last executing test programs: 9.241412509s ago: executing program 2 (id=831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400002c00128009000100626f6e64000000001c00028008000b0004200000050006"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r4, 0x0, 0x11, 0x0) r5 = syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 8.869344174s ago: executing program 1 (id=834): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x109800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r3}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e27, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0xd, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9102139c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e3bb3f10000000000000010e2000000000000000000000100", [0x3]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {}, {0x0, 0x85, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000003c0)={'bond0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x14, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0xfffffffc, 0x0, 0x4, 0x8000}}) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030509023b000101ff00040904000a03020600060524060000050300e0000d240f0108000000020007000209058202d64c81dc020905030210000a03d2"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ce4e881021049204f157000000010902120001000000000904004e1cd07a01"], 0x0) read(r0, &(0x7f0000000080)=""/84, 0x54) syz_clone3(&(0x7f0000000240)={0x8800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)=0x0, {0x17}, &(0x7f0000000140)=""/73, 0x49, &(0x7f00000001c0)=""/57, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) prlimit64(r9, 0xf, &(0x7f00000002c0)={0x200, 0x7}, &(0x7f0000000340)) 7.497480867s ago: executing program 1 (id=837): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = io_uring_setup(0x5a2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, 0x40000}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x80000000, 0x8}, {0x6a, 0x1}, 0x5, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01}, 0x4000010) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x86, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x89}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 7.046619999s ago: executing program 1 (id=838): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socket$inet6(0xa, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) (async) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x300, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x300, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0x4018aee2, &(0x7f0000000080)=""/1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r7, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) 6.522274383s ago: executing program 1 (id=839): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0405626, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = creat(0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x40810) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x3c, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x7c}}, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x5) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r9, &(0x7f0000000140), 0x0, 0x1) 6.157107189s ago: executing program 3 (id=841): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x4, 0x4, 0x30, 0x2, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @multicast2, 0x1, "2e982c09ab15eb7cc2bb0a1eec919049d880907f99a9f17c7e9bd9a81fa77d7e", 0x7, 0x10001, 0x572, 0xfffffffb}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) (fail_nth: 4) 5.108785281s ago: executing program 2 (id=843): syz_emit_ethernet(0x3e, &(0x7f0000000840)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "a0f4dd", 0x8, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0x4e23, 0x8}}}}}}, 0x0) (fail_nth: 2) 5.01355181s ago: executing program 3 (id=845): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) unshare(0x40000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0x103, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x62040200) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) unshare(0x40000) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0x103, 0x80000000}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r1, 0x2) (async) 4.260284991s ago: executing program 2 (id=846): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000002c0)="4ef490a1e8b9d348f18dd384fc7b754764692704ee2d6e39a254084ba296cc610f5fff1342914c0bcc21c87541d7b285642204598d4f8f5816fbad462eaa818d31ecf07e65a626612b59391674e00c33fa35b75615f61be25defd94c2903b663", 0x60, 0xfffffffffffffff8) r6 = add_key$user(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="a92b39f482c6f8472765ad12e477d2b51f6f173d1599de830ad66fb8a810d9209af99c788e93deb0db6f3cd06ef183f0e48eb2a746691f47798b07186108d96168550c7a80bf133023cc31b3129327d3b19b5b0845e3dc45947153467d7f14007b58aecbf1d7f4924d183a1d2658c79344012469bcb1bfc2c365ffc9321d85fb7268f5c828feccefcb652784b6234767b71701783ae0ad4e4872d7f7e0641c4e0faf44ff3a57da2965bbb7d585327ccdea20433319c94d378d46ce90310a0573d838384a7488c0b69527009ef16e21625effa0d2", 0xd4, 0xfffffffffffffffa) r7 = add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000600)="917a9432e3534a676f6c632b439802467272e0b47abf18a488fb67b12556f1055ab3fd38c2345e32fc3611c04c9f108f96ec1fdcbcda1c3a67de8fbfbf5521e1aceac9e2f93eef5badfff233dae28a5e51291eefc713252174e9a4ebfe3c05a7f1c351b0cecf5ec437a6bc0382a9ce2c7f6a2ae71cc50dc0cd584d82f69d8e2184c5f6038209c279f5befaec7815a8d8b593686e7e51eddff94d1b52519016220acde9899ad31833db1624513787cc3e6ae2dff303399801c66835594bfa5a618719a72fd82f735e374812e636fb7488", 0xd0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000580)={r5, r6, r7}, &(0x7f0000000700)=""/210, 0xd2, &(0x7f0000000940)={&(0x7f0000000800)={'blake2s-160-generic\x00'}, &(0x7f0000000840)="e1c1f6aba77b3de849ff05036eccc4a7c38f1b976ac69e06a8cea814bc04dadac61b41e6e8b5c9bb1ef38bf572e683dfd57920ab76cf6c776dd4e40e13933a55f552719d09aa00c13f75e5491b556044666db5ec64e8269025f2c571baef2636519ce750359c95e5d4b671043e9bc3160cfcf4521e9e3c8522ed1f9adf4c6ee828dafe0cea390eb5754a65d67b9aee8ba55095560c5f0c6a166621a0e29ed94224325fec43d82fbd3a9fae67421ebf937c119ca029d02e37bce7072bc89a211b16c4ba0d2672d9236ab299f0837322f6041a922b64ffe25504491af4111b7e3bfc481d74", 0xe4}) r8 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000140)=0x1da, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x10800, 0x0, 0x0) syz_usb_connect(0x0, 0x3c3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6e01208480b06100ac0010203010902b1030100008000090471000703a0b50009050c04400009f801a62167473354a9fd3c3bb56f503bb326e6f93dc2b06b0f472671c04299b6ba4c983afcdbc2cde25df75c1d795616ebe27f6fd73f4f33454918bebdb32e8469e0eb004afd05767dd78e5e05202b5c91a13361551d40221966f94cdd70a73f55225a476cde9cf6e73246d2a6de9bbbb85b4b2f93f0a630b0edf2a5012b9385e39df7f263f6c6dae9d7b888bfe97521d421947a7354acf39bf4bf1dbe931efe7bf969b4734957de09050a04400007000b090503"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000380)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.880040906s ago: executing program 3 (id=847): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000003c0)=[{0x30, 0x9, 0x0, 0xfffff034}, {0x80000006}]}, 0x8) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000e00)="490000801181a8fba96f00ef95", 0xd, 0x4840, &(0x7f0000002400)={0x2, 0xfdfc, @multicast2}, 0x10) 3.637189933s ago: executing program 3 (id=848): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r2, &(0x7f0000000000)={[0x9, 0x10001]}, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r5 = syz_io_uring_setup(0x204aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0xf8, 0x7, 0x3, [@generic={0x3, 0x24, "df"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x8, 0xf8}}]}}]}}]}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006"], 0x48}}, 0x0) io_uring_enter(r5, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0xffff, r5, 0x2}) sendto$unix(r0, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authencesn(vmac(camellia-asm),lrw(anubis)),tgr192)\x00'}, 0x58) recvfrom$unix(r1, 0x0, 0x13, 0x10143, 0x0, 0xfffffffffffffe70) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc25c4111, &(0x7f0000000500)={0x91f5, [[0x9187, 0xd, 0x7, 0x6, 0xffff7fff, 0x5, 0x7, 0x9], [0x10, 0x0, 0xb66d, 0x3, 0x2, 0xfffffeff, 0x8, 0x4], [0x5, 0x130c, 0xd, 0x7, 0x2, 0x9, 0x0, 0x9]], '\x00', [{0x62de, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfff, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x8, 0x1}, {0x2, 0x11, 0x0, 0x1, 0x1}, {0x3, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x75, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x1744a20e, 0x1, 0x1}, {0x10001, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x8, 0x1}, {0x48a, 0x23}], '\x00', 0x9}) 3.533967459s ago: executing program 1 (id=849): r0 = syz_open_procfs(0x0, &(0x7f0000019180)='net/if_inet6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000019240)={0xa27, 0x4000000c, {r3}, {0xee01}, 0x9, 0x7ffe}) syz_clone3(&(0x7f000001a240)={0x204000200, &(0x7f00000190c0), &(0x7f0000019100)=0x0, &(0x7f0000019140), {0xe}, &(0x7f00000191c0)=""/6, 0x6, &(0x7f0000019200)=""/4096, &(0x7f000001a200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4, {r0}}, 0x58) kcmp(r3, r5, 0x5, r2, r2) setpriority(0x1, 0x0, 0x900000000000000) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40100, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f000001a2c0)={@private1, 0x7, 0x2, 0xff, 0x8, 0x1, 0xd}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) ustat(0x11, &(0x7f0000000600)) r9 = open(&(0x7f0000000040)='./file0\x00', 0x101043, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019080)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r9, 0x0, 0x8}, 0x18) 3.349945802s ago: executing program 0 (id=850): socket$inet_dccp(0x2, 0x6, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x580000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x3512, 0x9d5f, 0x0, 0x0, 0x1802) 2.996202901s ago: executing program 0 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000cc40)=@delchain={0x6f4, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x670, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_ACT={0x70, 0x1, [@m_connmark={0x6c, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x1, 0x6, 0x9, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x258, 0x7, 0x80000001, 0x8}, 0xbbd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x5b8, 0x1, [@m_xt={0x10c, 0x13, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xbd, 0x6, "e2b610297d46ae727582798eb402f40ea6cd0dfede17d31cf92e5567413311ffb876430bf3134437492a286ef857e1628c2ba80b6ea9d982dcb6d9619351554fe1cf3392d0eb4116f2f647c399370ebbb65b14aa068d1cc96aef641177070815c137b231b52ff2f6209583fe8f3e42ce149a65e51d17faf9c0aa1bdedc7aec915a1ceae0c8d4bd03e4d3d9a6ba795a2da6a0a006780ab89e0c9a22a8a9d697a871a295ec4e006e3d7ba934f3a192a1c2e913f120161641e3cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x50, 0x3, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x9, 0x4, 0x2, 0xb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xd4, 0x1b, 0x0, 0x0, {{0xd}, {0x4}, {0xa1, 0x6, "36047603580b5693a3e86a410f480b895f9389c0a514ab3ac9de40380867aca68d67c2f653387687d65b81f1b6472f627074ebd93bb51ce55b562149269f748ef013f2863adc7292934113ce925946c08ccfe10772f7db559f34efc4b19c576ba7c4effb6c071fe76488c7320feaa8dbc712310bc5ba3b075b46ea960e962c2eee110d02111088e3fa93f11a4758a2d42df2486ab6a5bc58b430d5ab47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x5c, 0x17, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "e45c9643098a39511d637a85a61d3b20319d193d196ea7500a0925c56a79c883fb1e38963c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x144, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x7, 0x9, 0x4}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x3540, 0x1}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x6, 0x5, 0x186172f8}}}]}, {0xc4, 0x6, "c55312d6488491d6549b73fe694fdc8a8b3d7e4ee311cb68637f551441143729a07ddb4f731e5462147c590d6233c50b66441f9ce7ff2c8908c90c73c79f95b892e47ade9c84fa4ab4218429ba15692ca4b3b0651ae13f80fa046c34ae810c057802598a494e5c38c3b4c3fb33c6edf5c5d6ce0dcab8d085460a29c541047a4eba612cdb35868c3d59ee82af7f2d656c01af3c2b1738a72f888758009e4040937e3517ac0915974d8800bf251263c12e5c61538455ec09915fd3e35888e33848"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x2c, 0xa, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x5c, 0x13, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x26, 0x6, "24b62dd14d21d483cc49aa477e94a009729f71ff6fae3ee9b73845b905a122a755e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xe4, 0xe, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x4, 0x6c3, 0x3}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffff5b4, 0xffffffffffffffff, 0x7b, 0x6}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7079, 0x4, 0x1ff, 0x5}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb2, 0xf3e, 0x20000000, 0x9, 0xf90}, 0x3, r3}}]}, {0x37, 0x6, "4175fd9c735c83cffd1471e77382a75d76f3245ff71c085e1fffe2f2920a594e29fc3ceefc22fb82a1a8395bb663bb8c0abfa3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x78, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x46, 0x6, "ea2537326a94280aec26e11eed80438e4b21fb8875bba335028d54a63709d0ac8b7046fcecc7f3e6513bf23bad36ec5d595d2a1277ff6115da5d0865cd71c2b078e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x34, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xdd45}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd2}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x401}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xff, 0xffffffff, 0xff]}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xc}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @empty}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x8}}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 2.679072631s ago: executing program 0 (id=853): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @link_local}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f00107f000000000109021d0009000000000904"], 0x0) write$tun(r1, &(0x7f0000002bc0)=ANY=[@ANYBLOB="000008004500004000000000008490783fffffffe000000100000800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003ff9078fffc080a000001d500000006050a000000000000000000020000"], 0x4e) unshare(0x8040600) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x7f, 0x4) 2.467896189s ago: executing program 1 (id=854): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/14, 0xe}, {&(0x7f0000000480)=""/186, 0xba}], 0x2, &(0x7f0000000540)=""/246, 0xf6}, 0xde2}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)=""/210, 0xd2}, {0x0}, {&(0x7f0000000c80)=""/174, 0xae}], 0x3}, 0xb40b}], 0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000080)={0x7ffffff, 0x125080f0d0f47a09, "000097cba2760700000000f80000000000000001390d3af6d74de96f48ff089c", 0xfffffffe, 0x80000000, 0x3}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xbc\xd0\xa6\xd2G\xbb\x94\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9:Lt\xa2K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\x04\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf5\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;Jxc\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t', r7) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 2.213541797s ago: executing program 3 (id=855): openat$pfkey(0xffffffffffffff9c, &(0x7f0000001980), 0x200000, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x70}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f0000001040), &(0x7f00000000c0)=0x4) 1.677927288s ago: executing program 4 (id=857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x2c00000000000000, 0xb, 0x6a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xf0f02a, 0x100017}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf253f00000078005e800800060001000000080007002b050000080003000800000008000500400000000800070062040000080006000200000008000200040000002c00010a907f8c0001800000000000004e0400e50700000001000044faba0e8f24b956d6daac151000000000290000004001000005000000010000000800020007000000080006000100000014005e80080002008eb206a7eb71308a9400161330db2518a90dd6625825bffac09c3bc20112c8a1ff0c904b024968"], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x44005) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000040)}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x5}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000280)={{0x80000000, 0x0, 0x1, [0x12000, 0x1]}, {0x80000000, 0x0, 0x0, [0x2, 0xd5e]}, 0x4, [0x7, 0x3]}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000044d564b"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) 1.241658122s ago: executing program 0 (id=858): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000400000000000030000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 1.203348733s ago: executing program 0 (id=859): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x2, 0x8, 0x1, 0x3}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000023c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB='6', @ANYBLOB="bfe8148d0c0ee5f2", @ANYBLOB="9536673b2a8f39a45d5dd70a3ff63eab29ccc23be7e55c52b4d9889747a0000c87d2eb774fda7a64277257478a2b4e02586e3151e8284bea6ba6871997db9766a4a8050ac734a9146ae1841a0fecf6aec40cd5b19d41970aea32a779ffcfad0c581ff264cb0e068065dc78b8fcfd95d542e56919940c6aa35c8ae69aaa5ad39f85f558946719b915e8a6cd095e54e6475839782e06f4fb86a64bae41d38e8339fdc696be74aac479348330104635ccf2a52abafa070e", @ANYRESHEX=0x0], 0x20) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x10001, 0xffffffffa14b4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e96775fb661190a}}, 0x50) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc, 0x3, 0x100, 0x4000, 0x1, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004940)="9630161a5b9d0224ffbfe13a02b1879f4692e3f2901af098850ccf9f773fa990aba220517cb287d8ceaf90bf40236c14ced6b8233429c5dad591e6cf05ed584bd6f8db7cc97731b88de58959d6022d59a2d3ab8e121e53f165367bf7d340e4485e35fc3a5757447b2820df0417f4f45944f65f2e2a24538638b33fe0ff47b70eee991b11006a8fa9f8067436f65c73e51fd2c94d26e6a2c2a4ede58baa3c65ded1547fe674e81ed6bc515d41a5ddf531d59f6b81f9accd2892fa693ee5caf7c9f849571d59784e17a23b97cdbb01f9b370f70ddda76387e9151f1822bd0c07232ec4fbb5636c857235d8bedb71c86538801e27c6989814c70ce6a29b08520804ea95895bd393485db7c934b842f2f5bd8bae10c51ee3f880265e161cf154b282a258486dcea810741ff1ad101a59ebfc56d246c45fd6e72bab63eaf900820b197d219bb41b25dea1a128afa6852d81b83b03239e4fff21bff672775be83bfd63fad9bd5a821c7154a3a83014e94e5828e7b07dada1e2ef6cbd80bff8a9f13fd10589046349eb4a7d0365c6a48359e3bdd349ad370e06054862f3d8a26fb423fde46a774a4b452f40a83db2e194d0d3d2bad9b3beea5356f78264ba84ac450bfa626bdabc822babe47aac5d78cbde47d72c531c02c6ed5c2ac1f5674ddebe2600727ea9c76c1d9019e7b2a2c59f69629fb92a2b8cd27b2f7c49a25515f582044d0678f48b7c0f5f5b118b76fc4ca9932b6adbd0c0dd3abc13ea96b9b6f578879bd543c6c47783e7caf8ddfc8a3ead0dee12684b8b762f954362e36f699bab2448001519677df4393d23b10866a1c0d9d2a10940cdb4d5bf969f157fe4ad39c217e8521e7f3b5224207fd8ad790c6fda43f6decb4d7472b4f6617248a85493de04ca0701f95f28bbbd1b4e40001c16050ea7bead398d0ec5200ee935cc92dca5b9b6aec676ae40be922eec4caea59d0dc6d190f88a689f3694772435852178183108b6140a162fcf7e186168d179a09e50f0c29a05e0d6b2e498b98d5dbf83ec367147641c6c56965530352c5ea952a345d33bcbd0ae0fe03507cc3d4c01054734f439109f74f151ebcea6e4fbf3eab3daed71faee384a38f2557ac95cc644738b74c1f92a392b525e4e826474b7ee2cf793e2216d27fe6cfde911ffb99745d03cb30d1daef7fba2ca1b21bee13100e4a46628dcb1ff91bc4523c54d10b9aac5c4682b651360fc337760d4cec1d6a2f74dc6f9183d6334d24a7f95f49ecebef17d9b3e4b99f684e7d4e70e836202408f35d611cb61d04754672106474182272f832f4373c85e6bb06749be90bbfa1395e0bcda4c1576cfffb405a54734e9a201089f8eea7aa7d9f3d93da8391ed47aa1ffe28564b6ed069b8cffd75911c3b872a4d9f426e3f02b54b5495f5e11b6a241bf7f1e7e7223729ef94809d79c12cd4f88af4a851716dd508873b9add21cd4d7020ea8f8fbf3cae8d34f882a9040ffe41645c72e7c19e32eb29fb2f3953b0e1c9fdf91c4bf1795561354b5cf4332ddee9f753daa8e8bb81853af8bd69e23fae58966de9af0292777eb6c7136b463364deb1d5bb359c15feccdd09ac19aba4dd530a038ec424e1d0f1e0d198ac33a5e3ecc918cbd8fc04bfecb277b20334bdbad03e6e6cac1c98bc74ab857781e0e2688904bf0784855098477182a6de9015cfad18d7010279e1e02507cc9a33df5bc2b7d32da5987689af07f8cb21f53a3c4e5f7e66bdb5eed5cd0554c85508eb1b27e6b07e47fc3dea8c4b7da3fd77528c9c71962862eb3f1b64c639e7f2bf0ee5c5cf76d46952db3e104cde595b77d3920932018a8d5eeb64d72c7ada83ecf4b3506dfb922b30e2ac2490034b85aa431df4fd5d8dfcc0e53cbc7c76c2d0fb21828448de644ad3115aeea874980147895d623c1db410e589d6bed1f1fedd8d7a36a2ed9c3777e0fe17a134591506c2a9e17113b5d1749eba3fa5241489af787de2dd84af19962256ea17b5ea0718e41b16756d2aeb3fae48e2c48e8dd2635b8791c1760110495c1bc6c56e26b7739aa1ef2caefb828a178da124fa83c663a2793c72062fdf3847123d19563244b8b7ae0ec0af1764a17bdbb3be470148150ee12954280363105d1e2d530b764cfe852ce41e7557dd2454f0a330fe5be22805a9d574df75cd64f8c1fa21d95212e3a2603833d18d2ba5c0bfdb29609722ccaa11f3a2933af02237cc7aa27af6fe6c71249ec34e9641dd9a014c64f49d88eca1d5ca38328caffc2bd3aa7811126cb3ec65559e8c4ac65b7d1a3b4a73390211c2645e45fd20c61592435edf460d8cdc0f4ac7a6d3c82bb7272daca4e63cebce1ad29832e57028b9463ced2adf1f43b2f3396faccb8dbb6597abac5b5cf136fb4c11fa006cc0f5841859da680f874b3c558b25ea57e3fabf4bfe93457c354a22b9de16cdde84a6c8163d8c6df2042fe00f57469f7c19be936d28e33efa37dae0ec5d81eb89c7d33dad808ba070ceb34b59ccabf99286700f2cf5daa1fe90fdceef67856d23345f51b9b598eaa280f2b0c82b69729da676dfdedaa22f29a5ec56c30e22f0070f32c41c4a5ed3123bc92806d6604320f9e8a6010d897007335c07479c5c8583ccde3e0b849d97d2a88b004f2e724bde6aff8b3b473860a209052bb2d22b151560a41926ab2a7818cc8489e5647d905777ae14f0f71a7b5a109179c0b2ab35a265f35ca9d3423cb831b2860138c79580636cf9ae72f96991a1f04ee485bda88b3fc89e76f28a54cff5027e74a984261e10d1db1dff08ac5a0e64c8b68c3e03869f5bdbad639fc7ae913c1cccab4f2a83a009357255d2a0828ba3a86de224db4e95afe0ea4740a9190150bf0c02c2ff0674f7818680450a2e43321ec2eb8e21faa2cfdc2af3bb38d8a6048870de943458b5be76ef5ada936e78f4a529f49d7fa26cdebde21bf408516e5e93f4c1ced2077ba0be9fd008a5d46a50d819303a9856941a35c43e5094f65431e1343bbad1dd50e1333ebeb59bf3b4d090aa24a341b19bcfe85d356901c2c4fcb78bfb060ca2310664c8f1d49b1f4b992eabd91710cb5799d5e17ba98572587d02ae5f85f9cbf4438d5de63846ca412e645bdb710a22206f98cd48fb0a7c0e55dca44a1439e3418b35a8a23cfd8dd206c4e2d2ef7146e426741e6cde4eb9e6da64137e3311dba24682f94a1885f48a6f56ef64de249abc695f626f70a1cfc64ea6d1cd9ef05909fb378c96a2adaa5ffcacd0f6032fb00c091fdb50e85491697f87a9f8d5e605f5521bcabe49276e12c8ce5687ac72c90f7dd4b46bc8dc979e58f40c7094198950f04be6d54afe303c5f4af176bd48a9eaa95e3f1b80797497b5aa94b529cd1ed693472b9ed05f25e4131148c9a8de063ca2aae8d7a9582cf67598cc139730e8387b9ec2ff5492a7bf1bbfb5beeb1d0be4f522bf27d4f6c6e873a0050c2c380aa3fdaae36afba0c8de6fc49efad509b6aa324f01fb8e1aff55416d82ce174f6511bb9ae005b9ad03812a18bedf5f29aa875ab1d0d32a55ca025bec39606346e8f4f9276b38e8286f4b609b26bea3d577defee0664b86c0b7b700708fb6fa6e9807a607c25bc91243b005232c8f661a202198622a06eb6292acde7146551c214091d7170ee3fd4252f6322603e80c6c7551c10f7f6a85e7c8aa2f9569a5a22022d234f02a870c4b584b36c6e6214bd2af3931ea93377e63ff80eb5b4dc465b3cd917c3fde8425aecca6b6888622d7247feea2ce3ad6c7a9053a7c93ffdd0df193b4b39205c36b17c1119baf9d599349adc6e66dbab707b5f1065300817490f298bca38502b7cdb95117b08cd03f9472dc24d9c1e9440fe1f50abf940049dcb25a97dd610db78771dfcff5eb82360fd8eb34fa08c049077c61f038b603b4dc016aa0fc23b3a56e49a16330f7c540712e9e82dada9304ce6a80ec5e0efaaca87fc9bb5c5cd6ae925111d61b6c5c00b11c9f07907350cd664510a99cb97d40c9596bbb574104670469449971b15435c663057705f583ed32b7292d5a45a446f9d80ecbe4ca4987e07a6237f10efa47ca4cdc8c21a76fab38dc1196f218848521a4dc9a60ce7135d518b3fc2dbc4150f425cfc6b14780b6d8b7183c2e60716c08dd19c1fa6d7c840e35cbddf8c31b9c4fc6f1019967fdce9002b62a05a81021632caaae02dd32f5b537e2404144873ecd3aed320ae2a08321325106c24531fa0cb3596f6c0560c9a325d6181c086da927d2ef0d42c648a71fa4684568b20f2976f80156d3bd0824ebbf2b8dbffe74fed1d7e65fc3ab4b889c352215033603e1888bc29c3dce458eb58738e0a0fd09dfa65f19fc0a6e4854b981a653439e2a7340263e4a9270890a6a69c64ab24b98dc6a63e0c66d38243ebcde7ba085ab21b77caf680e9e713e6c15a20299c87104582c71b70dac4b05d058a82172a880c5e4a662448283f40328cd7c8c26ca1e97faaf41c6750c9ac56ca877c5827d64016d8234b796edb03b8e092bad5a6232488dc88e3eead179d7f26bd6dfeb635268cdbc72993601b3ef0a19e85dece0fbc96c041255ec889604b169b4c8ddab9f08fcf28acc5971d966c631edd9179f5868192e7ca1fc2da6dc3872a86052ac0bd56b9abb97a29f4889b3cee0b603e4f61b926314cef7b48e740fdaecc57e9e317305f16a8489e4c6531941fd5cd2a1d365a86454a0ac6e17124570aa81e874a146d681f0f6f76d1825dfc69951ac4ed5d43a4c2b6b284362c99076dc69ff00c60064ddd504dcfa10ed82786e31aca85aeb92e61b3242e92185fcd6968e6098c31dbcc7f63d036a82e9a8217a8e3cdef48187013569e505e4b1697dde1618e0376f61440b0d2dc610f1d9c5ed013743c199d7d087bbcd9c61ad7e35325907a016794265d74a23a52b01b87cde0ed0fa5d9a330a88fecadd616f17d63b8f40056570fb00e0bcc6aaf9dbe9da1da0f699fce00d22b2518da0f2904f8d4a2a077810b470e6484e9c69aa2aea6e3e765915b7a825329bcd210a8d1719b6750acbac05278ebf0db2c1c4f7842947cd3d06c315603030deac8f6c8549845ba3041f27d3dd726bbdb40ca1cee0b57b46b2ade0d25a7eb970fe49bdb5bf35742eeeba5e4dff4b324d823ee54b97a55fa25a19ed75b4d24cc424d88835a989c79a7334d2ac3c641ea8a760013eb03b840f772f5d9292c40be1f24771a2d7a329c7cdc1db0967d1ad3f800c558eef1bd33428c8647903c9c534d16a65ea4fbea8318d96d26579167748964a3ecaddb31047cc1188a46ea5b41cd4e66ebafb6a609e40a761b03240a55f1b82bed09a2c945262496e9d60203cd755b951606674519fa02e6aab5a6231da493f4ddc70997b3aa49c39c09e7cff2523100631ac86b13e29d9bb8e855497cbd1cee4f98731020451ebc775612b9114ea4b67d9a8edee109ad895dc1252cb0d281e68d35b8b7234ba93679fecfbef0db9e1b38df7536deb996eb9c64df52a51138d9237697e163a32c3b069d0626ff13536cd595b62821510e85b607bb64cd15e19aeeb5efb87147d15184854a0b8cf550587237420d615f7fbd0a47924b502d96f5f9782ae4c8b640ca7bf33b40d0857c37f2f1f65e84d33299e64ede19eda11cb8b537cb81ce9ee25e1ce085f21b98b7f7bb4c7a4499ea854d49651369bf1204f6958531cd4eedb1fabf33743860f341167604a080aba7b4280ce0eb42b39f51bca533a2c5162c6f3e004733af9fda7e590eb5ab5dbd43244b2b302f4543948d83b17fa1964b01f143755c18fed9686af3054115d7c815467514860721c4ddb954543b3730b9f0724c585d935051c8ac910f922e8c5ac3c32a42c00d3342d9a139bde685581d434bf2661fb7080f7822e1aa9511fe32105ded8e7e89f7022c30a2e5182932fcf2bd40dbb90bc84f960caaef87fba9e8b2394f8e5bab05e7cdc06d467d8ff7798c3e8de2b133295b34c87150edcf6dd2b45c25a96fa66018f474d1f06d46f083257209f53473aa5c3a29a0124dd3452902eb0d22e322707d9199cbe2be04ba3c0cdf5f7776a6d289e3891e2410b8ce492b0b61913c4e473060b99a0567c1d4c2372efbb8497c3e90ca45b060a01e26deef9a959591afa738037d6a06e9e7afd97e5baf91158c701292fb78326725ab7a56770d4799666df0919458fda70a5bfdedab2f4b168ad4961f72cf5abb80502bbbd61c02fe81b1f5e4bc8a58192ae137a4875f34298f008673da05538652993bbbde04dabb6934c62c6771791ea5324450ccd443a1389a46a6e3ad3c74f70a3ca97b1a0201e5bb9bd07c9ae0a73f1ff592e9b24e5e199ce086e8f84cbcb36db10f78dbf1c104d93b930dece7e8cf3310fff062c2b095a5736b614a66a796674292aa2811b09940bf3ed518560105448cfb536f936ceeae66ceea0b0325cc661abbcaeaa709c1f7ff1fd883974ef480848af58655cc7c1fcdad97ab8bfbc645a7f5d1144a97636adfac82fae72b22ecc4c14eb6761b84ca40f0fa39b7812e80995fcca514a57f4b82168991fe643474992c513641bbd1c76031a80a5c9e27b503b115b71036593e74e8db1803fc81967d9af9d76335ae208b743eca400476e7245befb28f636ed39513f78c84f51c9e9b2cfe5360f2ba439d311f6cb28ff56e478ac6e05b4bc2fc77fffa37e874a4b0fbaef5d4779551378448618c2c0e3499e3b8bd2b725c925c7682bfa6dfd215d1b1fd02defba9ca13515e75b881f8e701436dec7ee14ca798d1a40e466290da925affd386e11c79e8d7cce8c49f51abeef7c54ae2cb3e71d67c263b3188921c45f25849ad9bdb321c2cc891287066bcc635e1af9ff5fc2c9414417e8818d2ec4a6b19ffc649bd41bfa4094c9548bb714ceeafcf7099988c025cd9bbddf7bb3b6a8d79bf431bbb77092e0c35ada2b6327e9fa48ee2738f0202271acbad721e72eaed31adce018c75e908b9983cb92223608618308f6912dde62309de45b427b35066800a81c81bd48166918b2af3aaa196f5123945edc760aad431891d13bdeaf35bf2ba11f6e51f591ceacf54f269c5d06bd2cbf7d3f947471b40d3baa657ef6b3e6a17f155025c18d05187132c326b508c9001dc9964dd903fb9cfeed7262b2c521042301f19e6ee3eb4514bba5a9a163bd51ad587c7d814b85366c86bde70a080e0789840e5db525c641f87ed3c00cd556a333b6f9fb46eb03ab47811409accc52544724f8ba2a000758be52faf3a2edd16411076e2fd01fe7a21a2964efffd47421f62dc8847f2d146e4be02c42156265763674dddb37729068fccfc9737b708952ae3afefaecfafbfc557a9396419dfbe46f76664f654958bb48067db0ee721d4cfa6abeddd1dd71e4296c6e2a84db032251f2648665798ef228a8e281e3ac346497b00bf8ec1dc7d3be6bb3b72eda571aaca484f239341f702d2507300436a65a92e2d8119d2bb5a0b14be1d3e13c62d1da755c3d6f22bc7dd0c0949d0067c8be362cf54a87ac25f25827dcd9472b618f09d7be2165eed38ec3ac05f0a96c531aa926bd9ff5c5d1ae093d69f7754593e0bebf5d34151d41c0bff59020db1ca58482ee43ab206cc25f33671f842dd3ab2a325bef72374440fbbee750941942eb09c232defcad4cee63ec0f4423df7c39124eba14e5fc3190c776d511e0a14ae6f05fe427ffadf3fba2f0033b85e6c98b83420e0db84c2112e48de299583cf33df848fb4a7249b5ee220fd3bd927fd97f045693f37f039f693fb3951024c36c7707641da9e529463ce9dc540c0a6bede5129bd0a03c1b6dba72bae052e25601f5240ab57bd392b4dda33bbf474d4865b9af412410a673cdc9a9fc03b726da494d0aee6c22a453c83b7f2d0b6aae0c519b6d1d12930fe7dac4b7c394068c0f065712ae7829b3b3248bc8cdea4852f766890287d8bb2201a9d31d586eac60bb5be703060ee52eb12a25c2f3831c5529a42cc34e293c2cbf1bf9c14ca5d9c2594ee7de2c33fa5e56229965a7648101f7d6a488524eb0504832834afaa9f65e2bed83c2a65d07ca0bc28399465a952ec5f7ee2ab749ef7eeaa19f4324041ce852492dc2a84ac827b85389c13778d63c360e674effb72b2a922157f84b64c3ad66e40b75222f2862ac17fda52fdfe7358728e2bd7c31e8e157b9bf39b9a5c7877af530935d8adb9d37176a1fed4e76948051f654aa60f4e12ceb7025a9b97035bf55b2b419fff1e273f5b1e3065a2e4c01ed7baf0d52f2981de2ca54180f8d5e4a30c6331d190b8f1dafae8323875b25665610f3c7337a62e7c2a4b8fdd52a4c899db11bf55fea485dc75a84594a328dad1e3dc188524c44416da7f68398102cccf25252e04363b3d8d51e51f9297f20fdcaddf1b5ea55503d39a15d11ad553a6e5ae14dbf1fdea61629e08c7864a17b93bfce3271f3912cd75d83338ee67b704b7b7c7118fae51fdbbd00d2aa33983abbfd63602e87bd0f6c095f48b8880cef7f21183981deb3d877709544079f889329a0065a2f370514a44cdf747a31c088706e2932a1a43186d5535caf4cf52bae50f67882915b3317ce49fbe7f28696a397be4a3f5ff4e34e971b0d7009575be01f3e6a09480d7f0571dd256588267ee1a888e4efbcb7481bee5adc96a82409f94c3f435203cd5526ecd82259638679a1375b8a2bb943170d17c575e068451262b2434cf23015f66e161771468800711cd6ea292c3dbaf6a00c7cdcc501fe361c7e686f7f7583434b9e9d9cd1e5ffa58e2744dd8c69df9e1884c8f26f375a004c90e75d79166a41e05fe93738fb24c55cd77ac2c441571242570d1086b6ab4ba514684eca9a5527942bd57e5d788405e189a3cb9f9418d60321f57ef6ad498a04b613a97a78322efc0afabb8ffe0dedb470ad62acb7370110d727d625cf1f6096706e98d07c81132c3874a670b359dd7de77ec910cd6972fb7b481b2360c8c2dcb1ff0d49f67b1f756fff0358e4cd04b2d41aa39c2860701b1d7f7255456f6bf61a8b366121a598afc5ad94963c7fab84ee8cd2a0ecdf5a8c3e56e81f97da1afa032da0248cbe2433f887eb1f99d88ad1c864f766f232086a53c80a7790b65c72fa5289267f20431492c6c0f4c48f4c805d449b8c88711250fb3d10b06931250bd44848a4cfe44275eb2971f04461a689ea420352c8f0b29fb7aa7d80732db2627b054c4b269d9b53bffef3941ed6c808a776cb2f0dfe18f0694a276776f7a4f3ac57957179f979133cc34290a40273f85fa761688a56d84525eb8733f49f7971744eefd4a04863d86e5a6b651c4a8fac01fcdfa1db6190fed9494750b44b84997b4adee7a87a68df04ca80c3bb7db841fdca288f18aa4396e5f5431ae87d602e52da64d2c33d851467fce3fc8705e7ec6443cdd815533c6df3124cd18b681e0c7b570f73fc2ff728c62a3eda963e8db2b84d6d00196ffccb4f0607e466e5c89a00227e3f7461377a47893d82ae1fa7f4fbef3245ddb73c317f6f6d7918de7888cfa0a69f59eda80f391d967446d2e25c575e7401e7d6f16a3b5109da3556c458dd37443368cf6ed8b728e10590e44a895c942179f61d3da7d09cc3f58254f3467106e630b24149a78df62c1d672c75dc4889e40f510801fddc3f3289fab44f04efbd1077c2cc37283e5d247268b9fc40fc4703213bc28abad57ee1220057ef940440c769f6f305ccc45796cfd4ba3d0e3d46da72f08e8d9ad483c13e0d35727e55a74490b147a65e81a1853118c621d0cbc5872c19c44e5c3c3e12b30bf7ac684afd144a59388f64e2a992f02b68e6058b4477dcdd6f2b6260e15dafa3591b4fa1b597537b38e55cca526eecb16ba8acb4b3bea6afe48c54f9b9de72e20a05b280325053eb666701df03f599f8c46367059241837eb469d656112d3e5e61cce57a0772f0b01c1af9f22660a3b2c0289ccdc4ae36756139c290b19081bbed6734dbd5caa09a4931d07e91819884ded5508b0c937ea1d4a234d49eb6855e8c284a14913ea3e3938dfd174e3f86eb914e3946e30fe978856beec2abdd97a01b2c6746389229cec7264ab9d912fff8c860871acf7fd5680fe37f06fbcf1db779bde965c2b8547c79a1ca6e17147530713dd215c70fcee7999ccc3a18e579d09237a61fbb9a37647dacbcb697932efd8b93ae652aaeffabfa2758be39fa574bbff251406a2c2057464e203cf1b5091d6b9b1919da44bffdcedfcb520d7d475a119a0b87298681e424f8e441edb66588c9e679f64e0a65b717d46a242be5810206c0dece15063db365dd300094fbc37cdc147532e7079c60acd769fffa1ac7998b5a38bf4c0412a7bceb714bce443e9153e263240e2ba867d68ab13fdc1aaa670d67a4f131abed5c59d3db527b130d6830d88fa88893268ae4fdc94e112874ddbffa1b708b2668a8e75e1307b3a16e8bea94890b77a29846fc7ef6d77dde9544fc0ed19df0f03216a1b771752309263a3d45f66359c2195c8e677df9a0a10f298f761d8f364ed29b2eb1cb195e9b4e33ccd333fd22dcc5f9ff38822b97b9a386ed2f97ff2c9495e2b1b6fbb054f9cf0178ce3f982add1cbed4d122a40e3fb24e8fe9f0c05e6af607a41d617cd74e961d8bf265c11e459056228125226490b25d252231671a88639e368cc703b71c10e9e80c5c2335e1e3acded84e115e34af2c882bc63ada3a82d54609a1cc5ed6cc3332381eec7df2a3f73401d53b2a312648a71662957462071eced869c53576036eca646d3742c51a91c62039fc8fa9616f352652972b89433295deefefaec4eb35064cc7d01ec19bd9e2a9eed4a8356d4bf32f706ed6184ce188dced98590653742a4c99de317fa206c8e68c102bb857a252876a8791fdb5bcda7b7ebc39278c9067c8cd009f1fb757f71d7476e6f63b596034296c8f5c9b9d1039e25b4e97b26be7743a577ef1fca5d620cde77f62b148cf6223f2507f599650af4f49b87360337c620fc7c02d528f9460577a62511f28553212116b45aa1e02ef37ccc5939e3de0d3975c060a345dc59f4af0fe0e67c0dc495cb64f564929fb0f054fd667420ac7a135907f8a3841b5115bbf39a630dddd4dbf3872ffd6c8e02843c2e19fb9f03f111cb0afea192ef328fc85aab6881a3fa922824d8078707f0630cee853164d83ba69399ec7f9e019ffdee9fa765e769f4f0c03d4316948b563f5bd18e6d6b12e56538e8a7e70136c3a0cc9b3037d50dbcf3dcb7a2edbfbeaa448f7233910987ae22ff31ab888aabaa3b99fe4adf54c9a73395826f7c8aeb61a153818557225fde94fa11f1793981c17015029e3dcbe7ab9123b57b118ae5d4795e0f0959cfe8ec5c57dc479dbd7fdcea8efeac7acefb999f13606a2b881415f79b605a084ec0b892f34fe313fa946851adf86691a7b6d88c2b3f0abfce604b14f9ffabd1fe09f0be187836c051e0b1da3137f98a5d1e4c861940b7581dc6f168e32fddfc3bcc0331ecd8e1346094a154ab863a3fcef226088373903785fbbba2cb391cb9060268bcc6874212d5748bd278f03877fae7949e5337421ad3ff9bbcc3db0c6b990aeae2b79f688289d4a9a9f2ffe4f2f8", 0x2000, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x90, 0x0, 0x3, {0x40006, 0x1, 0x80000001, 0x40, 0x5, 0x4, {0x3, 0xfffffffffffffe, 0x8000000000000000, 0x0, 0x0, 0x6, 0x4, 0x9, 0x0, 0x6000, 0x4, r5, r4, 0x10000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000002140)='./file0\x00', &(0x7f00000021c0)='./file0/file0\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, 0x0) open$dir(&(0x7f0000003580)='./file0/file0\x00', 0x20e80, 0x13c) 1.190605654s ago: executing program 4 (id=860): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x0, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) eventfd2(0x1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x3000) io_uring_setup(0x2e34, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x401f, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 990.066611ms ago: executing program 4 (id=861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) shutdown(r0, 0x1) 954.371181ms ago: executing program 3 (id=862): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9fc69000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x7c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 900.471372ms ago: executing program 4 (id=863): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fspick(r1, &(0x7f0000000340)='.\x00', 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r3 = syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0xa7f6, 0x10100, 0x3, 0x3cd}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r6) 697.126031ms ago: executing program 2 (id=864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000cc40)=@delchain={0x6f4, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x670, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_ACT={0x70, 0x1, [@m_connmark={0x6c, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x1, 0x6, 0x9, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x258, 0x7, 0x80000001, 0x8}, 0xbbd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x5b8, 0x1, [@m_xt={0x10c, 0x13, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xbd, 0x6, "e2b610297d46ae727582798eb402f40ea6cd0dfede17d31cf92e5567413311ffb876430bf3134437492a286ef857e1628c2ba80b6ea9d982dcb6d9619351554fe1cf3392d0eb4116f2f647c399370ebbb65b14aa068d1cc96aef641177070815c137b231b52ff2f6209583fe8f3e42ce149a65e51d17faf9c0aa1bdedc7aec915a1ceae0c8d4bd03e4d3d9a6ba795a2da6a0a006780ab89e0c9a22a8a9d697a871a295ec4e006e3d7ba934f3a192a1c2e913f120161641e3cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x50, 0x3, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x9, 0x4, 0x2, 0xb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xd4, 0x1b, 0x0, 0x0, {{0xd}, {0x4}, {0xa1, 0x6, "36047603580b5693a3e86a410f480b895f9389c0a514ab3ac9de40380867aca68d67c2f653387687d65b81f1b6472f627074ebd93bb51ce55b562149269f748ef013f2863adc7292934113ce925946c08ccfe10772f7db559f34efc4b19c576ba7c4effb6c071fe76488c7320feaa8dbc712310bc5ba3b075b46ea960e962c2eee110d02111088e3fa93f11a4758a2d42df2486ab6a5bc58b430d5ab47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x5c, 0x17, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "e45c9643098a39511d637a85a61d3b20319d193d196ea7500a0925c56a79c883fb1e38963c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x144, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x7, 0x9, 0x4}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x3540, 0x1}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x6, 0x5, 0x186172f8}}}]}, {0xc4, 0x6, "c55312d6488491d6549b73fe694fdc8a8b3d7e4ee311cb68637f551441143729a07ddb4f731e5462147c590d6233c50b66441f9ce7ff2c8908c90c73c79f95b892e47ade9c84fa4ab4218429ba15692ca4b3b0651ae13f80fa046c34ae810c057802598a494e5c38c3b4c3fb33c6edf5c5d6ce0dcab8d085460a29c541047a4eba612cdb35868c3d59ee82af7f2d656c01af3c2b1738a72f888758009e4040937e3517ac0915974d8800bf251263c12e5c61538455ec09915fd3e35888e33848"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x2c, 0xa, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x5c, 0x13, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x26, 0x6, "24b62dd14d21d483cc49aa477e94a009729f71ff6fae3ee9b73845b905a122a755e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xe4, 0xe, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x4, 0x6c3, 0x3}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffff5b4, 0xffffffffffffffff, 0x7b, 0x6}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7079, 0x4, 0x1ff, 0x5}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb2, 0xf3e, 0x20000000, 0x9, 0xf90}, 0x3, r3}}]}, {0x37, 0x6, "4175fd9c735c83cffd1471e77382a75d76f3245ff71c085e1fffe2f2920a594e29fc3ceefc22fb82a1a8395bb663bb8c0abfa3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x78, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x46, 0x6, "ea2537326a94280aec26e11eed80438e4b21fb8875bba335028d54a63709d0ac8b7046fcecc7f3e6513bf23bad36ec5d595d2a1277ff6115da5d0865cd71c2b078e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x34, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xdd45}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd2}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x401}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xff, 0xffffffff, 0xff]}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xc}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @empty}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x8}}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 606.187637ms ago: executing program 2 (id=865): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') getdents(r0, &(0x7f00000000c0)=""/90, 0x5a) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7b, 0x40, 0x9, 0x10}, {0x10000, 0x0, 0xc, 0x8, 0x2, 0x0, 0x7, 0xc, 0x5, 0xeb, 0x14, 0x6}, {0xeeef0000, 0xdddd0000, 0xc, 0x0, 0x1, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x5000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {0xeeee8000, 0x80a0004, 0x9, 0x0, 0xfc, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x1}, {0x0, 0xffff1000, 0x0, 0x0, 0x0, 0xbf, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0xdddd1000, 0xe, 0xfe, 0x0, 0x0, 0x3, 0x80, 0x0, 0xfc}, {0xf000, 0xddcd2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0xdddd1000}, {0xdddd1000, 0xfbff}, 0xddf8ffdb, 0x0, 0x8000000, 0x404431, 0x0, 0x2501, 0xdddd0000, [0x4, 0x0, 0x2]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 535.343041ms ago: executing program 4 (id=866): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') unshare(0x22020600) fchdir(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000041bc00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 357.395138ms ago: executing program 4 (id=867): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa6}, 0x3000000}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 191.263434ms ago: executing program 0 (id=868): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="027e8ced5e0c054632e67b7500000004000000080000000e000000800400009e77ae6dfc050345241847a31c28501221404ddb3cf1643b490d80079bf42b5520c4f44b76f0cd2d1dffba5d61ba227013e9bece21420b47ce32bba104da23bb9815bd75ac5fbf84ba15c98296b6b387d8b30462dbf9739d6bb0aab5229399d01d41fc34888a58c1bbb64069b989bfd5a5e9ec1c15b6db9d96c1de", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5533, &(0x7f0000000140)={0x0, 0x15e2, 0x0, 0xfffffffd, 0xffffffff}, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06907864010101ac1414aa00004e22658229e82e5628d05f233e323c79297af02641a8574f4b6f6909ae0505a0c31b415a76d781aed8aeadbafb8d283f7da644b7d4fbc14f48b669689283719067590e475735e7d8bbbbc387af8f1f45ab83e458b7323ab27b2d057ec8428677602a1162f28168e5a412", @ANYRESDEC=r1, @ANYRES64, @ANYRESOCT=r2], 0x0) close(0x3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "48c8e55da1803377", "ceeefa2c3b1af6c9d3952526d2f971f1", "3b2ea3a6", "e704c610275bf9ec"}, 0x28) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ff2ea1a2b50e54ae"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x105) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x52e6, 0x10100, 0x200000, 0x2ca, 0x0, r5}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000000c0)=ANY=[@ANYRES16=r9], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=869): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x5813, 0x100, 0x1, 0x8dc1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001e008d2a"], 0x30}}, 0x0) writev(r1, 0x0, 0x0) r3 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0cc5604, &(0x7f0000000180)={0x9, @win={{0x2, 0x1aa3, 0x2, 0xcd4}, 0x3, 0x6, 0x0, 0x80000001, 0x0, 0xde}}) kernel console output (not intermixed with test programs): ing attributes in process `syz.0.569'. [ 231.370043][ T5894] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 231.450225][ T5894] usb 4-1: device descriptor read/8, error -71 [ 231.575992][ T5894] usb usb4-port1: unable to enumerate USB device [ 231.644357][ T5892] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 231.875366][ T5892] usb 2-1: config 0 has no interfaces? [ 231.891574][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.900860][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.915170][ T5892] usb 2-1: Product: syz [ 231.930198][ T5892] usb 2-1: Manufacturer: syz [ 231.935183][ T5892] usb 2-1: SerialNumber: syz [ 231.942616][ T5892] usb 2-1: config 0 descriptor?? [ 232.234804][ T975] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 232.484116][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 232.491468][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.500979][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.512658][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.529452][ T8117] syz.4.571: vmalloc error: size 779452416, failed to allocated page array size 1522368, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 232.547596][ T8117] CPU: 0 UID: 0 PID: 8117 Comm: syz.4.571 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 232.547617][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.547627][ T8117] Call Trace: [ 232.547633][ T8117] [ 232.547640][ T8117] dump_stack_lvl+0x241/0x360 [ 232.547675][ T8117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.547707][ T8117] ? __pfx__printk+0x10/0x10 [ 232.547726][ T8117] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 232.547752][ T8117] ? __rcu_read_unlock+0xa1/0x110 [ 232.547770][ T8117] warn_alloc+0x27c/0x410 [ 232.547789][ T8117] ? __pfx_warn_alloc+0x10/0x10 [ 232.547809][ T8117] ? ip_set_sockfn_get+0x1bf/0xe60 [ 232.547825][ T8117] ? __get_vm_area_node+0x1c8/0x2d0 [ 232.547846][ T8117] ? __get_vm_area_node+0x25c/0x2d0 [ 232.547872][ T8117] __vmalloc_node_range_noprof+0x634/0x1390 [ 232.547910][ T8117] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.547931][ T8117] ? bpf_lsm_capable+0x9/0x10 [ 232.547951][ T8117] ? ip_set_sockfn_get+0x1bf/0xe60 [ 232.547969][ T8117] vmalloc_noprof+0x79/0x90 [ 232.547985][ T8117] ? ip_set_sockfn_get+0x1bf/0xe60 [ 232.548002][ T8117] ip_set_sockfn_get+0x1bf/0xe60 [ 232.548021][ T8117] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.548049][ T8117] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 232.548078][ T8117] nf_getsockopt+0x299/0x2c0 [ 232.548111][ T8117] ip_getsockopt+0x226/0x2e0 [ 232.548136][ T8117] ? __pfx_ip_getsockopt+0x10/0x10 [ 232.548158][ T8117] ? __lock_acquire+0xa10/0xd80 [ 232.548179][ T8117] ? aa_sock_opt_perm+0x79/0x120 [ 232.548205][ T8117] ? sock_common_getsockopt+0x2e/0xb0 [ 232.548229][ T8117] ? raw_getsockopt+0xca/0x1f0 [ 232.548244][ T8117] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 232.548272][ T8117] do_sock_getsockopt+0x391/0x740 [ 232.548296][ T8117] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 232.548313][ T8117] ? __fget_files+0x2a/0x420 [ 232.548330][ T8117] ? __fget_files+0x39d/0x420 [ 232.548345][ T8117] ? __fget_files+0x2a/0x420 [ 232.548367][ T8117] __ia32_sys_getsockopt+0x2a1/0x370 [ 232.548393][ T8117] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 232.548415][ T8117] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 232.548438][ T8117] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.548462][ T8117] __do_fast_syscall_32+0xb4/0x110 [ 232.548485][ T8117] ? exc_page_fault+0x5f8/0x920 [ 232.548511][ T8117] do_fast_syscall_32+0x34/0x80 [ 232.548534][ T8117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.548556][ T8117] RIP: 0023:0xf73fd579 [ 232.548572][ T8117] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.548587][ T8117] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 232.548605][ T8117] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 232.548617][ T8117] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000040 [ 232.548628][ T8117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.548638][ T8117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.548648][ T8117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.548673][ T8117] [ 232.550797][ T8117] Mem-Info: [ 232.866897][ T975] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 232.877834][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.888024][ T975] usb 3-1: Product: syz [ 232.892224][ T975] usb 3-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 232.894443][ T8117] active_anon:6239 inactive_anon:1 isolated_anon:0 [ 232.894443][ T8117] active_file:12692 inactive_file:38325 isolated_file:0 [ 232.894443][ T8117] unevictable:768 dirty:224 writeback:0 [ 232.894443][ T8117] slab_reclaimable:8931 slab_unreclaimable:101986 [ 232.894443][ T8117] mapped:33146 shmem:1415 pagetables:1240 [ 232.894443][ T8117] sec_pagetables:0 bounce:0 [ 232.894443][ T8117] kernel_misc_reclaimable:0 [ 232.894443][ T8117] free:1296747 free_pcp:1019 free_cma:0 [ 232.948024][ T975] usb 3-1: SerialNumber: syz [ 232.972629][ T8117] Node 0 active_anon:24956kB inactive_anon:4kB active_file:50700kB inactive_file:153224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132516kB dirty:892kB writeback:0kB shmem:4124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11896kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.247620][ T8117] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.278960][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.325642][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.359638][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.367819][ T8117] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.394918][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.411277][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.573'. [ 233.422672][ T8117] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 233.430081][ T8117] Node 0 DMA32 free:1258448kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:26148kB inactive_anon:4kB active_file:50700kB inactive_file:153132kB unevictable:1536kB writepending:892kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:144kB local_pcp:144kB free_cma:0kB [ 233.460356][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.467333][ T8117] lowmem_reserve[]: 0 0 0 0 0 [ 233.541504][ T975] usbhid 3-1:1.0: can't add hid device: -22 [ 233.574313][ T8117] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 233.575212][ T975] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 233.619153][ T8117] lowmem_reserve[]: 0 0 0 0 0 [ 233.629358][ T8117] Node 1 Normal free:3910024kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.673573][ T8117] lowmem_reserve[]: 0 0 0 0 0 [ 233.679944][ T8117] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.700943][ T8117] Node 0 DMA32: 3*4kB (UME) 27*8kB (UE) 488*16kB (UME) 448*32kB (UME) 213*64kB (UME) 59*128kB (UME) 27*256kB (UME) 16*512kB (UME) 35*1024kB (UM) 0*2048kB 284*4096kB (UM) = 1257764kB [ 233.731868][ T975] usb 3-1: USB disconnect, device number 42 [ 233.772191][ T8117] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 233.824218][ T8117] Node 1 Normal: 288*4kB (UME) 67*8kB (UME) 53*16kB (UME) 237*32kB (UE) 108*64kB (UME) 32*128kB (UE) 15*256kB (UM) 8*512kB (UM) 6*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3910024kB [ 233.856719][ T8117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.875184][ T8117] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=2 hugepages_size=2048kB [ 233.924129][ T8117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.933849][ T8117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 233.944428][ T8117] 52434 total pagecache pages [ 233.949808][ T8117] 1 pages in swap cache [ 233.956462][ T8117] Free swap = 124992kB [ 233.966892][ T8117] Total swap = 124996kB [ 233.977520][ T8117] 2097051 pages RAM [ 233.985939][ T8117] 0 pages HighMem/MovableOnly [ 233.990929][ T8117] 428585 pages reserved [ 233.995643][ T8117] 0 pages cma reserved [ 234.394271][ T5878] usb 2-1: USB disconnect, device number 51 [ 235.525193][ T8163] usb usb8: usbfs: process 8163 (syz.0.588) did not claim interface 0 before use [ 235.744237][ T5931] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 235.828220][ T8169] netlink: 'syz.1.589': attribute type 25 has an invalid length. [ 235.836128][ T8169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.589'. [ 236.114388][ T5931] usb 5-1: device descriptor read/64, error -71 [ 236.424130][ T5931] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 236.495758][ T5878] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 236.554431][ T5931] usb 5-1: device descriptor read/64, error -71 [ 236.664621][ T5931] usb usb5-port1: attempt power cycle [ 236.738770][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 236.746711][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.756803][ T5878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.803266][ T5878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.813599][ T5894] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 236.829481][ T5878] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 236.842652][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.853956][ T5878] usb 4-1: Product: syz [ 236.859213][ T5878] usb 4-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 236.868150][ T5878] usb 4-1: SerialNumber: syz [ 236.975982][ T5894] usb 3-1: config 0 has an invalid interface number: 162 but max is 0 [ 236.985653][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.996792][ T5894] usb 3-1: config 0 has no interface number 0 [ 237.003306][ T5894] usb 3-1: config 0 interface 162 altsetting 0 endpoint 0x7 has an invalid bInterval 32, changing to 9 [ 237.015730][ T5931] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 237.024375][ T5894] usb 3-1: config 0 interface 162 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.035494][ T5894] usb 3-1: config 0 interface 162 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.045807][ T5931] usb 5-1: device descriptor read/8, error -71 [ 237.052763][ T5894] usb 3-1: config 0 interface 162 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 237.082189][ T975] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 237.109615][ T5894] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 237.130641][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.149041][ T5894] usb 3-1: Product: syz [ 237.157706][ T5894] usb 3-1: Manufacturer: syz [ 237.176757][ T5894] usb 3-1: SerialNumber: syz [ 237.202992][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.212497][ T5894] usb 3-1: config 0 descriptor?? [ 237.222106][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.238887][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'. [ 237.248254][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 237.261011][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.272686][ T975] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 237.288757][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.304664][ T5931] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 237.312762][ T975] usb 2-1: config 0 descriptor?? [ 237.350711][ T5931] usb 5-1: device descriptor read/8, error -71 [ 237.383159][ T5878] usbhid 4-1:1.0: can't add hid device: -22 [ 237.415646][ T5878] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 237.428403][ T5894] rtsx_usb 3-1:0.162: probe with driver rtsx_usb failed with error -8 [ 237.464541][ T5931] usb usb5-port1: unable to enumerate USB device [ 237.484214][ T5878] usb 4-1: USB disconnect, device number 48 [ 237.529893][ T5894] usb 3-1: USB disconnect, device number 43 [ 237.742214][ T975] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 238.145080][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.153938][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.367985][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.384926][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.435020][ T8208] FAULT_INJECTION: forcing a failure. [ 238.435020][ T8208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.490934][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.2.602 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 238.490963][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.490974][ T8208] Call Trace: [ 238.490982][ T8208] [ 238.490989][ T8208] dump_stack_lvl+0x241/0x360 [ 238.491022][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.491048][ T8208] ? __pfx__printk+0x10/0x10 [ 238.491083][ T8208] should_fail_ex+0x424/0x570 [ 238.491107][ T8208] _copy_to_user+0x31/0xb0 [ 238.491136][ T8208] simple_read_from_buffer+0xc4/0x170 [ 238.491165][ T8208] proc_fail_nth_read+0x1ef/0x260 [ 238.491187][ T8208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.491208][ T8208] ? rw_verify_area+0x246/0x630 [ 238.491227][ T8208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.491246][ T8208] vfs_read+0x21f/0xb90 [ 238.491270][ T8208] ? __pfx___mutex_lock+0x10/0x10 [ 238.491294][ T8208] ? __pfx_vfs_read+0x10/0x10 [ 238.491325][ T8208] ? __fget_files+0x2a/0x420 [ 238.491343][ T8208] ? __fget_files+0x39d/0x420 [ 238.491357][ T8208] ? __fget_files+0x2a/0x420 [ 238.491383][ T8208] ksys_read+0x19d/0x2d0 [ 238.491404][ T8208] ? __pfx_ksys_read+0x10/0x10 [ 238.491427][ T8208] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 238.491449][ T8208] ? lockdep_hardirqs_on+0x9d/0x150 [ 238.491473][ T8208] __do_fast_syscall_32+0xb4/0x110 [ 238.491496][ T8208] ? exc_page_fault+0x5f8/0x920 [ 238.491522][ T8208] do_fast_syscall_32+0x34/0x80 [ 238.491544][ T8208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.491566][ T8208] RIP: 0023:0xf741d579 [ 238.491581][ T8208] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 238.491596][ T8208] RSP: 002b:00000000f50a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 238.491614][ T8208] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50a6620 [ 238.491627][ T8208] RDX: 000000000000000f RSI: 00000000f740dff4 RDI: 0000000000000000 [ 238.491637][ T8208] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 238.491648][ T8208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 238.491658][ T8208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.491684][ T8208] [ 238.741972][ T5892] usb 2-1: USB disconnect, device number 52 [ 239.275702][ T5931] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 239.394223][ T975] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 239.434010][ T30] audit: type=1326 audit(1744704459.527:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.1.610" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f71579 code=0x0 [ 239.434250][ T5931] usb 4-1: Invalid ep0 maxpacket: 64 [ 239.498428][ T8228] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.574926][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 239.582476][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.597435][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.613276][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 239.626361][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.636981][ T5931] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 239.639481][ T975] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 239.654527][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.662759][ T975] usb 3-1: Product: syz [ 239.668054][ T975] usb 3-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 239.684330][ T975] usb 3-1: SerialNumber: syz [ 239.824373][ T5931] usb 4-1: Invalid ep0 maxpacket: 64 [ 239.839238][ T5931] usb usb4-port1: attempt power cycle [ 239.942966][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.952902][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.966210][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.608'. [ 240.104313][ T5896] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 240.112839][ T975] usbhid 3-1:1.0: can't add hid device: -22 [ 240.125154][ T975] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 240.137086][ T975] usb 3-1: USB disconnect, device number 44 [ 240.185023][ T5931] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 240.212244][ T5931] usb 4-1: Invalid ep0 maxpacket: 64 [ 240.257882][ T5896] usb 1-1: device descriptor read/64, error -71 [ 240.344649][ T5931] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 240.414757][ T5931] usb 4-1: Invalid ep0 maxpacket: 64 [ 240.431361][ T5931] usb usb4-port1: unable to enumerate USB device [ 240.514146][ T5896] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 240.677116][ T5896] usb 1-1: device descriptor read/64, error -71 [ 240.804350][ T5896] usb usb1-port1: attempt power cycle [ 240.845162][ T975] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 241.014177][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 241.020838][ T975] usb 5-1: config 162 has an invalid interface number: 45 but max is 1 [ 241.029172][ T975] usb 5-1: config 162 has an invalid interface number: 87 but max is 1 [ 241.037631][ T975] usb 5-1: config 162 has no interface number 0 [ 241.043902][ T975] usb 5-1: config 162 has no interface number 1 [ 241.050312][ T975] usb 5-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.063591][ T975] usb 5-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 241.074750][ T975] usb 5-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 241.086618][ T975] usb 5-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 241.097085][ T975] usb 5-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 241.107567][ T975] usb 5-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.120736][ T975] usb 5-1: config 162 interface 45 has no altsetting 0 [ 241.127652][ T975] usb 5-1: config 162 interface 87 has no altsetting 0 [ 241.137074][ T975] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 241.146545][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.154642][ T5896] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 241.163415][ T975] usb 5-1: Product: syz [ 241.168010][ T975] usb 5-1: Manufacturer: syz [ 241.172653][ T975] usb 5-1: SerialNumber: syz [ 241.178742][ T5896] usb 1-1: device descriptor read/8, error -71 [ 241.396485][ T975] pl2303 5-1:162.45: required endpoints missing [ 241.418566][ T975] pl2303 5-1:162.87: required interrupt-in endpoint missing [ 241.444810][ T5896] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 241.455866][ T975] usb 5-1: USB disconnect, device number 51 [ 241.494708][ T5896] usb 1-1: device descriptor read/8, error -71 [ 241.604512][ T5896] usb usb1-port1: unable to enumerate USB device [ 241.633658][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 241.643391][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 242.981107][ T8283] FAULT_INJECTION: forcing a failure. [ 242.981107][ T8283] name failslab, interval 1, probability 0, space 0, times 0 [ 242.994130][ T8283] CPU: 1 UID: 0 PID: 8283 Comm: syz.3.628 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 242.994153][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.994172][ T8283] Call Trace: [ 242.994179][ T8283] [ 242.994187][ T8283] dump_stack_lvl+0x241/0x360 [ 242.994219][ T8283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.994246][ T8283] ? __pfx__printk+0x10/0x10 [ 242.994269][ T8283] ? __pfx___might_resched+0x10/0x10 [ 242.994290][ T8283] should_fail_ex+0x424/0x570 [ 242.994309][ T8283] should_failslab+0xac/0x100 [ 242.994330][ T8283] kmem_cache_alloc_noprof+0x78/0x390 [ 242.994351][ T8283] ? getname_flags+0xb7/0x530 [ 242.994372][ T8283] ? ksys_write+0x24e/0x2d0 [ 242.994389][ T8283] getname_flags+0xb7/0x530 [ 242.994414][ T8283] do_sys_openat2+0xbf/0x1d0 [ 242.994437][ T8283] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.994458][ T8283] ? __fget_files+0x2a/0x420 [ 242.994473][ T8283] ? __fget_files+0x2a/0x420 [ 242.994489][ T8283] __ia32_compat_sys_openat+0x241/0x290 [ 242.994506][ T8283] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 242.994524][ T8283] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 242.994542][ T8283] ? lockdep_hardirqs_on+0x9d/0x150 [ 242.994561][ T8283] __do_fast_syscall_32+0xb4/0x110 [ 242.994579][ T8283] ? exc_page_fault+0x5f8/0x920 [ 242.994599][ T8283] do_fast_syscall_32+0x34/0x80 [ 242.994618][ T8283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.994638][ T8283] RIP: 0023:0xf739d579 [ 242.994651][ T8283] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 242.994663][ T8283] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 242.994678][ T8283] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 242.994688][ T8283] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 242.994697][ T8283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.994705][ T8283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.994713][ T8283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.994732][ T8283] [ 243.584117][ T5931] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 243.694371][ T975] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 243.734312][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 243.741885][ T5931] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 243.752415][ T5931] usb 2-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.791667][ T5931] usb 2-1: config 1 interface 0 has no altsetting 0 [ 243.807415][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=84a1, bcdDevice= 0.40 [ 243.819973][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.830796][ T5931] usb 2-1: Product: ࡃ [ 243.837246][ T5931] usb 2-1: Manufacturer: І [ 243.853742][ T5931] usb 2-1: SerialNumber:  [ 243.866843][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 243.889568][ T975] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.905289][ T975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.930192][ T975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.985148][ T975] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 244.016982][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.036236][ T975] usb 1-1: Product: syz [ 244.059106][ T975] usb 1-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 244.097321][ T975] usb 1-1: SerialNumber: syz [ 244.175340][ T8299] sg_write: data in/out 6291420/14 bytes for SCSI command 0x0-- guessing data in; [ 244.175340][ T8299] program syz.4.633 not setting count and/or reply_len properly [ 244.411500][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.420332][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.501722][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.627'. [ 244.626014][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 244.638297][ T975] usbhid 1-1:1.0: can't add hid device: -22 [ 244.712613][ T975] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 244.792357][ T975] usb 1-1: USB disconnect, device number 51 [ 244.844210][ T5894] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 245.024428][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 245.035299][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.049862][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.060422][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 245.073092][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.090317][ T5894] usb 5-1: config 0 descriptor?? [ 245.134378][ T5878] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 245.284254][ T5878] usb 4-1: device descriptor read/64, error -71 [ 245.309048][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 245.326057][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 245.544760][ T5878] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 245.643429][ T5894] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.000F/input/input12 [ 245.694578][ T5878] usb 4-1: device descriptor read/64, error -71 [ 245.725734][ T5894] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 245.784285][ T5892] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 245.817609][ T5878] usb usb4-port1: attempt power cycle [ 245.944118][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 245.955275][ T5892] usb 3-1: config index 0 descriptor too short (expected 25965, got 27) [ 245.963870][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.978701][ T5892] usb 3-1: config 0 has no interfaces? [ 245.986433][ T5892] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 245.999786][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.008551][ T5892] usb 3-1: Product: syz [ 246.012860][ T5892] usb 3-1: Manufacturer: syz [ 246.021715][ T5892] usb 3-1: SerialNumber: syz [ 246.030079][ T5892] usb 3-1: config 0 descriptor?? [ 246.174186][ T5878] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 246.207884][ T5878] usb 4-1: device descriptor read/8, error -71 [ 246.295434][ T8321] loop2: detected capacity change from 0 to 7 [ 246.303503][ T8321] Dev loop2: unable to read RDB block 7 [ 246.309821][ T8321] loop2: unable to read partition table [ 246.316019][ T8321] loop2: partition table beyond EOD, truncated [ 246.322214][ T8321] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 246.410990][ T3082] usb 5-1: USB disconnect, device number 52 [ 246.464644][ T5878] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 246.555516][ T5931] cdc_ether 2-1:1.0: skipping garbage [ 246.613131][ T5931] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 246.647931][ T5878] usb 4-1: device descriptor read/8, error -71 [ 246.666052][ T5931] usb 2-1: USB disconnect, device number 53 [ 246.774699][ T5878] usb usb4-port1: unable to enumerate USB device [ 246.782989][ T5838] udevd[5838]: setting mode of /dev/bus/usb/002/053 to 020664 failed: No such file or directory [ 246.804022][ T5838] udevd[5838]: setting owner of /dev/bus/usb/002/053 to uid=0, gid=0 failed: No such file or directory [ 247.087457][ T30] audit: type=1326 audit(1744704467.187:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.183839][ T30] audit: type=1326 audit(1744704467.187:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.209088][ T30] audit: type=1326 audit(1744704467.207:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.231778][ T30] audit: type=1326 audit(1744704467.207:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.255491][ T30] audit: type=1326 audit(1744704467.207:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.332977][ T30] audit: type=1326 audit(1744704467.207:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.364532][ T5931] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 247.369006][ T30] audit: type=1326 audit(1744704467.207:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73fd598 code=0x7ffc0000 [ 247.399056][ T30] audit: type=1326 audit(1744704467.207:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73fd598 code=0x7ffc0000 [ 247.422833][ T30] audit: type=1326 audit(1744704467.207:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73fd598 code=0x7ffc0000 [ 247.538228][ T30] audit: type=1326 audit(1744704467.207:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73fd598 code=0x7ffc0000 [ 247.560806][ T5892] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 247.616197][ T5931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.627084][ T5931] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.640615][ T5931] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.657517][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.667451][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.676499][ T5931] usb 2-1: Product: syz [ 247.680921][ T5931] usb 2-1: Manufacturer: syz [ 247.686093][ T5931] usb 2-1: SerialNumber: syz [ 247.715592][ T5892] usb 1-1: config 0 has no interfaces? [ 247.721094][ T5892] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.738447][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.763257][ T5892] usb 1-1: config 0 descriptor?? [ 247.909479][ T5931] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 247.979263][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.998278][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.023780][ T5931] usb 1-1: USB disconnect, device number 52 [ 248.451801][ T8344] trusted_key: encrypted_key: insufficient parameters specified [ 248.483935][ T8344] trusted_key: encrypted_key: insufficient parameters specified [ 248.507530][ T5931] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 248.594765][ T5894] usb 3-1: USB disconnect, device number 45 [ 248.674139][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 248.694949][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.714504][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.736819][ T5931] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 248.746306][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.757004][ T5931] usb 1-1: Product: syz [ 248.762320][ T5931] usb 1-1: Manufacturer: syz [ 248.771920][ T5931] usb 1-1: SerialNumber: syz [ 248.894205][ T3082] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 249.054263][ T5892] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 249.068508][ T3082] usb 4-1: config 0 has no interfaces? [ 249.083357][ T3082] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 249.105105][ T3082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.120343][ T3082] usb 4-1: Product: syz [ 249.126892][ T3082] usb 4-1: Manufacturer: syz [ 249.131603][ T3082] usb 4-1: SerialNumber: syz [ 249.151492][ T3082] usb 4-1: config 0 descriptor?? [ 249.214515][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 249.218058][ T5931] usb 1-1: 0:2 : does not exist [ 249.221865][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.238408][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.264090][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.284750][ T5892] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 249.293811][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.304233][ T5892] usb 3-1: Product: syz [ 249.312662][ T5892] usb 3-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 249.327233][ T5892] usb 3-1: SerialNumber: syz [ 249.622559][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.636344][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.650842][ T5931] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 249.665367][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 249.686324][ T5931] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 249.721135][ T5931] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 249.740703][ T5931] usb 1-1: USB disconnect, device number 53 [ 249.831221][ T5892] usbhid 3-1:1.0: can't add hid device: -22 [ 249.851517][ T5892] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 249.912911][ T5892] usb 3-1: USB disconnect, device number 46 [ 249.949581][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.538928][ T5894] usb 4-1: USB disconnect, device number 57 [ 252.063443][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.198306][ T5931] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 252.367098][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 252.380141][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.391985][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.403666][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.425508][ T5931] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 252.439084][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.444244][ T5892] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 252.471135][ T5931] usb 3-1: Product: syz [ 252.482231][ T5931] usb 3-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 252.502403][ T5931] usb 3-1: SerialNumber: syz [ 252.651141][ T5892] usb 4-1: device descriptor read/64, error -71 [ 252.820000][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.833915][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.859871][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.654'. [ 252.954354][ T5892] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 252.974162][ T975] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 253.016992][ T5931] usbhid 3-1:1.0: can't add hid device: -22 [ 253.023089][ T5931] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 253.082742][ T5931] usb 3-1: USB disconnect, device number 47 [ 253.094214][ T5892] usb 4-1: device descriptor read/64, error -71 [ 253.176107][ T8333] usblp0:failed reading printer status (-110) [ 253.204683][ T5892] usb usb4-port1: attempt power cycle [ 253.221113][ T975] usb 1-1: config 0 has no interfaces? [ 253.231880][ T975] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.246572][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.258330][ T975] usb 1-1: Product: syz [ 253.262596][ T975] usb 1-1: Manufacturer: syz [ 253.270973][ T975] usb 1-1: SerialNumber: syz [ 253.280000][ T5894] usb 2-1: USB disconnect, device number 54 [ 253.283037][ T975] usb 1-1: config 0 descriptor?? [ 253.292711][ T5894] usblp0: removed [ 253.657014][ T5892] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 253.694899][ T5892] usb 4-1: device descriptor read/8, error -71 [ 254.085710][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.659'. [ 254.104164][ T5892] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 254.134869][ T5892] usb 4-1: device descriptor read/8, error -71 [ 254.244524][ T5892] usb usb4-port1: unable to enumerate USB device [ 255.114142][ T5892] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 255.244495][ T975] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 255.294240][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 255.390394][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.400388][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.414484][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.464047][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 255.486250][ T5931] usb 1-1: USB disconnect, device number 54 [ 255.510733][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.520983][ T975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.555911][ T975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.571601][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.578026][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.594904][ T5892] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 255.604200][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.618033][ T5892] usb 3-1: Product: syz [ 255.625075][ T5892] usb 3-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 255.634798][ T5892] usb 3-1: SerialNumber: syz [ 255.640239][ T975] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 255.649699][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.663498][ T975] usb 2-1: Product: syz [ 255.678741][ T975] usb 2-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 255.693221][ T975] usb 2-1: SerialNumber: syz [ 255.926419][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.935111][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.945440][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 256.134690][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.153921][ T5892] usbhid 3-1:1.0: can't add hid device: -22 [ 256.174557][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.178771][ T5892] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 256.221345][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.661'. [ 256.268754][ T5892] usb 3-1: USB disconnect, device number 48 [ 256.375074][ T975] usbhid 2-1:1.0: can't add hid device: -22 [ 256.398392][ T975] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 256.539769][ T975] usb 2-1: USB disconnect, device number 55 [ 257.423865][ T30] kauditd_printk_skb: 3059 callbacks suppressed [ 257.423896][ T30] audit: type=1326 audit(1744704477.517:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.0.673" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd579 code=0x0 [ 257.543353][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 257.554739][ T8439] netlink: 'syz.2.671': attribute type 2 has an invalid length. [ 257.826131][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 257.904304][ T5892] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 258.034211][ T5892] usb 2-1: device descriptor read/64, error -71 [ 258.169457][ T8455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.198915][ T8455] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 258.284613][ T5892] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 258.454780][ T5892] usb 2-1: device descriptor read/64, error -71 [ 258.617163][ T5892] usb usb2-port1: attempt power cycle [ 258.944281][ T975] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 258.994661][ T5892] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 259.030266][ T5892] usb 2-1: device descriptor read/8, error -71 [ 259.127484][ T975] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 259.139533][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.152170][ T975] usb 5-1: Product: syz [ 259.159436][ T975] usb 5-1: Manufacturer: syz [ 259.164227][ T975] usb 5-1: SerialNumber: syz [ 259.184799][ T975] usb 5-1: config 0 descriptor?? [ 259.274228][ T5896] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 259.294294][ T5892] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 259.315432][ T5892] usb 2-1: device descriptor read/8, error -71 [ 259.411649][ T975] hso 5-1:0.0: Failed to find BULK IN ep [ 259.427774][ T975] usb-storage 5-1:0.0: USB Mass Storage device detected [ 259.445195][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 259.555282][ T5892] usb usb2-port1: unable to enumerate USB device [ 259.567187][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 259.585426][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.627045][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.647253][ T975] usb 5-1: USB disconnect, device number 53 [ 259.677246][ T5896] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 259.731887][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.740097][ T5896] usb 1-1: Product: syz [ 259.747417][ T5896] usb 1-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 259.757199][ T5896] usb 1-1: SerialNumber: syz [ 260.020303][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.029013][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.040510][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 260.191028][ T5896] usbhid 1-1:1.0: can't add hid device: -22 [ 260.209200][ T5896] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 260.221445][ T5896] usb 1-1: USB disconnect, device number 55 [ 260.590592][ T30] audit: type=1326 audit(1744704480.687:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.686" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x0 [ 260.641907][ T8490] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.652634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.653932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.672469][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.712570][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.750659][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.758168][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.934178][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 260.972380][ T8498] netlink: 'syz.1.688': attribute type 2 has an invalid length. [ 261.369268][ T975] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 261.834892][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 261.863633][ T975] usb 5-1: config 0 has no interfaces? [ 261.903269][ T975] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 261.922794][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.973704][ T975] usb 5-1: Product: syz [ 262.041327][ T975] usb 5-1: Manufacturer: syz [ 262.055073][ T975] usb 5-1: SerialNumber: syz [ 262.134778][ T975] usb 5-1: config 0 descriptor?? [ 262.674226][ T975] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 262.874279][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 262.883992][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.894309][ T975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.905636][ T975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.945180][ T975] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 262.956992][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.996822][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'. [ 263.023734][ T975] usb 2-1: Product: syz [ 263.042446][ T975] usb 2-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 263.120878][ T975] usb 2-1: SerialNumber: syz [ 263.608664][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.626407][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.685383][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.694'. [ 263.781171][ T975] usbhid 2-1:1.0: can't add hid device: -22 [ 263.822252][ T975] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 263.830383][ T5896] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 263.850525][ T975] usb 2-1: USB disconnect, device number 60 [ 263.897253][ T5931] usb 5-1: USB disconnect, device number 54 [ 263.965775][ T5896] usb 4-1: device descriptor read/64, error -71 [ 263.994326][ T5894] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 264.157978][ T5894] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 264.167363][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.175493][ T5894] usb 1-1: Product: syz [ 264.179800][ T5894] usb 1-1: Manufacturer: syz [ 264.184487][ T5894] usb 1-1: SerialNumber: syz [ 264.191294][ T5894] usb 1-1: config 0 descriptor?? [ 264.204402][ T5896] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 264.334244][ T5896] usb 4-1: device descriptor read/64, error -71 [ 264.404935][ T5894] hso 1-1:0.0: Failed to find BULK IN ep [ 264.413996][ T5894] usb-storage 1-1:0.0: USB Mass Storage device detected [ 264.451029][ T5896] usb usb4-port1: attempt power cycle [ 264.604253][ T5931] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 264.642398][ T975] usb 1-1: USB disconnect, device number 56 [ 264.774161][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 264.782041][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.791090][ T5931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.802070][ T5931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.814238][ T5931] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 264.815331][ T5896] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 264.823631][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.839825][ T5931] usb 5-1: Product: syz [ 264.844254][ T5931] usb 5-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 264.847352][ T5896] usb 4-1: device descriptor read/8, error -71 [ 264.852884][ T5931] usb 5-1: SerialNumber: syz [ 265.107297][ T5896] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 265.115431][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.124422][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.135892][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.698'. [ 265.155940][ T5896] usb 4-1: device descriptor read/8, error -71 [ 265.267891][ T5896] usb usb4-port1: unable to enumerate USB device [ 265.335596][ T5931] usbhid 5-1:1.0: can't add hid device: -22 [ 265.341708][ T5931] usbhid 5-1:1.0: probe with driver usbhid failed with error -22 [ 265.402898][ T5931] usb 5-1: USB disconnect, device number 55 [ 266.130471][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 266.215733][ T5892] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 266.405038][ T5892] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 266.426598][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 266.441449][ T5892] usb 3-1: can't read configurations, error -61 [ 266.621050][ T5892] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 266.715918][ T8561] FAULT_INJECTION: forcing a failure. [ 266.715918][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 266.776664][ T8561] CPU: 1 UID: 0 PID: 8561 Comm: syz.3.709 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 266.776690][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.776702][ T8561] Call Trace: [ 266.776710][ T8561] [ 266.776717][ T8561] dump_stack_lvl+0x241/0x360 [ 266.776750][ T8561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.776776][ T8561] ? __pfx__printk+0x10/0x10 [ 266.776799][ T8561] ? __pfx_hlock_conflict+0x10/0x10 [ 266.776825][ T8561] ? __pfx___might_resched+0x10/0x10 [ 266.776846][ T8561] ? lock_acquire+0x167/0x2f0 [ 266.776867][ T8561] should_fail_ex+0x424/0x570 [ 266.776891][ T8561] should_failslab+0xac/0x100 [ 266.776917][ T8561] __kmalloc_noprof+0xdf/0x4d0 [ 266.776940][ T8561] ? tls_get_rec+0xc9/0x600 [ 266.776965][ T8561] tls_get_rec+0xc9/0x600 [ 266.776991][ T8561] tls_sw_sendmsg+0x511/0x25b0 [ 266.777046][ T8561] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 266.777062][ T8561] ? aa_sk_perm+0x96f/0xac0 [ 266.777110][ T8561] ? sock_rps_record_flow+0x1a/0x410 [ 266.777130][ T8561] ? inet_send_prepare+0x21/0x260 [ 266.777153][ T8561] ? inet_send_prepare+0x5a/0x260 [ 266.777182][ T8561] __sock_sendmsg+0xef/0x270 [ 266.777211][ T8561] sock_write_iter+0x2d9/0x3f0 [ 266.777237][ T8561] ? __pfx_sock_write_iter+0x10/0x10 [ 266.777294][ T8561] do_iter_readv_writev+0x71f/0x9d0 [ 266.777322][ T8561] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 266.777350][ T8561] ? bpf_lsm_file_permission+0x9/0x10 [ 266.777371][ T8561] ? rw_verify_area+0x246/0x630 [ 266.777394][ T8561] vfs_writev+0x38d/0xbc0 [ 266.777419][ T8561] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 266.777453][ T8561] ? vfs_write+0xb29/0xd10 [ 266.777476][ T8561] ? __lock_acquire+0xad5/0xd80 [ 266.777494][ T8561] ? __pfx_vfs_writev+0x10/0x10 [ 266.777536][ T8561] ? __fget_files+0x2a/0x420 [ 266.777553][ T8561] ? __fget_files+0x39d/0x420 [ 266.777567][ T8561] ? __fget_files+0x2a/0x420 [ 266.777591][ T8561] do_writev+0x1b8/0x360 [ 266.777625][ T8561] ? __pfx_do_writev+0x10/0x10 [ 266.777654][ T8561] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 266.777675][ T8561] ? lockdep_hardirqs_on+0x9d/0x150 [ 266.777699][ T8561] __do_fast_syscall_32+0xb4/0x110 [ 266.777721][ T8561] ? exc_page_fault+0x5f8/0x920 [ 266.777746][ T8561] do_fast_syscall_32+0x34/0x80 [ 266.777769][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.777789][ T8561] RIP: 0023:0xf739d579 [ 266.777803][ T8561] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 266.777817][ T8561] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 266.777836][ T8561] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 266.777848][ T8561] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.777857][ T8561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.777867][ T8561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 266.777877][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.777902][ T8561] [ 267.123978][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 267.135755][ T5892] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 267.352229][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 267.486467][ T5892] usb 3-1: can't read configurations, error -61 [ 267.538068][ T8571] FAULT_INJECTION: forcing a failure. [ 267.538068][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.550149][ T5892] usb usb3-port1: attempt power cycle [ 267.563505][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.4.712 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 267.563534][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.563547][ T8571] Call Trace: [ 267.563555][ T8571] [ 267.563563][ T8571] dump_stack_lvl+0x241/0x360 [ 267.563601][ T8571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.563632][ T8571] ? __pfx__printk+0x10/0x10 [ 267.563673][ T8571] should_fail_ex+0x424/0x570 [ 267.563709][ T8571] _copy_to_user+0x31/0xb0 [ 267.563742][ T8571] simple_read_from_buffer+0xc4/0x170 [ 267.563778][ T8571] proc_fail_nth_read+0x1ef/0x260 [ 267.563807][ T8571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.563833][ T8571] ? rw_verify_area+0x246/0x630 [ 267.563855][ T8571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.563877][ T8571] vfs_read+0x21f/0xb90 [ 267.563917][ T8571] ? __pfx___mutex_lock+0x10/0x10 [ 267.563942][ T8571] ? __pfx_vfs_read+0x10/0x10 [ 267.563965][ T8571] ? __fget_files+0x2a/0x420 [ 267.563994][ T8571] ? __fget_files+0x39d/0x420 [ 267.564008][ T8571] ? __fget_files+0x2a/0x420 [ 267.564032][ T8571] ksys_read+0x19d/0x2d0 [ 267.564054][ T8571] ? __pfx_ksys_read+0x10/0x10 [ 267.564077][ T8571] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 267.564099][ T8571] ? lockdep_hardirqs_on+0x9d/0x150 [ 267.564123][ T8571] __do_fast_syscall_32+0xb4/0x110 [ 267.564145][ T8571] ? exc_page_fault+0x5f8/0x920 [ 267.564170][ T8571] do_fast_syscall_32+0x34/0x80 [ 267.564193][ T8571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.564216][ T8571] RIP: 0023:0xf73fd579 [ 267.564231][ T8571] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.564247][ T8571] RSP: 002b:00000000f5086590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 267.564266][ T8571] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5086620 [ 267.564277][ T8571] RDX: 000000000000000f RSI: 00000000f73edff4 RDI: 0000000000000000 [ 267.564289][ T8571] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 267.564299][ T8571] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.564309][ T8571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.564334][ T8571] [ 267.868407][ T5931] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 268.024274][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 268.031265][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.045932][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.058866][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.068739][ T5931] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 268.079162][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.096749][ T5931] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.107469][ T5931] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.118185][ T5931] usb 1-1: Manufacturer: syz [ 268.127518][ T5931] usb 1-1: config 0 descriptor?? [ 268.134352][ T5894] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 268.184332][ T5892] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 268.225587][ T5892] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 268.237295][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 268.246022][ T5892] usb 3-1: can't read configurations, error -61 [ 268.274275][ T5894] usb 5-1: device descriptor read/64, error -71 [ 268.374431][ T5892] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 268.406711][ T5892] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 268.414110][ T5931] rc_core: IR keymap rc-hauppauge not found [ 268.423187][ T5931] Registered IR keymap rc-empty [ 268.425154][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 268.436050][ T5892] usb 3-1: can't read configurations, error -61 [ 268.442854][ T5892] usb usb3-port1: unable to enumerate USB device [ 268.446441][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.474279][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.506305][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 268.518100][ T5894] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 268.528376][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 268.545892][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.564577][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.585226][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.604323][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.624162][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.644181][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.654438][ T5894] usb 5-1: device descriptor read/64, error -71 [ 268.664614][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.684357][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.714194][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.734632][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.754181][ T5931] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 268.764605][ T5894] usb usb5-port1: attempt power cycle [ 268.777074][ T5931] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 268.785351][ T5931] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 268.837766][ T5892] usb 1-1: USB disconnect, device number 57 [ 269.104161][ T5894] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 269.137409][ T5894] usb 5-1: device descriptor read/8, error -71 [ 269.378779][ T5894] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 269.406128][ T5894] usb 5-1: device descriptor read/8, error -71 [ 269.444218][ T5931] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 269.470293][ T30] audit: type=1400 audit(1744704489.567:3087): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=8591 comm="syz.0.720" [ 269.514347][ T5894] usb usb5-port1: unable to enumerate USB device [ 269.524156][ T5892] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 269.604228][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 269.614497][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.623349][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.637414][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.649968][ T5931] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 269.659261][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.667325][ T5931] usb 3-1: Product: syz [ 269.671545][ T5931] usb 3-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 269.680412][ T5931] usb 3-1: SerialNumber: syz [ 269.697999][ T5892] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 269.706692][ T5892] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.716838][ T5896] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 269.724548][ T5892] usb 2-1: config 1 interface 0 has no altsetting 0 [ 269.734682][ T5892] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 269.744170][ T5892] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 269.752377][ T5892] usb 2-1: Product: syz [ 269.756675][ T5892] usb 2-1: Manufacturer: syz [ 269.761296][ T5892] usb 2-1: SerialNumber: syz [ 269.864170][ T5896] usb 1-1: device descriptor read/64, error -71 [ 269.945621][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.957370][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.968845][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.717'. [ 270.104248][ T5896] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 270.121472][ T5931] usbhid 3-1:1.0: can't add hid device: -22 [ 270.171667][ T5931] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 270.183360][ T5931] usb 3-1: USB disconnect, device number 53 [ 270.203413][ T8588] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 270.218946][ T8588] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 270.244505][ T5896] usb 1-1: device descriptor read/64, error -71 [ 270.257296][ T30] audit: type=1326 audit(1744704490.357:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.3.721" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x0 [ 270.258424][ T5892] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 270.302242][ T5892] usb 2-1: USB disconnect, device number 61 [ 270.313690][ T5892] usblp0: removed [ 270.395403][ T5896] usb usb1-port1: attempt power cycle [ 270.559585][ T8598] FAULT_INJECTION: forcing a failure. [ 270.559585][ T8598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.573932][ T8598] CPU: 0 UID: 0 PID: 8598 Comm: syz.2.722 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 270.573959][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.573971][ T8598] Call Trace: [ 270.573979][ T8598] [ 270.573986][ T8598] dump_stack_lvl+0x241/0x360 [ 270.574021][ T8598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.574052][ T8598] ? __pfx__printk+0x10/0x10 [ 270.574088][ T8598] should_fail_ex+0x424/0x570 [ 270.574113][ T8598] _copy_from_user+0x2d/0xb0 [ 270.574142][ T8598] get_user_ifreq+0x116/0x200 [ 270.574168][ T8598] sock_ioctl+0x7b6/0x900 [ 270.574193][ T8598] ? __pfx_sock_ioctl+0x10/0x10 [ 270.574235][ T8598] compat_sock_ioctl+0x293/0xf50 [ 270.574265][ T8598] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 270.574291][ T8598] ? __fget_files+0x2a/0x420 [ 270.574303][ T8598] ? __fget_files+0x2a/0x420 [ 270.574317][ T8598] ? __fget_files+0x2a/0x420 [ 270.574334][ T8598] __se_compat_sys_ioctl+0x50e/0xc30 [ 270.574352][ T8598] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 270.574381][ T8598] ? __fget_files+0x2a/0x420 [ 270.574396][ T8598] ? fput+0x9b/0xd0 [ 270.574407][ T8598] ? ksys_write+0x275/0x2d0 [ 270.574427][ T8598] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 270.574443][ T8598] ? lockdep_hardirqs_on+0x9d/0x150 [ 270.574466][ T8598] __do_fast_syscall_32+0xb4/0x110 [ 270.574482][ T8598] ? exc_page_fault+0x5f8/0x920 [ 270.574500][ T8598] do_fast_syscall_32+0x34/0x80 [ 270.574516][ T8598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.574531][ T8598] RIP: 0023:0xf741d579 [ 270.574542][ T8598] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 270.574553][ T8598] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 270.574566][ T8598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 270.574574][ T8598] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.574582][ T8598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.574589][ T8598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.574596][ T8598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.574613][ T8598] [ 270.858797][ T5896] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 270.894832][ T5896] usb 1-1: device descriptor read/8, error -71 [ 271.084629][ T5931] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 271.164228][ T5896] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 271.214743][ T5896] usb 1-1: device descriptor read/8, error -71 [ 271.244645][ T5931] usb 3-1: device descriptor read/64, error -71 [ 271.334834][ T5896] usb usb1-port1: unable to enumerate USB device [ 271.354736][ T3082] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 271.484238][ T5931] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 271.520637][ T3082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.532502][ T3082] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 271.544936][ T3082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.557355][ T3082] usb 2-1: config 0 descriptor?? [ 271.624407][ T5931] usb 3-1: device descriptor read/64, error -71 [ 271.654155][ T5896] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 271.744547][ T5931] usb usb3-port1: attempt power cycle [ 271.809669][ T5896] usb 4-1: config 0 has no interfaces? [ 271.836753][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.854097][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.862126][ T5896] usb 4-1: Product: syz [ 271.866589][ T5896] usb 4-1: Manufacturer: syz [ 271.871206][ T5896] usb 4-1: SerialNumber: syz [ 271.894516][ T5896] usb 4-1: config 0 descriptor?? [ 272.104170][ T5931] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 272.124712][ T5931] usb 3-1: device descriptor read/8, error -71 [ 272.176842][ T3082] usbhid 2-1:0.0: can't add hid device: -71 [ 272.186609][ T3082] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 272.212683][ T3082] usb 2-1: USB disconnect, device number 62 [ 272.374576][ T5931] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 272.394669][ T5931] usb 3-1: device descriptor read/8, error -71 [ 272.504920][ T5931] usb usb3-port1: unable to enumerate USB device [ 272.761223][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 272.774479][ T8623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.731'. [ 272.790190][ T8623] vlan2: entered allmulticast mode [ 272.795467][ T8623] macvtap0: entered allmulticast mode [ 272.800848][ T8623] veth0_macvtap: entered allmulticast mode [ 273.120152][ T8633] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1634036803 (104578355392 ns) > initial count (60264286208 ns). Using initial count to start timer. [ 273.142347][ T8633] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 273.144285][ T5931] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 273.355885][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.379299][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.398807][ T5931] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.419381][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.454174][ T5931] usb 1-1: SerialNumber: syz [ 273.673205][ T8621] program syz.0.730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.683475][ T5931] usb 1-1: 0:2 : does not exist [ 273.708966][ T5931] usb 1-1: USB disconnect, device number 62 [ 273.911434][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.030581][ T8640] syz.2.736 (8640) used greatest stack depth: 16920 bytes left [ 274.383995][ T5896] usb 4-1: USB disconnect, device number 66 [ 274.444977][ T5931] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 274.646194][ T5931] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 274.664229][ T5931] usb 3-1: config 220 has an invalid interface descriptor of length 5, skipping [ 274.687983][ T5931] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 274.716691][ T8661] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=33554656 (67109312 ns) > initial count (360 ns). Using initial count to start timer. [ 274.788133][ T5931] usb 3-1: config 220 has no interface number 2 [ 274.805524][ T5931] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 274.849817][ T5931] usb 3-1: config 220 interface 0 has no altsetting 0 [ 274.857109][ T5931] usb 3-1: config 220 interface 76 has no altsetting 0 [ 274.864634][ T5931] usb 3-1: config 220 interface 1 has no altsetting 0 [ 274.883664][ T5931] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 274.893982][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.919077][ T5931] usb 3-1: Product: syz [ 274.937757][ T5931] usb 3-1: Manufacturer: syz [ 274.942383][ T5931] usb 3-1: SerialNumber: syz [ 275.231429][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 275.244523][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 275.270650][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 275.313288][ T5931] usb 3-1: selecting invalid altsetting 0 [ 275.329571][ T5931] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 275.347360][ T5931] usb 3-1: No valid video chain found. [ 275.381960][ T5931] usb 3-1: selecting invalid altsetting 0 [ 275.401125][ T5931] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 275.430056][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 275.441985][ T5931] usb 3-1: USB disconnect, device number 58 [ 275.470542][ T30] audit: type=1326 audit(1744704495.567:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.565897][ T30] audit: type=1326 audit(1744704495.587:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.625394][ T30] audit: type=1326 audit(1744704495.587:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.648467][ T30] audit: type=1326 audit(1744704495.597:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.671153][ T30] audit: type=1326 audit(1744704495.597:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.694010][ T30] audit: type=1326 audit(1744704495.597:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.721092][ T30] audit: type=1326 audit(1744704495.597:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.761287][ T8680] netlink: 56 bytes leftover after parsing attributes in process `syz.1.749'. [ 275.778126][ T30] audit: type=1326 audit(1744704495.607:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.802258][ T30] audit: type=1326 audit(1744704495.607:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.826811][ T5894] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 275.836502][ T30] audit: type=1326 audit(1744704495.607:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.0.748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 275.858336][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.999067][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 276.015864][ T5894] usb 2-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2 [ 276.025664][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.033812][ T5894] usb 2-1: Product: syz [ 276.038215][ T5894] usb 2-1: Manufacturer: syz [ 276.043126][ T5894] usb 2-1: SerialNumber: syz [ 276.052046][ T5894] usb 2-1: config 0 descriptor?? [ 276.060984][ T5894] xr_serial 2-1:0.0: invalid descriptor buffer length [ 276.275208][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.313730][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.357176][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.391930][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.430248][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.462615][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.494065][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.525201][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.559771][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.588948][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.713651][ T5894] usb 2-1: USB disconnect, device number 63 [ 276.725238][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 276.753559][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.754'. [ 276.783754][ T8693] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 276.849749][ T8700] bridge0: port 3(erspan0) entered blocking state [ 276.859279][ T8700] bridge0: port 3(erspan0) entered disabled state [ 276.874921][ T8700] erspan0: entered allmulticast mode [ 276.905544][ T8700] erspan0: entered promiscuous mode [ 277.634207][ T5931] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 277.771475][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 277.798212][ T8717] input: syz0 as /devices/virtual/input/input15 [ 277.805009][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 277.818197][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.848058][ T5931] usb 3-1: config 0 has no interfaces? [ 277.867779][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 277.877880][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.907087][ T5931] usb 3-1: config 0 descriptor?? [ 277.915128][ T5894] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 278.074428][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 278.106016][ T5894] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 278.119853][ T5894] usb 1-1: config 0 has no interface number 0 [ 278.157107][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 278.166375][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.174825][ T5894] usb 1-1: Product: syz [ 278.181814][ T5894] usb 1-1: Manufacturer: syz [ 278.195591][ T5894] usb 1-1: SerialNumber: syz [ 278.212761][ T5894] usb 1-1: config 0 descriptor?? [ 278.435883][ T5894] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 278.481076][ T5894] usb 1-1: No streaming interface found for terminal 6. [ 278.512395][ T5894] usb 1-1: USB disconnect, device number 63 [ 278.954079][ T8733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 279.004241][ T5894] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 279.147284][ T8737] FAULT_INJECTION: forcing a failure. [ 279.147284][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 279.173799][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.190338][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.205762][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.0.770 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 279.205786][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.205798][ T8737] Call Trace: [ 279.205805][ T8737] [ 279.205813][ T8737] dump_stack_lvl+0x241/0x360 [ 279.205846][ T8737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.205872][ T8737] ? __pfx__printk+0x10/0x10 [ 279.205910][ T8737] ? __pfx___might_resched+0x10/0x10 [ 279.205938][ T8737] should_fail_ex+0x424/0x570 [ 279.205961][ T8737] should_failslab+0xac/0x100 [ 279.205987][ T8737] __kmalloc_cache_noprof+0x73/0x370 [ 279.206012][ T8737] ? nfnetlink_rcv+0x1037/0x28f0 [ 279.206035][ T8737] nfnetlink_rcv+0x1037/0x28f0 [ 279.206085][ T8737] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 279.206152][ T8737] ? skb_clone+0x240/0x390 [ 279.206184][ T8737] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.206212][ T8737] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.206240][ T8737] netlink_unicast+0x7f8/0x9a0 [ 279.206272][ T8737] ? __pfx_netlink_unicast+0x10/0x10 [ 279.206297][ T8737] ? skb_put+0x114/0x1f0 [ 279.206319][ T8737] netlink_sendmsg+0x8c3/0xcd0 [ 279.206356][ T8737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.206392][ T8737] ? __import_iovec+0x585/0x830 [ 279.206416][ T8737] ? aa_sock_msg_perm+0x91/0x160 [ 279.206446][ T8737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.206470][ T8737] __sock_sendmsg+0x221/0x270 [ 279.206497][ T8737] ____sys_sendmsg+0x523/0x860 [ 279.206525][ T8737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.206560][ T8737] __sys_sendmsg+0x271/0x360 [ 279.206584][ T8737] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.206651][ T8737] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 279.206675][ T8737] ? lockdep_hardirqs_on+0x9d/0x150 [ 279.206699][ T8737] __do_fast_syscall_32+0xb4/0x110 [ 279.206722][ T8737] ? exc_page_fault+0x5f8/0x920 [ 279.206747][ T8737] do_fast_syscall_32+0x34/0x80 [ 279.206770][ T8737] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.206795][ T8737] RIP: 0023:0xf73fd579 [ 279.206810][ T8737] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.206825][ T8737] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 279.206843][ T8737] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000c2c0 [ 279.206855][ T8737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.206866][ T8737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.206876][ T8737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.206892][ T8737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.206918][ T8737] [ 279.477916][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.491409][ T5894] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.500524][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.541669][ T5894] usb 5-1: config 0 descriptor?? [ 279.794255][ T5892] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 279.944160][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 279.951798][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.965934][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.980402][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.993544][ T5892] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 280.022939][ T58] usb 3-1: USB disconnect, device number 59 [ 280.024162][ T5896] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 280.032335][ T5894] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x5 [ 280.044089][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.052744][ T5892] usb 4-1: Product: syz [ 280.067628][ T5894] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 280.079229][ T5892] usb 4-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 280.098845][ T5892] usb 4-1: SerialNumber: syz [ 280.107723][ T5894] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 280.194144][ T3082] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 280.233157][ T5896] usb 1-1: config index 0 descriptor too short (expected 8228, got 36) [ 280.244017][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.262322][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.262503][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.274344][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.293151][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.306379][ T5896] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.01 [ 280.315490][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.333786][ T5896] usb 1-1: config 0 descriptor?? [ 280.347285][ T3082] usb 2-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 280.358461][ T3082] usb 2-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.392232][ T3082] usb 2-1: config 1 interface 0 has no altsetting 0 [ 280.404728][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.409810][ T3082] usb 2-1: string descriptor 0 read error: -22 [ 280.415726][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.425371][ T3082] usb 2-1: New USB device found, idVendor=0603, idProduct=0600, bcdDevice= 0.40 [ 280.436114][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.772'. [ 280.445566][ T3082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.461404][ T8749] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 280.538654][ T58] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 280.570791][ T5892] usbhid 4-1:1.0: can't add hid device: -22 [ 280.582370][ T5892] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 280.598568][ T5892] usb 4-1: USB disconnect, device number 67 [ 280.694089][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 280.701589][ T58] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.710219][ T58] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.718915][ T58] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.727971][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.737719][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.747514][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.760595][ T58] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.769776][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.781977][ T58] usb 3-1: config 0 descriptor?? [ 280.933030][ T5931] usb 5-1: USB disconnect, device number 60 [ 280.958692][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.981059][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.003952][ T58] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 281.092908][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 281.117907][ T58] usb 3-1: USB disconnect, device number 60 [ 281.134372][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 281.149551][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 281.178792][ T5896] usb 1-1: USB disconnect, device number 64 [ 281.186390][ T58] usblp0: removed [ 281.468209][ T5931] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 281.554098][ T5892] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 281.554110][ T58] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 281.624271][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 281.639845][ T5931] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 281.649274][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.657729][ T5931] usb 5-1: Product: syz [ 281.661941][ T5931] usb 5-1: Manufacturer: syz [ 281.666617][ T5931] usb 5-1: SerialNumber: syz [ 281.673518][ T5931] usb 5-1: config 0 descriptor?? [ 281.682270][ T5931] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 281.694288][ T5894] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 281.704176][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 281.710953][ T58] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.719461][ T58] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.729135][ T58] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.729969][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.738299][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.738323][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.738376][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.738416][ T58] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.782502][ T5892] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.796930][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.808104][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.824850][ T5892] usb 4-1: config 0 descriptor?? [ 281.835374][ T58] usb 3-1: config 0 descriptor?? [ 281.874167][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 281.887022][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.896078][ T5894] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 281.904646][ T5894] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 281.914966][ T5894] usb 1-1: config 4 has no interface number 0 [ 281.923607][ T5894] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 281.933478][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.941841][ T5894] usb 1-1: Product: syz [ 281.946309][ T5894] usb 1-1: Manufacturer: syz [ 281.950995][ T5894] usb 1-1: SerialNumber: syz [ 282.051836][ T58] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.083812][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 282.097620][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.120592][ T5892] usb 4-1: USB disconnect, device number 68 [ 282.173571][ T5894] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 282.183563][ T5894] usb 1-1: No streaming interface found for terminal 6. [ 282.200063][ T5894] usb 1-1: USB disconnect, device number 65 [ 282.534219][ T58] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 282.694147][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 282.705690][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.739038][ T58] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.818778][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.854916][ T3082] usbhid 2-1:1.0: can't add hid device: -71 [ 282.906054][ T58] usb 4-1: config 0 descriptor?? [ 282.911357][ T3082] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 283.006163][ T3082] usb 2-1: USB disconnect, device number 64 [ 283.027200][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 283.027219][ T30] audit: type=1400 audit(1744704503.127:3104): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8776 comm="syz.0.785" [ 283.102217][ T8780] bond0: entered promiscuous mode [ 283.107695][ T8780] bond_slave_0: entered promiscuous mode [ 283.113860][ T8780] bond_slave_1: entered promiscuous mode [ 283.149881][ T8780] bond0: left promiscuous mode [ 283.155648][ T8780] bond_slave_0: left promiscuous mode [ 283.161802][ T8780] bond_slave_1: left promiscuous mode [ 283.183354][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 283.296687][ T5931] gspca_ov534_9: reg_r err -71 [ 283.634133][ T5931] gspca_ov534_9: Unknown sensor 0000 [ 283.634243][ T5931] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 283.704337][ T3082] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 283.748765][ T5931] usb 5-1: USB disconnect, device number 61 [ 283.876343][ T3082] usb 2-1: Using ep0 maxpacket: 8 [ 283.888848][ T3082] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 283.900817][ T3082] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 283.911997][ T3082] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 283.969152][ T3082] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.036785][ T3082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.131285][ T3082] usbtmc 2-1:16.0: bulk endpoints not found [ 284.166408][ T5896] usb 3-1: USB disconnect, device number 61 [ 284.230272][ T5896] usblp0: removed [ 284.306683][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 284.312826][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 284.363963][ T58] usb 4-1: USB disconnect, device number 69 [ 284.468302][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.788'. [ 284.624245][ T5893] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 284.804282][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 284.824438][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 284.843172][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.861058][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.908613][ T5893] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 284.920179][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.936772][ T5893] usb 5-1: Product: syz [ 284.960740][ T5893] usb 5-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 285.046094][ T5893] usb 5-1: SerialNumber: syz [ 285.096230][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.3.794'. [ 285.096290][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 285.330984][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.331204][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.333001][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.790'. [ 285.560609][ T5893] usbhid 5-1:1.0: can't add hid device: -22 [ 285.560900][ T5893] usbhid 5-1:1.0: probe with driver usbhid failed with error -22 [ 285.567612][ T5893] usb 5-1: USB disconnect, device number 62 [ 286.730839][ T5892] usb 2-1: USB disconnect, device number 65 [ 287.009291][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 287.040771][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.234211][ T58] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 287.314165][ T5931] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 287.394410][ T58] usb 2-1: device descriptor read/64, error -71 [ 287.484257][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 287.492466][ T5931] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 287.503075][ T5931] usb 1-1: can't read configurations, error -22 [ 287.724276][ T5892] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 287.739478][ T8843] kernel read not supported for file / -9mZr7âW)s!Qfsl{Tr)rO2:"T+͟v|ղ (pid: 8843 comm: syz.3.805) [ 287.755509][ T58] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 287.755928][ T30] audit: type=1800 audit(1744704507.857:3105): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.805" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=25892 res=0 errno=0 [ 287.801869][ T5931] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 287.857474][ T66] tipc: Subscription rejected, illegal request [ 287.916292][ T5892] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 287.925570][ T5892] usb 5-1: config 0 has no interface number 0 [ 287.931726][ T5892] usb 5-1: config 0 interface 113 has no altsetting 0 [ 287.947216][ T5892] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 287.954548][ T58] usb 2-1: device descriptor read/64, error -71 [ 287.964206][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.972440][ T5892] usb 5-1: Product: syz [ 287.977875][ T5892] usb 5-1: Manufacturer: syz [ 287.978530][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 287.982619][ T5892] usb 5-1: SerialNumber: syz [ 287.998370][ T5892] usb 5-1: config 0 descriptor?? [ 288.009185][ T5892] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 288.033765][ T5931] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 288.045845][ T5931] usb 1-1: can't read configurations, error -22 [ 288.058876][ T5931] usb usb1-port1: attempt power cycle [ 288.122669][ T58] usb usb2-port1: attempt power cycle [ 288.445681][ T5931] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 288.474123][ T58] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 288.482171][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 288.491165][ T5931] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 288.510238][ T5931] usb 1-1: can't read configurations, error -22 [ 288.520901][ T58] usb 2-1: device descriptor read/8, error -71 [ 288.544229][ T3082] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 288.664151][ T5931] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 288.704145][ T3082] usb 4-1: Using ep0 maxpacket: 16 [ 288.711201][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 288.721846][ T3082] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.730893][ T5931] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 288.741513][ T3082] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.757697][ T5931] usb 1-1: can't read configurations, error -22 [ 288.768273][ T3082] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.778473][ T5931] usb usb1-port1: unable to enumerate USB device [ 288.785794][ T58] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 288.809286][ T3082] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 288.828304][ T3082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.842344][ T3082] usb 4-1: Product: syz [ 288.847620][ T58] usb 2-1: device descriptor read/8, error -71 [ 288.855869][ T3082] usb 4-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 288.869505][ T3082] usb 4-1: SerialNumber: syz [ 288.980108][ T58] usb usb2-port1: unable to enumerate USB device [ 289.257355][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.305724][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.318814][ T8859] tap0: tun_chr_ioctl cmd 1074025677 [ 289.325620][ T8859] tap0: linktype set to 6 [ 289.333632][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.807'. [ 289.456526][ T3082] usbhid 4-1:1.0: can't add hid device: -22 [ 289.475554][ T3082] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 289.521655][ T3082] usb 4-1: USB disconnect, device number 70 [ 290.149355][ T3082] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 290.324129][ T3082] usb 3-1: Using ep0 maxpacket: 32 [ 290.363183][ T3082] usb 3-1: config 32 has an invalid interface number: 76 but max is 0 [ 290.384073][ T3082] usb 3-1: config 32 has no interface number 0 [ 290.390531][ T3082] usb 3-1: config 32 interface 76 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 290.411592][ T3082] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3 [ 290.431044][ T3082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.458334][ T3082] usbtest 3-1:32.76: Linux gadget zero [ 290.468938][ T3082] usbtest 3-1:32.76: high-speed {control in/out int-out} tests (+alt) [ 290.484126][ T5892] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 290.645705][ T5892] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 290.656535][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.670826][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 290.683244][ T5892] usb 2-1: config 0 has no interface number 0 [ 290.692139][ T5893] usb 3-1: USB disconnect, device number 62 [ 290.713756][ T5892] usb 2-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.730924][ T5892] usb 2-1: config 0 interface 25 has no altsetting 0 [ 290.747394][ T5892] usb 2-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 290.785331][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.804761][ T5892] usb 2-1: Product: syz [ 290.815253][ T5892] usb 2-1: Manufacturer: syz [ 290.828503][ T5892] usb 2-1: SerialNumber: syz [ 290.842521][ T5896] usb 5-1: USB disconnect, device number 63 [ 290.865910][ T5892] usb 2-1: config 0 descriptor?? [ 292.014128][ T3082] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 292.154151][ T3082] usb 5-1: device descriptor read/64, error -71 [ 292.246717][ T5893] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 292.385529][ T5892] usb 2-1: Found UVC 0.00 device syz (1b3b:2951) [ 292.393603][ T5892] usb 2-1: No valid video chain found. [ 292.394458][ T3082] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 292.406535][ T5892] usb 2-1: USB disconnect, device number 70 [ 292.418915][ T5893] usb 3-1: config 0 has no interfaces? [ 292.433455][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 292.446581][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.457340][ T5893] usb 3-1: Product: syz [ 292.461539][ T5893] usb 3-1: Manufacturer: syz [ 292.467366][ T5893] usb 3-1: SerialNumber: syz [ 292.474710][ T5893] usb 3-1: config 0 descriptor?? [ 292.544283][ T58] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 292.551891][ T3082] usb 5-1: device descriptor read/64, error -71 [ 292.664671][ T3082] usb usb5-port1: attempt power cycle [ 292.704095][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 292.711912][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.723000][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.734857][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.747487][ T58] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 292.757558][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.766906][ T58] usb 1-1: Product: syz [ 292.771364][ T58] usb 1-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 292.780049][ T58] usb 1-1: SerialNumber: syz [ 293.005660][ T3082] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 293.067558][ T3082] usb 5-1: device descriptor read/8, error -71 [ 293.163315][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.176380][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.201501][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'. [ 293.209683][ T8904] tap0: tun_chr_ioctl cmd 1074025677 [ 293.217838][ T8904] tap0: linktype set to 6 [ 293.348309][ T3082] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 293.391968][ T58] usbhid 1-1:1.0: can't add hid device: -22 [ 293.407916][ T3082] usb 5-1: device descriptor read/8, error -71 [ 293.422614][ T58] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 293.445721][ T58] usb 1-1: USB disconnect, device number 70 [ 293.585692][ T3082] usb usb5-port1: unable to enumerate USB device [ 294.056732][ T30] audit: type=1326 audit(1744704514.157:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.1.827" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x0 [ 294.430013][ T5893] usb 3-1: USB disconnect, device number 63 [ 294.831433][ T8929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.372269][ T8940] loop6: detected capacity change from 0 to 63 [ 295.395118][ C1] blk_print_req_error: 17 callbacks suppressed [ 295.395132][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.410402][ C1] buffer_io_error: 17 callbacks suppressed [ 295.410413][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.467150][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.476330][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.484433][ T3082] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 295.487601][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.501153][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.514136][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.523309][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.531717][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.540920][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.550048][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.559204][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.576798][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.585960][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.617988][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.627267][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.640337][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.649481][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.657529][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.666729][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.697733][ T8940] ldm_validate_partition_table(): Disk read failed. [ 295.717927][ T8940] Dev loop6: unable to read RDB block 0 [ 295.745082][ T3082] usb 3-1: config 0 has no interfaces? [ 295.754177][ T5892] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 295.763445][ T8940] loop6: unable to read partition table [ 295.769680][ T8940] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 295.945391][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.960681][ T3082] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 295.964091][ T5892] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.969949][ T3082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.002312][ T3082] usb 3-1: Product: syz [ 296.007408][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.011869][ T3082] usb 3-1: Manufacturer: syz [ 296.027822][ T3082] usb 3-1: SerialNumber: syz [ 296.046153][ T3082] usb 3-1: config 0 descriptor?? [ 296.051290][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.083266][ T8941] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 296.107544][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.304434][ T5893] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 296.401170][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 296.412950][ T8937] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 296.482513][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.493577][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 296.506347][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.515488][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.537084][ T5893] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.646792][ T5893] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.701813][ T5893] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 296.729676][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.754298][ T5893] usb 4-1: Product: syz [ 296.763241][ T5893] usb 4-1: Manufacturer: 䌕뤈ᦷꡯ퍗傹蚕ꈾゥ먫ꂯ䂶Ꮼ徽򥏯 [ 296.788888][ T5893] usb 4-1: SerialNumber: syz [ 296.923266][ T8957] xfrm1: entered allmulticast mode [ 297.111722][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.140291][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.170428][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 297.218182][ T5892] usb 5-1: USB disconnect, device number 68 [ 297.411296][ T5893] usbhid 4-1:1.0: can't add hid device: -22 [ 297.430335][ T5893] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 297.446576][ T5893] usb 4-1: USB disconnect, device number 71 [ 297.989332][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 298.311834][ T8973] bond2: entered promiscuous mode [ 298.344886][ T8973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.393680][ T8979] pimreg: entered allmulticast mode [ 298.399864][ T8979] pimreg: left allmulticast mode [ 298.405454][ T8979] FAULT_INJECTION: forcing a failure. [ 298.405454][ T8979] name failslab, interval 1, probability 0, space 0, times 0 [ 298.429736][ T8979] CPU: 1 UID: 0 PID: 8979 Comm: syz.3.841 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 298.429757][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.429765][ T8979] Call Trace: [ 298.429771][ T8979] [ 298.429776][ T8979] dump_stack_lvl+0x241/0x360 [ 298.429800][ T8979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.429819][ T8979] ? __pfx__printk+0x10/0x10 [ 298.429839][ T8979] ? __pfx___might_resched+0x10/0x10 [ 298.429858][ T8979] should_fail_ex+0x424/0x570 [ 298.429875][ T8979] should_failslab+0xac/0x100 [ 298.429894][ T8979] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 298.429912][ T8979] ? __alloc_skb+0x1c2/0x480 [ 298.429927][ T8979] __alloc_skb+0x1c2/0x480 [ 298.429937][ T8979] ? rtnl_prop_list_size+0x1e/0x1e0 [ 298.429957][ T8979] ? __pfx___alloc_skb+0x10/0x10 [ 298.429969][ T8979] ? if_nlmsg_size+0x5b9/0x820 [ 298.429985][ T8979] ? if_nlmsg_size+0x5b9/0x820 [ 298.430002][ T8979] rtmsg_ifinfo_build_skb+0x84/0x260 [ 298.430023][ T8979] rtmsg_ifinfo+0x91/0x1b0 [ 298.430042][ T8979] dev_close_many+0x2e3/0x4c0 [ 298.430063][ T8979] ? __pfx_dev_close_many+0x10/0x10 [ 298.430087][ T8979] unregister_netdevice_many_notify+0x628/0x2510 [ 298.430104][ T8979] ? vif_delete+0x7af/0xa40 [ 298.430121][ T8979] ? mroute_clean_tables+0x250/0xb50 [ 298.430137][ T8979] ? ip_mroute_setsockopt+0xbde/0x11f0 [ 298.430154][ T8979] ? do_sock_setsockopt+0x3b1/0x710 [ 298.430166][ T8979] ? __ia32_sys_setsockopt+0x1f2/0x280 [ 298.430179][ T8979] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.430201][ T8979] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 298.430219][ T8979] ? vif_delete+0x7e9/0xa40 [ 298.430242][ T8979] ? __pfx_vif_delete+0x10/0x10 [ 298.430263][ T8979] ? __lock_acquire+0xad5/0xd80 [ 298.430279][ T8979] mroute_clean_tables+0x39d/0xb50 [ 298.430305][ T8979] ? __pfx_mroute_clean_tables+0x10/0x10 [ 298.430328][ T8979] ? _copy_from_user+0x95/0xb0 [ 298.430350][ T8979] ip_mroute_setsockopt+0xbde/0x11f0 [ 298.430376][ T8979] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 298.430414][ T8979] do_ip_setsockopt+0x1114/0x39c0 [ 298.430436][ T8979] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 298.430453][ T8979] ? aa_sk_perm+0x96f/0xac0 [ 298.430473][ T8979] ? ksys_write+0x24e/0x2d0 [ 298.430488][ T8979] ? __pfx_aa_sk_perm+0x10/0x10 [ 298.430504][ T8979] ? __lock_acquire+0xad5/0xd80 [ 298.430519][ T8979] ip_setsockopt+0x63/0x100 [ 298.430535][ T8979] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 298.430554][ T8979] do_sock_setsockopt+0x3b1/0x710 [ 298.430571][ T8979] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 298.430583][ T8979] ? __fget_files+0x2a/0x420 [ 298.430595][ T8979] ? __fget_files+0x39d/0x420 [ 298.430605][ T8979] ? __fget_files+0x2a/0x420 [ 298.430621][ T8979] __ia32_sys_setsockopt+0x1f2/0x280 [ 298.430638][ T8979] __do_fast_syscall_32+0xb4/0x110 [ 298.430654][ T8979] ? exc_page_fault+0x5f8/0x920 [ 298.430672][ T8979] do_fast_syscall_32+0x34/0x80 [ 298.430688][ T8979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.430703][ T8979] RIP: 0023:0xf739d579 [ 298.430714][ T8979] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.430728][ T8979] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 298.430742][ T8979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 298.430750][ T8979] RDX: 00000000000000d4 RSI: 0000000080000040 RDI: 0000000000000004 [ 298.430758][ T8979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.430765][ T8979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.430773][ T8979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.430791][ T8979] [ 299.030578][ T3082] usb 3-1: USB disconnect, device number 64 [ 299.269725][ T8986] FAULT_INJECTION: forcing a failure. [ 299.269725][ T8986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.285368][ T8987] netlink: 184 bytes leftover after parsing attributes in process `syz.4.842'. [ 299.564714][ T8986] CPU: 0 UID: 0 PID: 8986 Comm: syz.2.843 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 299.564741][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.564751][ T8986] Call Trace: [ 299.564758][ T8986] [ 299.564766][ T8986] dump_stack_lvl+0x241/0x360 [ 299.564798][ T8986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.564823][ T8986] ? __pfx__printk+0x10/0x10 [ 299.564857][ T8986] should_fail_ex+0x424/0x570 [ 299.564880][ T8986] _copy_from_iter+0x211/0x1c70 [ 299.564908][ T8986] ? alloc_pages_mpol+0x4e6/0x690 [ 299.564936][ T8986] ? __pfx__copy_from_iter+0x10/0x10 [ 299.564964][ T8986] ? set_page_refcounted+0xa1/0x1e0 [ 299.564989][ T8986] ? alloc_pages_noprof+0x136/0x190 [ 299.565011][ T8986] ? page_copy_sane+0x46/0x260 [ 299.565035][ T8986] copy_page_from_iter+0x7a/0x100 [ 299.565060][ T8986] tun_get_user+0x1f6c/0x47c0 [ 299.565079][ T8986] ? tun_get_user+0x852/0x47c0 [ 299.565109][ T8986] ? aa_file_perm+0x139/0xf60 [ 299.565134][ T8986] ? aa_file_perm+0x3f1/0xf60 [ 299.565159][ T8986] ? __pfx_tun_get_user+0x10/0x10 [ 299.565192][ T8986] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 299.565227][ T8986] ? tun_get+0x1e/0x2f0 [ 299.565242][ T8986] ? tun_get+0x1e/0x2f0 [ 299.565256][ T8986] ? tun_get+0x27d/0x2f0 [ 299.565273][ T8986] tun_chr_write_iter+0x10d/0x1f0 [ 299.565303][ T8986] vfs_write+0x70f/0xd10 [ 299.565329][ T8986] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 299.565358][ T8986] ? __pfx_vfs_write+0x10/0x10 [ 299.565380][ T8986] ? __fget_files+0x2a/0x420 [ 299.565399][ T8986] ? __fget_files+0x2a/0x420 [ 299.565422][ T8986] ksys_write+0x19d/0x2d0 [ 299.565444][ T8986] ? __pfx_ksys_write+0x10/0x10 [ 299.565465][ T8986] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 299.565487][ T8986] ? lockdep_hardirqs_on+0x9d/0x150 [ 299.565510][ T8986] __do_fast_syscall_32+0xb4/0x110 [ 299.565532][ T8986] ? exc_page_fault+0x5f8/0x920 [ 299.565556][ T8986] do_fast_syscall_32+0x34/0x80 [ 299.565578][ T8986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.565604][ T8986] RIP: 0023:0xf741d579 [ 299.565619][ T8986] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.565634][ T8986] RSP: 002b:00000000f50a6520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 299.565652][ T8986] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000840 [ 299.565664][ T8986] RDX: 000000000000003e RSI: 00000000f740dff4 RDI: 0000000000000000 [ 299.565675][ T8986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.565684][ T8986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.565695][ T8986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.565719][ T8986] [ 300.464310][ T3082] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 300.625824][ T3082] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.640406][ T3082] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 300.675875][ T3082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.721756][ T3082] usb 3-1: config 0 descriptor?? [ 300.735078][ T3082] pwc: Askey VC010 type 2 USB webcam detected. [ 300.814542][ T5894] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 300.948356][ T3082] pwc: send_video_command error -71 [ 300.953622][ T3082] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 300.997805][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 301.006774][ T3082] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 301.025560][ T5894] usb 4-1: config 2 interface 0 has no altsetting 0 [ 301.038638][ T5894] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 301.060508][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.071327][ T3082] usb 3-1: USB disconnect, device number 65 [ 301.092465][ T5894] usb 4-1: Product: syz [ 301.110234][ T5894] usb 4-1: Manufacturer: syz [ 301.122945][ T5894] usb 4-1: SerialNumber: syz [ 301.384952][ T5894] usb 4-1: USB disconnect, device number 72 [ 301.584117][ T3082] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 301.765729][ T3082] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.776646][ T3082] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.786282][ T3082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.797345][ T3082] usb 3-1: config 0 descriptor?? [ 301.805353][ T3082] pwc: Askey VC010 type 2 USB webcam detected. [ 301.864104][ T5893] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 302.015500][ T5893] usb 1-1: config index 0 descriptor too short (expected 29, got 18) [ 302.023726][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.032708][ T5893] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 302.042390][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.059077][ T5893] usb 1-1: config 0 descriptor?? [ 302.197257][ T5896] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 302.205249][ T3082] pwc: recv_control_msg error -32 req 02 val 2b00 [ 302.214299][ T3082] pwc: recv_control_msg error -32 req 02 val 2700 [ 302.282249][ T3082] pwc: recv_control_msg error -71 req 02 val 2c00 [ 302.303331][ T3082] pwc: recv_control_msg error -71 req 04 val 1000 [ 302.321099][ T3082] pwc: recv_control_msg error -71 req 04 val 1300 [ 302.332839][ T3082] pwc: recv_control_msg error -71 req 04 val 1400 [ 302.352811][ T3082] pwc: recv_control_msg error -71 req 02 val 2000 [ 302.366846][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 302.376505][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.376532][ T3082] pwc: recv_control_msg error -71 req 02 val 2100 [ 302.396921][ T3082] pwc: recv_control_msg error -71 req 04 val 1500 [ 302.403981][ T3082] pwc: recv_control_msg error -71 req 02 val 2500 [ 302.404554][ T5896] usb 4-1: config 0 descriptor?? [ 302.424132][ T3082] pwc: recv_control_msg error -71 req 02 val 2400 [ 302.431164][ T3082] pwc: recv_control_msg error -71 req 02 val 2600 [ 302.433068][ T5896] pwc: Philips SPC 900NC USB webcam detected. [ 302.439305][ T3082] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.455989][ T3082] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.462997][ T3082] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.473190][ T3082] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.490769][ T3082] pwc: Registered as video103. [ 302.499866][ T3082] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 302.522294][ T3082] usb 3-1: USB disconnect, device number 66 [ 302.635724][ T5896] pwc: Failed to set LED on/off time (-71) [ 302.654710][ T5896] pwc: send_video_command error -71 [ 302.660061][ T5896] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 302.681135][ T5896] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 302.699429][ T5896] usb 4-1: USB disconnect, device number 73 [ 302.811900][ T5893] usb 1-1: string descriptor 0 read error: -71 [ 302.821510][ T5893] ldusb 1-1:0.0: Interrupt in endpoint not found [ 302.834978][ T5893] usb 1-1: USB disconnect, device number 71 [ 302.894359][ T3082] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 303.064182][ T3082] usb 3-1: Using ep0 maxpacket: 8 [ 303.072484][ T3082] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 303.090250][ T3082] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.115265][ T3082] usb 3-1: config 0 has no interface number 0 [ 303.122362][ T3082] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.142981][ T3082] usb 3-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 303.193781][ T3082] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 303.206359][ T3082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.214632][ T3082] usb 3-1: Product: syz [ 303.219669][ T3082] usb 3-1: Manufacturer: syz [ 303.228828][ T3082] usb 3-1: SerialNumber: syz [ 303.258296][ T3082] usb 3-1: config 0 descriptor?? [ 303.297970][ T3082] ttusb_dec_send_command: command bulk message failed: error -8 [ 303.310467][ T3082] ttusb-dec 3-1:0.113: probe with driver ttusb-dec failed with error -8 [ 303.321843][ T3082] usbhid 3-1:0.113: couldn't find an input interrupt endpoint [ 303.407420][ T5896] usb 3-1: USB disconnect, device number 67 [ 303.478626][ T9049] : entered promiscuous mode [ 303.904731][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 304.391008][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.869'. [ 304.401309][ T9065] [ 304.403667][ T9065] ====================================================== [ 304.410695][ T9065] WARNING: possible circular locking dependency detected [ 304.417705][ T9065] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 304.424801][ T9065] ------------------------------------------------------ [ 304.431809][ T9065] syz.0.868/9065 is trying to acquire lock: [ 304.437696][ T9065] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 304.446684][ T9065] [ 304.446684][ T9065] but task is already holding lock: [ 304.454042][ T9065] ffff88807dc7b8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 304.464142][ T9065] [ 304.464142][ T9065] which lock already depends on the new lock. [ 304.464142][ T9065] [ 304.474535][ T9065] [ 304.474535][ T9065] the existing dependency chain (in reverse order) is: [ 304.483539][ T9065] [ 304.483539][ T9065] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 304.492148][ T9065] lock_acquire+0x116/0x2f0 [ 304.497168][ T9065] __mutex_lock+0x1a5/0x10c0 [ 304.502276][ T9065] smc_switch_to_fallback+0x35/0xda0 [ 304.508077][ T9065] smc_sendmsg+0x11f/0x530 [ 304.513015][ T9065] __sock_sendmsg+0x221/0x270 [ 304.518218][ T9065] __sys_sendto+0x365/0x4c0 [ 304.523237][ T9065] __ia32_sys_sendto+0xdd/0x100 [ 304.528608][ T9065] __do_fast_syscall_32+0xb4/0x110 [ 304.534237][ T9065] do_fast_syscall_32+0x34/0x80 [ 304.539603][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.546443][ T9065] [ 304.546443][ T9065] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 304.554086][ T9065] lock_acquire+0x116/0x2f0 [ 304.559101][ T9065] lock_sock_nested+0x48/0x100 [ 304.564380][ T9065] do_ip_setsockopt+0x17e9/0x39c0 [ 304.569918][ T9065] ip_setsockopt+0x63/0x100 [ 304.574936][ T9065] do_sock_setsockopt+0x3b1/0x710 [ 304.580490][ T9065] __ia32_sys_setsockopt+0x1f2/0x280 [ 304.586327][ T9065] __do_fast_syscall_32+0xb4/0x110 [ 304.592000][ T9065] do_fast_syscall_32+0x34/0x80 [ 304.597374][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.604218][ T9065] [ 304.604218][ T9065] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 304.611427][ T9065] validate_chain+0xa69/0x24e0 [ 304.616707][ T9065] __lock_acquire+0xad5/0xd80 [ 304.621915][ T9065] lock_acquire+0x116/0x2f0 [ 304.626929][ T9065] __mutex_lock+0x1a5/0x10c0 [ 304.632036][ T9065] start_sync_thread+0xde/0x2d60 [ 304.637491][ T9065] do_ip_vs_set_ctl+0x48e/0xe50 [ 304.642855][ T9065] nf_setsockopt+0x295/0x2c0 [ 304.647975][ T9065] smc_setsockopt+0x25c/0xd50 [ 304.653174][ T9065] do_sock_setsockopt+0x3b1/0x710 [ 304.658715][ T9065] __ia32_sys_setsockopt+0x1f2/0x280 [ 304.664509][ T9065] __do_fast_syscall_32+0xb4/0x110 [ 304.670135][ T9065] do_fast_syscall_32+0x34/0x80 [ 304.675502][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.682342][ T9065] [ 304.682342][ T9065] other info that might help us debug this: [ 304.682342][ T9065] [ 304.692559][ T9065] Chain exists of: [ 304.692559][ T9065] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 304.692559][ T9065] [ 304.706115][ T9065] Possible unsafe locking scenario: [ 304.706115][ T9065] [ 304.713555][ T9065] CPU0 CPU1 [ 304.718916][ T9065] ---- ---- [ 304.724275][ T9065] lock(&smc->clcsock_release_lock); [ 304.729650][ T9065] lock(sk_lock-AF_INET); [ 304.736584][ T9065] lock(&smc->clcsock_release_lock); [ 304.744481][ T9065] lock(rtnl_mutex); [ 304.748487][ T9065] [ 304.748487][ T9065] *** DEADLOCK *** [ 304.748487][ T9065] [ 304.756632][ T9065] 1 lock held by syz.0.868/9065: [ 304.761558][ T9065] #0: ffff88807dc7b8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 304.772090][ T9065] [ 304.772090][ T9065] stack backtrace: [ 304.778092][ T9065] CPU: 1 UID: 0 PID: 9065 Comm: syz.0.868 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 304.778114][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.778126][ T9065] Call Trace: [ 304.778132][ T9065] [ 304.778140][ T9065] dump_stack_lvl+0x241/0x360 [ 304.778186][ T9065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.778211][ T9065] ? __pfx__printk+0x10/0x10 [ 304.778236][ T9065] ? print_lock+0x171/0x1a0 [ 304.778259][ T9065] print_circular_bug+0x2e1/0x300 [ 304.778283][ T9065] check_noncircular+0x142/0x160 [ 304.778308][ T9065] validate_chain+0xa69/0x24e0 [ 304.778340][ T9065] __lock_acquire+0xad5/0xd80 [ 304.778361][ T9065] lock_acquire+0x116/0x2f0 [ 304.778377][ T9065] ? start_sync_thread+0xde/0x2d60 [ 304.778406][ T9065] __mutex_lock+0x1a5/0x10c0 [ 304.778427][ T9065] ? start_sync_thread+0xde/0x2d60 [ 304.778451][ T9065] ? sched_clock_cpu+0x77/0x4d0 [ 304.778473][ T9065] ? start_sync_thread+0xde/0x2d60 [ 304.778500][ T9065] ? __pfx___mutex_lock+0x10/0x10 [ 304.778529][ T9065] start_sync_thread+0xde/0x2d60 [ 304.778554][ T9065] ? lockdep_hardirqs_on+0x9d/0x150 [ 304.778575][ T9065] ? rcu_is_watching+0x15/0xb0 [ 304.778596][ T9065] ? trace_sched_exit_tp+0x3c/0x120 [ 304.778612][ T9065] ? __schedule+0x1ba6/0x5240 [ 304.778635][ T9065] ? __pfx_start_sync_thread+0x10/0x10 [ 304.778671][ T9065] do_ip_vs_set_ctl+0x48e/0xe50 [ 304.778689][ T9065] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 304.778711][ T9065] ? __mutex_unlock_slowpath+0x229/0x800 [ 304.778737][ T9065] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.778760][ T9065] ? __pfx___mutex_lock+0x10/0x10 [ 304.778785][ T9065] nf_setsockopt+0x295/0x2c0 [ 304.778812][ T9065] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 304.778838][ T9065] smc_setsockopt+0x25c/0xd50 [ 304.778859][ T9065] ? __pfx_aa_sk_perm+0x10/0x10 [ 304.778881][ T9065] ? __pfx_smc_setsockopt+0x10/0x10 [ 304.778900][ T9065] ? __lock_acquire+0xad5/0xd80 [ 304.778917][ T9065] ? aa_sock_opt_perm+0x79/0x120 [ 304.778942][ T9065] ? __pfx_smc_setsockopt+0x10/0x10 [ 304.778961][ T9065] do_sock_setsockopt+0x3b1/0x710 [ 304.778986][ T9065] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 304.779003][ T9065] ? __fget_files+0x2a/0x420 [ 304.779019][ T9065] ? __fget_files+0x39d/0x420 [ 304.779032][ T9065] ? __fget_files+0x2a/0x420 [ 304.779050][ T9065] __ia32_sys_setsockopt+0x1f2/0x280 [ 304.779069][ T9065] __do_fast_syscall_32+0xb4/0x110 [ 304.779091][ T9065] ? exc_page_fault+0x5f8/0x920 [ 304.779112][ T9065] do_fast_syscall_32+0x34/0x80 [ 304.779134][ T9065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.779155][ T9065] RIP: 0023:0xf73fd579 [ 304.779170][ T9065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.779185][ T9065] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 304.779203][ T9065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 304.779215][ T9065] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018 [ 304.779226][ T9065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.779237][ T9065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.779247][ T9065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.779263][ T9065] [ 305.434143][ T9070] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 313.104780][ T36] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3