [ 402.459125][ T24] usb 4-1: selecting invalid altsetting 0 [ 402.473735][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 402.475863][T10247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.502547][ T24] usb 4-1: USB disconnect, device number 61 [ 403.073815][ T6333] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 403.237549][ T6333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.254049][ T6333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.275832][ T6333] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 403.289224][ T6333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 403.300682][ T6333] usb 5-1: SerialNumber: syz [ 403.349025][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 403.537363][ T24] usb 4-1: device descriptor read/64, error -71 [ 403.813812][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 403.953572][ T24] usb 4-1: device descriptor read/64, error -71 [ 404.064036][ T24] usb usb4-port1: attempt power cycle [ 404.125850][ T10] usb 3-1: USB disconnect, device number 42 [ 404.423701][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 404.455905][ T24] usb 4-1: device descriptor read/8, error -71 [ 404.549743][T10269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.568761][T10269] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 404.734723][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 404.754144][ T24] usb 4-1: device descriptor read/8, error -71 [ 404.874290][ T24] usb usb4-port1: unable to enumerate USB device [ 405.141850][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.164424][ T5928] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 405.172187][ T5928] usb 2-1: can't read configurations, error -71 [ 405.408281][T10276] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 405.951647][ T6333] usb 5-1: 0:2 : does not exist [ 405.964119][ T6333] usb 5-1: unit 5 not found! [ 406.040441][ T6333] usb 5-1: USB disconnect, device number 44 [ 406.133570][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.134480][T10292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.319605][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 406.621496][T10298] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1200'. [ 406.754275][T10299] dlm: no locking on control device [ 407.649149][T10316] netlink: 'syz.4.1201': attribute type 21 has an invalid length. [ 407.682324][T10316] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1201'. [ 407.692454][T10316] netlink: 'syz.4.1201': attribute type 4 has an invalid length. [ 407.753686][T10316] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1201'. [ 408.074647][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 409.073676][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 409.276083][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 409.560341][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 409.569566][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 409.578637][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 411.561463][T10359] dlm: no locking on control device [ 411.818039][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.853210][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 411.894058][ T10] usb 5-1: can't read configurations, error -71 [ 414.059189][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 414.059209][ T30] audit: type=1326 audit(1749787281.868:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.132078][ T30] audit: type=1326 audit(1749787281.868:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.193177][ T30] audit: type=1326 audit(1749787281.908:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.265944][ T30] audit: type=1326 audit(1749787281.908:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.310065][ T30] audit: type=1326 audit(1749787281.908:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.360374][ T30] audit: type=1326 audit(1749787281.908:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.430104][ T30] audit: type=1326 audit(1749787281.908:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.533543][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 414.653228][T10402] dlm: no locking on control device [ 414.717111][ T30] audit: type=1326 audit(1749787281.908:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 414.771428][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 414.830118][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 414.873515][ T10] usb 2-1: config 0 has no interface number 0 [ 414.929598][ T30] audit: type=1326 audit(1749787281.908:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 415.049989][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 415.127671][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 415.155272][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 415.166401][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.241418][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 415.242003][ T30] audit: type=1326 audit(1749787281.908:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 415.313607][ T6333] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 415.355795][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.444659][ T10] usb 2-1: config 0 descriptor?? [ 415.483634][ T5965] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 415.500150][ T6333] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.520064][ T6333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.531219][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 415.581301][ T6333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.632836][ T6333] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.675614][ T5965] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 415.691190][ T5965] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 415.693592][ T6333] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.741462][ T5965] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 415.741729][ T6333] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.814012][ T5965] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 415.820548][ T6333] usb 5-1: Product: syz [ 415.860469][ T6333] usb 5-1: Manufacturer: syz [ 415.875308][ T5965] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 415.917033][ T5965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 415.927844][ T6333] cdc_wdm 5-1:1.0: skipping garbage [ 415.946091][ T5965] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 415.960098][ T5965] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 415.967891][ T6333] cdc_wdm 5-1:1.0: skipping garbage [ 415.982646][ T5965] usb 4-1: Product: syz [ 416.008690][ T6333] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 416.022218][ T5965] usb 4-1: Manufacturer: syz [ 416.035243][ T5965] usb 4-1: SerialNumber: syz [ 416.058508][ T6333] cdc_wdm 5-1:1.0: Unknown control protocol [ 416.072664][ T5965] usb 4-1: config 0 descriptor?? [ 416.090521][T10410] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 416.111491][ T5965] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 416.184435][ T5965] ldusb 4-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 416.220117][ T10] usb 5-1: USB disconnect, device number 47 [ 416.612548][T10415] netlink: 'syz.2.1231': attribute type 2 has an invalid length. [ 416.985099][ T6333] usb 2-1: USB disconnect, device number 48 [ 417.020005][ T6333] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 417.830643][T10434] dlm: no locking on control device [ 418.498200][ T10] usb 4-1: USB disconnect, device number 66 [ 418.546406][ T10] ldusb 4-1:0.0: LD USB Device #2 now disconnected [ 420.723587][ T6333] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 420.883494][ T6333] usb 3-1: Using ep0 maxpacket: 32 [ 420.891895][ T6333] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 420.900722][ T6333] usb 3-1: config 0 has no interface number 0 [ 420.907245][ T6333] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 420.918973][ T6333] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 420.932298][ T6333] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 421.028012][ T6333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.246640][ T6333] usb 3-1: Product: syz [ 421.250890][ T6333] usb 3-1: Manufacturer: syz [ 421.268293][ T6333] usb 3-1: SerialNumber: syz [ 421.280545][ T6333] usb 3-1: config 0 descriptor?? [ 421.296063][T10457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.303784][ T5928] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 421.324990][ T6333] smsc95xx v2.0.0 [ 421.473556][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 421.480964][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 421.491291][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 421.508248][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 421.529371][T10457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.677267][ T5928] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 422.130131][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.147514][ T5928] usb 5-1: Product: syz [ 422.151979][ T5928] usb 5-1: Manufacturer: syz [ 422.160222][ T5928] usb 5-1: SerialNumber: syz [ 422.235788][ T5928] usb 5-1: config 0 descriptor?? [ 422.253654][ T6333] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 422.276373][ T6333] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 422.309439][ T5928] usb 5-1: no audio or video endpoints found [ 422.322607][ T6333] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 422.344649][ T6333] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 422.408806][ T6333] usb 3-1: USB disconnect, device number 43 [ 422.528255][ T5965] usb 5-1: USB disconnect, device number 48 [ 422.961154][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 423.035597][T10499] bridge2: port 1(ip6gretap1) entered blocking state [ 423.042823][T10499] bridge2: port 1(ip6gretap1) entered disabled state [ 423.054660][T10499] ip6gretap1: entered allmulticast mode [ 423.063090][T10499] ip6gretap1: entered promiscuous mode [ 423.100863][T10504] veth3: entered promiscuous mode [ 423.106988][T10504] bridge2: port 2(veth3) entered blocking state [ 423.113708][T10504] bridge2: port 2(veth3) entered disabled state [ 423.124915][T10504] veth3: entered allmulticast mode [ 423.444946][ T5965] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 423.623648][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1257'. [ 423.726166][ T5965] usb 4-1: device descriptor read/64, error -71 [ 424.264209][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 424.523568][ T5965] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 424.623620][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 424.683749][ T5965] usb 4-1: device descriptor read/64, error -71 [ 424.794088][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.812244][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.855044][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.864671][ T5965] usb usb4-port1: attempt power cycle [ 424.903523][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.942176][ T10] usb 2-1: Product: syz [ 424.947360][ T10] usb 2-1: Manufacturer: syz [ 424.951978][ T10] usb 2-1: SerialNumber: syz [ 425.213728][ T5965] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 425.225016][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1259'. [ 425.244819][ T5965] usb 4-1: device descriptor read/8, error -71 [ 425.264858][T10524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1259'. [ 425.294709][ T10] usb 2-1: 0:2 : does not exist [ 425.308789][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 425.408648][ T10] usb 2-1: USB disconnect, device number 49 [ 425.503949][ T5965] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 425.520761][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.595016][ T5965] usb 4-1: device descriptor read/8, error -71 [ 425.713968][ T5965] usb usb4-port1: unable to enumerate USB device [ 427.040676][T10561] delete_channel: no stack [ 427.293008][ T6333] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 427.370772][T10569] netlink: 'syz.3.1269': attribute type 12 has an invalid length. [ 427.557755][ T6333] usb 5-1: config 0 has no interfaces? [ 427.591417][ T6333] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 427.609087][ T6333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.655653][ T6333] usb 5-1: Product: syz [ 427.694016][ T6333] usb 5-1: Manufacturer: syz [ 427.710811][ T6333] usb 5-1: SerialNumber: syz [ 427.733220][ T6333] usb 5-1: config 0 descriptor?? [ 428.127053][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 428.127074][ T30] audit: type=1326 audit(1749787295.938:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 428.261917][ T30] audit: type=1326 audit(1749787295.938:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 428.298404][T10582] net_ratelimit: 32 callbacks suppressed [ 428.298522][T10582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.362162][ T30] audit: type=1326 audit(1749787295.938:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 428.442870][ T30] audit: type=1326 audit(1749787295.978:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 428.533900][ T30] audit: type=1326 audit(1749787295.978:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.1.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 428.763573][ T6333] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 428.956100][ T6333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.991300][ T6333] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 429.035097][ T6333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.077845][ T6333] usb 2-1: config 0 descriptor?? [ 429.507457][ T6333] elecom 0003:056E:011C.000B: unknown main item tag 0x0 [ 429.656614][ T6333] elecom 0003:056E:011C.000B: item fetching failed at offset 4/7 [ 429.779976][ T6333] elecom 0003:056E:011C.000B: probe with driver elecom failed with error -22 [ 430.252254][ T10] usb 5-1: USB disconnect, device number 49 [ 430.979228][T10631] netlink: 'syz.0.1291': attribute type 15 has an invalid length. [ 430.987825][T10631] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1291'. [ 431.007331][T10631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1291'. [ 431.418390][ T6333] usb 2-1: USB disconnect, device number 50 [ 431.656945][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1297'. [ 431.713657][ T10] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 431.868500][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 431.880426][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.899957][ T10] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 431.915381][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.932633][ T10] usb 5-1: Product: syz [ 431.938985][ T10] usb 5-1: Manufacturer: syz [ 431.946629][ T10] usb 5-1: SerialNumber: syz [ 431.961379][ T10] usb 5-1: config 0 descriptor?? [ 432.178984][T10640] xt_hashlimit: max too large, truncated to 1048576 [ 432.191738][T10640] No such timeout policy "syz1" [ 432.205816][T10640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.227802][T10640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.299294][T10653] fuse: Bad value for 'fd' [ 432.307680][T10653] fuse: Bad value for 'rootmode' [ 432.568596][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 432.833632][ T6333] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 433.005559][ T6333] usb 3-1: Using ep0 maxpacket: 8 [ 433.012870][ T6333] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 433.025906][ T6333] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 433.034295][ T5965] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 433.087132][ T6333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 433.111127][ T6333] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.148928][ T6333] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 433.159395][ T6333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.170949][ T6333] usb 3-1: Product: syz [ 433.180970][ T6333] usb 3-1: Manufacturer: syz [ 433.190839][ T6333] usb 3-1: SerialNumber: syz [ 433.207613][ T6333] usb 3-1: config 0 descriptor?? [ 433.223739][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 433.489854][T10673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1308'. [ 433.651083][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.684236][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.800386][ T6333] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 433.845598][ T6333] usb 3-1: USB disconnect, device number 44 [ 434.610600][ T10] powermate: Expected payload of 3--6 bytes, found 13 bytes! [ 434.658923][ T10] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 434.764861][ C0] powermate: config urb returned -71 [ 434.770760][ C0] powermate: config urb returned -71 [ 434.776286][ C0] powermate: config urb returned -71 [ 434.783497][ C0] powermate: config urb returned -71 [ 434.796190][ T10] usb 5-1: USB disconnect, device number 50 [ 434.802193][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 435.310124][T10696] tipc: Can't bind to reserved service type 2 [ 435.563972][ T6333] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 435.751956][ T6333] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.925400][ T6333] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.932367][ T6333] usb 3-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 435.941537][ T6333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.955385][ T6333] usb 3-1: config 0 descriptor?? [ 436.130903][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.174491][ T5965] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 436.182151][ T5965] usb 2-1: can't read configurations, error -71 [ 436.375713][ T6333] hid-generic 0003:0463:1215.000C: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.2-1/input0 [ 436.760032][ T6333] usb 3-1: USB disconnect, device number 45 [ 436.782154][T10709] veth3: entered promiscuous mode [ 437.011083][T10718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1321'. [ 437.364980][T10723] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 437.420429][T10723] geneve2: entered allmulticast mode [ 437.488771][T10724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.085440][T10730] PKCS7: Unknown OID: [5] (bad) [ 438.097403][T10728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 438.127571][T10730] PKCS7: Only support pkcs7_signedData type [ 438.637367][T10736] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1324'. [ 439.568242][T10761] ipvlan1: entered promiscuous mode [ 439.574278][T10761] ipvlan1: entered allmulticast mode [ 439.579767][T10761] veth0_vlan: entered allmulticast mode [ 439.988852][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.999730][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.082053][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 440.984390][ T6333] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 441.123606][ T6333] usb 2-1: device descriptor read/64, error -71 [ 441.377526][ T6333] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 441.575964][ T6333] usb 2-1: device descriptor read/64, error -71 [ 441.684352][ T6333] usb usb2-port1: attempt power cycle [ 442.054551][ T6333] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 442.102243][ T6333] usb 2-1: device descriptor read/8, error -71 [ 442.243714][ T24] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 442.292077][T10830] dlm: no locking on control device [ 442.353544][ T6333] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 442.374226][ T6333] usb 2-1: device descriptor read/8, error -71 [ 442.415140][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 442.426696][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30364, setting to 64 [ 442.439456][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 442.448725][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 442.456909][ T24] usb 5-1: SerialNumber: syz [ 442.469907][T10822] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.484296][ T6333] usb usb2-port1: unable to enumerate USB device [ 442.690931][T10822] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 443.209129][T10841] loop3: detected capacity change from 0 to 1 [ 443.295122][T10841] Dev loop3: unable to read RDB block 1 [ 443.301106][T10841] loop3: AHDI p1 [ 443.465242][T10841] loop3: partition table partially beyond EOD, truncated [ 444.919514][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 444.950698][ T24] usb-storage 5-1:1.0: USB Mass Storage device detected [ 445.025076][ T24] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 445.065933][ T24] scsi host1: usb-storage 5-1:1.0 [ 445.120778][ T24] usb 5-1: USB disconnect, device number 51 [ 445.703928][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 445.892636][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 445.918419][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 445.929973][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.983493][ T24] usb 5-1: Product: syz [ 445.987734][ T24] usb 5-1: Manufacturer: syz [ 446.012610][ T24] usb 5-1: SerialNumber: syz [ 446.409426][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 446.521102][T10886] bridge2: port 1(ip6gretap2) entered blocking state [ 446.580823][T10886] bridge2: port 1(ip6gretap2) entered disabled state [ 446.635295][T10886] ip6gretap2: entered allmulticast mode [ 446.683698][T10886] ip6gretap2: entered promiscuous mode [ 446.772495][T10888] veth5: entered promiscuous mode [ 447.029285][T10894] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1373'. [ 447.745102][T10854] delete_channel: no stack [ 448.106176][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.280684][ T24] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 448.331067][ T24] usb 5-1: USB disconnect, device number 52 [ 448.402074][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.667018][ T5928] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 448.836547][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.856006][ T5928] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 448.881221][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.910301][ T5928] usb 4-1: config 0 descriptor?? [ 448.931362][ T5928] usb 4-1: bad CDC descriptors [ 448.941186][ T30] audit: type=1800 audit(1749787316.748:359): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1379" name="file1" dev="tmpfs" ino=1404 res=0 errno=0 [ 449.160791][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.174014][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.987658][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 450.024067][ T5928] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 450.069704][T10947] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1389'. [ 450.194894][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 450.210651][ T5928] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 450.228340][ T5928] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 450.253808][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1391'. [ 450.265440][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.279560][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 450.289132][ T5928] usb 2-1: config 0 has no interface number 0 [ 450.312131][ T5928] usb 2-1: config 0 interface 6 has no altsetting 1 [ 450.341771][ T5928] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=2b.ac [ 450.381320][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.408835][ T5928] usb 2-1: config 0 descriptor?? [ 450.639628][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.675736][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.686485][ T5928] usb 2-1: USB disconnect, device number 57 [ 451.575269][ T5965] usb 4-1: USB disconnect, device number 71 [ 451.742960][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 451.764399][T10977] macvtap1: entered promiscuous mode [ 451.769806][T10977] dummy0: entered promiscuous mode [ 451.782357][T10977] macvtap1: entered allmulticast mode [ 451.787891][T10977] dummy0: entered allmulticast mode [ 451.841355][T10983] dummy0: left allmulticast mode [ 451.851886][T10983] dummy0: left promiscuous mode [ 452.453113][T11000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1407'. [ 452.535973][T11002] input: syz1 as /devices/virtual/input/input29 [ 452.938140][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 452.961005][T11013] FAULT_INJECTION: forcing a failure. [ 452.961005][T11013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.997249][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.3.1411 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 452.997282][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.997297][T11013] Call Trace: [ 452.997306][T11013] [ 452.997315][T11013] dump_stack_lvl+0x189/0x250 [ 452.997356][T11013] ? __pfx____ratelimit+0x10/0x10 [ 452.997384][T11013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.997408][T11013] ? __pfx__printk+0x10/0x10 [ 452.997433][T11013] ? fs_reclaim_acquire+0x7d/0x100 [ 452.997458][T11013] should_fail_ex+0x414/0x560 [ 452.997482][T11013] prepare_alloc_pages+0x213/0x610 [ 452.997506][T11013] __alloc_frozen_pages_noprof+0x123/0x370 [ 452.997529][T11013] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.997555][T11013] ? policy_nodemask+0x27c/0x720 [ 452.997575][T11013] alloc_pages_mpol+0x232/0x4a0 [ 452.997594][T11013] vma_alloc_folio_noprof+0xe4/0x200 [ 452.997612][T11013] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 452.997637][T11013] folio_prealloc+0x30/0x180 [ 452.997654][T11013] do_wp_page+0x1231/0x5800 [ 452.997695][T11013] ? __pfx_do_wp_page+0x10/0x10 [ 452.997715][T11013] ? do_raw_spin_lock+0x121/0x290 [ 452.997735][T11013] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 452.997760][T11013] __handle_mm_fault+0x1144/0x5620 [ 452.997798][T11013] ? __pfx___handle_mm_fault+0x10/0x10 [ 452.997834][T11013] ? find_vma+0xe7/0x160 [ 452.997847][T11013] ? __pfx_find_vma+0x10/0x10 [ 452.997859][T11013] ? __up_read+0x280/0x680 [ 452.997876][T11013] handle_mm_fault+0x40a/0x8e0 [ 452.997908][T11013] do_user_addr_fault+0x764/0x1390 [ 452.997940][T11013] exc_page_fault+0x76/0xf0 [ 452.997965][T11013] asm_exc_page_fault+0x26/0x30 [ 452.997979][T11013] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 452.997998][T11013] Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f7 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 452.998011][T11013] RSP: 0018:ffffc9001dbffc88 EFLAGS: 00050206 [ 452.998025][T11013] RAX: ffffffff84c15101 RBX: 0000000000008000 RCX: 0000000000000040 [ 452.998035][T11013] RDX: 0000000000000000 RSI: ffff88807e5cffc0 RDI: 0000200000008000 [ 452.998045][T11013] RBP: ffffc9001dbffe60 R08: ffff88807e5cffff R09: 1ffff1100fcb9fff [ 452.998056][T11013] R10: dffffc0000000000 R11: ffffed100fcba000 R12: 0000200000008040 [ 452.998066][T11013] R13: 00007ffffffff000 R14: ffff88807e5c8000 R15: 0000200000000040 [ 452.998082][T11013] ? _copy_to_user+0x31/0xb0 [ 452.998103][T11013] _copy_to_user+0x8a/0xb0 [ 452.998119][T11013] video_usercopy+0xd83/0x14f0 [ 452.998144][T11013] ? __pfx___video_do_ioctl+0x10/0x10 [ 452.998160][T11013] ? __pfx_video_usercopy+0x10/0x10 [ 452.998185][T11013] ? __fget_files+0x2a/0x420 [ 452.998204][T11013] ? __fget_files+0x2a/0x420 [ 452.998219][T11013] ? __fget_files+0x3a0/0x420 [ 452.998238][T11013] v4l2_ioctl+0x18a/0x1e0 [ 452.998258][T11013] ? __pfx_v4l2_ioctl+0x10/0x10 [ 452.998273][T11013] __se_sys_ioctl+0xf9/0x170 [ 452.998318][T11013] do_syscall_64+0xfa/0x3b0 [ 452.998331][T11013] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.998354][T11013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.998368][T11013] ? clear_bhb_loop+0x60/0xb0 [ 452.998386][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.998400][T11013] RIP: 0033:0x7f4e2058e929 [ 452.998413][T11013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.998428][T11013] RSP: 002b:00007f4e2145a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.998443][T11013] RAX: ffffffffffffffda RBX: 00007f4e207b5fa0 RCX: 00007f4e2058e929 [ 452.998453][T11013] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003 [ 452.998463][T11013] RBP: 00007f4e2145a090 R08: 0000000000000000 R09: 0000000000000000 [ 452.998472][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.998480][T11013] R13: 0000000000000000 R14: 00007f4e207b5fa0 R15: 00007f4e208dfa28 [ 452.998502][T11013] [ 453.976103][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 454.081578][T11031] veth5: entered promiscuous mode [ 454.263962][ T5928] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 454.415124][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 454.449731][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 454.504773][ T5928] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 454.517529][ T5928] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 454.531276][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.541970][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.553307][ T5928] usb 5-1: Product: syz [ 454.564120][ T5928] usb 5-1: Manufacturer: syz [ 454.568747][ T5928] usb 5-1: SerialNumber: syz [ 454.583697][T11034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 454.808594][T11034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 454.826782][T11034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.094454][ T6333] hid (null): unknown global tag 0xc [ 455.100837][ T6333] hid (null): unknown global tag 0xe [ 455.120149][ T6333] hid (null): report_id 0 is invalid [ 455.147140][ T6333] hid-generic 0800:0001:0003.000D: unknown global tag 0xc [ 455.173584][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 455.199837][ T6333] hid-generic 0800:0001:0003.000D: item 0 2 1 12 parsing failed [ 455.232742][ T6333] hid-generic 0800:0001:0003.000D: probe with driver hid-generic failed with error -22 [ 455.338434][ T24] usb 3-1: config 0 has no interfaces? [ 455.368904][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 455.423494][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.431971][ T24] usb 3-1: Product: syz [ 455.443895][ T24] usb 3-1: Manufacturer: syz [ 455.455356][ T24] usb 3-1: SerialNumber: syz [ 455.471187][ T24] usb 3-1: config 0 descriptor?? [ 455.665707][T11034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.713746][T11034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.789828][T11053] loop8: detected capacity change from 0 to 7 [ 455.845192][T11053] Dev loop8: unable to read RDB block 7 [ 455.888133][T11053] loop8: unable to read partition table [ 455.894468][T11053] loop8: partition table beyond EOD, truncated [ 455.941198][T11053] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 455.941198][T11053] ) failed (rc=-5) [ 455.983640][ T5928] cdc_ncm 5-1:1.0: failed to get mac address [ 456.008114][ T5928] cdc_ncm 5-1:1.0: bind() failure [ 456.058109][ T5928] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 456.100291][ T5928] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 456.129135][ T5928] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 456.143741][ T5965] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 456.145381][ T5928] usb 5-1: USB disconnect, device number 53 [ 456.159089][ T10] usb 3-1: USB disconnect, device number 46 [ 456.325687][ T5965] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 456.336276][ T5965] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 456.346079][ T5965] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 456.355732][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.530883][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 456.584368][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.612232][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.709813][T11063] netlink: 'syz.3.1430': attribute type 32 has an invalid length. [ 456.717925][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 456.754996][T11063] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 457.454212][ T5928] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 457.613565][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 457.629280][ T5928] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 457.640026][ T5928] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 457.654705][ T5928] usb 4-1: config 4 has no interface number 0 [ 457.661204][ T5928] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.679146][ T5928] usb 4-1: config 4 interface 51 has no altsetting 0 [ 457.692691][ T5928] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 457.703791][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.711964][ T5928] usb 4-1: Product: syz [ 457.717769][ T5928] usb 4-1: Manufacturer: syz [ 457.724953][ T5928] usb 4-1: SerialNumber: syz [ 457.772412][ T5928] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 457.926949][T11080] FAULT_INJECTION: forcing a failure. [ 457.926949][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 457.947303][T11080] CPU: 0 UID: 0 PID: 11080 Comm: syz.0.1435 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 457.947327][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.947337][T11080] Call Trace: [ 457.947343][T11080] [ 457.947350][T11080] dump_stack_lvl+0x189/0x250 [ 457.947378][T11080] ? __pfx____ratelimit+0x10/0x10 [ 457.947402][T11080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.947426][T11080] ? __pfx__printk+0x10/0x10 [ 457.947453][T11080] should_fail_ex+0x414/0x560 [ 457.947477][T11080] should_failslab+0xa8/0x100 [ 457.947495][T11080] __kmalloc_cache_noprof+0x70/0x3d0 [ 457.947510][T11080] ? sctp_add_bind_addr+0x8c/0x370 [ 457.947529][T11080] sctp_add_bind_addr+0x8c/0x370 [ 457.947548][T11080] sctp_copy_local_addr_list+0x30b/0x4e0 [ 457.947567][T11080] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 457.947582][T11080] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 457.947599][T11080] ? sctp_v6_is_any+0x64/0x80 [ 457.947616][T11080] ? sctp_copy_one_addr+0x93/0x360 [ 457.947634][T11080] sctp_bind_addr_copy+0xb3/0x3c0 [ 457.947650][T11080] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 457.947675][T11080] sctp_connect_new_asoc+0x2e0/0x690 [ 457.947697][T11080] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 457.947715][T11080] ? __local_bh_enable_ip+0x12d/0x1c0 [ 457.947743][T11080] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 457.947764][T11080] ? security_sctp_bind_connect+0x7e/0x2e0 [ 457.947783][T11080] sctp_sendmsg+0x155c/0x2810 [ 457.947810][T11080] ? __pfx_sctp_sendmsg+0x10/0x10 [ 457.947831][T11080] ? aa_sk_perm+0x81e/0x950 [ 457.947852][T11080] ? __pfx_aa_sk_perm+0x10/0x10 [ 457.947872][T11080] ? sock_rps_record_flow+0x19/0x410 [ 457.947889][T11080] ? inet_sendmsg+0x2f4/0x370 [ 457.947906][T11080] __sock_sendmsg+0x19c/0x270 [ 457.947932][T11080] ____sys_sendmsg+0x52d/0x830 [ 457.947956][T11080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.947983][T11080] ? import_iovec+0x74/0xa0 [ 457.948001][T11080] ___sys_sendmsg+0x21f/0x2a0 [ 457.948022][T11080] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.948077][T11080] ? __fget_files+0x2a/0x420 [ 457.948093][T11080] ? __fget_files+0x3a0/0x420 [ 457.948117][T11080] __sys_sendmmsg+0x227/0x430 [ 457.948142][T11080] ? __pfx___sys_sendmmsg+0x10/0x10 [ 457.948160][T11080] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 457.948195][T11080] ? ksys_write+0x22a/0x250 [ 457.948211][T11080] ? __pfx_ksys_write+0x10/0x10 [ 457.948223][T11080] ? rcu_is_watching+0x15/0xb0 [ 457.948265][T11080] __x64_sys_sendmmsg+0xa0/0xc0 [ 457.948298][T11080] do_syscall_64+0xfa/0x3b0 [ 457.948317][T11080] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.948350][T11080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.948365][T11080] ? clear_bhb_loop+0x60/0xb0 [ 457.948383][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.948397][T11080] RIP: 0033:0x7f341e18e929 [ 457.948411][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.948423][T11080] RSP: 002b:00007f341ef2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 457.948439][T11080] RAX: ffffffffffffffda RBX: 00007f341e3b5fa0 RCX: 00007f341e18e929 [ 457.948449][T11080] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 457.948458][T11080] RBP: 00007f341ef2b090 R08: 0000000000000000 R09: 0000000000000000 [ 457.948467][T11080] R10: 000000003404c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 457.948476][T11080] R13: 0000000000000000 R14: 00007f341e3b5fa0 R15: 00007f341e4dfa28 [ 457.948498][T11080] [ 458.805088][ T5965] usb 2-1: USB disconnect, device number 58 [ 459.443593][ T5838] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 459.843683][ T5928] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 459.961134][ T5838] usb 3-1: config 0 has no interfaces? [ 460.035780][ T5838] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.045182][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.053319][ T5838] usb 3-1: Product: syz [ 460.059608][ T5928] usb 2-1: config 0 has no interfaces? [ 460.071938][ T5838] usb 3-1: Manufacturer: syz [ 460.090037][ T5838] usb 3-1: SerialNumber: syz [ 460.123197][ T5838] usb 3-1: config 0 descriptor?? [ 460.138791][ T5928] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.152013][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.163918][ T5928] usb 2-1: Product: syz [ 460.168265][ T5928] usb 2-1: Manufacturer: syz [ 460.172991][ T5928] usb 2-1: SerialNumber: syz [ 460.209175][ T5928] usb 2-1: config 0 descriptor?? [ 460.345007][ T5838] usb 4-1: USB disconnect, device number 72 [ 460.422224][ T5965] usb 2-1: USB disconnect, device number 59 [ 460.635296][T11116] macsec0: entered allmulticast mode [ 460.658668][T11118] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 460.963511][ T5838] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 461.045923][ T30] audit: type=1326 audit(1749787328.858:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.053783][ T5928] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 461.084362][ T30] audit: type=1326 audit(1749787328.888:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.115392][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 461.127378][ T30] audit: type=1326 audit(1749787328.898:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.149764][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.157080][ T30] audit: type=1326 audit(1749787328.898:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.179691][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 461.191517][ T5838] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 461.200665][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.215097][ T5838] usb 4-1: config 0 descriptor?? [ 461.265145][ T30] audit: type=1326 audit(1749787328.898:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.287620][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.331082][ T30] audit: type=1326 audit(1749787328.918:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.353477][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.362266][ T30] audit: type=1326 audit(1749787328.918:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.384672][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.392200][ T5928] usb 5-1: config 0 has no interfaces? [ 461.402311][ T30] audit: type=1326 audit(1749787328.918:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.1.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 461.449954][ T5838] ath6kl: Failed to submit usb control message: -71 [ 461.462822][ T5838] ath6kl: unable to send the bmi data to the device: -71 [ 461.471090][ T5838] ath6kl: Unable to send get target info: -71 [ 461.493852][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 461.501659][ T5838] ath6kl: Failed to init ath6kl core: -71 [ 461.525713][ T5838] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 461.534801][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.560005][ T5928] usb 5-1: Product: syz [ 461.564574][ T5838] usb 4-1: USB disconnect, device number 73 [ 461.570697][ T5928] usb 5-1: Manufacturer: syz [ 461.582731][ T5928] usb 5-1: SerialNumber: syz [ 461.610995][ T5928] usb 5-1: config 0 descriptor?? [ 462.108988][ T5928] usb 3-1: USB disconnect, device number 47 [ 462.473735][ T5838] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 462.603504][ T5965] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 462.633775][ T5838] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 462.642059][ T5838] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 462.680047][ T5838] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 462.751642][ T5838] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 462.762896][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 462.782011][ T5965] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 462.822159][ T5838] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 462.835552][ T5965] usb 3-1: can't read configurations, error -61 [ 462.858974][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 462.874905][ T5838] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 462.886012][ T5838] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 462.940935][ T5838] usb 4-1: Product: syz [ 462.962316][ T5838] usb 4-1: Manufacturer: syz [ 462.973764][ T5965] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 463.001493][ T5838] usb 4-1: SerialNumber: syz [ 463.131943][ T5838] usb 4-1: config 0 descriptor?? [ 463.145361][T11141] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 463.159344][ T5838] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 463.186500][ T5838] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 463.222803][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 463.247099][ T5965] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 463.261800][ T5965] usb 3-1: can't read configurations, error -61 [ 463.278158][ T5965] usb usb3-port1: attempt power cycle [ 463.355043][T11151] FAULT_INJECTION: forcing a failure. [ 463.355043][T11151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.385849][T11151] CPU: 0 UID: 0 PID: 11151 Comm: syz.0.1456 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 463.385879][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.385889][T11151] Call Trace: [ 463.385895][T11151] [ 463.385902][T11151] dump_stack_lvl+0x189/0x250 [ 463.385930][T11151] ? __pfx____ratelimit+0x10/0x10 [ 463.385954][T11151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.385978][T11151] ? __pfx__printk+0x10/0x10 [ 463.386002][T11151] should_fail_ex+0x414/0x560 [ 463.386027][T11151] strncpy_from_user+0x36/0x290 [ 463.386048][T11151] getname_flags+0xf3/0x540 [ 463.386069][T11151] __x64_sys_renameat2+0xba/0xe0 [ 463.386087][T11151] do_syscall_64+0xfa/0x3b0 [ 463.386100][T11151] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.386122][T11151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.386137][T11151] ? clear_bhb_loop+0x60/0xb0 [ 463.386154][T11151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.386169][T11151] RIP: 0033:0x7f341e18e929 [ 463.386182][T11151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.386195][T11151] RSP: 002b:00007f341ef2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 463.386211][T11151] RAX: ffffffffffffffda RBX: 00007f341e3b5fa0 RCX: 00007f341e18e929 [ 463.386222][T11151] RDX: ffffffffffffff9c RSI: 0000200000001100 RDI: ffffffffffffff9c [ 463.386233][T11151] RBP: 00007f341ef2b090 R08: 0000000000000005 R09: 0000000000000000 [ 463.386242][T11151] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 463.386251][T11151] R13: 0000000000000000 R14: 00007f341e3b5fa0 R15: 00007f341e4dfa28 [ 463.386273][T11151] [ 463.794698][ T5838] usb 5-1: USB disconnect, device number 54 [ 463.833558][ T5965] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 463.864313][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 463.885804][ T5965] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 463.903479][ T5965] usb 3-1: can't read configurations, error -61 [ 464.043668][ T5965] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 464.194592][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 464.204700][ T5965] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 464.212442][ T5965] usb 3-1: can't read configurations, error -61 [ 464.237657][ T5965] usb usb3-port1: unable to enumerate USB device [ 465.093654][ T5838] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 465.333614][ T5965] usb 4-1: USB disconnect, device number 74 [ 465.346144][ T5965] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 465.367672][ T5838] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.382374][ T5838] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 465.402022][ T5838] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 465.415748][ T5838] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 465.435943][ T5838] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.442727][T11168] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 465.459413][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.467682][ T5838] usb 2-1: Product: syz [ 465.471921][ T5838] usb 2-1: Manufacturer: syz [ 465.476686][ T5838] usb 2-1: SerialNumber: syz [ 465.485559][T11166] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 465.626019][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 465.701013][T11166] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 465.722342][T11166] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 465.725644][ T30] audit: type=1326 audit(1749787333.538:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2058e929 code=0x7ffc0000 [ 465.751880][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.803687][ T30] audit: type=1326 audit(1749787333.578:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f4e2058e929 code=0x7ffc0000 [ 466.024191][T11182] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 466.234030][T11186] PKCS7: Unknown OID: [5] (bad) [ 466.239100][T11186] PKCS7: Only support pkcs7_signedData type [ 466.403506][ T5928] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 466.429782][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 466.553921][T11166] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 466.574033][T11166] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 466.615695][ T5928] usb 4-1: config 0 has no interfaces? [ 466.623890][ T5928] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 466.633145][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.747912][ T5928] usb 4-1: Product: syz [ 466.755433][ T5928] usb 4-1: Manufacturer: syz [ 466.760307][ T5928] usb 4-1: SerialNumber: syz [ 466.775044][ T5928] usb 4-1: config 0 descriptor?? [ 466.798560][ T5838] cdc_ncm 2-1:1.0: failed to get mac address [ 466.816695][ T5838] cdc_ncm 2-1:1.0: bind() failure [ 466.976584][ T5838] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 467.018308][ T5838] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 467.036183][ T5838] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 467.105809][ T5838] usb 2-1: USB disconnect, device number 60 [ 467.890278][T11214] tipc: Enabling of bearer rejected, failed to enable media [ 467.915687][T11214] trusted_key: encrypted_key: hex blob is missing [ 468.105334][T11226] PKCS7: Unknown OID: [5] (bad) [ 468.110287][T11226] PKCS7: Only support pkcs7_signedData type [ 468.387800][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1483'. [ 468.477429][ T5838] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 468.663942][ T5838] usb 3-1: config 0 has no interfaces? [ 468.683928][ T5838] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 468.701068][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.718251][ T5838] usb 3-1: Product: syz [ 468.732768][ T5838] usb 3-1: Manufacturer: syz [ 468.737519][ T5838] usb 3-1: SerialNumber: syz [ 468.753494][ T5838] usb 3-1: config 0 descriptor?? [ 468.970781][ T5838] usb 3-1: USB disconnect, device number 52 [ 469.068654][ T6333] usb 4-1: USB disconnect, device number 75 [ 469.963876][T11267] PKCS7: Unknown OID: [5] (bad) [ 469.972360][T11267] PKCS7: Only support pkcs7_signedData type [ 470.206277][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 471.778776][T11284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.877791][T11290] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 472.053984][ T5838] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 472.203654][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 472.215442][ T5838] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 472.233202][ T5838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 472.245805][ T5838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 472.256381][ T5838] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.270105][ T5838] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 472.278010][ T6333] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 472.280103][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.332629][T11300] PKCS7: Unknown OID: [5] (bad) [ 472.338085][T11300] PKCS7: Only support pkcs7_signedData type [ 472.467051][ T6333] usb 4-1: config 0 has no interfaces? [ 472.482353][ T6333] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 472.491603][ T6333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.501049][ T6333] usb 4-1: Product: syz [ 472.509955][ T6333] usb 4-1: Manufacturer: syz [ 472.510126][ T5838] usb 3-1: GET_CAPABILITIES returned 0 [ 472.515240][ T6333] usb 4-1: SerialNumber: syz [ 472.527295][ T5838] usbtmc 3-1:16.0: can't read capabilities [ 472.534847][ T6333] usb 4-1: config 0 descriptor?? [ 472.797537][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.808815][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.945856][ T6333] usb 3-1: USB disconnect, device number 53 [ 473.763509][ T5838] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 473.935823][ T5838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 473.947082][ T5838] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 473.956162][ T5838] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.969356][ T5838] usb 2-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.982898][ T5838] usb 2-1: config 1 interface 0 has no altsetting 0 [ 473.989861][ T5838] usb 2-1: config 1 interface 0 has no altsetting 1 [ 473.999408][ T5838] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 474.008794][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.016918][ T5838] usb 2-1: Product: syz [ 474.021128][ T5838] usb 2-1: Manufacturer: syz [ 474.026018][ T5838] usb 2-1: SerialNumber: syz [ 474.254123][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 474.254145][ T30] audit: type=1326 audit(1749787342.048:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x0 [ 474.356790][ T5838] smsusb:smsusb_probe: board id=8, interface number 0 [ 474.381991][ T5838] usb 2-1: selecting invalid altsetting 0 [ 474.400565][ T5838] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 474.445958][ T5838] smsusb 2-1:1.0: probe with driver smsusb failed with error -22 [ 474.481435][ T5838] usb 2-1: USB disconnect, device number 61 [ 474.976267][ T6333] usb 4-1: USB disconnect, device number 76 [ 475.004470][T11335] netlink: 'syz.2.1514': attribute type 2 has an invalid length. [ 475.012753][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 476.819403][T11357] FAULT_INJECTION: forcing a failure. [ 476.819403][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 476.856696][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.0.1520 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 476.856730][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.856743][T11357] Call Trace: [ 476.856752][T11357] [ 476.856762][T11357] dump_stack_lvl+0x189/0x250 [ 476.856803][T11357] ? __pfx____ratelimit+0x10/0x10 [ 476.856837][T11357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.856871][T11357] ? __pfx__printk+0x10/0x10 [ 476.856911][T11357] should_fail_ex+0x414/0x560 [ 476.856946][T11357] should_failslab+0xa8/0x100 [ 476.856972][T11357] __kmalloc_cache_noprof+0x70/0x3d0 [ 476.856993][T11357] ? sctp_add_bind_addr+0x8c/0x370 [ 476.857020][T11357] sctp_add_bind_addr+0x8c/0x370 [ 476.857048][T11357] sctp_copy_local_addr_list+0x30b/0x4e0 [ 476.857075][T11357] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 476.857098][T11357] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 476.857124][T11357] ? sctp_v6_is_any+0x64/0x80 [ 476.857150][T11357] ? sctp_copy_one_addr+0x93/0x360 [ 476.857176][T11357] sctp_bind_addr_copy+0xb3/0x3c0 [ 476.857200][T11357] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 476.857238][T11357] sctp_connect_new_asoc+0x2e0/0x690 [ 476.857272][T11357] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 476.857298][T11357] ? __local_bh_enable_ip+0x12d/0x1c0 [ 476.857339][T11357] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 476.857369][T11357] ? security_sctp_bind_connect+0x7e/0x2e0 [ 476.857396][T11357] sctp_sendmsg+0x155c/0x2810 [ 476.857438][T11357] ? __pfx_sctp_sendmsg+0x10/0x10 [ 476.857469][T11357] ? aa_sk_perm+0x81e/0x950 [ 476.857500][T11357] ? __pfx_aa_sk_perm+0x10/0x10 [ 476.857530][T11357] ? sock_rps_record_flow+0x19/0x410 [ 476.857564][T11357] ? inet_sendmsg+0x2f4/0x370 [ 476.857590][T11357] __sock_sendmsg+0x19c/0x270 [ 476.857629][T11357] ____sys_sendmsg+0x52d/0x830 [ 476.857664][T11357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.857703][T11357] ? import_iovec+0x74/0xa0 [ 476.857731][T11357] ___sys_sendmsg+0x21f/0x2a0 [ 476.857762][T11357] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.857831][T11357] ? __fget_files+0x2a/0x420 [ 476.857854][T11357] ? __fget_files+0x3a0/0x420 [ 476.857891][T11357] __sys_sendmmsg+0x227/0x430 [ 476.857927][T11357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 476.857952][T11357] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 476.858003][T11357] ? ksys_write+0x22a/0x250 [ 476.858026][T11357] ? __pfx_ksys_write+0x10/0x10 [ 476.858043][T11357] ? rcu_is_watching+0x15/0xb0 [ 476.858084][T11357] __x64_sys_sendmmsg+0xa0/0xc0 [ 476.858116][T11357] do_syscall_64+0xfa/0x3b0 [ 476.858135][T11357] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.858167][T11357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.858189][T11357] ? clear_bhb_loop+0x60/0xb0 [ 476.858215][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.858235][T11357] RIP: 0033:0x7f341e18e929 [ 476.858254][T11357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.858272][T11357] RSP: 002b:00007f341ef2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 476.858294][T11357] RAX: ffffffffffffffda RBX: 00007f341e3b5fa0 RCX: 00007f341e18e929 [ 476.858310][T11357] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 476.858322][T11357] RBP: 00007f341ef2b090 R08: 0000000000000000 R09: 0000000000000000 [ 476.858336][T11357] R10: 000000003404c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 476.858348][T11357] R13: 0000000000000000 R14: 00007f341e3b5fa0 R15: 00007f341e4dfa28 [ 476.858382][T11357] [ 477.915933][T11373] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 477.993577][ T5838] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 478.123610][ T5838] usb 4-1: device descriptor read/64, error -71 [ 478.303493][ T6333] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 478.363783][ T5838] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 478.469219][ T6333] usb 3-1: config 0 has no interfaces? [ 478.492674][ T6333] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.492736][ T6333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.492759][ T6333] usb 3-1: Product: syz [ 478.492776][ T6333] usb 3-1: Manufacturer: syz [ 478.492792][ T6333] usb 3-1: SerialNumber: syz [ 478.493618][ T5838] usb 4-1: device descriptor read/64, error -71 [ 478.498215][ T6333] usb 3-1: config 0 descriptor?? [ 478.607126][ T5838] usb usb4-port1: attempt power cycle [ 479.023571][ T5838] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 479.023643][ T6333] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 479.049017][ T5838] usb 4-1: device descriptor read/8, error -71 [ 479.173651][ T6333] usb 2-1: Using ep0 maxpacket: 32 [ 479.197302][ T6333] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 479.197334][ T6333] usb 2-1: config 0 has no interface number 0 [ 479.197368][ T6333] usb 2-1: config 0 interface 184 has no altsetting 0 [ 479.207219][ T6333] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 479.207244][ T6333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.207258][ T6333] usb 2-1: Product: syz [ 479.207270][ T6333] usb 2-1: Manufacturer: syz [ 479.207281][ T6333] usb 2-1: SerialNumber: syz [ 479.209668][ T6333] usb 2-1: config 0 descriptor?? [ 479.221931][ T6333] smsc75xx v1.0.0 [ 479.221948][ T6333] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 479.222239][ T6333] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 479.285110][ T5838] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 479.309400][ T5838] usb 4-1: device descriptor read/8, error -71 [ 479.417599][ T5838] usb usb4-port1: unable to enumerate USB device [ 480.279202][ T30] audit: type=1326 audit(1749787348.088:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 480.302536][ T30] audit: type=1326 audit(1749787348.088:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 480.325442][ T30] audit: type=1326 audit(1749787348.088:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 480.350831][ T30] audit: type=1326 audit(1749787348.088:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 480.376384][ T30] audit: type=1326 audit(1749787348.088:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 480.401463][ T30] audit: type=1326 audit(1749787348.088:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 480.427910][ T30] audit: type=1326 audit(1749787348.088:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d2d8e929 code=0x7ffc0000 [ 480.733743][ T6333] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 480.888458][ T6333] usb 5-1: Using ep0 maxpacket: 8 [ 480.903722][ T6333] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 480.926634][ T6333] usb 5-1: config 0 has no interface number 0 [ 480.956806][ T5928] usb 3-1: USB disconnect, device number 54 [ 480.973082][ T6333] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 480.987645][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 481.320765][ T6333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.344682][ T6333] usb 5-1: Product: syz [ 481.350590][ T6333] usb 5-1: Manufacturer: syz [ 481.356213][ T6333] usb 5-1: SerialNumber: syz [ 481.370298][ T6333] usb 5-1: config 0 descriptor?? [ 481.763671][ T6333] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 481.783696][ T6333] usb 5-1: No valid video chain found. [ 481.872859][ T6333] usb 2-1: USB disconnect, device number 62 [ 481.985840][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.995194][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.235990][ T5838] usb 5-1: USB disconnect, device number 55 [ 482.408159][T11425] loop2: detected capacity change from 0 to 7 [ 482.437435][T11425] Dev loop2: unable to read RDB block 7 [ 482.448864][T11425] loop2: unable to read partition table [ 482.463829][T11425] loop2: partition table beyond EOD, truncated [ 482.480886][T11425] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 482.553558][ T6333] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 482.662278][T11429] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 482.743518][ T6333] usb 4-1: device descriptor read/64, error -71 [ 482.993680][ T6333] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 483.115793][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 483.130784][T11432] bridge: RTM_NEWNEIGH with invalid ether address [ 483.143531][ T6333] usb 4-1: device descriptor read/64, error -71 [ 483.274049][ T6333] usb usb4-port1: attempt power cycle [ 483.290279][T11439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.373905][ T5838] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 483.559986][ T5838] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 483.571395][ T5838] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 483.586368][ T5838] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.609057][ T5838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 483.619785][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.631687][ T5838] usb 3-1: Product: syz [ 483.633460][ T6333] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 483.638460][ T5838] usb 3-1: Manufacturer: syz [ 483.648764][ T5838] usb 3-1: SerialNumber: syz [ 483.664223][ T6333] usb 4-1: device descriptor read/8, error -71 [ 483.890895][ T5838] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 483.917458][ T5838] usb 3-1: USB disconnect, device number 55 [ 483.930112][ T5838] usblp0: removed [ 483.933954][ T6333] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 483.956355][ T6333] usb 4-1: device descriptor read/8, error -71 [ 484.083892][ T6333] usb usb4-port1: unable to enumerate USB device [ 484.145239][ T30] audit: type=1326 audit(1749787351.958:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11448 comm="syz.4.1552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42d2d8e929 code=0x0 [ 484.200499][T11453] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 485.468041][T11468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.477676][T11468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.488424][T11468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.497650][T11468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.787668][T11480] input: syz1 as /devices/virtual/input/input32 [ 487.646388][T11500] vivid-007: ================= START STATUS ================= [ 487.654720][T11500] vivid-007: Enable Output Cropping: true [ 487.660794][T11500] vivid-007: Enable Output Composing: true [ 487.666783][T11500] vivid-007: Enable Output Scaler: true [ 487.673522][T11500] vivid-007: Tx RGB Quantization Range: Automatic [ 487.680098][T11500] vivid-007: Transmit Mode: HDMI [ 487.685261][T11500] vivid-007: Hotplug Present: 0x00000000 [ 487.690973][T11500] vivid-007: RxSense Present: 0x00000000 [ 487.696762][T11500] vivid-007: EDID Present: 0x00000000 [ 487.702279][T11500] vivid-007: ================== END STATUS ================== [ 487.818290][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 487.834028][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 488.573475][ T30] audit: type=1326 audit(1749787356.378:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.2.1568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2b0b8e929 code=0x0 [ 489.014142][T11527] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 489.163134][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 489.173465][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 489.653995][ T5838] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 489.824010][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 489.842896][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.865140][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.888439][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.900300][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.913281][ T5838] usb 3-1: Product: syz [ 489.922202][ T5838] usb 3-1: Manufacturer: syz [ 489.930862][ T5838] usb 3-1: SerialNumber: syz [ 490.158584][T11532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.181948][T11532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.216218][ T5838] usb 3-1: 0:2 : does not exist [ 490.316060][ T5838] usb 3-1: USB disconnect, device number 56 [ 490.469109][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.818343][T11553] loop8: detected capacity change from 0 to 1 [ 490.832865][T11553] Dev loop8: unable to read RDB block 1 [ 490.840093][T11553] loop8: unable to read partition table [ 490.860625][T11553] loop8: partition table beyond EOD, truncated [ 490.877568][T11553] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 491.153515][ T5838] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 491.313541][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 491.322987][ T5838] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.341845][ T5838] usb 3-1: config 0 interface 0 has no altsetting 0 [ 491.349351][ T5838] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 491.365185][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.393062][ T5838] usb 3-1: config 0 descriptor?? [ 491.868910][ T5838] ortek 0003:05A4:8003.000E: unknown global tag 0xd [ 491.899299][ T5838] ortek 0003:05A4:8003.000E: item 0 2 1 13 parsing failed [ 491.911768][ T5838] ortek 0003:05A4:8003.000E: probe with driver ortek failed with error -22 [ 492.119139][ T6333] usb 3-1: USB disconnect, device number 57 [ 493.290899][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 493.322655][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 494.994284][T11614] fuse: Unknown parameter '00000000000000000000003' [ 495.016492][T11614] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 495.023623][ T5838] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 495.044396][T11617] dlm: no locking on control device [ 495.196054][ T5838] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.205586][ T5838] usb 3-1: config 0 has no interface number 0 [ 495.221589][ T5838] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 495.269642][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.328253][ T5838] usb 3-1: Product: syz [ 495.332529][ T5838] usb 3-1: Manufacturer: syz [ 495.382303][ T30] audit: type=1326 audit(1749787363.178:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.405001][ T5838] usb 3-1: SerialNumber: syz [ 495.424650][ T5838] usb 3-1: config 0 descriptor?? [ 495.468884][ T30] audit: type=1326 audit(1749787363.178:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.520327][ T30] audit: type=1326 audit(1749787363.188:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.581265][ T30] audit: type=1326 audit(1749787363.188:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.643531][ T30] audit: type=1326 audit(1749787363.188:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.674258][ T5928] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 495.706363][ T5838] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 495.738189][ T30] audit: type=1326 audit(1749787363.188:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.762106][ T5838] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 495.774286][ T5838] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 495.782391][ T5838] usb 3-1: media controller created [ 495.787895][ T30] audit: type=1326 audit(1749787363.188:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.863681][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 495.889756][ T30] audit: type=1326 audit(1749787363.188:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 495.890110][ T5928] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 495.928388][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.973630][ T30] audit: type=1326 audit(1749787363.188:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 496.001104][ T30] audit: type=1326 audit(1749787363.188:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121678e929 code=0x7ffc0000 [ 496.073609][ T5838] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 496.084244][T11635] binder: 11626:11635 ioctl 4018620d 0 returned -22 [ 496.101649][ T5928] usb 2-1: config 0 has no interface number 0 [ 496.120150][ T5928] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.427799][T11629] dvmrp0: entered allmulticast mode [ 496.440947][ T5928] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 496.461621][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.525303][ T5928] usb 2-1: Product: syz [ 496.567364][ T5928] usb 2-1: Manufacturer: syz [ 496.597018][ T5928] usb 2-1: SerialNumber: syz [ 496.647227][ T5928] usb 2-1: config 0 descriptor?? [ 496.657488][ T5928] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 496.680083][T11629] dvmrp0: left allmulticast mode [ 496.727631][ T5928] em28xx 2-1:0.132: Video interface 132 found: isoc [ 496.933777][ T6333] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 496.942064][ T5928] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 497.008337][ T5928] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 497.030975][ T5928] em28xx 2-1:0.132: board has no eeprom [ 497.084331][ T6333] usb 4-1: device descriptor read/64, error -71 [ 497.183647][ T5928] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 497.199643][T11649] FAULT_INJECTION: forcing a failure. [ 497.199643][T11649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.218483][ T5928] em28xx 2-1:0.132: analog set to isoc mode. [ 497.225631][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 497.248344][T11649] CPU: 0 UID: 0 PID: 11649 Comm: syz.1.1610 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 497.248375][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.248389][T11649] Call Trace: [ 497.248397][T11649] [ 497.248407][T11649] dump_stack_lvl+0x189/0x250 [ 497.248447][T11649] ? __pfx____ratelimit+0x10/0x10 [ 497.248474][T11649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.248498][T11649] ? __pfx__printk+0x10/0x10 [ 497.248514][T11649] ? __might_fault+0xb0/0x130 [ 497.248536][T11649] should_fail_ex+0x414/0x560 [ 497.248559][T11649] _copy_from_user+0x2d/0xb0 [ 497.248575][T11649] __se_sys_move_pages+0xf6d/0x16d0 [ 497.248607][T11649] ? __pfx___se_sys_move_pages+0x10/0x10 [ 497.248648][T11649] ? fput+0xa0/0xd0 [ 497.248666][T11649] ? ksys_write+0x22a/0x250 [ 497.248681][T11649] ? __pfx_ksys_write+0x10/0x10 [ 497.248692][T11649] ? rcu_is_watching+0x15/0xb0 [ 497.248719][T11649] ? __x64_sys_move_pages+0x21/0xf0 [ 497.248739][T11649] do_syscall_64+0xfa/0x3b0 [ 497.248751][T11649] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.248773][T11649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.248787][T11649] ? clear_bhb_loop+0x60/0xb0 [ 497.248804][T11649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.248818][T11649] RIP: 0033:0x7f121678e929 [ 497.248832][T11649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.248844][T11649] RSP: 002b:00007f1217510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 497.248859][T11649] RAX: ffffffffffffffda RBX: 00007f12169b5fa0 RCX: 00007f121678e929 [ 497.248870][T11649] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 497.248879][T11649] RBP: 00007f1217510090 R08: 0000200000000040 R09: 0000000000000000 [ 497.248888][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.248896][T11649] R13: 0000000000000000 R14: 00007f12169b5fa0 R15: 00007f1216adfa28 [ 497.248917][T11649] [ 497.259402][ T5928] usb 2-1: USB disconnect, device number 63 [ 497.507038][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 497.518141][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 497.527498][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 497.537299][ T24] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 497.548270][ T5928] em28xx 2-1:0.132: Disconnecting em28xx [ 497.564016][ T6333] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 497.707258][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 497.715538][ T6333] usb 4-1: device descriptor read/64, error -71 [ 497.727897][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 497.736944][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 497.752694][ T24] usb 2-1: Decoder not found [ 497.757891][ T24] em28xx 2-1:0.132: failed to create media graph [ 497.764780][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 497.823207][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 497.845667][ T6333] usb usb4-port1: attempt power cycle [ 497.881572][ T5928] em28xx 2-1:0.132: Closing input extension [ 497.934213][ T5928] em28xx 2-1:0.132: Freeing device [ 497.991357][T11668] dlm: no locking on control device [ 498.239983][ T6333] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 498.296420][ T6333] usb 4-1: device descriptor read/8, error -71 [ 498.321901][ T5838] usb 3-1: USB disconnect, device number 58 [ 498.536430][ T6333] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 498.583626][ T6333] usb 4-1: device descriptor read/8, error -71 [ 498.711076][T11678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.718909][T11678] IPv6: NLM_F_CREATE should be set when creating new route [ 498.726280][ T6333] usb usb4-port1: unable to enumerate USB device [ 498.726948][ T5838] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 498.784066][T11678] lo: entered allmulticast mode [ 498.799322][T11678] tunl0: entered allmulticast mode [ 498.824439][T11678] gre0: entered allmulticast mode [ 498.902707][T11678] gretap0: entered allmulticast mode [ 498.913544][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 498.944140][ T5838] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 498.952298][ T5838] usb 3-1: config 0 has no interface number 0 [ 498.993146][T11678] erspan0: entered allmulticast mode [ 498.998733][ T5838] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.011476][T11676] could not allocate digest TFM handle poly1305-arm [ 499.016492][T11678] ip_vti0: entered allmulticast mode [ 499.027820][ T5838] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 499.045376][T11678] ip6_vti0: entered allmulticast mode [ 499.048354][ T5838] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.066373][ T5838] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 499.073499][T11678] sit0: entered allmulticast mode [ 499.080220][ T5838] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 499.103722][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.124989][ T5838] usb 3-1: config 0 descriptor?? [ 499.139769][ T5838] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 499.150688][T11678] ip6tnl0: entered allmulticast mode [ 499.168022][T11678] ip6gre0: entered allmulticast mode [ 499.180171][T11678] ip6gretap0: entered allmulticast mode [ 499.204986][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.212365][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.224642][T11678] bridge0: entered allmulticast mode [ 499.249895][T11678] bond0: entered allmulticast mode [ 499.255712][T11678] bond_slave_0: entered allmulticast mode [ 499.261573][T11678] bond_slave_1: entered allmulticast mode [ 499.271729][T11678] team0: entered allmulticast mode [ 499.278146][T11678] team_slave_0: entered allmulticast mode [ 499.285630][T11678] team_slave_1: entered allmulticast mode [ 499.291519][T11678] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 499.331338][T11678] dummy0: entered allmulticast mode [ 499.372726][T11678] nlmon0: entered allmulticast mode [ 499.383326][T11678] caif0: entered allmulticast mode [ 499.391772][T11678] batadv0: entered allmulticast mode [ 499.404316][T11678] vxcan0: entered allmulticast mode [ 499.417275][ T5928] usb 3-1: USB disconnect, device number 59 [ 499.418641][T11678] vxcan1: entered allmulticast mode [ 499.432631][T11678] veth0: entered allmulticast mode [ 499.442144][ T5928] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 499.442530][T11678] veth1: entered allmulticast mode [ 499.470280][T11678] wg0: entered allmulticast mode [ 499.480578][T11678] wg1: entered allmulticast mode [ 499.490328][T11678] wg2: entered allmulticast mode [ 499.499006][T11678] veth0_to_bridge: entered allmulticast mode [ 499.516753][T11678] veth1_to_bridge: entered allmulticast mode [ 499.528678][T11678] veth0_to_bond: entered allmulticast mode [ 499.539498][T11678] veth1_to_bond: entered allmulticast mode [ 499.549181][T11678] veth0_to_team: entered allmulticast mode [ 499.562297][T11678] veth1_to_team: entered allmulticast mode [ 499.573841][T11678] veth0_to_batadv: entered allmulticast mode [ 499.582196][T11678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.591122][T11678] batadv_slave_0: entered allmulticast mode [ 499.601188][T11678] veth1_to_batadv: entered allmulticast mode [ 499.610345][T11678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.618861][T11678] batadv_slave_1: entered allmulticast mode [ 499.627585][T11678] xfrm0: entered allmulticast mode [ 499.637555][T11678] veth0_to_hsr: entered allmulticast mode [ 499.646286][T11678] hsr_slave_0: entered allmulticast mode [ 499.654679][T11678] veth1_to_hsr: entered allmulticast mode [ 499.663798][ T6333] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 499.675285][T11678] hsr0: entered allmulticast mode [ 499.683041][T11678] veth1_virt_wifi: entered allmulticast mode [ 499.692393][T11678] veth0_virt_wifi: entered allmulticast mode [ 499.702378][T11678] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 499.715709][T11678] veth0_vlan: entered allmulticast mode [ 499.740629][T11678] vlan0: entered allmulticast mode [ 499.747228][T11678] vlan1: entered allmulticast mode [ 499.757761][T11678] macvlan1: entered allmulticast mode [ 499.766820][T11678] ipvlan0: entered allmulticast mode [ 499.772579][T11678] ipvlan1: entered allmulticast mode [ 499.780892][T11678] veth1_macvtap: entered allmulticast mode [ 499.796581][T11678] veth0_macvtap: entered allmulticast mode [ 499.809747][T11678] macvtap0: entered allmulticast mode [ 499.820775][T11678] macsec0: entered allmulticast mode [ 499.825582][ T6333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.838891][T11678] geneve0: entered allmulticast mode [ 499.845290][ T6333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.855470][ T6333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.872091][ T6333] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.872102][T11678] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.881642][ T6333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.899199][T11678] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.910454][T11678] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.914844][ T6333] usb 2-1: config 0 descriptor?? [ 499.922271][T11678] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.953170][T11678] geneve1: entered allmulticast mode [ 499.992598][T11678] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 500.006758][T11678] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 500.019960][T11678] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 500.063815][T11678] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 500.081253][T11678] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 500.129413][T11678] batadv0: left promiscuous mode [ 500.139145][T11678] macvlan2: left promiscuous mode [ 500.146501][T11678] syztnl1: entered allmulticast mode [ 500.156062][T11678] bond1: left promiscuous mode [ 500.160952][T11678] ip6gre1: left promiscuous mode [ 500.167518][T11678] bond1: entered allmulticast mode [ 500.172762][T11678] ip6gre1: entered allmulticast mode [ 500.183009][T11678] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 500.190577][T11678] mac80211_hwsim hwsim13 wlan3: entered allmulticast mode [ 500.198711][T11678] gtp0: left promiscuous mode [ 500.203523][T11678] gtp0: entered allmulticast mode [ 500.210729][T11678] vlan2: left promiscuous mode [ 500.218209][T11678] bond2: entered allmulticast mode [ 500.224657][T11678] macvtap1: left promiscuous mode [ 500.657149][ T6333] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 500.691349][ T6333] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 500.722504][ T6333] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 500.887213][ T6333] usb 2-1: USB disconnect, device number 64 [ 500.914957][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 500.914976][ T30] audit: type=1326 audit(1749787368.728:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b0b8e929 code=0x7ffc0000 [ 501.002000][ T30] audit: type=1326 audit(1749787368.758:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fa2b0b8e929 code=0x7ffc0000 [ 501.044482][T11704] FAULT_INJECTION: forcing a failure. [ 501.044482][T11704] name failslab, interval 1, probability 0, space 0, times 0 [ 501.059712][T11700] fido_id[11700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 501.128394][ T30] audit: type=1326 audit(1749787368.758:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b0b8e929 code=0x7ffc0000 [ 501.154247][T11704] CPU: 1 UID: 0 PID: 11704 Comm: syz.4.1625 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 501.154281][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.154295][T11704] Call Trace: [ 501.154303][T11704] [ 501.154313][T11704] dump_stack_lvl+0x189/0x250 [ 501.154353][T11704] ? __pfx____ratelimit+0x10/0x10 [ 501.154387][T11704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.154421][T11704] ? __pfx__printk+0x10/0x10 [ 501.154451][T11704] ? __pfx___might_resched+0x10/0x10 [ 501.154490][T11704] should_fail_ex+0x414/0x560 [ 501.154524][T11704] should_failslab+0xa8/0x100 [ 501.154574][T11704] __kmalloc_cache_noprof+0x70/0x3d0 [ 501.154596][T11704] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 501.154628][T11704] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 501.154672][T11704] genl_family_rcv_msg_doit+0x212/0x300 [ 501.154714][T11704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 501.154762][T11704] ? bpf_lsm_capable+0x9/0x20 [ 501.154781][T11704] ? security_capable+0x7e/0x2e0 [ 501.154815][T11704] genl_rcv_msg+0x60e/0x790 [ 501.154855][T11704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.154886][T11704] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 501.154940][T11704] netlink_rcv_skb+0x208/0x470 [ 501.154967][T11704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.155001][T11704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.155046][T11704] ? down_read+0x1ad/0x2e0 [ 501.155071][T11704] genl_rcv+0x28/0x40 [ 501.155101][T11704] netlink_unicast+0x75b/0x8d0 [ 501.155137][T11704] netlink_sendmsg+0x805/0xb30 [ 501.155174][T11704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.155205][T11704] ? aa_sock_msg_perm+0x94/0x160 [ 501.155238][T11704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.155264][T11704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.155291][T11704] __sock_sendmsg+0x219/0x270 [ 501.155329][T11704] ____sys_sendmsg+0x505/0x830 [ 501.155364][T11704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.155401][T11704] ? import_iovec+0x74/0xa0 [ 501.155428][T11704] ___sys_sendmsg+0x21f/0x2a0 [ 501.155458][T11704] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.155526][T11704] ? __fget_files+0x2a/0x420 [ 501.155550][T11704] ? __fget_files+0x3a0/0x420 [ 501.155585][T11704] __x64_sys_sendmsg+0x19b/0x260 [ 501.155617][T11704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.155657][T11704] ? __pfx_ksys_write+0x10/0x10 [ 501.155675][T11704] ? rcu_is_watching+0x15/0xb0 [ 501.155714][T11704] ? do_syscall_64+0xbe/0x3b0 [ 501.155739][T11704] do_syscall_64+0xfa/0x3b0 [ 501.155758][T11704] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.155789][T11704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.155810][T11704] ? clear_bhb_loop+0x60/0xb0 [ 501.155836][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.155856][T11704] RIP: 0033:0x7f42d2d8e929 [ 501.155875][T11704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.155894][T11704] RSP: 002b:00007f42d3b7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.155923][T11704] RAX: ffffffffffffffda RBX: 00007f42d2fb5fa0 RCX: 00007f42d2d8e929 [ 501.155939][T11704] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.155953][T11704] RBP: 00007f42d3b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 501.155965][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.155977][T11704] R13: 0000000000000000 R14: 00007f42d2fb5fa0 R15: 00007f42d30dfa28 [ 501.156010][T11704] [ 501.475536][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.505363][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.514587][ T30] audit: type=1326 audit(1749787368.778:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa2b0b8e929 code=0x7ffc0000 [ 501.540957][ T30] audit: type=1326 audit(1749787368.778:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b0b8e929 code=0x7ffc0000 [ 501.639609][ T30] audit: type=1326 audit(1749787368.778:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.2.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b0b8e929 code=0x7ffc0000 [ 501.841515][T11694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.869852][ T5838] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 502.033473][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 502.041236][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.080505][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.105557][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.120657][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.129830][ T5838] usb 3-1: Product: syz [ 502.138591][ T5838] usb 3-1: Manufacturer: syz [ 502.149210][ T5838] usb 3-1: SerialNumber: syz [ 502.416738][T11709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1627'. [ 502.438186][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'. [ 502.479468][ T5838] usb 3-1: 0:2 : does not exist [ 502.537489][ T5838] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 502.642721][ T5838] usb 3-1: USB disconnect, device number 60 [ 502.708475][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.793705][ T5928] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 502.955213][ T5928] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.968351][ T5928] usb 2-1: config 0 has no interface number 0 [ 502.996494][ T5928] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 503.013633][T11744] x_tables: duplicate underflow at hook 1 [ 503.016155][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.059511][ T5928] usb 2-1: Product: syz [ 503.069960][ T5928] usb 2-1: Manufacturer: syz [ 503.079793][ T5928] usb 2-1: SerialNumber: syz [ 503.092705][ T5928] usb 2-1: config 0 descriptor?? [ 503.405810][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.504445][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.599985][ T5928] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 503.699611][ T5928] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 503.945864][ T5928] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 503.954384][ T5928] usb 2-1: media controller created [ 503.993664][ T5838] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 504.005769][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.163605][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 504.177320][ T5838] usb 5-1: config 0 has no interfaces? [ 504.187810][ T5838] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 504.205423][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.230284][ T5838] usb 5-1: config 0 descriptor?? [ 504.449365][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1639'. [ 504.522742][ T5838] usb 5-1: USB disconnect, device number 56 [ 505.193056][ T5928] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 505.551151][ T5965] usb 2-1: USB disconnect, device number 65 [ 505.684815][T11776] bond0: option arp_validate: invalid value (18446744073441116161) [ 505.923583][ T5838] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 506.153814][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 506.187155][T11790] FAULT_INJECTION: forcing a failure. [ 506.187155][T11790] name failslab, interval 1, probability 0, space 0, times 0 [ 506.204054][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.3.1649 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 506.204087][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.204101][T11790] Call Trace: [ 506.204110][T11790] [ 506.204119][T11790] dump_stack_lvl+0x189/0x250 [ 506.204158][T11790] ? __pfx____ratelimit+0x10/0x10 [ 506.204191][T11790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.204224][T11790] ? __pfx__printk+0x10/0x10 [ 506.204250][T11790] ? __pfx___might_resched+0x10/0x10 [ 506.204283][T11790] ? fs_reclaim_acquire+0x7d/0x100 [ 506.204313][T11790] should_fail_ex+0x414/0x560 [ 506.204347][T11790] should_failslab+0xa8/0x100 [ 506.204373][T11790] __kmalloc_noprof+0xcb/0x4f0 [ 506.204393][T11790] ? tomoyo_encode+0x28b/0x550 [ 506.204428][T11790] tomoyo_encode+0x28b/0x550 [ 506.204464][T11790] tomoyo_realpath_from_path+0x58d/0x5d0 [ 506.204507][T11790] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 506.204533][T11790] tomoyo_path_number_perm+0x1e8/0x5a0 [ 506.204562][T11790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 506.204614][T11790] ? __lock_acquire+0xab9/0xd20 [ 506.204666][T11790] ? __fget_files+0x2a/0x420 [ 506.204694][T11790] ? __fget_files+0x2a/0x420 [ 506.204716][T11790] ? __fget_files+0x3a0/0x420 [ 506.204738][T11790] ? __fget_files+0x2a/0x420 [ 506.204765][T11790] security_file_ioctl+0xcb/0x2d0 [ 506.204792][T11790] __se_sys_ioctl+0x47/0x170 [ 506.204826][T11790] do_syscall_64+0xfa/0x3b0 [ 506.204845][T11790] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.204877][T11790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.204898][T11790] ? clear_bhb_loop+0x60/0xb0 [ 506.204924][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.204945][T11790] RIP: 0033:0x7f4e2058e929 [ 506.204964][T11790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.204984][T11790] RSP: 002b:00007f4e2145a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.205007][T11790] RAX: ffffffffffffffda RBX: 00007f4e207b5fa0 RCX: 00007f4e2058e929 [ 506.205023][T11790] RDX: 0000200000000540 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 506.205037][T11790] RBP: 00007f4e2145a090 R08: 0000000000000000 R09: 0000000000000000 [ 506.205050][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.205063][T11790] R13: 0000000000000000 R14: 00007f4e207b5fa0 R15: 00007f4e208dfa28 [ 506.205096][T11790] [ 506.205118][T11790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.654228][ T5928] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 506.784144][ T6333] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 506.961622][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 506.991710][T11797] netlink: 'syz.3.1651': attribute type 21 has an invalid length. [ 506.999978][T11797] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1651'. [ 507.009464][T11797] netlink: 'syz.3.1651': attribute type 4 has an invalid length. [ 507.017808][T11797] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1651'. [ 507.038266][ T6333] usb 2-1: Using ep0 maxpacket: 32 [ 507.068692][ T6333] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 507.078656][ T5928] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 507.106596][ T6333] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 507.115749][ T5928] usb 5-1: config 64 has no interface number 0 [ 507.132597][ T5928] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 507.157339][ T6333] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 507.172091][ T5928] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid maxpacket 1535, setting to 1024 [ 507.183966][ T6333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 507.199323][ T6333] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 507.209254][ T5928] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 507.218432][ T6333] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 507.231562][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.256544][T11786] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 507.278541][ T6333] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 507.294573][ T5928] usb 5-1: probing VID:PID(2201:012C) [ 507.317000][ T6333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.328727][ T5928] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 507.340077][ T5928] usb 5-1: vub300 ignoring EndPoint(0) 02 [ 507.347468][ T6333] usb 2-1: config 0 descriptor?? [ 507.355337][ T5928] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 507.426989][ T5928] vub300 5-1:64.19: probe with driver vub300 failed with error -22 [ 507.562291][ T6333] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 507.714053][ T5928] usb 5-1: USB disconnect, device number 57 [ 507.754281][ T6333] usb 2-1: USB disconnect, device number 66 [ 507.786135][ T6333] usblp0: removed [ 508.102381][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1654'. [ 508.113570][ T6333] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 508.121712][T11805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.146254][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1654'. [ 508.202893][T11805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.313771][ T6333] usb 2-1: Using ep0 maxpacket: 32 [ 508.343262][ T6333] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 508.352413][ T5928] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 508.380694][ T6333] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 508.402335][ T6333] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 508.419502][ T6333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 508.473135][ T6333] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 508.633741][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 508.642242][ T5928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.660693][ T5928] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 508.674098][ T6333] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 508.701288][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 508.723638][ T6333] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 508.734962][ T6333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.746092][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 508.747431][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 508.761266][ T6333] usb 2-1: config 0 descriptor?? [ 508.776904][ T5928] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 508.802792][ T5838] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 508.812822][ T5928] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64 [ 508.835747][ T5838] usb 3-1: can't read configurations, error -71 [ 508.848832][ T5928] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.863931][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.879709][ T5928] usb 4-1: Product: syz [ 508.884713][ T5928] usb 4-1: Manufacturer: syz [ 508.889485][ T5928] usb 4-1: SerialNumber: syz [ 509.039571][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 509.126899][ T5928] usb 4-1: USB disconnect, device number 89 [ 509.189816][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.214541][ T5838] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 509.222996][ T6333] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 509.376085][T11826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1663'. [ 509.405755][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.424796][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.444838][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 509.460690][ T6333] usb 2-1: USB disconnect, device number 67 [ 509.474424][ T5838] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 509.492346][ T6333] usblp0: removed [ 509.494674][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.538336][ T5838] usb 3-1: config 0 descriptor?? [ 509.551465][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 509.619907][T11828] bond1: entered promiscuous mode [ 509.626494][T11828] bond1: entered allmulticast mode [ 509.632816][T11828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.991971][ T5838] itetech 0003:048D:8595.0010: item fetching failed at offset 3/7 [ 510.012490][ T5838] itetech 0003:048D:8595.0010: probe with driver itetech failed with error -22 [ 510.262642][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.316213][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.339924][ T5838] usb 3-1: USB disconnect, device number 62 [ 510.693596][ T5965] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 510.963802][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 511.013600][ T5838] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 511.241547][ T5838] usb 5-1: Invalid ep0 maxpacket: 16 [ 511.312797][ T30] audit: type=1326 audit(1749787379.118:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.2.1673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2b0b8e929 code=0x0 [ 511.403716][ T5838] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 511.613500][ T5838] usb 5-1: Invalid ep0 maxpacket: 16 [ 511.627161][ T5838] usb usb5-port1: attempt power cycle [ 511.670119][T11864] dlm: no locking on control device [ 511.986069][ T5838] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 512.009717][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 512.024967][ T5838] usb 5-1: Invalid ep0 maxpacket: 16 [ 512.087954][T11866] veth3: entered promiscuous mode [ 512.094039][T11866] bridge3: port 1(veth3) entered blocking state [ 512.114057][T11866] bridge3: port 1(veth3) entered disabled state [ 512.132185][T11866] veth3: entered allmulticast mode [ 512.163758][ T5838] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 512.240545][ T5838] usb 5-1: Invalid ep0 maxpacket: 16 [ 512.266446][ T5838] usb usb5-port1: unable to enumerate USB device [ 513.218006][T11879] bridge0: entered promiscuous mode [ 513.225090][T11879] bond0: entered promiscuous mode [ 513.230299][T11879] bond_slave_0: entered promiscuous mode [ 513.236890][T11879] bond_slave_1: entered promiscuous mode [ 513.243254][T11879] team0: entered promiscuous mode [ 513.248480][T11879] team_slave_0: entered promiscuous mode [ 513.255549][T11879] team_slave_1: entered promiscuous mode [ 513.261706][T11879] vlan2: entered promiscuous mode [ 513.267025][T11879] [ 513.269379][T11879] ====================================================== [ 513.276430][T11879] WARNING: possible circular locking dependency detected [ 513.283503][T11879] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 513.290633][T11879] ------------------------------------------------------ [ 513.297758][T11879] syz.2.1679/11879 is trying to acquire lock: [ 513.303837][T11879] ffff88807d5f8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 513.314325][T11879] [ 513.314325][T11879] but task is already holding lock: [ 513.321703][T11879] ffff888058adce00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 513.331927][T11879] [ 513.331927][T11879] which lock already depends on the new lock. [ 513.331927][T11879] [ 513.342342][T11879] [ 513.342342][T11879] the existing dependency chain (in reverse order) is: [ 513.351373][T11879] [ 513.351373][T11879] -> #1 (team->team_lock_key#5){+.+.}-{4:4}: [ 513.359578][T11879] lock_acquire+0x120/0x360 [ 513.364636][T11879] __mutex_lock+0x182/0xe80 [ 513.369716][T11879] team_device_event+0x182/0xa20 [ 513.375214][T11879] notifier_call_chain+0x1b3/0x3e0 [ 513.381079][T11879] dev_close_many+0x29c/0x410 [ 513.386397][T11879] vlan_device_event+0x1748/0x1d00 [ 513.392072][T11879] notifier_call_chain+0x1b3/0x3e0 [ 513.397741][T11879] __dev_notify_flags+0x18d/0x2e0 [ 513.403312][T11879] netif_change_flags+0xe8/0x1a0 [ 513.408809][T11879] do_setlink+0xc55/0x41c0 [ 513.413776][T11879] rtnl_newlink+0x149f/0x1c70 [ 513.419005][T11879] rtnetlink_rcv_msg+0x7cc/0xb70 [ 513.424488][T11879] netlink_rcv_skb+0x208/0x470 [ 513.429797][T11879] netlink_unicast+0x75b/0x8d0 [ 513.435105][T11879] netlink_sendmsg+0x805/0xb30 [ 513.440500][T11879] __sock_sendmsg+0x219/0x270 [ 513.445727][T11879] ____sys_sendmsg+0x505/0x830 [ 513.451033][T11879] ___sys_sendmsg+0x21f/0x2a0 [ 513.456254][T11879] __x64_sys_sendmsg+0x19b/0x260 [ 513.461737][T11879] do_syscall_64+0xfa/0x3b0 [ 513.466776][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.473428][T11879] [ 513.473428][T11879] -> #0 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 513.483124][T11879] validate_chain+0xb9b/0x2140 [ 513.488435][T11879] __lock_acquire+0xab9/0xd20 [ 513.493659][T11879] lock_acquire+0x120/0x360 [ 513.498710][T11879] __mutex_lock+0x182/0xe80 [ 513.503749][T11879] dev_set_promiscuity+0x10e/0x260 [ 513.509408][T11879] __dev_set_promiscuity+0x534/0x740 [ 513.515237][T11879] netif_set_promiscuity+0x50/0xe0 [ 513.520973][T11879] dev_set_promiscuity+0x126/0x260 [ 513.526624][T11879] team_change_rx_flags+0x123/0x220 [ 513.532375][T11879] __dev_set_promiscuity+0x534/0x740 [ 513.538301][T11879] netif_set_promiscuity+0x50/0xe0 [ 513.543978][T11879] dev_set_promiscuity+0x126/0x260 [ 513.549648][T11879] bond_change_rx_flags+0x219/0x690 [ 513.555401][T11879] __dev_set_promiscuity+0x534/0x740 [ 513.561238][T11879] netif_set_promiscuity+0x50/0xe0 [ 513.566898][T11879] dev_set_promiscuity+0x126/0x260 [ 513.572553][T11879] hsr_add_port+0x549/0x890 [ 513.577602][T11879] hsr_dev_finalize+0x6c4/0xaa0 [ 513.583087][T11879] hsr_newlink+0x7d7/0x940 [ 513.588052][T11879] rtnl_newlink_create+0x30d/0xb00 [ 513.593711][T11879] rtnl_newlink+0x16d6/0x1c70 [ 513.598941][T11879] rtnetlink_rcv_msg+0x7cc/0xb70 [ 513.604417][T11879] netlink_rcv_skb+0x208/0x470 [ 513.609720][T11879] netlink_unicast+0x75b/0x8d0 [ 513.615034][T11879] netlink_sendmsg+0x805/0xb30 [ 513.620339][T11879] __sock_sendmsg+0x219/0x270 [ 513.625568][T11879] ____sys_sendmsg+0x505/0x830 [ 513.630876][T11879] ___sys_sendmsg+0x21f/0x2a0 [ 513.636114][T11879] __x64_sys_sendmsg+0x19b/0x260 [ 513.641600][T11879] do_syscall_64+0xfa/0x3b0 [ 513.646640][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.653069][T11879] [ 513.653069][T11879] other info that might help us debug this: [ 513.653069][T11879] [ 513.663309][T11879] Possible unsafe locking scenario: [ 513.663309][T11879] [ 513.670858][T11879] CPU0 CPU1 [ 513.676247][T11879] ---- ---- [ 513.681710][T11879] lock(team->team_lock_key#5); [ 513.686684][T11879] lock(&dev_instance_lock_key#20); [ 513.694612][T11879] lock(team->team_lock_key#5); [ 513.702097][T11879] lock(&dev_instance_lock_key#20); [ 513.707433][T11879] [ 513.707433][T11879] *** DEADLOCK *** [ 513.707433][T11879] [ 513.715676][T11879] 3 locks held by syz.2.1679/11879: [ 513.720880][T11879] #0: ffffffff8fa327b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 513.730404][T11879] #1: ffffffff8f510108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 513.739487][T11879] #2: ffff888058adce00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 513.750248][T11879] [ 513.750248][T11879] stack backtrace: [ 513.756151][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.2.1679 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 513.756176][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.756188][T11879] Call Trace: [ 513.756197][T11879] [ 513.756205][T11879] dump_stack_lvl+0x189/0x250 [ 513.756238][T11879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.756266][T11879] ? __pfx__printk+0x10/0x10 [ 513.756287][T11879] ? print_lock_name+0xde/0x100 [ 513.756306][T11879] print_circular_bug+0x2ee/0x310 [ 513.756327][T11879] check_noncircular+0x134/0x160 [ 513.756347][T11879] validate_chain+0xb9b/0x2140 [ 513.756364][T11879] ? console_unlock+0x21b/0x270 [ 513.756382][T11879] ? __pfx_console_unlock+0x10/0x10 [ 513.756400][T11879] ? preempt_schedule_thunk+0x16/0x30 [ 513.756427][T11879] __lock_acquire+0xab9/0xd20 [ 513.756455][T11879] ? dev_set_promiscuity+0x10e/0x260 [ 513.756476][T11879] lock_acquire+0x120/0x360 [ 513.756501][T11879] ? dev_set_promiscuity+0x10e/0x260 [ 513.756528][T11879] __mutex_lock+0x182/0xe80 [ 513.756545][T11879] ? dev_set_promiscuity+0x10e/0x260 [ 513.756570][T11879] ? dev_set_promiscuity+0x10e/0x260 [ 513.756593][T11879] ? __pfx___mutex_lock+0x10/0x10 [ 513.756608][T11879] ? netdev_info+0x10a/0x160 [ 513.756632][T11879] ? __pfx_netdev_info+0x10/0x10 [ 513.756658][T11879] dev_set_promiscuity+0x10e/0x260 [ 513.756681][T11879] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 513.756706][T11879] __dev_set_promiscuity+0x534/0x740 [ 513.756734][T11879] ? do_raw_spin_unlock+0x122/0x240 [ 513.756757][T11879] netif_set_promiscuity+0x50/0xe0 [ 513.756780][T11879] dev_set_promiscuity+0x126/0x260 [ 513.756804][T11879] team_change_rx_flags+0x123/0x220 [ 513.756836][T11879] ? __pfx_team_change_rx_flags+0x10/0x10 [ 513.756865][T11879] __dev_set_promiscuity+0x534/0x740 [ 513.756890][T11879] netif_set_promiscuity+0x50/0xe0 [ 513.756913][T11879] dev_set_promiscuity+0x126/0x260 [ 513.756936][T11879] bond_change_rx_flags+0x219/0x690 [ 513.756966][T11879] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 513.757002][T11879] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 513.757030][T11879] __dev_set_promiscuity+0x534/0x740 [ 513.757055][T11879] netif_set_promiscuity+0x50/0xe0 [ 513.757078][T11879] dev_set_promiscuity+0x126/0x260 [ 513.757101][T11879] hsr_add_port+0x549/0x890 [ 513.757130][T11879] hsr_dev_finalize+0x6c4/0xaa0 [ 513.757157][T11879] hsr_newlink+0x7d7/0x940 [ 513.757181][T11879] ? validate_linkmsg+0x765/0x950 [ 513.757213][T11879] ? __pfx_hsr_newlink+0x10/0x10 [ 513.757240][T11879] ? __pfx_hsr_newlink+0x10/0x10 [ 513.757265][T11879] rtnl_newlink_create+0x30d/0xb00 [ 513.757289][T11879] ? __pfx_aa_get_newest_label+0x10/0x10 [ 513.757315][T11879] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 513.757336][T11879] ? rtnl_newlink+0x8db/0x1c70 [ 513.757355][T11879] ? __pfx___mutex_lock+0x10/0x10 [ 513.757375][T11879] ? ns_capable+0x8a/0xf0 [ 513.757403][T11879] rtnl_newlink+0x16d6/0x1c70 [ 513.757428][T11879] ? __pfx_rtnl_newlink+0x10/0x10 [ 513.757448][T11879] ? __free_frozen_pages+0x76a/0xe70 [ 513.757470][T11879] ? __lock_acquire+0xab9/0xd20 [ 513.757499][T11879] ? __lock_acquire+0xab9/0xd20 [ 513.757531][T11879] ? is_bpf_text_address+0x26/0x2b0 [ 513.757561][T11879] ? is_bpf_text_address+0x292/0x2b0 [ 513.757589][T11879] ? is_bpf_text_address+0x26/0x2b0 [ 513.757617][T11879] ? kernel_text_address+0xa5/0xe0 [ 513.757646][T11879] ? __lock_acquire+0xab9/0xd20 [ 513.757680][T11879] ? __pfx_rtnl_newlink+0x10/0x10 [ 513.757698][T11879] rtnetlink_rcv_msg+0x7cc/0xb70 [ 513.757719][T11879] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 513.757741][T11879] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.757767][T11879] netlink_rcv_skb+0x208/0x470 [ 513.757789][T11879] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.757809][T11879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.757835][T11879] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.757857][T11879] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.757880][T11879] netlink_unicast+0x75b/0x8d0 [ 513.757902][T11879] netlink_sendmsg+0x805/0xb30 [ 513.757927][T11879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.757951][T11879] ? aa_sock_msg_perm+0x94/0x160 [ 513.757975][T11879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.758000][T11879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.758022][T11879] __sock_sendmsg+0x219/0x270 [ 513.758053][T11879] ____sys_sendmsg+0x505/0x830 [ 513.758078][T11879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.758105][T11879] ? import_iovec+0x74/0xa0 [ 513.758124][T11879] ___sys_sendmsg+0x21f/0x2a0 [ 513.758149][T11879] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.758187][T11879] ? __fget_files+0x2a/0x420 [ 513.758206][T11879] ? __fget_files+0x3a0/0x420 [ 513.758230][T11879] __x64_sys_sendmsg+0x19b/0x260 [ 513.758254][T11879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.758282][T11879] ? rcu_is_watching+0x15/0xb0 [ 513.758313][T11879] ? do_syscall_64+0xbe/0x3b0 [ 513.758331][T11879] do_syscall_64+0xfa/0x3b0 [ 513.758347][T11879] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.758374][T11879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.758393][T11879] ? clear_bhb_loop+0x60/0xb0 [ 513.758413][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.758431][T11879] RIP: 0033:0x7fa2b0b8e929 [ 513.758447][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.758463][T11879] RSP: 002b:00007fa2ae9b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.758482][T11879] RAX: ffffffffffffffda RBX: 00007fa2b0db6160 RCX: 00007fa2b0b8e929 [ 513.758495][T11879] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008 [ 513.758508][T11879] RBP: 00007fa2b0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 513.758519][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.758530][T11879] R13: 0000000000000000 R14: 00007fa2b0db6160 R15: 00007fa2b0edfa28 [ 513.758549][T11879] [ 514.455363][T11879] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 514.497747][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.514101][ T5965] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 514.521815][ T5965] usb 2-1: can't read configurations, error -71 [ 514.538503][T11879] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 514.549262][T11879] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 514.560928][T11879] hsr1: entered allmulticast mode [ 514.566284][T11879] bridge0: entered allmulticast mode [ 514.571727][T11879] bond0: entered allmulticast mode [ 514.577145][T11879] bond_slave_0: entered allmulticast mode [ 514.583007][T11879] bond_slave_1: entered allmulticast mode [ 514.588884][T11879] team0: entered allmulticast mode [ 514.594660][T11879] team_slave_0: entered allmulticast mode [ 514.601852][T11879] team_slave_1: entered allmulticast mode