last executing test programs: 14.013825435s ago: executing program 1 (id=841): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x88, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc08c5332, &(0x7f0000000400)={{0x3e, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x1d, 0x0, 0x1}, {0x15, 0x0, 0x0, 0x2000000}, {0x6}]}) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000740)={0x20, 0x0, 0xb4, {0xb4, 0x24, "5a7d3229173e86e606235ff081d95a390e3cdde9e9f6e4213188b2d8716d8440f25f97e10a4cf97140946e7ff6d92e4d678b616e595b48d725cc2546d80159cc7ee2dc08d95524211168c546cc8f170bd3a20c3de79b1007194913911bf1df594833fdd3d3d76311fe96489a00afce2184e3a7e2ecf156a4aeabae3bc3950b3a2d6c7da17c533f8c407dad894234c0f400e3c9f42439058b1c17333732bc8fb4c9bcdc6c29cdbb92190ca5166785a04987e9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) 9.236401414s ago: executing program 1 (id=860): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x0, 0x3}, 0xfffffffffffffee4) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xffffffffffff0000}, 0x800, 0x0, 0x0, 0x3, 0x8}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) fcntl$addseals(r3, 0x409, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0bd29a8afaea3096d9061a2df0c1", 0x10001, 0x1, 0x5, 0x8, 0x1000, 0xc, 0x400009, 0x8, [0x101, 0x2, 0x4, 0xe]}) syz_open_dev$vbi(0x0, 0x1, 0x2) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x52, 0xa, 0x1, "3258c5c00e7f94ae1e008fba001b0000f4ff4000000000002300e91aba2800", 0x34343459}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb) r8 = socket$pppoe(0x18, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000240)) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 8.224662531s ago: executing program 3 (id=866): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x17, 0x2, 0x0, "b43d70dde5dbbbe40f810001bbe6c9000000c67f00", 0x33524742}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) close_range(r0, r1, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000100)={0x3, 0xb, 0xe5e7, 0x0, 0xffffff00}) listen(0xffffffffffffffff, 0x9) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.196109431s ago: executing program 2 (id=867): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7.209923166s ago: executing program 2 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @private=0xa010100}, 0x4, 0x0, 0x1}}, 0x2e) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x4e0, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x223}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x9, 0x90, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "cfc0a9e6bdcef26413d6f77c1f229921b22c0dbe4426d8a7ee9ae66312b9b3ae65"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x31}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xde3d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf304}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffeff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x234, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf1, 0x3, "aa0e248c84bd117d721c4eb0fc22d834ff0ca29a2ce0235863f4e621bfb7a259a229c1859f41559ca3661c64ad34cf1594e28ed0cd27973961d676c547345f4af17c1eb96b27d67b595ac5ce270baac498a5411cb3e6cbb2794778ae84aa64f0f6ec235feb8e7aa8913f08c989d38a4ac0ff2c3e53bc96821ede41cc6a3abd73cd961dc59a7a77737bfe8308c514cec1ae66d0d78c6b6854a7cb3a48b2fa8a7715205103058ce286fc1c5f8d187168bc18b1f4161ca02eb615f007d5aa4641eeb31c08e77cbcd7be8b0340054c964c9cb9a174c04e5f896551955f48be2e336387459bb3b10c56e65d33645dd9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff02fb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x72091058}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd3, 0x3, "c5202af2b7e009956727442f65ae4528b84a06f8dbc971e35728630040be993e8aacca54204773b87678d31aaa19e6f6ef906371ffa1cde4224dedaf45ea126cb0fc0fc6e8b1684e741c9d849d947dddb94ac8e366c2c6a0f9c9e03dd0ba0c1a1d2f8e9356373cb9c88d0ff075aba1df0e6e273b8c66e9ac58966ea31d5528212f7f8d602b9b9f8261dbe8908b38f475669e5f63c5f8f947aa36f12d4641f72c3ccecc374396544a881fe4f998369f4dd7b2c664c62c939c4184990ffed43e2b9ed07e80f5792c955d6b1571a800a8"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9209eb1b49ece02fb9db0b940a8e806eb86170965e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x200080e1}, 0x11) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0xada, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)={0x84, 0x15, 0x1, 0x3, 0x0, "", [@generic="272ff4948ef6c52191935433b0ab3c1c888c3d16298702922b9798eae28b4bec44ad105f788f7d025cd46356f57f26e6eceef58b02f085470593d448829a228c1464b3740b62d5cde142bcee78abe3234bc69cfea42bbd6345090f871ec1770d08364800"/109, @nested={0x4, 0x2e}]}, 0x84}], 0x1}, 0x4000800) 7.074367978s ago: executing program 1 (id=869): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600201c014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xc7}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (fail_nth: 48) 6.888728326s ago: executing program 2 (id=870): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_usbip_server_init(0x4) write$usbip_server(r6, &(0x7f0000000740)=@ret_submit={{0x3, 0x8, 0x0, 0x1, 0x5}, 0x400, 0x0, 0x2, 0x0, 0x7}, 0x30) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x4, 0x8) syz_emit_ethernet(0x10f, &(0x7f0000000380)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_mc={0x8848, {[{0xb84ab, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x143d}, {0x9, 0x0, 0x1}, {0x6758}, {0x4, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x8000}], @ipv4=@tcp={{0xd, 0x4, 0x0, 0x6, 0xd9, 0x67, 0x0, 0xcd, 0x6, 0x0, @empty, @remote, {[@lsrr={0x83, 0x1b, 0x14, [@local, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1]}, @rr={0x7, 0x3, 0x91}]}}, {{0x4e23, 0x4e20, r7, 0x41424344, 0x0, 0x0, 0x10, 0x80, 0x9b3, 0x0, 0xc2, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @nop, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x7}, @mss={0x2, 0x4, 0x3}, @timestamp={0x8, 0xa, 0x0, 0x749}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x5, "1c1b0f"}]}}, {"82e71e0f7ed206aaa1c9bdb271433a61a768acb78adef5ffe76e8e41c00642b3861b739142fbccf51df0c9d3e1e2e35e43b500ca07e8492bcde0c4b1b90afc8e2209a6c59469a0d4aaf116c105976b1ee8c739cfaae4c124e3482b0872e4dcdc34527e2950"}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}, {0x1000, 0xb, 0x3, 0x8000}]}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) 6.449835566s ago: executing program 1 (id=871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.446419603s ago: executing program 0 (id=872): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{}, @any, 0x0, 0x0, 0x1, 0x5, 0x1, 0x2, 0xe0000000}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x4}, {0x7, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xd}}]}, 0x40}}, 0x0) sendmmsg$alg(r4, &(0x7f0000005840)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="4484569bfa97517641400e3900264a61db5722ca1263cd56fba67d2e4a129be6fefff9b54cc26561610e6c9d8983795c9ca8161ca3adac30f56b0c8f3cabb134c93e0871ddebb84bb72a730a1a8fba3300a8929e6747a96a144b7d2417e00937c40e51714d44f1e60831cd5bb2dcbb2a4a9df8596f2ec5470cbbedd62e04176f23488561b163bc0eaa40479880e6a79722bf2531ca08f4671b7b399a9d8caccd43cd0f7786ea62f477d5ebae59b9e635b10425", 0xb3}, {&(0x7f00000001c0)="15bbaf6a3adb1c678967a89eb2671aef92bfa4d5515c5c67416443a90969eaeeb263856cd8910ea5cc5f068f0ccf00a4107f8b9ba34e1f04e242f586b0234d4f742cba0e21d912", 0x47}, {&(0x7f0000000380)="2b99590c18621909e61c1b169fb0b6e2c8ff5b7ff030d03102f2046e8b9e90f3e432abc8e0eb342c463810445eba7b7520000d1a4672987985238e6d3a89348c159a50a41395b2da88d74a8b1ad18395942f576f0e0205868afd2d8684efb2ef23c125aad38e8328010bc4b68df9d442455a65f0fcf0df28345c2f64647a6a4745d34d4d7b6d0ebc67ff62cae8a9195798882c5705deab1c754013e675b1cfd078316d18a46503503aeb6c3b944ec4d4f148f60dddf56d51d1d1496457e5f23a49e9903a", 0xc4}, {&(0x7f0000000500)="3f46b111712b04a74cdc6d5245cdce8ac825ca1c8908a8ff0f0b279790ea2b2d54e496923085301e8c864666e9f6272379758fe9ee3a23ec2feb72889b5adbf7f9ff75e9fa5d949f56cf9517ea704a5d69cad274953f93503e91e061440f2c609b3488e6089be9f5bd2cc49ab50e3a2502b7bbb9ffc0bab77b57e734152107c264c557a45df65821c9d198435dd31748b58b8827cc3e1885c819ebcb52075f7846c698372dadcf518e46458b370ea0", 0xaf}, {&(0x7f0000000600)="7f3a0ec829dfd3423f10b2b362524037a0f9b9e7ded706ef5ceff0fa279e0327738f9f7699dde296a0f90942be2a6246e94a2e762fe5cf790ad0d45f4dcf179bb70f831c9d8689e243b94452cfdc75839e2dfb40130f3dd84142ff692eeebcfa338840754373cb9561ce04a98adc34086d639c70af3f22ce30596199df9348cf1e3030bd31fe615995beedd4581c9b4f613e43a721599d341157f6e26f96a7643a510561e6fc48f581fc31da0209013e1c2ed1fd80f893e89b494b33c28fe5080c19f4ad6749fb4d38949a591fb9", 0xce}, {&(0x7f0000000700)="09d903a2fdac01080a826495347d72e630b75f0b1c4c632aa45bbfed212fd2a69ec77df4fa4dc8756abc82d8907a38ca07c3cc3dc335c0f10e6b2242cc2bb6dfc398c9449effd3505a56244bdcd764c50d34421c6aeca13f000386", 0x5b}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10c, 0x20000080}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)="08667b5de7afa12e0923048c63e63b84e49cd41acf628caf033e3dc2f6c2485ddd401766848e0a4d98a21d9f6fb6654e1cd6c243466144505d6f37c65cc3230bf4fae61786732fb0cb6ce96f4eb24ab2001689e50b7b11c94bfc750ac77032ab4ccafc920db7ed3cc04aca07330ff9c22310a94b96b4cb8642bf7662040be9326294f66abfb72d8b9a9406aa38d734e5c9c3b4ed8b4ea911e0b620c07cd4c93b844d7054dc9ad39d2ef715e6b91f5f3415e1c5130aa8e592accbfad0232d4d6600a0f7e4de18e8907ecbf165578d06fa768087d5f403f36e446042744948576ddeacf016af1f95", 0xe7}, {&(0x7f00000009c0)="3a5e53621b277774ec3c78c77cd11c13810af6bc48288e", 0x17}, {&(0x7f0000000a00)="5ff8e3deef49e226512dc1fef28acb11926422875fc0820fa9b0496629405cc13bfe34334dcabb32bc448bbec899c2eff7ffc6d5545b6e5a62a477", 0x3b}, {&(0x7f0000000a40)="f9050f71182314f6387c645c9773664b1f32f45ed7f5be00ae06d93b538ab3039d36e7335783c8f46d6f39398220bc54d744d6c11861ac9067f2253ca09776c6738cc167d72bf4df3c6742d0ef316518c92863cf89e08d2b0bb1048ee8597486312cd7e00a060f519fae5b88278af45930c6fb2f0feff10646556671739b7e13a86143d8db21ed71", 0x88}, {&(0x7f0000000b00)="12d79d0a9b83398ecb85815615f48bc1fa14cb45361d1983d15b6919c16a4ba822fda035a9ac55e1dfeaf0ac679138ee571d9b53abec4d52ed43180ebb384efec6fefc4a1ab87ed48e386b283346d1f83a4c4ca257e827a0c6587d68ed0c82719592c47c3de67a1827007a702b268a654972b4774281a563bc03e5a9f6082f56529fd2ff792d414a93588801974ab93c5a439fd9e1a806e1958de018c28c12ec15bf3827871e6c9874e25bc105b6633281965f61d3ba5bd2e10eb004c92fd6a98b8abd6e390ab9ed06b8349b2ca5982a65dce42c4c3050", 0xd7}], 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x11e0, 0x2000c854}, {0x0, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x20000014}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c80)="62f769d341d3b169187872ed2cf352004a59610d8cafd94091a1404af91a420472b041477e77d47ba80decb386154d9880be2cc22f07c5b3eb0a85df1972f0d75e1d8408f9df5031cbaeeec0b77d6f3f1c5c373d78f0d189c5a9c52ad6caa49ee8e7d98e1deff1232830a9349b66bd984f1899f98b6d599ef4b306ecb5e43991d74532aaa3fee36f28fda7bc5c9a517e7082fbaf12b5ca27c504d5a003a561aed6564cf1722c0bf1a959fdc5a806e28e87f06b5010ffb6039bba3bed5b337383b8", 0xc1}, {&(0x7f0000000d80)="eb2352899164e9f3c199d8f8d5b620824024", 0x12}, {&(0x7f0000000dc0)="b8", 0x1}, {&(0x7f0000000e00)="b218e55d2ba2ee9daac29e2b0f5c07cb0c4655b672bb0f118316b6108c07283c59e12be1a4931a25fbd5ebc79d642f2cf8ef4b74b7bf873c2c2e1c8e4d4e5a739b9450bee43845ee9c8eb24db8ce8636d7bafa155bedce1b51a44d5da0e3cdadc32e68fe6bb8245ca4b45544d208c966a185e1", 0x73}, {&(0x7f0000000e80)="af4ecbc3ef4c7d230f3ba4b47cf89d8caccc0e183c39e82eb8449d12b905cd68d487f0fc992f0da5a493df7ba1b07431e953b04a853103ec815ad49fdb35edbd55e806121e22ba589ffa96d489a6b09a7b13b5a1f1311423920fc6e7d3cebe27c29711204c7c", 0x66}, {&(0x7f0000000f00)="a61f18a31f0924acd390bfccaa5eff7ce84a143ce392aaa7e81860d01ee53d04a5fc43cb75c9cc9f9389a1a73bb6cc43", 0x30}], 0x6, &(0x7f0000000f80)=[@iv={0x68, 0x117, 0x2, 0x55, "750d121eead0583d14ee5e770f83e697e7187c0b400786dba066eea247fa6cf39fbe891bc61266a354375b9657f4644ae1e0e2adc3dea8e22c0f39212566255f6cd36c528d8e4d00e33f354a69db431cdd7ce67d8a"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x98, 0x20000000}, {0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001040)="a783ff35db67bf6b4f038ea5ffd659ab195ba64faade7a3327d287a284694715e64c5c6ba4a71cc02bb9e078fb60dc3761f01964358fb7e205f34babfdf8baf6b6343938ddcd107a101c69d6f0e5deed136be43e679af73efa5cb464d0bba84d45b18934497c2622519763b867bbb802af1a2d2eb37fb04ab56122dcec81153d4ea5cc8788cec6a19a9ff67bb44d7079de555db067ac1056d0e88f73f13a2546e83a1e0f942a5602bcf54105977451e8f818320fdcc2c2c9fb9a6226ff", 0xbd}, {&(0x7f0000001100)="8be2dca557", 0x5}, {&(0x7f0000001140)="16d0338f2caa85cc21041712c5977d0aa0c151068292c74e0a7e2ef0b99eaa08af4b7c9f204dfe2ceffffd339a424e4cfd9fbbda701ed3340dc01927baca5aceace55578d69e9825fad4b21cc328b519deeb97df63e40e9e9ab6ea599c62ac0169fe8d81b7df56153137f0a9c9448ae96eefe848776718019405a56fa807988048a6782ce0e75e694582f728855bf01fb6b4d1e6ce8e", 0x96}, {&(0x7f0000001200)="2284207850c8af82986e6d6a9d237cd435ad23645722cab530130469dceda1565f64b25fb76c32a48a00fd12d93f6b2555b7ebaa4227659b3173802264e8eb8c94f64ee27bd0a26696d06342b062e8defa5b6a8c81e087a8dc0ee424a098febc88d8feb93ac23fb146ae9f0a9202adeea342acc43cb5553b1313ff04f6762560aaa6bf4e7b64c13864dd35e0d808d4612869ff49f7b29967265b0085b83517a8fa4004ba76e2b43b9fe7b54663be92bd29872c8e5e1e912a423d", 0xba}, {&(0x7f0000002500)="7f7907a89890c5a555c5520010fe04c350e10bec4479a69c46ec36b36868c4d3bc", 0x21}, {&(0x7f0000002540)="c2a6f0ed05d0c21c7f62899050de45d0f8d265478785e5750960057da506ed44b7d28f44c640234459d1bc27398be660712efff383f081093af3d6b1b309c830a052ca80174e8495a90f6545144e9270c49a4117997125ef35fef5cdd0f69f5e8d95b8babc3782050764650052fb5771d35ee9d9bacbff1afba01eeafda799672fa4e7b3a4311f0c9575a0dda34718e9b68c7e6a8477a0d3239a211fd05053ba2bca7b8ade4ff5328ec84c746f55", 0xae}, {&(0x7f0000002600)="0e6b5fd235a9c8d8cf70061ff00f7f38fd299ff96e8ea82cf274d7a12d30db091cc77d3fde4e9ec6e70c4c694a749acfdea4def534625ed16af362eda17e1fbb5d2842b0f587a4069390cb125b6039ddfe1750a5f538b35389b6c3", 0x5b}, {&(0x7f0000002680)="f9e25ce93e3a02707df6ef815cc55d9e5ff7b39dc016336b3aeee0fe9ea2a0db9f607afb455ea42bbb23bdb5cac6d342d0b90d91abf4edef0e8bf1d22cc7e441b9da6a975469853d6cde20767e47a85438e06da1d997e2189e1b15e554361578968712f0a9da72ec54ebd5f2d78a0c1ddc924caeb1883c636e87663e4267d2dc478a93fb097e59623211fe528d7ffaa77d9b1643ea9c2901a1d03674608bf5a50aa5d60ca2f0798069b2b02c3460fce9710d3d8a3c0238cc792b1a80d2eefdeb6ae9c57f0927a24a9c8c51930cd55db509d9", 0xd2}], 0x8, &(0x7f00000027c0)=[@assoc={0x10}], 0x10, 0x1}, {0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="4333efb738381ce3954cbfb789f6ee6ba4ce3f183d9e434ea47927ba426b0a13de975363b1059fbc70469df89a58586edb4c78e9d4ee77a0293c4de3c71f773661a386cf6b1463f10ec15879570366c87103ca86de69b6b527bed7b1aa349d85f0a672943edaf7b03389e4b29270d5ee", 0x70}], 0x2, &(0x7f0000003b00)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xa37}, @iv={0x6c, 0x117, 0x2, 0x5c, "7f2d6a5f6f1b18fbff31216224265f30d66310f46b252e300a3b72d29012fe37bf92be767b0ed7ffef9f199c9a755ac124b59abe758a1638e529337c8edb40e7b434e84dfadcdb8df348332cadeb9d5ba60dea8c06808997d369c033"}, @iv={0xb0, 0x117, 0x2, 0x9d, "87b4a28a379ab758dca2e0a9f8456b79a17d62ac209d2da0db3385e34b40f0229ddc34153dc9f3bf488c38b84758b54a214d66409d8a895c1558b115c884d6b3ced656f0cb211fea8ffcb2c2263acdfbf6607e4e8a8dbe2348b15e0b81f9579dbcd4958e1294110cfbbab8b92591606fa13a830c25373e3e59cd2d8b32f05484ee27a823040b72dc3f0799f1ff063f13c08d226bd972b50cbe883a9fc3"}, @assoc={0x10, 0x117, 0x4, 0x7}, @assoc={0x10, 0x117, 0x4, 0x373}, @assoc={0x10, 0x117, 0x4, 0x4}, @op={0x10, 0x117, 0x3, 0x1}], 0x17c, 0xc004}, {0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000038c0)="a8b9af7819e19bd106e4bf420506d873cb3af14e8172f2b9b66bd81f5e4b", 0x1e}, {&(0x7f0000003900)="e85c555a0416d3c7c411aec86696402a46ff7b695886993bcb3ba3433623036c58c2de0cb2362d78f57f0bd1c5a9b68f86c8f008ca405dd3095bf3e51bfd0090ba22c2cf7df30f84a3597bfb4f2c9c459255b94cddb9e1e9afa19e16614e", 0x5e}, {&(0x7f0000003c80)="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", 0x1000}], 0x3, &(0x7f0000004c80)=[@assoc={0x10, 0x117, 0x4, 0x18}, @iv={0x28, 0x117, 0x2, 0x16, "ee6ecdbe536ff068d072c9084a9df6cdff0ea0fef665"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x80000000}, @iv={0x2c, 0x117, 0x2, 0x1b, "dacd17a9e738c6be0ab874e36692cb033a00cd145dccee505cfbbf"}, @iv={0x38, 0x117, 0x2, 0x28, "0668962a330e8050431949b2fa6ce533ba4959b71bc121cb68412d659c81b95cf6dadece2c76826a"}, @iv={0xd0, 0x117, 0x2, 0xc0, "2ea9ccf8c327b1e86647dac80016ad4f216067845c0cb88a15c8c3743bbdb82991cf15bcc3f52dbb558da52c8d1cb9644b742a93d4d90e56be6861b16773431170bb9c7884d37ab4344397544829b0a1f92b2107fb606e74ec1583eced64303682b3278af95f930cf5df497c8a91358ba63233985f6f5d3b9895dcbee6dc79580f8abc78163f2ae4b9f710067f3812f07f89bf4a37c49c38470ab7ffaa3523e1fb5d61e45517564223c1c8adbffc62548f3e047442db558f009fdbc65a72d8f9"}, @iv={0x24, 0x117, 0x2, 0x13, "f538cecbcd6dc9c9162eb80918aadfeacaeeef"}, @op={0x10}, @iv={0x64, 0x117, 0x2, 0x53, "05ad731162908fdc3ba70ba8b7c1a46cfe8293942da47d98bf380aa2f4bffaef279fa4232cd6d63d159ee8e8947dec205b134c9398c277e8ced0c39efa66cc673f3665f1c8674ed77d148b15f3c65b55fa5449"}], 0x224, 0x4000001}, {0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000004f40)="ed2d2e06dcf9710d5f89cee04a129af99a1c82ad929b0b4a60d6493389d7a1205e7ae78cdc816fb364b14877c9a53289107237791f70c8f55e14328fef95a44925f6eb09e0179cfd27ec193bcdd49689439aa57b2dc74436017f39cb70ff8663cd38c3115743de19bc512622cc6fdef2a65b38984d94106f622da8859456bd7b09a3deda79e75b04a60febcc464349a804cd9ee002d40d45e2bcdc9687699ea872e81da9f2148ce68e11b87022", 0xad}, {&(0x7f0000003a00)="496ef2bec05f4768ded371f966ad0e5cacf7388f80b3420a4f98334587", 0x1d}, {&(0x7f0000005000)="18a8ebed5f67f218e2b692cfcd44ab2b14882ff92b8e7b23ce9ed8fbc7551dc43bf55217f06eb66ea7479a96430a759fac4eb58278e53254be81cb5a3ec181d71389aee862d3d44fdb8c00514bb23e5b2744e87b70b94df4b0a7b111339f85f042bfe26be8e939f9c92d74bcb2865e5b1adf88f33d159d834aecb95e1c0c4f099499217eddb926f3bb8f4dcaa24018a7fafe371e000141f96a44178d139ab0285df959ca0db8b25206d2d4130f30a014755a82c391ad271c654277240f258c49223cd67739e945979c3beca9b223bca2b88f8a17f641fff2ffd9cde215c07c8f28fca867e0b6b1c42e99c9b71a586f6419", 0xf1}, {&(0x7f0000005100)="13d8b6898ca09c1eb9620f63ebeafcacd15c08d10bef74faa0fafa6b8228bce1262e32c085ab7fa8fe854ec3d6f372f9e81b4f8dcd9ec22d181a5aca374c57e3a6cdaa5e7950ff5b3ab008f833407c590011a46a5f61768a552de8207c36b685bfa0e87337c3207e3e6b0d51a7bbddabf259871db74fa118de9bdfbb56338849bac0664e85de203b180880b2a5b825b3db381c038e835e119ec7ba3c36c3a0fd784ec6857d897097dd3d3ab3c47cacc9ba0b4ba1cfb477a065b4bb0fa24485364c7c6b17044f499db842b9b087acd4a2335aa2863198", 0xd6}, {&(0x7f0000005200)="b36eb13f0d45b68fd6e66c83b577ba7d49ac003d5e0ab7de3b77007239a53de29c2449c7eb0d00abbed06e1554bb9527f94a16bf52401e6b244819b73525307476dd1907cac476942d60afe0f6bbba3ee9a2ff382008beb63374157c614207119c2ec0acf39c650e7501de9f860fe5799b38a438290a1842ee358931eb496509490cb4f06bcffd0c421bf40292a6feadc71f00c9672415ecb1b8cb2ac993eec2e99621d9d7b4093a6e7d56bb8f4a696dfb5f1ab0a84b78b8712f", 0xba}, {&(0x7f0000006080)="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", 0x1000}, {&(0x7f00000052c0)="b90aff6fcc14686f7af92c54cc9d4e429b58f7504eaf6c740d9d3348635fb306e12b47e1c6ae1f95e274a6d100b9db63aae95931daa69005c8a61d1ad2b64b463f68ae13d37b8e748b777f97bb5ac67a2dc60dd869e91b7eb2cef760d9c0f66ae1062fae2a5210361d3ead7c853990076b945226a44736e942dd342a16af2cb978cbfae5d02744d0e3891b5f3e3231a0b34b9eef5d2f411c15da6dd3", 0x9c}, {&(0x7f0000005380)="3088ed9aaf32da9d73a23b0db8f14f4ced291653bef88b05a7d3c8bf123a897dc90a746f29441dc798a628132173fd277da2078116e7b62ba1e734cd98a1df59f7d936d5154a012107037412e0dd75ffd50252e390317d2853592604b5ce64a40e4d1ec05fd21575135d314a6599c429531f66f3335abbf9c8db890c932f04d50b6e670974f423decc737b14bd87ecb7ecda", 0x92}, {&(0x7f0000005440)="4005737f416ce685cee33eda6ba83cf251961955b6ab7f0bf1f74b282a422a37fd821a4e0a147486527f5073535fe882b762781483b434b006d586b2a0d1629d67123a844a5cc2926a0fca267ff7a92c82d0640d9f0b16333ea8f0ed3da854f4b2c51125b6", 0x65}, {&(0x7f00000054c0)="8512fa5526e2066b7896299a0ab5374c1277d48fbaf4403963ec558f750cd2d0a56a12b5044b90424f7a2554f06bd9f64d5d4f6db5e2ea289dd463636b7b8a1b215c166f11a4730a318b83557565bdcf", 0x50}], 0xa, &(0x7f0000007080)=[@iv={0xf0, 0x117, 0x2, 0xdf, "963504fa1ce7d06500017ede3c343c68295911d959975b31ad2ae08a53e0c2334b0ff9e1edd316443919c4ac9a31b1e00f755d8857641813b63a3790ce5a43a30040341a9f2604f6764e8711a80e4bb0ccb8b9624b07cadf7b56880aca1f2ae0721ad6b697b30e0285c3fb4d94053329b1f64c66f1944837684024a1c2eccc4baf363124d786b2b6fc9810b9dc68dee8b3294c87a71df9f02dc24b45737410d82984d213d52cb4bd26e8ea8aef3056ebbb276f413a9d9c350131ab4c8c281b34bb6f549415dc680215100d09e2b696eaa26b8b732273ce2389580936717d4a"}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x7f}, @iv={0xc0, 0x117, 0x2, 0xb0, "c7ba50e1a546ed87dac94e52fccabbaf93d03973a7992fe239f602b55c8ab2cd8ec810a16ebf23de1df150cbcb654b8f2722e517802c5f1a43e7b45d535d54315d902dc17a93fb2966ac17eb293d3832f7f62c882a3f98e5ab58199087a79019b94b415621a39a16d653c386e6aa612e41fd35e1b6a42ecf9449ba2c18173eea3f452f4ccaf4e558671f8825a1b46b265d0bb2452ecc1e55ca9845faad3054d5bfa35a10f04a01c7748484c7a6b65665"}, @assoc={0x10, 0x117, 0x4, 0x10001}, @assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0xa21}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @op={0x10, 0x117, 0x3, 0x1}], 0x1220, 0x80}, {0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000082c0)="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", 0x1000}, {&(0x7f00000055c0)="175957d7d72c30be77552adfab57e35371deb83ea0a4d4ed734cc51dd10c0adbda695ca0db28b6908c47d879fa3ed92827eff5b51de3bb77b3f3bfd87bb8584cae373e9d7b44f613a780d75faca945d551ae5faa66768ef4", 0x58}, {&(0x7f0000005640)="5cef3e78b5f5d749ed8552e95319a404e3ce1e43ee6f300b80d61ec454203eebee9d1b1dced1e7599ee48d13e2f62128338a0668d89aa6e2beb5acca1af7f05b9880c6919a8fa32f221f8b46d06cf477873bcacc31a7a4b33ccf19a72d390702807cf210f4ea7a8ba7e8191b357957b63f1f966131876c774364a7d3ab403855129160b0ad6fffd2e281fed3d4b403b4351ba4db", 0x94}, {&(0x7f0000005700)="0063992461097bb6cfc1fa6344958643281c5870333d9c953e47be06c2f06c8b783fc2f4788d070c0bf11d488b88567ceef4e72b97d3863513a124de2ec8b1f34477c1e64f9b771ae247674d970bbc83", 0x50}], 0x4, &(0x7f0000005940)=ANY=[@ANYBLOB="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"], 0xc0, 0x20044004}], 0x9, 0x24000004) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000602"]) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[], 0x0) 6.118227618s ago: executing program 1 (id=873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0) r5 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe00000000770400000000ffd0c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x804) 5.771132179s ago: executing program 4 (id=874): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x17, 0x5}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8f2e10859ff00224ad54afac11d03229c993c5240f45f818a01177d3d458dd4992861ac00000006000800", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffffe]}}) 5.291051695s ago: executing program 4 (id=875): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000002060102000000000000000001000000050004000000000009"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x800101fe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 4.762110141s ago: executing program 4 (id=876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=ANY=[@ANYBLOB="240000006800010003000000539a8c1db6e74c00000000000c0002"], 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904000002f46479000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000240)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="000f3500000035317efa7d9340d312179d3f26c48e8172be51764f9aa9f85a087a303a5cff946dd0c6f506251368b98c0e659c9094ded61a3878a1056d38fb774041528af8e5edb34f77e902f86da56cd0c4cccb18d90f1d1302b64471fefc6f4762df5d2a2e1c26e6f1704ad1318ab0ea2f79290e7f08f0c7cc104295244ff0eba70e3de22b1e8cf0a3dd34e4d4e8ff8f9f47ec9e4f8054f1a6f3b7f9e4ae1e8b7cabef54f8c7293a3e3aa565988cdef176102e6df7374b960ad6a37c85"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x10, &(0x7f00000000c0)={0x40, 0xb, 0x59, "436359c94494aa82d9087ea0193102cba118f9386a276995858d16715b3e4d95f53a0cb53ce39d0c7bc7fa582548ad3b8460f92acef8237c092dbcf9c5ef438e7955d2de0a603ce75c6804117fb388417fe0918198e25c14e6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x60}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xfb}}) syz_usb_control_io$printer(r1, 0x0, 0x0) 4.761263061s ago: executing program 3 (id=877): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xd855c03d29c7a5c9, 0x8000, 0x0, 0x1ff, {{0x19, 0x4, 0x0, 0xd, 0x64, 0x68, 0x0, 0xbe, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x17}, {[@cipso={0x86, 0x2d, 0x2, [{0x7, 0x11, "998765511e6c6be819a7dcc5d01282"}, {0x2, 0x2}, {0x7, 0x7, "1750bf43b6"}, {0x7, 0xd, "c0b611079c20cbcb48e320"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1c, 0x3, [{0x7, 0x4, "c034"}, {0x0, 0x12, "3281b762fa3f55720674793dd17a3f13"}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getroute={0x24, 0x1a, 0x800, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x3, 0x400}, [@RTA_OIF={0x8, 0x4, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x81339dc6211c2712}, 0x10004) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x7fd4da73cbc3c92e, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', r0, 0x40, 0x7, 0x7171, 0x800, {{0x13, 0x4, 0x0, 0x27, 0x4c, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0xc, 0x3, [{0x2, 0x6, "22a2aafb"}]}, @generic={0x44, 0x7, "45feba8158"}, @generic={0x88, 0xa, "ad9060a7e729688a"}, @end, @lsrr={0x83, 0x13, 0x37, [@remote, @private=0xa010102, @remote, @loopback]}]}}}}}) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=@allocspi={0x270, 0x16, 0x100, 0x70bd26, 0x25dfdbfd, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x4e24, 0x800, 0x4e21, 0x7, 0xa, 0xa0, 0x0, 0x2b, r0, 0xee01}, {@in=@private=0xa010101, 0x4d5, 0x6c}, @in=@multicast1, {0x4, 0x2, 0xf86, 0x82, 0x9, 0x6, 0x1, 0x2fd2}, {0x2, 0x40, 0x7f, 0x3ff}, {0x3, 0x1, 0x9}, 0x70bd27, 0x3503, 0x2, 0x0, 0x17, 0x35b7aa187f5d6461}, 0x838}, [@tmpl={0xc4, 0x5, [{{@in=@multicast2, 0x4d4, 0x33}, 0x2, @in6=@empty, 0x3501, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x4d6, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x0, 0x2, 0x0, 0xfffffffb, 0x1, 0x7}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x6c}, 0x2, @in6=@mcast2, 0x3502, 0x1, 0x1, 0xa1, 0xffffc8db, 0xfffffffb, 0xf25}]}, @policy={0xa8, 0x7, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0xd, 0x4e24, 0x1, 0xa, 0x60, 0x80, 0x3b, r2, r3}, {0x6, 0x8, 0x80, 0x3ff, 0x9, 0x6f6e, 0x3, 0x8000000000000000}, {0xcc, 0x9, 0xcb3, 0x9}, 0x7, 0x0, 0x2, 0x1, 0x3}}, @proto={0x5, 0x19, 0xff}, @replay_thresh={0x8, 0xb, 0x173d8c43}]}, 0x270}}, 0x20000040) sendto(0xffffffffffffffff, &(0x7f0000000880)="87ef64119f6137ec1431609c462c090c819b8b1c6b2bed58352413e113d531c72889ef961286f17e566d5562a366729803108cc7f3178320645676eb32d0605aeb50fc03d12a58cb280c6a482b4236a2e7db3d45e3e29f53fc7aaa2f8c56e5b9e3724a8c7806174d10e04414eb5a77e0062617ac529e9a74fa260366f78a8a4dd28a0ff25fb0fef955fdad31d2df95033d09d4a71e16e32ed84ab4047e7a61fc31dcf45c9f3dff7a82be07fe7567f3248eacd0", 0xb3, 0x891, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgrp(0xffffffffffffffff) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000980)={r6, r3, r4}, 0xc) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000009c0)=@x86={0x5, 0x80, 0x4, 0x0, 0x9, 0x5d, 0x3, 0x1, 0x9, 0x1, 0x4, 0x6, 0x0, 0x2, 0xfffff845, 0xff, 0x6, 0x2, 0x7, '\x00', 0x3, 0xfffffffffffffff6}) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$USBDEVFS_GET_CAPABILITIES(r8, 0x8004551a, &(0x7f0000000a40)) ptrace$pokeuser(0x6, r6, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000b00)={0x4, &(0x7f0000000ac0)=[{0x1, 0x1, 0xff, 0x6}, {0x3, 0x20, 0x6, 0xd}, {0x8000, 0x5, 0x9, 0x81}, {0x1, 0x0, 0x2, 0x1}]}) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000b40)={0x1, 0x0, [{0x80000000, 0x0, 0x4800, 0x4, 0x8}]}) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000b80)=r6) ioctl$KVM_RUN(r7, 0xae80, 0x0) write(r7, &(0x7f0000000bc0)="78c00cb201176b9857f1c7c42411f5d5bf289f0ebd288bdec91fe841c39d3512e477a8ff08f14ddd6ee0502c151513021a791a91e609888ac7f6", 0x3a) ptrace(0x4208, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000c00)={0xa, 0x4e20, 0x9, @mcast1, 0x6}, 0x1c) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000c40)=0x7) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000c80)={0x0, @in6={{0xa, 0x4e23, 0xe, @mcast1, 0xc2}}}, &(0x7f0000000d40)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000d80)={r11, 0x1, 0x1, 0x2}, &(0x7f0000000dc0)=0x10) eventfd(0xe893) modify_ldt$write(0x1, &(0x7f0000000e00)={0x5, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) 4.555903899s ago: executing program 3 (id=878): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x140b, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) 4.44463418s ago: executing program 0 (id=879): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x0, 0x3}, 0xfffffffffffffee4) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xffffffffffff0000}, 0x800, 0x0, 0x0, 0x3, 0x8}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) fcntl$addseals(r3, 0x409, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0bd29a8afaea3096d9061a2df0c1", 0x10001, 0x1, 0x5, 0x8, 0x1000, 0xc, 0x400009, 0x8, [0x101, 0x2, 0x4, 0xe]}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0080) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x52, 0xa, 0x1, "3258c5c00e7f94ae1e008fba001b0000f4ff4000000000002300e91aba2800", 0x34343459}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb) r8 = socket$pppoe(0x18, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000240)) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.010195879s ago: executing program 3 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x2c}}, 0x20000800) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0xc0105702, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ba5485202404007598b70102030109022d0001088790070904480103e60f3ab509059302000409032e09050b02ff0307091009050d10ff0305097f04bba9c9dfdd8bec967a2fe962ea075dbebfb441b8ddd0e36fc9a2234d3d450127b6d691052fc7301d448e02679c1d1e531d5f0c9ac8802567b1bca8018dbb557a56e7d5bba09f5c5d425e0d1e58bd6051350380ad1e2fd1e9642d3890eaf5c95d857eb7073c2bfe4eda89c96da16d116319ebb9da8461de9c30ae9abea2950e1209"], 0x0) 3.888732864s ago: executing program 2 (id=881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x2000000, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x1c, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.312678089s ago: executing program 2 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0xf461fb7ccd43b8c2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0008004503005cffff0000002f907800000000e005000110000800000086dd080088be0000000010fe00000100000000000000080022eb00000000200000000200000000000009000000000800655800000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x80000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x8000000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ab, 0x0, [{0xc001102a, 0x0, 0xffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000080)={0x3, r8, 0x40081, 0x0, 0x4, 0x800008}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd7a55b37727f6f1e}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2.178045193s ago: executing program 1 (id=883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x38, 0x1, [@m_mirred={0x34, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x5, 0xa, "a1"}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000a804) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0xa00, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x9, 0x3, 0x0, [{@broadcast}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) shutdown(r4, 0x1) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="e565000000000010d21f07600000000000010902240001000000ff0904000001030000000921000000012205000905810300000000003d16f8018946eca5a37988b79868f6d612d9f2035ac003140d0b64541b4e51f9ee0f5b27afc3a980cc75690eaf7724244f61f5305f6cb5ea61ddec8ef02dc93283465c99b289e93d55688a8e714767f9836d9c20403035de8ff2c097d2f89e59e615"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="980000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c000280060002002f00000005001600020000000500170000000000050027007f000000050011000900000008001c00", @ANYRES32, @ANYBLOB="08001f00060000001d002400a0b302517ef9187b62c4eb4c653521cc01d2f9ecb214751e42000000080013"], 0x98}, 0x1, 0x0, 0x0, 0x8041}, 0x4) syz_usb_control_io(r7, &(0x7f0000000140)={0x18, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) recvmsg(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000004100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110026bd7000fedbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="140055004c678a2abcd8ee1090ea120ee284c5341400fe0050de0fcadc32416462a23c5ca082076d0a0006005050505050500000"], 0x50}}, 0x20044800) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000200)={0xfffffff7, 0xfffffffa, 0x2}, 0x0) 2.077437547s ago: executing program 3 (id=884): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) listen(r0, 0x20000000) (async) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x181100, 0x0) sendmsg$nl_route(r1, 0x0, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x4043, 0x3, 0x3, 0x3}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 1.858578186s ago: executing program 0 (id=885): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2, 0xee00}, {}, {0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@loopback}}, 0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x48, &(0x7f0000000380)=ANY=[@ANYBLOB="892c"], 0x170) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 1.67853809s ago: executing program 3 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000040c0000002000018008000300020000001400020076657468315f746f5f7465616d000000140003800400050004000400080002000000000055121c79a45be71e76c8d6c3d001416cb8738bdc7e4abfb5d08d6bd34fafadea1fb06b5252a6e41f7179f9b730b61ef626a5da8a89f8315d97f54f6c81e482a6086ec8c60a57a76136f48737c3df7d0f62eeed6eabf396bb81f47945865c671a8358bbc4c3a631e8c47241d8c023f65e6bc0b8218f0976"], 0x48}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010000d0400"/20, @ANYRES32=r7, @ANYBLOB="00000000002101005c001280110001006272696467655f736c61766500000000440005800600020000000000050020000100000005000a00000000000500", @ANYRES32=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x29, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7"}]}], {0x14}}, 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="300727bd7000fbdbdf25080000005c0001800800030002000000140002006e72300000000000000000000000000008000300000000001400020064766d7270310000000000000000000008000100cd45dc05d99823cc643cafacfd3dd189ed02499776248cdac733fe1c6962b3e1356f9be1b5a5e5cc404966aaf1c0fae951d10f85370032afd5266ca1ec44c08d982a3229bbf01cf2", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB], 0x70}}, 0x8002) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="080107a40d02"], 0x38) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x2000}) ioctl$TUNSETOFFLOAD(r13, 0x400454c9, 0x3) ioctl$TUNGETVNETLE(r13, 0x800454dd, &(0x7f0000000040)) ioctl$TUNGETSNDBUF(r13, 0x800454d3, &(0x7f0000000400)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000088000100ac141400080005000a010105000016801c000300e0000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.678252613s ago: executing program 0 (id=887): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000002060102000000000000000001000000050004000000000009"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010300, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 1.354295283s ago: executing program 2 (id=888): r0 = socket$inet6(0xa, 0x1, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x4009e, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000340), 0x14) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000240)={0x3, @raw_data="d99d42d0d49a222c56a3a9d33ece8d2da160179793302646cf3895e3580005884e5f89af57db100c793fc7b88798179695b36b9134875c14c4a86edcc1405028b7b92ccb24d6a3b7474fc9e57c0533b565506401af86df2d46c98d82f2083541cde9ef8507424707443be17af80d3db5f8a338c5ab92d037e5506cb1c4bf8880b3362fe493098aba31823144fe3ede4e937939181e57e21ce4d08c0c8433ad959a53f65e17897a54a0130cb6215b6db2aeb5ac453fa739a55403df93e86b82cb772b69e2ee327b08"}) openat$binfmt(0xffffff9c, r2, 0x41, 0x1ff) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000ff00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)='r', 0x1}], 0x1}}], 0x1, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000c3000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.297564705s ago: executing program 0 (id=889): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfb7a, 0x8000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000040)=0xffffffff) 1.206011332s ago: executing program 4 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000084000040"]) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = eventfd2(0x8, 0x80800) r7 = eventfd(0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r6, 0xffff, 0x2, r7}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 982.138204ms ago: executing program 0 (id=891): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000780)=ANY=[@ANYBLOB="60000000081403"], 0x60}, 0x1, 0x0, 0x0, 0x14000804}, 0x4000) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000001c0)={0x9, 0x6, 0x3, 0x4800}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001020000102505a1a440000102030109026100020106300d0904000001020d00000a24060001335f2fc78c05240004000d240f010d000000080000000906241a00003809058103ff03ff09060904010000020d00000904010102020d00000905820200020504050905030210003480060447e6e5245d9c4b358805cc381d40dbd7ddbc018f2a371e72eba8f9005156169ad1c82f00c8d004"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000780)=ANY=[@ANYBLOB="60000000081403"], 0x60}, 0x1, 0x0, 0x0, 0x14000804}, 0x4000) (async) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000001c0)={0x9, 0x6, 0x3, 0x4800}) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001020000102505a1a440000102030109026100020106300d0904000001020d00000a24060001335f2fc78c05240004000d240f010d000000080000000906241a00003809058103ff03ff09060904010000020d00000904010102020d00000905820200020504050905030210003480060447e6e5245d9c4b358805cc381d40dbd7ddbc018f2a371e72eba8f9005156169ad1c82f00c8d004"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) 646.267802ms ago: executing program 4 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x1c, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 4 (id=893): socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902240001"], 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x5423, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, &(0x7f0000001d40)) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x2, 0x2, 0x2, {0xa, 0x4e22, 0x7fff, @private1}}}, 0x3a) (async) socket$pppl2tp(0x18, 0x1, 0x1) kernel console output (not intermixed with test programs): [ T5931] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 229.642799][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.673389][ T5931] usb 1-1: Product: syz [ 229.687804][ T5931] usb 1-1: Manufacturer: syz [ 229.703284][ T5931] usb 1-1: SerialNumber: syz [ 229.718206][ T5844] usb 4-1: device descriptor read/64, error -71 [ 229.757655][ T5931] usb 1-1: config 0 descriptor?? [ 229.972910][ T5844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 230.128615][ T5847] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 230.136429][ T5844] usb 4-1: device descriptor read/64, error -71 [ 230.298340][ T5844] usb usb4-port1: attempt power cycle [ 230.323636][ T5847] usb 5-1: device descriptor read/64, error -71 [ 230.568445][ T5847] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 230.648087][ T5844] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 230.679226][ T5844] usb 4-1: device descriptor read/8, error -71 [ 230.717923][ T5847] usb 5-1: device descriptor read/64, error -71 [ 230.726862][ T8160] loop6: detected capacity change from 0 to 7 [ 230.738174][ T5902] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 230.749011][ T8160] Dev loop6: unable to read RDB block 7 [ 230.754941][ T8160] loop6: AHDI p3 p4 [ 230.759568][ T8160] loop6: partition table partially beyond EOD, truncated [ 230.772577][ T8160] loop6: p3 start 1697644645 is beyond EOD, truncated [ 230.829091][ T5847] usb usb5-port1: attempt power cycle [ 230.917907][ T5844] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 230.945965][ T5902] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.963849][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.979969][ T5844] usb 4-1: device descriptor read/8, error -71 [ 230.984856][ T5902] usb 3-1: Product: syz [ 230.992179][ T5902] usb 3-1: Manufacturer: syz [ 230.997217][ T5902] usb 3-1: SerialNumber: syz [ 231.025114][ T5902] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.052439][ T5931] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.149788][ T5844] usb usb4-port1: unable to enumerate USB device [ 231.208144][ T5847] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 231.388342][ T5847] usb 5-1: device descriptor read/8, error -71 [ 231.411921][ T8156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.429846][ T8156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.553764][ T8167] netlink: 'syz.2.528': attribute type 16 has an invalid length. [ 231.648342][ T5847] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.663808][ T8167] netlink: 'syz.2.528': attribute type 17 has an invalid length. [ 231.712323][ T5847] usb 5-1: device descriptor read/8, error -71 [ 231.828778][ T5847] usb usb5-port1: unable to enumerate USB device [ 232.272233][ T5931] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 232.315435][ T5931] ath9k_htc: Failed to initialize the device [ 232.328572][ T5895] usb 1-1: USB disconnect, device number 22 [ 232.473365][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.495729][ T5931] usb 3-1: ath9k_htc: USB layer deinitialized [ 232.501937][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.811419][ T8167] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.866247][ T8167] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.904853][ T8167] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.920186][ T5895] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 232.963874][ T8167] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.185285][ T5844] usb 3-1: USB disconnect, device number 23 [ 233.291240][ T5895] usb 2-1: config 0 has no interfaces? [ 233.340472][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.350767][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.365880][ T5895] usb 2-1: Product: syz [ 233.377305][ T5895] usb 2-1: Manufacturer: syz [ 233.387681][ T5895] usb 2-1: SerialNumber: syz [ 233.419360][ T5895] usb 2-1: config 0 descriptor?? [ 233.478142][ T8195] FAULT_INJECTION: forcing a failure. [ 233.478142][ T8195] name failslab, interval 1, probability 0, space 0, times 0 [ 233.565606][ T8192] loop6: detected capacity change from 0 to 64 [ 233.610709][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.0.542 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 233.610742][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.610756][ T8195] Call Trace: [ 233.610764][ T8195] [ 233.610773][ T8195] dump_stack_lvl+0x241/0x360 [ 233.610813][ T8195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.610845][ T8195] ? __pfx__printk+0x10/0x10 [ 233.610879][ T8195] ? __pfx___might_resched+0x10/0x10 [ 233.610911][ T8195] should_fail_ex+0x424/0x570 [ 233.610938][ T8195] should_failslab+0xac/0x100 [ 233.610970][ T8195] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 233.611001][ T8195] ? __alloc_skb+0x1c2/0x480 [ 233.611026][ T8195] __alloc_skb+0x1c2/0x480 [ 233.611046][ T8195] ? pppol2tp_sock_to_session+0x86/0x690 [ 233.611076][ T8195] ? __pfx___alloc_skb+0x10/0x10 [ 233.611094][ T8195] ? pppol2tp_sock_to_session+0x561/0x690 [ 233.611120][ T8195] ? pppol2tp_sock_to_session+0x86/0x690 [ 233.611146][ T8195] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 233.611176][ T8195] sock_wmalloc+0xab/0x120 [ 233.611204][ T8195] pppol2tp_sendmsg+0x17b/0x5e0 [ 233.611229][ T8195] ? aa_sock_msg_perm+0x91/0x160 [ 233.611264][ T8195] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 233.611287][ T8195] __sock_sendmsg+0x221/0x270 [ 233.611320][ T8195] ____sys_sendmsg+0x523/0x860 [ 233.611354][ T8195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.611383][ T8195] ? __sys_sendmmsg+0x54d/0x7b0 [ 233.611414][ T8195] __sys_sendmmsg+0x4a3/0x7b0 [ 233.611451][ T8195] ? __pfx___sys_sendmmsg+0x10/0x10 [ 233.611479][ T8195] ? __lock_acquire+0xad5/0xd80 [ 233.611549][ T8195] ? vfs_write+0xb29/0xd10 [ 233.611597][ T8195] ? __mutex_unlock_slowpath+0x229/0x800 [ 233.611635][ T8195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.611661][ T8195] ? __fget_files+0x2a/0x420 [ 233.611694][ T8195] ? fput+0x9b/0xd0 [ 233.611713][ T8195] ? ksys_write+0x275/0x2d0 [ 233.611748][ T8195] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 233.611786][ T8195] __do_fast_syscall_32+0xb4/0x110 [ 233.611812][ T8195] ? exc_page_fault+0x5f8/0x920 [ 233.611843][ T8195] do_fast_syscall_32+0x34/0x80 [ 233.611870][ T8195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.611896][ T8195] RIP: 0023:0xf70ad579 [ 233.611914][ T8195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 233.611932][ T8195] RSP: 002b:00000000f509d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 233.611956][ T8195] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005f80 [ 233.611970][ T8195] RDX: 00000000000001ce RSI: 0000000000008040 RDI: 0000000000000000 [ 233.611983][ T8195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.611995][ T8195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 233.612008][ T8195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.612037][ T8195] [ 234.273801][ T8202] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 234.314222][ T8192] Invalid logical block size (4) [ 234.321470][ T8202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.541'. [ 234.599796][ T8202] netlink: 35 bytes leftover after parsing attributes in process `syz.3.541'. [ 235.449955][ T5847] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 235.629462][ T5847] usb 3-1: device descriptor read/64, error -71 [ 235.930301][ T5847] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 236.040433][ T8214] binfmt_misc: register: failed to install interpreter file ./file0 [ 236.061968][ T8214] fuse: Unknown parameter '`7' [ 236.087925][ T5847] usb 3-1: device descriptor read/64, error -71 [ 236.228481][ T5847] usb usb3-port1: attempt power cycle [ 236.511646][ T5844] usb 2-1: USB disconnect, device number 21 [ 236.608696][ T5847] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 236.667971][ T5931] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 236.678696][ T5847] usb 3-1: device descriptor read/8, error -71 [ 236.838348][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 236.849180][ T5931] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 236.868823][ T5931] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.898418][ T8230] netlink: 22 bytes leftover after parsing attributes in process `syz.4.551'. [ 236.907988][ T5931] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.948186][ T5847] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 236.958126][ T5931] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.008770][ T5847] usb 3-1: device descriptor read/8, error -71 [ 237.010238][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.036023][ T5931] usb 1-1: Product: syz [ 237.041195][ T5931] usb 1-1: Manufacturer: syz [ 237.045949][ T5931] usb 1-1: SerialNumber: syz [ 237.058834][ T5844] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.134751][ T5847] usb usb3-port1: unable to enumerate USB device [ 237.208243][ T5844] usb 2-1: device descriptor read/64, error -71 [ 237.279197][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.316601][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.373232][ T5931] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 237.382560][ T5931] usb 1-1: unit 1 not found! [ 237.420367][ T5931] usb 1-1: USB disconnect, device number 23 [ 237.458059][ T5844] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 237.481272][ T8240] trusted_key: encrypted_key: insufficient parameters specified [ 237.498418][ T8240] netlink: '}': attribute type 4 has an invalid length. [ 237.692536][ T5844] usb 2-1: device descriptor read/64, error -71 [ 237.780967][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.827943][ T5844] usb usb2-port1: attempt power cycle [ 238.453491][ T5844] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.474249][ T8248] tipc: Started in network mode [ 238.494350][ T8248] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 238.505752][ T5844] usb 2-1: device descriptor read/8, error -71 [ 238.537552][ T8248] tipc: Enabling of bearer rejected, failed to enable media [ 238.717988][ T5898] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 238.761823][ T5844] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 238.788752][ T5844] usb 2-1: device descriptor read/8, error -71 [ 238.898365][ T5844] usb usb2-port1: unable to enumerate USB device [ 238.904751][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 238.936696][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.954790][ T5898] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 239.007988][ T5898] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 239.134320][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 239.167918][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.218957][ T5898] usb 3-1: Product: ᠉ [ 239.226764][ T5898] usb 3-1: Manufacturer: ᐁ [ 239.234533][ T5898] usb 3-1: SerialNumber: syz [ 239.346238][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 239.410570][ T8268] bridge_slave_0: left allmulticast mode [ 239.428172][ T8268] bridge_slave_0: left promiscuous mode [ 239.434145][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.469163][ T5898] usb 3-1: USB disconnect, device number 28 [ 239.525191][ T8268] bridge_slave_1: left allmulticast mode [ 239.538011][ T975] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 239.554206][ T8268] bridge_slave_1: left promiscuous mode [ 239.568600][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.607110][ T8268] : (slave bond_slave_0): Releasing backup interface [ 239.633713][ T8268] : (slave bond_slave_1): Releasing backup interface [ 239.672164][ T8268] team0: Port device team_slave_0 removed [ 239.708053][ T975] usb 1-1: device descriptor read/64, error -71 [ 239.752994][ T8268] team0: Port device team_slave_1 removed [ 239.772237][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.813822][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.862866][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.893204][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.968028][ T975] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 240.020688][ T8274] netlink: 48 bytes leftover after parsing attributes in process `syz.4.563'. [ 240.108049][ T975] usb 1-1: device descriptor read/64, error -71 [ 240.228709][ T975] usb usb1-port1: attempt power cycle [ 240.438462][ T8286] loop2: detected capacity change from 0 to 7 [ 240.458435][ T8286] Dev loop2: unable to read RDB block 7 [ 240.465898][ T8286] loop2: AHDI p3 p4 [ 240.477971][ T8286] loop2: partition table partially beyond EOD, truncated [ 240.594108][ T975] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 240.750998][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 240.751018][ T30] audit: type=1326 audit(1744815214.109:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 240.778942][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.822224][ T975] usb 1-1: device descriptor read/8, error -71 [ 240.947300][ T30] audit: type=1326 audit(1744815214.109:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 240.947995][ T5847] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 241.107462][ T30] audit: type=1326 audit(1744815214.109:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.129510][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.168024][ T975] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 241.200101][ T975] usb 1-1: device descriptor read/8, error -71 [ 241.241425][ T30] audit: type=1326 audit(1744815214.109:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.278237][ T30] audit: type=1326 audit(1744815214.109:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.300616][ T30] audit: type=1326 audit(1744815214.109:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.323763][ T30] audit: type=1326 audit(1744815214.109:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.335585][ T975] usb usb1-port1: unable to enumerate USB device [ 241.345591][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.346617][ T30] audit: type=1326 audit(1744815214.109:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.371425][ T5847] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 241.379903][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.380159][ T30] audit: type=1326 audit(1744815214.109:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.718356][ T5847] usb 5-1: config 0 has no interface number 0 [ 241.727941][ T30] audit: type=1326 audit(1744815214.109:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f15598 code=0x7ffc0000 [ 241.769115][ T5847] usb 5-1: config 0 interface 129 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 241.797900][ T5847] usb 5-1: config 0 interface 129 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 241.842603][ T5847] usb 5-1: config 0 interface 129 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 241.897336][ T5847] usb 5-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=18.28 [ 241.926911][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.970085][ T5847] usb 5-1: Product: syz [ 241.995076][ T5847] usb 5-1: Manufacturer: syz [ 242.012901][ T5847] usb 5-1: SerialNumber: syz [ 242.044749][ T5847] usb 5-1: config 0 descriptor?? [ 242.238958][ T8302] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[8302] [ 242.256978][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 242.448328][ T5847] usb 5-1: USB disconnect, device number 26 [ 242.492329][ T8303] netlink: 268 bytes leftover after parsing attributes in process `syz.1.570'. [ 242.925414][ T975] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 243.211939][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 243.402318][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 243.438401][ T5847] IPVS: starting estimator thread 0... [ 243.618139][ T8319] IPVS: using max 37 ests per chain, 88800 per kthread [ 244.170463][ T8334] loop6: detected capacity change from 0 to 7 [ 244.185735][ T8334] Dev loop6: unable to read RDB block 7 [ 244.207936][ T8334] loop6: AHDI p3 p4 [ 244.219879][ T8334] loop6: partition table partially beyond EOD, truncated [ 244.237663][ T8334] loop6: p3 start 1697644645 is beyond EOD, truncated [ 244.748018][ T5896] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 244.918059][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 244.939117][ T5896] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 244.961622][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.999050][ T5896] usb 2-1: config 0 descriptor?? [ 245.225005][ T5896] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 245.303269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.400038][ T8363] delete_channel: no stack [ 245.453177][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 245.777605][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 245.798023][ T975] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 245.961939][ T975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.975904][ T975] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.987304][ T975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 246.001041][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.045216][ T8366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 246.074196][ T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.584183][ T5896] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 246.607960][ T5896] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 246.630150][ T5896] asix 2-1:0.0: probe with driver asix failed with error -71 [ 246.655140][ T5896] usb 2-1: USB disconnect, device number 26 [ 247.741744][ T8384] loop6: detected capacity change from 0 to 7 [ 247.756066][ T8384] Dev loop6: unable to read RDB block 7 [ 247.799957][ T8384] loop6: AHDI p3 p4 [ 247.806323][ T8384] loop6: partition table partially beyond EOD, truncated [ 247.824627][ T8384] loop6: p3 start 1697644645 is beyond EOD, truncated [ 248.524586][ T975] usb 1-1: USB disconnect, device number 28 [ 248.918132][ T5844] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 249.078463][ T5931] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 249.087548][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 249.100829][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 249.117129][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 249.132400][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 249.140493][ T5844] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 249.143433][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 249.154340][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.167512][ T5844] usb 4-1: Product: syz [ 249.177073][ T5844] usb 4-1: Manufacturer: syz [ 249.182355][ T5844] usb 4-1: SerialNumber: syz [ 249.192598][ T5844] usb 4-1: config 0 descriptor?? [ 249.198989][ T8392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.206339][ T8392] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.221194][ T5844] usb 4-1: ucan: probing device on interface #0 [ 249.243493][ T5931] usb 5-1: No LPM exit latency info found, disabling LPM. [ 249.252086][ T5931] usb 5-1: config 0 has no interfaces? [ 249.263989][ T5931] usb 5-1: string descriptor 0 read error: -22 [ 249.270484][ T5931] usb 5-1: New USB device found, idVendor=19d2, idProduct=1485, bcdDevice=e8.41 [ 249.280516][ T5896] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 249.288404][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.301292][ T5931] usb 5-1: config 0 descriptor?? [ 249.407989][ T5902] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 249.425426][ T5844] usb 4-1: ucan: could not read protocol version, ret=0 [ 249.432559][ T5844] usb 4-1: ucan: probe failed; try to update the device firmware [ 249.439945][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 249.456429][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.467714][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.479581][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.489483][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.497516][ T5896] usb 1-1: Product: syz [ 249.501828][ T5896] usb 1-1: Manufacturer: syz [ 249.506447][ T5896] usb 1-1: SerialNumber: syz [ 249.520624][ T5844] usb 5-1: USB disconnect, device number 27 [ 249.572891][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.582204][ T5902] usb 2-1: not running at top speed; connect to a high speed hub [ 249.592779][ T5902] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 249.601171][ T5902] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 249.609487][ T5902] usb 2-1: config 2 has no interface number 0 [ 249.615653][ T5902] usb 2-1: config 2 has no interface number 1 [ 249.623116][ T5902] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 249.634221][ T5902] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 249.645146][ T5902] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 249.656442][ T5902] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 249.666507][ T5902] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.679730][ T5902] usb 2-1: config 2 interface 212 has no altsetting 0 [ 249.690784][ T5902] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 249.700004][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.708671][ T5902] usb 2-1: Product: 㞌쐤﯆࣠礓傕ざΐ阫麯䶷䨯뱧뙼ⰼ萺㎉줒係끆陎脵ᕼ왼쪀鰓췓 [ 249.720545][ T5902] usb 2-1: Manufacturer: 蜿닦簃쟉텛뷯ಌἬ쾆ל疓⠑텺‷秊頍ྏ熷疊끟➒Ҷ℉䘓戳恽왌ࣙ烅⁲箩䓀⮐絡澐캹뎗姍ᮇ폜稪쨀貋Ƭ㡮ᕬᚢ惖晞蝓海鈻씌걻꼩翇崿 [ 249.743427][ T5902] usb 2-1: SerialNumber: ӿ [ 249.944663][ T5896] usb 1-1: cannot find UAC_HEADER [ 249.962798][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.974939][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.985582][ T5896] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 250.035957][ T5902] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input23 [ 250.078237][ T5902] usb 2-1: USB disconnect, device number 27 [ 250.085300][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.149101][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.179480][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.220570][ T5931] usb 1-1: USB disconnect, device number 29 [ 250.562437][ T8426] loop6: detected capacity change from 0 to 7 [ 250.572316][ T8426] Dev loop6: unable to read RDB block 7 [ 250.583719][ T8426] loop6: AHDI p3 p4 [ 250.587879][ T8426] loop6: partition table partially beyond EOD, truncated [ 250.595702][ T8426] loop6: p3 start 1697644645 is beyond EOD, truncated [ 250.678336][ T8428] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 250.708269][ T5844] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 250.791763][ T8431] delete_channel: no stack [ 250.870449][ T5844] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.890513][ T5844] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.906365][ T5844] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.921780][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.117099][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'. [ 251.144793][ T5844] usb 1-1: usb_control_msg returned -32 [ 251.150921][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'. [ 251.162292][ T5844] usbtmc 1-1:16.0: can't read capabilities [ 251.187162][ T8444] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 251.208017][ T8444] ip6gretap0: entered promiscuous mode [ 251.500245][ T8422] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 251.697345][ T5902] usb 4-1: USB disconnect, device number 20 [ 252.097280][ T8452] veth1_macvtap: left promiscuous mode [ 252.108014][ T8452] macsec0: entered promiscuous mode [ 252.137776][ T8452] veth1_macvtap: entered promiscuous mode [ 252.152057][ T8452] macsec0: left promiscuous mode [ 252.197888][ T8452] vlan2: entered allmulticast mode [ 252.203123][ T8452] bridge0: entered allmulticast mode [ 252.210468][ T8452] bridge0: port 1(vlan2) entered blocking state [ 252.217495][ T8452] bridge0: port 1(vlan2) entered disabled state [ 252.568025][ T975] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 252.752803][ T975] usb 2-1: config 0 has no interfaces? [ 252.811303][ T975] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 252.866266][ T975] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 252.914654][ T975] usb 2-1: Manufacturer: syz [ 252.938608][ T975] usb 2-1: config 0 descriptor?? [ 253.132096][ T8460] loop2: detected capacity change from 0 to 7 [ 253.174344][ T8460] Dev loop2: unable to read RDB block 7 [ 253.208304][ T8460] loop2: AHDI p3 p4 [ 253.228594][ T8460] loop2: partition table partially beyond EOD, truncated [ 253.262787][ T5902] usb 2-1: USB disconnect, device number 28 [ 253.439271][ T5931] usb 1-1: USB disconnect, device number 30 [ 253.482396][ T8462] tap0: tun_chr_ioctl cmd 1074025677 [ 253.488173][ T8462] tap0: linktype set to 1 [ 253.492865][ T8464] tap0: tun_chr_ioctl cmd 1074025677 [ 253.535723][ T8464] tap0: linktype set to 1 [ 253.597672][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 253.635406][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 253.641393][ T8469] loop6: detected capacity change from 0 to 7 [ 253.673575][ T8469] Dev loop6: unable to read RDB block 7 [ 253.679735][ T8469] loop6: AHDI p3 p4 [ 253.683949][ T8469] loop6: partition table partially beyond EOD, truncated [ 253.700552][ T8469] loop6: p3 start 1697644645 is beyond EOD, truncated [ 255.448044][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 255.527992][ T8463] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.528097][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 255.543121][ T8463] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 255.774443][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.781128][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.221339][ T8463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.227409][ T8463] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 256.240366][ T8463] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.246518][ T8463] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 256.258934][ T8463] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 256.264973][ T8463] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 256.274777][ T8463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.281468][ T8463] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.548008][ T5844] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 256.552366][ T5931] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 256.563855][ T5902] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 256.568883][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 256.597993][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 256.729313][ T8498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.626'. [ 256.773569][ T5844] usb 4-1: device descriptor read/all, error -71 [ 256.811342][ T8498] netlink: 56 bytes leftover after parsing attributes in process `syz.1.626'. [ 256.860338][ T5902] usb 1-1: device descriptor read/all, error -71 [ 256.928975][ T8500] loop2: detected capacity change from 0 to 7 [ 256.960507][ T8504] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 256.971141][ T8500] Dev loop2: unable to read RDB block 7 [ 256.976835][ T8500] loop2: AHDI p3 p4 [ 256.989036][ T8503] loop6: detected capacity change from 0 to 7 [ 257.024220][ T8504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.032118][ T8500] loop2: partition table partially beyond EOD, truncated [ 257.052151][ T8503] Dev loop6: unable to read RDB block 7 [ 257.066565][ T8508] bond1: (slave veth3): Enslaving as an active interface with a down link [ 257.085765][ T8503] loop6: AHDI p3 p4 [ 257.090630][ T8503] loop6: partition table partially beyond EOD, truncated [ 257.099287][ T8503] loop6: p3 start 1697644645 is beyond EOD, truncated [ 257.127247][ T8504] bond1: (slave dummy0): making interface the new active one [ 257.145992][ T8504] dummy0: entered promiscuous mode [ 257.156977][ T8504] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 257.630444][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 257.648694][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 257.668104][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 257.904551][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 257.943516][ T8527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 258.248066][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 258.328272][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 258.328349][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 258.598174][ T5902] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 258.602368][ T8527] geneve2: entered promiscuous mode [ 258.684501][ T8527] geneve2: entered allmulticast mode [ 258.902064][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.928827][ T5902] usb 4-1: not running at top speed; connect to a high speed hub [ 258.957406][ T5902] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 259.037979][ T5902] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 259.046593][ T5902] usb 4-1: config 2 has no interface number 0 [ 259.088365][ T8540] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0xee [ 259.103693][ T5902] usb 4-1: config 2 has no interface number 1 [ 259.134153][ T5902] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 259.155396][ T8541] usb usb8: usbfs: process 8541 (syz.0.630) did not claim interface 0 before use [ 259.190590][ T5902] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 259.223413][ T5902] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 259.256350][ T5902] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 259.323189][ T5902] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.365087][ T5902] usb 4-1: config 2 interface 212 has no altsetting 0 [ 259.462737][ T5902] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 259.508405][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.555831][ T5902] usb 4-1: Product: 㞌쐤﯆࣠礓傕ざΐ阫麯䶷䨯뱧뙼ⰼ萺㎉줒係끆陎脵ᕼ왼쪀鰓췓 [ 259.585028][ T5902] usb 4-1: Manufacturer: 蜿닦簃쟉텛뷯ಌἬ쾆ל疓⠑텺‷秊頍ྏ熷疊끟➒Ҷ℉䘓戳恽왌ࣙ烅⁲箩䓀⮐絡澐캹뎗姍ᮇ폜稪쨀貋Ƭ㡮ᕬᚢ惖晞蝓海鈻씌걻꼩翇崿 [ 259.638010][ T5902] usb 4-1: SerialNumber: ӿ [ 259.687928][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 259.874819][ T8545] netlink: 192 bytes leftover after parsing attributes in process `syz.1.638'. [ 259.977547][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.013556][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.103881][ T5902] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input24 [ 260.217926][ T5902] usb 4-1: USB disconnect, device number 23 [ 260.331452][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 260.408041][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 260.408094][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 260.666907][ T8560] loop6: detected capacity change from 0 to 7 [ 260.694875][ T8560] Dev loop6: unable to read RDB block 7 [ 260.716815][ T8560] loop6: AHDI p3 p4 [ 260.736127][ T8560] loop6: partition table partially beyond EOD, truncated [ 260.768055][ T8560] loop6: p3 start 1697644645 is beyond EOD, truncated [ 261.147173][ T8566] program syz.2.646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.190499][ T8566] netlink: 'syz.2.646': attribute type 18 has an invalid length. [ 261.272316][ T8573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.647'. [ 261.845751][ T30] kauditd_printk_skb: 466 callbacks suppressed [ 261.845774][ T30] audit: type=1326 audit(1744815235.199:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 261.898969][ T30] audit: type=1326 audit(1744815235.239:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 262.090911][ T30] audit: type=1326 audit(1744815235.239:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 262.412131][ T30] audit: type=1326 audit(1744815235.239:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 262.494285][ T30] audit: type=1326 audit(1744815235.239:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 262.540294][ T8586] FAULT_INJECTION: forcing a failure. [ 262.540294][ T8586] name failslab, interval 1, probability 0, space 0, times 0 [ 262.592467][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.3.650 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 262.592498][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.592533][ T8586] Call Trace: [ 262.592546][ T8586] [ 262.592556][ T8586] dump_stack_lvl+0x241/0x360 [ 262.592593][ T8586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.592621][ T8586] ? __pfx__printk+0x10/0x10 [ 262.592653][ T8586] ? __pfx___might_resched+0x10/0x10 [ 262.592681][ T8586] should_fail_ex+0x424/0x570 [ 262.592708][ T8586] should_failslab+0xac/0x100 [ 262.592736][ T8586] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 262.592765][ T8586] ? __alloc_skb+0x1c2/0x480 [ 262.592788][ T8586] __alloc_skb+0x1c2/0x480 [ 262.592807][ T8586] ? pppol2tp_sock_to_session+0x86/0x690 [ 262.592836][ T8586] ? __pfx___alloc_skb+0x10/0x10 [ 262.592852][ T8586] ? pppol2tp_sock_to_session+0x561/0x690 [ 262.592876][ T8586] ? pppol2tp_sock_to_session+0x86/0x690 [ 262.592899][ T8586] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 262.592928][ T8586] sock_wmalloc+0xab/0x120 [ 262.592955][ T8586] pppol2tp_sendmsg+0x17b/0x5e0 [ 262.592980][ T8586] ? aa_sock_msg_perm+0x91/0x160 [ 262.593015][ T8586] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 262.593036][ T8586] __sock_sendmsg+0x221/0x270 [ 262.593066][ T8586] ____sys_sendmsg+0x523/0x860 [ 262.593094][ T8586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.593124][ T8586] ? __sys_sendmmsg+0x4d4/0x7b0 [ 262.593151][ T8586] __sys_sendmmsg+0x4a3/0x7b0 [ 262.593182][ T8586] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.593208][ T8586] ? __lock_acquire+0xad5/0xd80 [ 262.593265][ T8586] ? vfs_write+0xb29/0xd10 [ 262.593306][ T8586] ? __mutex_unlock_slowpath+0x229/0x800 [ 262.593343][ T8586] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.593367][ T8586] ? __fget_files+0x2a/0x420 [ 262.593399][ T8586] ? fput+0x9b/0xd0 [ 262.593417][ T8586] ? ksys_write+0x275/0x2d0 [ 262.593450][ T8586] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 262.593485][ T8586] __do_fast_syscall_32+0xb4/0x110 [ 262.593510][ T8586] ? exc_page_fault+0x5f8/0x920 [ 262.593547][ T8586] do_fast_syscall_32+0x34/0x80 [ 262.593573][ T8586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.593602][ T8586] RIP: 0023:0xf7f15579 [ 262.593620][ T8586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 262.593637][ T8586] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 262.593658][ T8586] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005f80 [ 262.593672][ T8586] RDX: 00000000000001ce RSI: 0000000000008040 RDI: 0000000000000000 [ 262.593684][ T8586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.593696][ T8586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.593708][ T8586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.593736][ T8586] [ 262.885351][ T30] audit: type=1326 audit(1744815235.239:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 263.058331][ T30] audit: type=1326 audit(1744815236.409:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 263.080266][ T30] audit: type=1326 audit(1744815236.409:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 263.496052][ T8602] Invalid logical block size (1437270015) [ 263.512452][ T8605] loop6: detected capacity change from 0 to 7 [ 263.533316][ T8605] Dev loop6: unable to read RDB block 7 [ 263.539020][ T8605] loop6: AHDI p3 p4 [ 263.543180][ T8605] loop6: partition table partially beyond EOD, truncated [ 263.569044][ T8605] loop6: p3 start 1697644645 is beyond EOD, truncated [ 263.769745][ T30] audit: type=1326 audit(1744815237.129:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8608 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 263.902508][ T30] audit: type=1326 audit(1744815237.129:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8608 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 264.219174][ T5931] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 264.299082][ T8617] netlink: 'syz.0.660': attribute type 6 has an invalid length. [ 264.790679][ T5931] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.027955][ T5902] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 265.183319][ T5902] usb 2-1: config 0 has no interfaces? [ 265.204877][ T5902] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 265.240126][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.265010][ T5902] usb 2-1: Product: syz [ 265.272383][ T5902] usb 2-1: Manufacturer: syz [ 265.277034][ T5902] usb 2-1: SerialNumber: syz [ 265.291845][ T5902] usb 2-1: config 0 descriptor?? [ 265.588632][ T975] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 265.761868][ T975] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 265.785636][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.811787][ T975] usb 3-1: config 0 descriptor?? [ 266.577382][ T8652] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 266.816967][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 266.834205][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 267.043974][ T975] pegasus 3-1:0.0: can't reset MAC [ 267.075923][ T975] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 267.105929][ T975] usb 3-1: USB disconnect, device number 30 [ 267.154148][ T5847] usb 2-1: USB disconnect, device number 29 [ 267.169998][ T5902] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 267.369045][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 267.380351][ T5902] usb 4-1: config 6 has an invalid interface number: 66 but max is 0 [ 267.398542][ T5902] usb 4-1: config 6 has no interface number 0 [ 267.404715][ T5902] usb 4-1: config 6 interface 66 has no altsetting 0 [ 267.437543][ T5902] usb 4-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=d6.95 [ 267.468760][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.476818][ T5902] usb 4-1: Product: syz [ 267.507868][ T5902] usb 4-1: Manufacturer: syz [ 267.512525][ T5902] usb 4-1: SerialNumber: syz [ 267.742007][ T8655] fuse: Bad value for 'fd' [ 267.771956][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.864437][ T5902] snd-usb-audio 4-1:6.66: probe with driver snd-usb-audio failed with error -2 [ 267.922487][ T5902] usb 4-1: USB disconnect, device number 24 [ 268.018620][ T8673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.673'. [ 268.179826][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.798033][ T975] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 268.869727][ T8661] syz.1.672 (8661) used greatest stack depth: 19256 bytes left [ 268.988405][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 269.095104][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.222030][ T975] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 269.317545][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.403425][ T975] usb 1-1: Product: syz [ 269.439433][ T975] usb 1-1: Manufacturer: syz [ 269.464965][ T975] usb 1-1: SerialNumber: syz [ 269.540518][ T975] usb 1-1: config 0 descriptor?? [ 269.595595][ T975] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 269.665683][ T975] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 269.845192][ T8693] loop2: detected capacity change from 0 to 7 [ 269.880306][ T8693] Dev loop2: unable to read RDB block 7 [ 269.886039][ T8693] loop2: AHDI p3 p4 [ 269.901611][ T8693] loop2: partition table partially beyond EOD, truncated [ 269.930227][ T36] dummy0: left promiscuous mode [ 270.632108][ T8725] geneve2: left promiscuous mode [ 270.642706][ T8725] geneve2: left allmulticast mode [ 270.673586][ T975] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 270.821732][ T975] usb 2-1: device descriptor read/64, error -71 [ 271.127042][ T975] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 271.358025][ T975] usb 2-1: device descriptor read/64, error -71 [ 271.368525][ T5931] usb 1-1: USB disconnect, device number 33 [ 271.478464][ T975] usb usb2-port1: attempt power cycle [ 271.517598][ T8737] loop2: detected capacity change from 0 to 7 [ 271.538036][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 271.578422][ T8737] Dev loop2: unable to read RDB block 7 [ 271.584062][ T8737] loop2: AHDI p3 p4 [ 271.616403][ T8737] loop2: partition table partially beyond EOD, truncated [ 271.768769][ T5902] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 271.786038][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.826874][ T975] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 271.828148][ T5902] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 271.897757][ T5902] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 271.902914][ T975] usb 2-1: device descriptor read/8, error -71 [ 271.906348][ T5902] usb 3-1: Manufacturer: syz [ 271.958987][ T5902] usb 3-1: config 0 descriptor?? [ 272.127953][ T5902] rc_core: IR keymap rc-hauppauge not found [ 272.147984][ T975] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 272.153834][ T5902] Registered IR keymap rc-empty [ 272.210311][ T975] usb 2-1: device descriptor read/8, error -71 [ 272.218206][ T5902] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 272.247275][ T5902] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 272.340518][ T975] usb usb2-port1: unable to enumerate USB device [ 272.473339][ T8752] netlink: 44 bytes leftover after parsing attributes in process `syz.0.696'. [ 272.608446][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 272.624076][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.661341][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.668628][ T8752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.713405][ T5902] usb 3-1: USB disconnect, device number 31 [ 273.008045][ T5847] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 273.208003][ T5847] usb 4-1: device descriptor read/64, error -71 [ 273.458031][ T5847] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 273.638132][ T5847] usb 4-1: device descriptor read/64, error -71 [ 273.784146][ T5847] usb usb4-port1: attempt power cycle [ 273.838463][ T5931] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 274.099308][ T5931] usb 1-1: device descriptor read/64, error -71 [ 274.177923][ T5847] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 274.280455][ T5847] usb 4-1: device descriptor read/8, error -71 [ 274.379069][ T8779] FAULT_INJECTION: forcing a failure. [ 274.379069][ T8779] name failslab, interval 1, probability 0, space 0, times 0 [ 274.397453][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.1.703 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 274.397494][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.397508][ T8779] Call Trace: [ 274.397516][ T8779] [ 274.397526][ T8779] dump_stack_lvl+0x241/0x360 [ 274.397566][ T8779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.397597][ T8779] ? __pfx__printk+0x10/0x10 [ 274.397631][ T8779] ? __pfx___might_resched+0x10/0x10 [ 274.397663][ T8779] should_fail_ex+0x424/0x570 [ 274.397690][ T8779] should_failslab+0xac/0x100 [ 274.397722][ T8779] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 274.397752][ T8779] ? __alloc_skb+0x1c2/0x480 [ 274.397775][ T8779] __alloc_skb+0x1c2/0x480 [ 274.397798][ T8779] ? pppol2tp_sock_to_session+0x86/0x690 [ 274.397828][ T8779] ? __pfx___alloc_skb+0x10/0x10 [ 274.397845][ T8779] ? pppol2tp_sock_to_session+0x561/0x690 [ 274.397870][ T8779] ? pppol2tp_sock_to_session+0x86/0x690 [ 274.397895][ T8779] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 274.397924][ T8779] sock_wmalloc+0xab/0x120 [ 274.397951][ T8779] pppol2tp_sendmsg+0x17b/0x5e0 [ 274.397978][ T8779] ? aa_sock_msg_perm+0x91/0x160 [ 274.398014][ T8779] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 274.398037][ T8779] __sock_sendmsg+0x221/0x270 [ 274.398070][ T8779] ____sys_sendmsg+0x523/0x860 [ 274.398103][ T8779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.398135][ T8779] ? __sys_sendmmsg+0x4d4/0x7b0 [ 274.398164][ T8779] __sys_sendmmsg+0x4a3/0x7b0 [ 274.398199][ T8779] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.398229][ T8779] ? __lock_acquire+0xad5/0xd80 [ 274.398292][ T8779] ? vfs_write+0xb29/0xd10 [ 274.398334][ T8779] ? __mutex_unlock_slowpath+0x229/0x800 [ 274.398372][ T8779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.398397][ T8779] ? __fget_files+0x2a/0x420 [ 274.398430][ T8779] ? fput+0x9b/0xd0 [ 274.398449][ T8779] ? ksys_write+0x275/0x2d0 [ 274.398491][ T8779] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 274.398529][ T8779] __do_fast_syscall_32+0xb4/0x110 [ 274.398556][ T8779] ? exc_page_fault+0x5f8/0x920 [ 274.398587][ T8779] do_fast_syscall_32+0x34/0x80 [ 274.398614][ T8779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.398640][ T8779] RIP: 0023:0xf705d579 [ 274.398658][ T8779] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 274.398676][ T8779] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 274.398699][ T8779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005f80 [ 274.398713][ T8779] RDX: 00000000000001ce RSI: 0000000000008040 RDI: 0000000000000000 [ 274.398725][ T8779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.398737][ T8779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.398750][ T8779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.398780][ T8779] [ 274.407929][ T5931] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 274.761653][ T5847] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.794506][ T5847] usb 4-1: device descriptor read/8, error -71 [ 274.830663][ T5931] usb 1-1: device descriptor read/64, error -71 [ 274.995814][ T5847] usb usb4-port1: unable to enumerate USB device [ 274.995913][ T5931] usb usb1-port1: attempt power cycle [ 275.378126][ T5931] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 275.411352][ T5931] usb 1-1: device descriptor read/8, error -71 [ 275.738063][ T5931] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 275.773074][ T5931] usb 1-1: device descriptor read/8, error -71 [ 275.928375][ T5931] usb usb1-port1: unable to enumerate USB device [ 276.772682][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.818590][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.997944][ T5931] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 276.997977][ T5847] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 277.154180][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.217036][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.232264][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.297931][ T5847] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.318338][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.360099][ T5847] usb 4-1: config 0 descriptor?? [ 277.448278][ T5895] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 277.673092][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 277.709652][ T5895] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 277.718013][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.747989][ T5895] usb 3-1: config 0 has no interfaces? [ 278.085626][ T5847] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 0/15 [ 278.099476][ T5847] plantronics 0003:047F:FFFF.0005: parse failed [ 278.117356][ T5847] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 278.224317][ T5895] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 278.276996][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.373774][ T5895] usb 3-1: Product: syz [ 278.379747][ T5895] usb 3-1: Manufacturer: syz [ 278.384587][ T5895] usb 3-1: SerialNumber: syz [ 278.576276][ T5895] usb 3-1: config 0 descriptor?? [ 278.584179][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.594902][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.462303][ T8856] FAULT_INJECTION: forcing a failure. [ 279.462303][ T8856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.538390][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.4.725 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 279.538423][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.538437][ T8856] Call Trace: [ 279.538445][ T8856] [ 279.538454][ T8856] dump_stack_lvl+0x241/0x360 [ 279.538494][ T8856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.538526][ T8856] ? __pfx__printk+0x10/0x10 [ 279.538569][ T8856] should_fail_ex+0x424/0x570 [ 279.538598][ T8856] _copy_from_user+0x2d/0xb0 [ 279.538631][ T8856] bpf_test_init+0xf5/0x170 [ 279.538666][ T8856] bpf_prog_test_run_skb+0x2bf/0x1850 [ 279.538719][ T8856] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 279.538747][ T8856] ? __fget_files+0x2a/0x420 [ 279.538772][ T8856] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 279.538804][ T8856] bpf_prog_test_run+0x2e4/0x360 [ 279.538833][ T8856] __sys_bpf+0x4ee/0x8b0 [ 279.538858][ T8856] ? __pfx___sys_bpf+0x10/0x10 [ 279.538894][ T8856] ? ksys_write+0x275/0x2d0 [ 279.538930][ T8856] __ia32_sys_bpf+0x7c/0x90 [ 279.538965][ T8856] __do_fast_syscall_32+0xb4/0x110 [ 279.538993][ T8856] ? exc_page_fault+0x5f8/0x920 [ 279.539024][ T8856] do_fast_syscall_32+0x34/0x80 [ 279.539052][ T8856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.539077][ T8856] RIP: 0023:0xf7f37579 [ 279.539095][ T8856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.539113][ T8856] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 279.539136][ T8856] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 279.539151][ T8856] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 279.539163][ T8856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.539175][ T8856] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.539188][ T8856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.539218][ T8856] [ 279.744982][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.806896][ T5895] usb 4-1: USB disconnect, device number 29 [ 280.055880][ T8865] Invalid logical block size (-771751937) [ 281.256174][ T5895] usb 3-1: USB disconnect, device number 32 [ 281.963800][ T8900] FAULT_INJECTION: forcing a failure. [ 281.963800][ T8900] name failslab, interval 1, probability 0, space 0, times 0 [ 281.986498][ T8898] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 281.997265][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.3.738 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 281.997298][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.997311][ T8900] Call Trace: [ 281.997320][ T8900] [ 281.997329][ T8900] dump_stack_lvl+0x241/0x360 [ 281.997368][ T8900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.997399][ T8900] ? __pfx__printk+0x10/0x10 [ 281.997434][ T8900] ? __pfx___might_resched+0x10/0x10 [ 281.997464][ T8900] should_fail_ex+0x424/0x570 [ 281.997493][ T8900] should_failslab+0xac/0x100 [ 281.997525][ T8900] __kmalloc_noprof+0xdf/0x4d0 [ 281.997554][ T8900] ? sk_prot_alloc+0xe0/0x210 [ 281.997581][ T8900] sk_prot_alloc+0xe0/0x210 [ 281.997601][ T8900] ? sk_alloc+0x27/0x370 [ 281.997624][ T8900] sk_alloc+0x3e/0x370 [ 281.997651][ T8900] bpf_prog_test_run_skb+0x3b7/0x1850 [ 281.997707][ T8900] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 281.997735][ T8900] ? __fget_files+0x2a/0x420 [ 281.997760][ T8900] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 281.997797][ T8900] bpf_prog_test_run+0x2e4/0x360 [ 281.997825][ T8900] __sys_bpf+0x4ee/0x8b0 [ 281.997849][ T8900] ? __pfx___sys_bpf+0x10/0x10 [ 281.997892][ T8900] ? ksys_write+0x275/0x2d0 [ 281.997930][ T8900] __ia32_sys_bpf+0x7c/0x90 [ 281.997964][ T8900] __do_fast_syscall_32+0xb4/0x110 [ 281.997992][ T8900] ? exc_page_fault+0x5f8/0x920 [ 281.998022][ T8900] do_fast_syscall_32+0x34/0x80 [ 281.998050][ T8900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.998076][ T8900] RIP: 0023:0xf7f15579 [ 281.998094][ T8900] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 281.998112][ T8900] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 281.998134][ T8900] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 281.998149][ T8900] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 281.998161][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.998172][ T8900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 281.998184][ T8900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.998212][ T8900] [ 282.219126][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.650625][ T8914] netlink: 64 bytes leftover after parsing attributes in process `syz.4.739'. [ 283.154522][ T8921] usb usb9: usbfs: process 8921 (syz.4.742) did not claim interface 2 before use [ 283.169249][ T8922] FAULT_INJECTION: forcing a failure. [ 283.169249][ T8922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.359422][ T8922] CPU: 0 UID: 0 PID: 8922 Comm: syz.2.743 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 283.359446][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.359474][ T8922] Call Trace: [ 283.359480][ T8922] [ 283.359487][ T8922] dump_stack_lvl+0x241/0x360 [ 283.359516][ T8922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.359538][ T8922] ? __pfx__printk+0x10/0x10 [ 283.359568][ T8922] should_fail_ex+0x424/0x570 [ 283.359587][ T8922] _copy_from_user+0x2d/0xb0 [ 283.359609][ T8922] get_compat_msghdr+0xb3/0x730 [ 283.359638][ T8922] ? __pfx_get_compat_msghdr+0x10/0x10 [ 283.359665][ T8922] ? __sys_sendmmsg+0x4d4/0x7b0 [ 283.359684][ T8922] __sys_sendmmsg+0x464/0x7b0 [ 283.359710][ T8922] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.359730][ T8922] ? __lock_acquire+0xad5/0xd80 [ 283.359774][ T8922] ? vfs_write+0xb29/0xd10 [ 283.359804][ T8922] ? __mutex_unlock_slowpath+0x229/0x800 [ 283.359830][ T8922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.359848][ T8922] ? __fget_files+0x2a/0x420 [ 283.359871][ T8922] ? fput+0x9b/0xd0 [ 283.359884][ T8922] ? ksys_write+0x275/0x2d0 [ 283.359908][ T8922] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 283.359934][ T8922] __do_fast_syscall_32+0xb4/0x110 [ 283.359953][ T8922] ? exc_page_fault+0x5f8/0x920 [ 283.359974][ T8922] do_fast_syscall_32+0x34/0x80 [ 283.359992][ T8922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.360011][ T8922] RIP: 0023:0xf7fd6579 [ 283.360029][ T8922] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.360042][ T8922] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 283.360058][ T8922] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005f80 [ 283.360069][ T8922] RDX: 00000000000001ce RSI: 0000000000008040 RDI: 0000000000000000 [ 283.360077][ T8922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.360086][ T8922] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.360094][ T8922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.360115][ T8922] [ 284.482178][ T8946] FAULT_INJECTION: forcing a failure. [ 284.482178][ T8946] name failslab, interval 1, probability 0, space 0, times 0 [ 284.532416][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.2.751 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 284.532450][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.532465][ T8946] Call Trace: [ 284.532473][ T8946] [ 284.532483][ T8946] dump_stack_lvl+0x241/0x360 [ 284.532518][ T8946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.532551][ T8946] ? __pfx__printk+0x10/0x10 [ 284.532585][ T8946] ? __pfx___might_resched+0x10/0x10 [ 284.532615][ T8946] should_fail_ex+0x424/0x570 [ 284.532643][ T8946] should_failslab+0xac/0x100 [ 284.532676][ T8946] __kmalloc_noprof+0xdf/0x4d0 [ 284.532704][ T8946] ? security_sk_alloc+0x53/0x360 [ 284.532732][ T8946] security_sk_alloc+0x53/0x360 [ 284.532759][ T8946] sk_prot_alloc+0xfa/0x210 [ 284.532781][ T8946] ? sk_alloc+0x27/0x370 [ 284.532803][ T8946] sk_alloc+0x3e/0x370 [ 284.532829][ T8946] bpf_prog_test_run_skb+0x3b7/0x1850 [ 284.532882][ T8946] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 284.532909][ T8946] ? __fget_files+0x2a/0x420 [ 284.532931][ T8946] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 284.532960][ T8946] bpf_prog_test_run+0x2e4/0x360 [ 284.532987][ T8946] __sys_bpf+0x4ee/0x8b0 [ 284.533011][ T8946] ? __pfx___sys_bpf+0x10/0x10 [ 284.533052][ T8946] ? ksys_write+0x275/0x2d0 [ 284.533087][ T8946] __ia32_sys_bpf+0x7c/0x90 [ 284.533119][ T8946] __do_fast_syscall_32+0xb4/0x110 [ 284.533145][ T8946] ? exc_page_fault+0x5f8/0x920 [ 284.533176][ T8946] do_fast_syscall_32+0x34/0x80 [ 284.533204][ T8946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.533229][ T8946] RIP: 0023:0xf7fd6579 [ 284.533247][ T8946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 284.533266][ T8946] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 284.533288][ T8946] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 284.533302][ T8946] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 284.533314][ T8946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.533326][ T8946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 284.533338][ T8946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.533367][ T8946] [ 285.028792][ T8949] netlink: 'syz.0.752': attribute type 6 has an invalid length. [ 285.057897][ T975] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 285.280125][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 285.412400][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.419516][ T975] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 285.434878][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.507087][ T975] usb 5-1: config 0 descriptor?? [ 286.216600][ T5895] usb 5-1: USB disconnect, device number 29 [ 286.292523][ T8970] input: syz1 as /devices/virtual/input/input26 [ 286.937930][ T5902] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 287.088083][ T975] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 287.159880][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.171777][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.183508][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.198450][ T5902] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.208823][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.225416][ T5902] usb 4-1: config 0 descriptor?? [ 287.259165][ T975] usb 1-1: device descriptor read/64, error -71 [ 287.302496][ T8989] netlink: 'syz.1.764': attribute type 6 has an invalid length. [ 287.368220][ T5931] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 287.400601][ T5895] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 287.737959][ T975] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 287.758019][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 287.770504][ T5931] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 287.780367][ T5931] usb 5-1: config 0 has no interface number 0 [ 287.786524][ T5931] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 287.798595][ T5895] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 287.830261][ T5902] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 11/15 [ 287.840376][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.856108][ T5931] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.888008][ T975] usb 1-1: device descriptor read/64, error -71 [ 287.932883][ T5902] plantronics 0003:047F:FFFF.0007: parse failed [ 288.009659][ T5895] usb 3-1: config 0 descriptor?? [ 288.019225][ T5902] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 288.037562][ T975] usb usb1-port1: attempt power cycle [ 288.044913][ T5895] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 288.057314][ T5931] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 288.080884][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.100059][ T5902] usb 4-1: USB disconnect, device number 30 [ 288.108157][ T5931] usb 5-1: Product: syz [ 288.133274][ T5931] usb 5-1: Manufacturer: syz [ 288.178994][ T5931] usb 5-1: SerialNumber: syz [ 288.218770][ T5931] usb 5-1: config 0 descriptor?? [ 288.249169][ T8984] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 288.258564][ T5931] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 288.300538][ T5931] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 288.427929][ T975] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 288.465212][ T975] usb 1-1: device descriptor read/8, error -71 [ 288.507936][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.525169][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.718012][ T975] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 288.748546][ T975] usb 1-1: device descriptor read/8, error -71 [ 288.755199][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.781619][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.797438][ T9006] loop6: detected capacity change from 0 to 7 [ 288.808074][ T9006] Dev loop6: unable to read RDB block 7 [ 288.813918][ T9006] loop6: AHDI p3 p4 [ 288.818245][ T9006] loop6: partition table partially beyond EOD, truncated [ 288.825721][ T9006] loop6: p3 start 1697644645 is beyond EOD, truncated [ 288.888655][ T975] usb usb1-port1: unable to enumerate USB device [ 289.259396][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.274009][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.418084][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 289.618099][ T5895] gspca_vc032x: reg_w err -110 [ 289.623015][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.636038][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.643257][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.651732][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.675154][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.684300][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.692251][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.698753][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.710623][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.725576][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.760559][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.768430][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.798876][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.805642][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.811813][ T5931] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.824125][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.830911][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.836752][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.845386][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.852492][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.862379][ T5931] usb 4-1: config 0 descriptor?? [ 289.872245][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.883301][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 289.896080][ T5895] gspca_vc032x: Unknown sensor... [ 289.906730][ T5895] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 290.099245][ T975] usb 5-1: USB disconnect, device number 30 [ 290.136021][ T975] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 290.182750][ T975] cyberjack 5-1:0.69: device disconnected [ 290.332969][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 290.348422][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 290.380546][ T5931] usb 4-1: USB disconnect, device number 31 [ 290.394414][ T9026] netlink: 'syz.1.776': attribute type 6 has an invalid length. [ 290.454607][ T975] usb 3-1: USB disconnect, device number 33 [ 290.647906][ T5847] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 290.949943][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 290.982804][ T5847] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 291.003667][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.019756][ T5847] usb 1-1: Product: syz [ 291.030063][ T5847] usb 1-1: Manufacturer: syz [ 291.050843][ T5847] usb 1-1: SerialNumber: syz [ 291.075463][ T5847] usb 1-1: config 0 descriptor?? [ 291.085189][ T9039] loop6: detected capacity change from 0 to 7 [ 291.096244][ T9039] Dev loop6: unable to read RDB block 7 [ 291.098099][ T5847] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 291.186361][ T9039] loop6: AHDI p3 p4 [ 291.196610][ T9039] loop6: partition table partially beyond EOD, truncated [ 291.275170][ T9039] loop6: p3 start 1697644645 is beyond EOD, truncated [ 291.712722][ T9044] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 292.238252][ T5931] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 292.427984][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 292.446199][ T5931] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 292.457706][ T5931] usb 4-1: config 0 has no interface number 0 [ 292.479872][ T5931] usb 4-1: config 0 interface 237 has no altsetting 0 [ 292.504742][ T5931] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 292.531970][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.543550][ T5931] usb 4-1: Product: syz [ 292.551659][ T5931] usb 4-1: Manufacturer: syz [ 292.556476][ T5931] usb 4-1: SerialNumber: syz [ 292.571172][ T5931] usb 4-1: config 0 descriptor?? [ 292.583640][ T5931] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 292.627968][ T5895] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 292.673378][ T9068] warning: `syz.2.792' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 292.789120][ T9072] loop2: detected capacity change from 0 to 7 [ 292.789688][ T5931] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 292.804997][ T9072] Dev loop2: unable to read RDB block 7 [ 292.822674][ T9072] loop2: unable to read partition table [ 292.828703][ T5931] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 292.853800][ T9072] loop2: partition table beyond EOD, truncated [ 292.869558][ T9072] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 292.875307][ T5931] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 293.005271][ T5931] usb 4-1: USB disconnect, device number 32 [ 293.068263][ T5847] gspca_ov534_9: reg_w failed -110 [ 293.087420][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 293.110214][ T5895] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 293.121381][ T5895] usb 5-1: can't read configurations, error -71 [ 293.132152][ T9075] loop6: detected capacity change from 0 to 7 [ 293.140740][ T9075] Dev loop6: unable to read RDB block 7 [ 293.146873][ T9075] loop6: AHDI p3 p4 [ 293.151263][ T9075] loop6: partition table partially beyond EOD, truncated [ 293.160202][ T9075] loop6: p3 start 1697644645 is beyond EOD, truncated [ 293.389435][ T5847] gspca_ov534_9: Unknown sensor 0000 [ 293.389541][ T5847] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 293.409954][ T5847] usb 1-1: USB disconnect, device number 43 [ 293.498091][ T5931] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 293.660643][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 293.679296][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.725053][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.749213][ T5931] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 293.791830][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.826504][ T5931] usb 3-1: config 0 descriptor?? [ 294.304058][ T5931] nzxt-kraken2 0003:1E71:170E.0008: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 294.323316][ T9086] netlink: 'syz.3.798': attribute type 6 has an invalid length. [ 294.625883][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.648335][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.558306][ T5931] usb 3-1: reset high-speed USB device number 34 using dummy_hcd [ 295.886239][ T9113] FAULT_INJECTION: forcing a failure. [ 295.886239][ T9113] name failslab, interval 1, probability 0, space 0, times 0 [ 295.990813][ T9113] CPU: 1 UID: 0 PID: 9113 Comm: syz.1.805 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 295.990846][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.990862][ T9113] Call Trace: [ 295.990871][ T9113] [ 295.990879][ T9113] dump_stack_lvl+0x241/0x360 [ 295.990919][ T9113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.990950][ T9113] ? __pfx__printk+0x10/0x10 [ 295.990985][ T9113] ? __pfx___might_resched+0x10/0x10 [ 295.991017][ T9113] should_fail_ex+0x424/0x570 [ 295.991044][ T9113] should_failslab+0xac/0x100 [ 295.991077][ T9113] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 295.991107][ T9113] ? __alloc_skb+0x1c2/0x480 [ 295.991132][ T9113] __alloc_skb+0x1c2/0x480 [ 295.991158][ T9113] ? __pfx___alloc_skb+0x10/0x10 [ 295.991175][ T9113] ? __local_bh_enable_ip+0x168/0x200 [ 295.991199][ T9113] ? pppoe_sendmsg+0xb5/0x8d0 [ 295.991235][ T9113] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.991263][ T9113] sock_wmalloc+0xab/0x120 [ 295.991291][ T9113] pppoe_sendmsg+0x313/0x8d0 [ 295.991326][ T9113] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 295.991353][ T9113] ? __import_iovec+0x585/0x830 [ 295.991381][ T9113] ? aa_sock_msg_perm+0x91/0x160 [ 295.991418][ T9113] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 295.991444][ T9113] __sock_sendmsg+0x221/0x270 [ 295.991477][ T9113] ____sys_sendmsg+0x523/0x860 [ 295.991511][ T9113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.991552][ T9113] __sys_sendmmsg+0x4a3/0x7b0 [ 295.991588][ T9113] ? __pfx___sys_sendmmsg+0x10/0x10 [ 295.991615][ T9113] ? __lock_acquire+0xad5/0xd80 [ 295.991677][ T9113] ? vfs_write+0xb29/0xd10 [ 295.991721][ T9113] ? __mutex_unlock_slowpath+0x229/0x800 [ 295.991758][ T9113] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.991785][ T9113] ? __fget_files+0x2a/0x420 [ 295.991818][ T9113] ? fput+0x9b/0xd0 [ 295.991837][ T9113] ? ksys_write+0x275/0x2d0 [ 295.991873][ T9113] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 295.991910][ T9113] __do_fast_syscall_32+0xb4/0x110 [ 295.991937][ T9113] ? exc_page_fault+0x5f8/0x920 [ 295.991968][ T9113] do_fast_syscall_32+0x34/0x80 [ 295.991995][ T9113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.992020][ T9113] RIP: 0023:0xf705d579 [ 295.992038][ T9113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 295.992056][ T9113] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 295.992077][ T9113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000bc0 [ 295.992091][ T9113] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.992102][ T9113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.992114][ T9113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 295.992126][ T9113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.992157][ T9113] [ 296.687936][ T5847] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 296.766739][ T9122] C: renamed from team_slave_0 (while UP) [ 296.804829][ T9122] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 296.829143][ T5847] usb 1-1: device descriptor read/64, error -71 [ 296.848849][ T9122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.809'. [ 296.946435][ T9122] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 296.956617][ T9131] FAULT_INJECTION: forcing a failure. [ 296.956617][ T9131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.001887][ T9131] CPU: 1 UID: 0 PID: 9131 Comm: syz.4.812 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 297.001920][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.001934][ T9131] Call Trace: [ 297.001942][ T9131] [ 297.001951][ T9131] dump_stack_lvl+0x241/0x360 [ 297.001990][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.002021][ T9131] ? __pfx__printk+0x10/0x10 [ 297.002061][ T9131] should_fail_ex+0x424/0x570 [ 297.002089][ T9131] _copy_to_user+0x31/0xb0 [ 297.002122][ T9131] simple_read_from_buffer+0xc4/0x170 [ 297.002158][ T9131] proc_fail_nth_read+0x1ef/0x260 [ 297.002184][ T9131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.002209][ T9131] ? rw_verify_area+0x246/0x630 [ 297.002231][ T9131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.002255][ T9131] vfs_read+0x21f/0xb90 [ 297.002284][ T9131] ? __pfx___mutex_lock+0x10/0x10 [ 297.002311][ T9131] ? __pfx_vfs_read+0x10/0x10 [ 297.002338][ T9131] ? __fget_files+0x2a/0x420 [ 297.002359][ T9131] ? __fget_files+0x39d/0x420 [ 297.002376][ T9131] ? __fget_files+0x2a/0x420 [ 297.002406][ T9131] ksys_read+0x19d/0x2d0 [ 297.002432][ T9131] ? __pfx_ksys_read+0x10/0x10 [ 297.002459][ T9131] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 297.002485][ T9131] ? lockdep_hardirqs_on+0x9d/0x150 [ 297.002514][ T9131] __do_fast_syscall_32+0xb4/0x110 [ 297.002540][ T9131] ? exc_page_fault+0x5f8/0x920 [ 297.002570][ T9131] do_fast_syscall_32+0x34/0x80 [ 297.002597][ T9131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.002622][ T9131] RIP: 0023:0xf7f37579 [ 297.002640][ T9131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.002658][ T9131] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 297.002680][ T9131] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5056620 [ 297.002694][ T9131] RDX: 000000000000000f RSI: 00000000f73c2ff4 RDI: 0000000000000000 [ 297.002707][ T9131] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 297.002718][ T9131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.002731][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.002761][ T9131] [ 297.356374][ T5847] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 297.498022][ T5847] usb 1-1: device descriptor read/64, error -71 [ 297.625141][ T5847] usb usb1-port1: attempt power cycle [ 297.626120][ T5896] usb 3-1: USB disconnect, device number 34 [ 297.697880][ T5844] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 297.858418][ T9142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 297.865261][ T9142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.890042][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.931918][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.959518][ T9142] vhci_hcd vhci_hcd.0: Device attached [ 297.977882][ T5847] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 298.001580][ T5844] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 298.038236][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.050622][ T5847] usb 1-1: device descriptor read/8, error -71 [ 298.082422][ T5844] usb 5-1: config 0 descriptor?? [ 298.084452][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 298.220436][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 298.238309][ T5896] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 298.249199][ T9144] vhci_hcd: connection closed [ 298.249804][ T9145] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 298.281829][ T54] vhci_hcd: stop threads [ 298.287105][ T54] vhci_hcd: release socket [ 298.314603][ T54] vhci_hcd: disconnect device [ 298.328500][ T5847] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 298.389446][ T5847] usb 1-1: device descriptor read/8, error -71 [ 298.518526][ T5847] usb usb1-port1: unable to enumerate USB device [ 298.526475][ T9155] netlink: 'syz.1.816': attribute type 6 has an invalid length. [ 298.594067][ T5844] hid-generic 0003:05AC:4262.0009: unknown main item tag 0x0 [ 298.602252][ T5844] hid-generic 0003:05AC:4262.0009: unknown main item tag 0x0 [ 298.613374][ T5844] hid-generic 0003:05AC:4262.0009: unknown main item tag 0x0 [ 298.627504][ T5844] hid-generic 0003:05AC:4262.0009: unknown main item tag 0x0 [ 298.867238][ T5844] hid-generic 0003:05AC:4262.0009: unknown main item tag 0x0 [ 298.895703][ T5844] hid-generic 0003:05AC:4262.0009: hidraw0: USB HID v0.00 Device [HID 05ac:4262] on usb-dummy_hcd.4-1/input0 [ 298.931211][ T5844] usb 5-1: USB disconnect, device number 33 [ 299.092776][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 299.092798][ T30] audit: type=1326 audit(1744815272.449:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.3.819" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x0 [ 299.264924][ T9162] FAULT_INJECTION: forcing a failure. [ 299.264924][ T9162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.285229][ T9162] CPU: 1 UID: 0 PID: 9162 Comm: syz.2.820 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 299.285261][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.285274][ T9162] Call Trace: [ 299.285282][ T9162] [ 299.285291][ T9162] dump_stack_lvl+0x241/0x360 [ 299.285331][ T9162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.285362][ T9162] ? __pfx__printk+0x10/0x10 [ 299.285406][ T9162] should_fail_ex+0x424/0x570 [ 299.285435][ T9162] _copy_from_user+0x2d/0xb0 [ 299.285467][ T9162] kstrtouint_from_user+0xce/0x1a0 [ 299.285496][ T9162] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 299.285526][ T9162] ? __lock_acquire+0xad5/0xd80 [ 299.285560][ T9162] proc_fail_nth_write+0xac/0x2d0 [ 299.285583][ T9162] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 299.285613][ T9162] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.285641][ T9162] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.285666][ T9162] vfs_write+0x2bc/0xd10 [ 299.285695][ T9162] ? fdget_pos+0x247/0x310 [ 299.285728][ T9162] ? __pfx_vfs_write+0x10/0x10 [ 299.285756][ T9162] ? __fget_files+0x2a/0x420 [ 299.285777][ T9162] ? __fget_files+0x39d/0x420 [ 299.285794][ T9162] ? __fget_files+0x2a/0x420 [ 299.285822][ T9162] ksys_write+0x19d/0x2d0 [ 299.285849][ T9162] ? __pfx_ksys_write+0x10/0x10 [ 299.285876][ T9162] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 299.285902][ T9162] ? lockdep_hardirqs_on+0x9d/0x150 [ 299.285930][ T9162] __do_fast_syscall_32+0xb4/0x110 [ 299.285957][ T9162] ? exc_page_fault+0x5f8/0x920 [ 299.285987][ T9162] do_fast_syscall_32+0x34/0x80 [ 299.286015][ T9162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.286040][ T9162] RIP: 0023:0xf7fd6579 [ 299.286058][ T9162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.286075][ T9162] RSP: 002b:00000000f50f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 299.286092][ T9162] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50f6620 [ 299.286102][ T9162] RDX: 0000000000000001 RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 299.286111][ T9162] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 299.286119][ T9162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.286128][ T9162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.286149][ T9162] [ 299.510955][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.533458][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.740908][ T9166] FAULT_INJECTION: forcing a failure. [ 299.740908][ T9166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.766832][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.1.822 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 299.766865][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.766878][ T9166] Call Trace: [ 299.766886][ T9166] [ 299.766895][ T9166] dump_stack_lvl+0x241/0x360 [ 299.766934][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.766965][ T9166] ? __pfx__printk+0x10/0x10 [ 299.767009][ T9166] should_fail_ex+0x424/0x570 [ 299.767037][ T9166] _copy_from_user+0x2d/0xb0 [ 299.767069][ T9166] get_compat_msghdr+0xb3/0x730 [ 299.767104][ T9166] ? __fget_files+0x2a/0x420 [ 299.767125][ T9166] ? __pfx_get_compat_msghdr+0x10/0x10 [ 299.767172][ T9166] __sys_sendmsg+0x23b/0x360 [ 299.767202][ T9166] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.767275][ T9166] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 299.767302][ T9166] ? lockdep_hardirqs_on+0x9d/0x150 [ 299.767331][ T9166] __do_fast_syscall_32+0xb4/0x110 [ 299.767357][ T9166] ? exc_page_fault+0x5f8/0x920 [ 299.767387][ T9166] do_fast_syscall_32+0x34/0x80 [ 299.767415][ T9166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.767440][ T9166] RIP: 0023:0xf705d579 [ 299.767458][ T9166] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.767475][ T9166] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 299.767498][ T9166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800008c0 [ 299.767513][ T9166] RDX: 0000000020044800 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.767525][ T9166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.767538][ T9166] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.767550][ T9166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.767580][ T9166] [ 301.129621][ T9189] FAULT_INJECTION: forcing a failure. [ 301.129621][ T9189] name failslab, interval 1, probability 0, space 0, times 0 [ 301.142996][ T5931] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 301.154620][ T9189] CPU: 1 UID: 0 PID: 9189 Comm: syz.4.829 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 301.154655][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.154668][ T9189] Call Trace: [ 301.154676][ T9189] [ 301.154684][ T9189] dump_stack_lvl+0x241/0x360 [ 301.154723][ T9189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.154754][ T9189] ? __pfx__printk+0x10/0x10 [ 301.154788][ T9189] ? __pfx___might_resched+0x10/0x10 [ 301.154819][ T9189] should_fail_ex+0x424/0x570 [ 301.154847][ T9189] should_failslab+0xac/0x100 [ 301.154878][ T9189] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 301.154910][ T9189] ? __alloc_skb+0x1c2/0x480 [ 301.154934][ T9189] __alloc_skb+0x1c2/0x480 [ 301.154960][ T9189] ? __pfx___alloc_skb+0x10/0x10 [ 301.154983][ T9189] ? netlink_autobind+0xd6/0x2f0 [ 301.155013][ T9189] ? netlink_autobind+0x2b0/0x2f0 [ 301.155049][ T9189] netlink_sendmsg+0x638/0xcd0 [ 301.155094][ T9189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.155129][ T9189] ? __import_iovec+0x585/0x830 [ 301.155157][ T9189] ? aa_sock_msg_perm+0x91/0x160 [ 301.155193][ T9189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.155221][ T9189] __sock_sendmsg+0x221/0x270 [ 301.155253][ T9189] ____sys_sendmsg+0x523/0x860 [ 301.155285][ T9189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.155325][ T9189] __sys_sendmsg+0x271/0x360 [ 301.155354][ T9189] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.155431][ T9189] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 301.155458][ T9189] ? lockdep_hardirqs_on+0x9d/0x150 [ 301.155486][ T9189] __do_fast_syscall_32+0xb4/0x110 [ 301.155513][ T9189] ? exc_page_fault+0x5f8/0x920 [ 301.155543][ T9189] do_fast_syscall_32+0x34/0x80 [ 301.155579][ T9189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.155604][ T9189] RIP: 0023:0xf7f37579 [ 301.155622][ T9189] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 301.155640][ T9189] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 301.155662][ T9189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 301.155676][ T9189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.155689][ T9189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.155700][ T9189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 301.155712][ T9189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.155741][ T9189] [ 301.748052][ T5931] usb 1-1: device descriptor read/64, error -71 [ 301.987993][ T5931] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 302.128079][ T5931] usb 1-1: device descriptor read/64, error -71 [ 302.267542][ T5931] usb usb1-port1: attempt power cycle [ 302.336300][ T9201] netlink: 'syz.3.832': attribute type 6 has an invalid length. [ 302.758640][ T5931] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 302.819576][ T5931] usb 1-1: device descriptor read/8, error -71 [ 302.854528][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.833'. [ 303.057983][ T5931] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 303.089233][ T5931] usb 1-1: device descriptor read/8, error -71 [ 303.108310][ T5895] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 303.228531][ T5931] usb usb1-port1: unable to enumerate USB device [ 303.267985][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 303.295540][ T5895] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 303.316887][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.357957][ T5896] vhci_hcd: vhci_device speed not set [ 303.364832][ T5895] usb 5-1: config 0 descriptor?? [ 303.383896][ T5895] ttusb_dec_send_command: command bulk message failed: error -22 [ 303.397717][ T5895] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 303.459445][ T9209] FAULT_INJECTION: forcing a failure. [ 303.459445][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 303.508389][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.3.834 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 303.508419][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.508432][ T9209] Call Trace: [ 303.508440][ T9209] [ 303.508450][ T9209] dump_stack_lvl+0x241/0x360 [ 303.508488][ T9209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.508519][ T9209] ? __pfx__printk+0x10/0x10 [ 303.508553][ T9209] ? __pfx___might_resched+0x10/0x10 [ 303.508582][ T9209] should_fail_ex+0x424/0x570 [ 303.508609][ T9209] should_failslab+0xac/0x100 [ 303.508648][ T9209] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 303.508679][ T9209] ? __alloc_skb+0x1c2/0x480 [ 303.508704][ T9209] __alloc_skb+0x1c2/0x480 [ 303.508730][ T9209] ? __pfx___alloc_skb+0x10/0x10 [ 303.508752][ T9209] ? netlink_autobind+0xd6/0x2f0 [ 303.508782][ T9209] ? netlink_autobind+0x2b0/0x2f0 [ 303.508818][ T9209] netlink_sendmsg+0x638/0xcd0 [ 303.508861][ T9209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.508896][ T9209] ? __import_iovec+0x585/0x830 [ 303.508924][ T9209] ? aa_sock_msg_perm+0x91/0x160 [ 303.508965][ T9209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.508993][ T9209] __sock_sendmsg+0x221/0x270 [ 303.509025][ T9209] ____sys_sendmsg+0x523/0x860 [ 303.509057][ T9209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.509097][ T9209] __sys_sendmsg+0x271/0x360 [ 303.509125][ T9209] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.509188][ T9209] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 303.509209][ T9209] ? lockdep_hardirqs_on+0x9d/0x150 [ 303.509232][ T9209] __do_fast_syscall_32+0xb4/0x110 [ 303.509253][ T9209] ? exc_page_fault+0x5f8/0x920 [ 303.509276][ T9209] do_fast_syscall_32+0x34/0x80 [ 303.509298][ T9209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.509319][ T9209] RIP: 0023:0xf7f15579 [ 303.509334][ T9209] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.509348][ T9209] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 303.509367][ T9209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800008c0 [ 303.509380][ T9209] RDX: 0000000020044800 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.509390][ T9209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.509399][ T9209] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.509409][ T9209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.509432][ T9209] [ 303.787612][ T5895] usb 5-1: USB disconnect, device number 34 [ 303.824189][ T9213] loop2: detected capacity change from 0 to 7 [ 303.903068][ T9213] Dev loop2: unable to read RDB block 7 [ 303.909749][ T9213] loop2: AHDI p3 p4 [ 303.913733][ T9213] loop2: partition table partially beyond EOD, truncated [ 304.238223][ T5895] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 304.277881][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 304.286818][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.845'. [ 304.298436][ T5931] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 304.372729][ T9235] netlink: 'syz.2.844': attribute type 6 has an invalid length. [ 304.402206][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 304.415530][ T5895] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 304.434798][ T5895] usb 1-1: config 0 has no interface number 0 [ 304.505713][ T5895] usb 1-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=b0.53 [ 304.524525][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.546052][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.554773][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 304.591526][ T5902] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 304.605298][ T5895] usb 1-1: Product: syz [ 304.615270][ T5895] usb 1-1: Manufacturer: syz [ 304.621250][ T5931] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 304.654608][ T5895] usb 1-1: SerialNumber: syz [ 304.667165][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.684024][ T5895] usb 1-1: config 0 descriptor?? [ 304.709162][ T5931] usb 2-1: config 0 descriptor?? [ 304.736043][ T9222] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 304.819547][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.829048][ T5902] usb 4-1: not running at top speed; connect to a high speed hub [ 304.840233][ T5902] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 304.849128][ T5902] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 304.878086][ T5902] usb 4-1: config 2 has no interface number 0 [ 304.884421][ T5902] usb 4-1: config 2 has no interface number 1 [ 304.906912][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.924468][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.925138][ T5902] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 304.943797][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.960568][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.993301][ T5895] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 305.011226][ T5902] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 305.027553][ T5895] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 305.047614][ T5895] pac7311 1-1:0.140: probe with driver pac7311 failed with error -71 [ 305.058385][ T5902] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 305.078527][ T5895] usb 1-1: USB disconnect, device number 52 [ 305.118092][ T5902] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 305.169609][ T5902] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.198805][ T5902] usb 4-1: config 2 interface 212 has no altsetting 0 [ 305.261802][ T5902] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 305.278213][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.322141][ T5902] usb 4-1: Product: 㞌쐤﯆࣠礓傕ざΐ阫麯䶷䨯뱧뙼ⰼ萺㎉줒係끆陎脵ᕼ왼쪀鰓췓 [ 305.367972][ T5902] usb 4-1: Manufacturer: 蜿닦簃쟉텛뷯ಌἬ쾆ל疓⠑텺‷秊頍ྏ熷疊끟➒Ҷ℉䘓戳恽왌ࣙ烅⁲箩䓀⮐絡澐캹뎗姍ᮇ폜稪쨀貋Ƭ㡮ᕬᚢ惖晞蝓海鈻씌걻꼩翇崿 [ 305.437732][ T5902] usb 4-1: SerialNumber: ӿ [ 305.662563][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.698402][ T9245] fuse: Bad value for 'fd' [ 305.713282][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.796707][ T5902] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input27 [ 305.868119][ T975] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 305.884608][ T5902] usb 4-1: USB disconnect, device number 33 [ 306.051130][ T975] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 306.056323][ T30] audit: type=1326 audit(1744815279.409:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.841" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 306.059778][ T975] usb 5-1: config 0 has no interface number 0 [ 306.105621][ T975] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0xD has invalid maxpacket 40068, setting to 64 [ 306.123406][ T975] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 306.135786][ T975] usb 5-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 306.165487][ T975] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 306.180745][ T975] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 306.192772][ T975] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65 [ 306.305990][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.563722][ T9262] FAULT_INJECTION: forcing a failure. [ 306.563722][ T9262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.567544][ T975] usb 5-1: config 0 descriptor?? [ 306.596333][ T9262] CPU: 1 UID: 0 PID: 9262 Comm: syz.3.853 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 306.596366][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.596379][ T9262] Call Trace: [ 306.596392][ T9262] [ 306.596401][ T9262] dump_stack_lvl+0x241/0x360 [ 306.596440][ T9262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.596480][ T9262] ? __pfx__printk+0x10/0x10 [ 306.596521][ T9262] should_fail_ex+0x424/0x570 [ 306.596548][ T9262] _copy_from_iter+0x211/0x1c70 [ 306.596582][ T9262] ? __build_skb_around+0x247/0x3d0 [ 306.596608][ T9262] ? __alloc_skb+0x298/0x480 [ 306.596626][ T9262] ? __pfx__copy_from_iter+0x10/0x10 [ 306.596657][ T9262] ? __pfx___alloc_skb+0x10/0x10 [ 306.596680][ T9262] ? skb_put+0x114/0x1f0 [ 306.596706][ T9262] netlink_sendmsg+0x73c/0xcd0 [ 306.596751][ T9262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.596785][ T9262] ? __import_iovec+0x585/0x830 [ 306.596812][ T9262] ? aa_sock_msg_perm+0x91/0x160 [ 306.596848][ T9262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.596875][ T9262] __sock_sendmsg+0x221/0x270 [ 306.596906][ T9262] ____sys_sendmsg+0x523/0x860 [ 306.596938][ T9262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.596978][ T9262] __sys_sendmsg+0x271/0x360 [ 306.597007][ T9262] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.597083][ T9262] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 306.597109][ T9262] ? lockdep_hardirqs_on+0x9d/0x150 [ 306.597134][ T9262] __do_fast_syscall_32+0xb4/0x110 [ 306.597153][ T9262] ? exc_page_fault+0x5f8/0x920 [ 306.597174][ T9262] do_fast_syscall_32+0x34/0x80 [ 306.597193][ T9262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.597213][ T9262] RIP: 0023:0xf7f15579 [ 306.597226][ T9262] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 306.597238][ T9262] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 306.597254][ T9262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 306.597265][ T9262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.597274][ T9262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.597282][ T9262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.597290][ T9262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.597311][ T9262] [ 306.601684][ T9242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.914076][ T975] adutux 5-1:0.110: ADU100 now attached to /dev/usb/adutux0 [ 307.211920][ T975] usb 5-1: USB disconnect, device number 35 [ 307.606303][ T9275] loop6: detected capacity change from 0 to 7 [ 307.614944][ T9275] Dev loop6: unable to read RDB block 7 [ 307.624007][ T9275] loop6: AHDI p3 p4 [ 307.674862][ T9275] loop6: partition table partially beyond EOD, truncated [ 307.686609][ T9275] loop6: p3 start 1697644645 is beyond EOD, truncated [ 307.852214][ T9277] FAULT_INJECTION: forcing a failure. [ 307.852214][ T9277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.118162][ T9277] CPU: 0 UID: 0 PID: 9277 Comm: syz.0.857 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 308.118194][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 308.118207][ T9277] Call Trace: [ 308.118214][ T9277] [ 308.118223][ T9277] dump_stack_lvl+0x241/0x360 [ 308.118261][ T9277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.118290][ T9277] ? __pfx__printk+0x10/0x10 [ 308.118332][ T9277] should_fail_ex+0x424/0x570 [ 308.118359][ T9277] _copy_from_user+0x2d/0xb0 [ 308.118390][ T9277] get_compat_msghdr+0xb3/0x730 [ 308.118427][ T9277] ? __pfx_get_compat_msghdr+0x10/0x10 [ 308.118464][ T9277] ? __sys_sendmmsg+0x4d4/0x7b0 [ 308.118491][ T9277] __sys_sendmmsg+0x464/0x7b0 [ 308.118525][ T9277] ? __pfx___sys_sendmmsg+0x10/0x10 [ 308.118553][ T9277] ? __lock_acquire+0xad5/0xd80 [ 308.118614][ T9277] ? vfs_write+0xb29/0xd10 [ 308.118654][ T9277] ? __mutex_unlock_slowpath+0x229/0x800 [ 308.118689][ T9277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.118713][ T9277] ? __fget_files+0x2a/0x420 [ 308.118744][ T9277] ? fput+0x9b/0xd0 [ 308.118762][ T9277] ? ksys_write+0x275/0x2d0 [ 308.118796][ T9277] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 308.118830][ T9277] __do_fast_syscall_32+0xb4/0x110 [ 308.118857][ T9277] ? exc_page_fault+0x5f8/0x920 [ 308.118887][ T9277] do_fast_syscall_32+0x34/0x80 [ 308.118913][ T9277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.118938][ T9277] RIP: 0023:0xf70ad579 [ 308.118956][ T9277] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 308.118973][ T9277] RSP: 002b:00000000f509d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 308.118995][ T9277] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005f80 [ 308.119009][ T9277] RDX: 00000000000001ce RSI: 0000000000008040 RDI: 0000000000000000 [ 308.119021][ T9277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.119032][ T9277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.119044][ T9277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.119081][ T9277] [ 308.339852][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 308.388336][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 308.417692][ T5931] usb 2-1: USB disconnect, device number 34 [ 308.776973][ T9281] netlink: 36 bytes leftover after parsing attributes in process `syz.4.858'. [ 308.986224][ T9285] FAULT_INJECTION: forcing a failure. [ 308.986224][ T9285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.057525][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.0.861 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 309.057557][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.057571][ T9285] Call Trace: [ 309.057579][ T9285] [ 309.057589][ T9285] dump_stack_lvl+0x241/0x360 [ 309.057628][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.057660][ T9285] ? __pfx__printk+0x10/0x10 [ 309.057702][ T9285] should_fail_ex+0x424/0x570 [ 309.057732][ T9285] _copy_to_user+0x31/0xb0 [ 309.057766][ T9285] simple_read_from_buffer+0xc4/0x170 [ 309.057804][ T9285] proc_fail_nth_read+0x1ef/0x260 [ 309.057828][ T9285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.057854][ T9285] ? rw_verify_area+0x246/0x630 [ 309.057876][ T9285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.057901][ T9285] vfs_read+0x21f/0xb90 [ 309.057930][ T9285] ? __pfx___mutex_lock+0x10/0x10 [ 309.057959][ T9285] ? __pfx_vfs_read+0x10/0x10 [ 309.057987][ T9285] ? __fget_files+0x2a/0x420 [ 309.058008][ T9285] ? __fget_files+0x39d/0x420 [ 309.058025][ T9285] ? __fget_files+0x2a/0x420 [ 309.058055][ T9285] ksys_read+0x19d/0x2d0 [ 309.058092][ T9285] ? __pfx_ksys_read+0x10/0x10 [ 309.058121][ T9285] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 309.058148][ T9285] ? lockdep_hardirqs_on+0x9d/0x150 [ 309.058177][ T9285] __do_fast_syscall_32+0xb4/0x110 [ 309.058204][ T9285] ? exc_page_fault+0x5f8/0x920 [ 309.058235][ T9285] do_fast_syscall_32+0x34/0x80 [ 309.058263][ T9285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.058289][ T9285] RIP: 0023:0xf70ad579 [ 309.058307][ T9285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 309.058325][ T9285] RSP: 002b:00000000f509d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 309.058349][ T9285] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f509d620 [ 309.058364][ T9285] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 309.058377][ T9285] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 309.058389][ T9285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.058401][ T9285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.058432][ T9285] [ 309.079409][ T9288] netlink: 'syz.1.860': attribute type 6 has an invalid length. [ 310.649050][ T975] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 310.838165][ T975] usb 4-1: config 0 has no interfaces? [ 310.849968][ T975] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 310.861057][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.878349][ T975] usb 4-1: Product: syz [ 310.882571][ T975] usb 4-1: Manufacturer: syz [ 310.887198][ T975] usb 4-1: SerialNumber: syz [ 310.990481][ T975] usb 4-1: config 0 descriptor?? [ 311.076579][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 311.150842][ T9318] FAULT_INJECTION: forcing a failure. [ 311.150842][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 311.164858][ T9318] CPU: 0 UID: 0 PID: 9318 Comm: syz.1.869 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 311.164880][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.164891][ T9318] Call Trace: [ 311.164897][ T9318] [ 311.164903][ T9318] dump_stack_lvl+0x241/0x360 [ 311.164931][ T9318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.164953][ T9318] ? __pfx__printk+0x10/0x10 [ 311.164977][ T9318] ? __pfx___might_resched+0x10/0x10 [ 311.164999][ T9318] should_fail_ex+0x424/0x570 [ 311.165018][ T9318] should_failslab+0xac/0x100 [ 311.165040][ T9318] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 311.165062][ T9318] ? __alloc_skb+0x1c2/0x480 [ 311.165079][ T9318] __alloc_skb+0x1c2/0x480 [ 311.165098][ T9318] ? pppol2tp_sock_to_session+0x86/0x690 [ 311.165120][ T9318] ? __pfx___alloc_skb+0x10/0x10 [ 311.165132][ T9318] ? pppol2tp_sock_to_session+0x561/0x690 [ 311.165150][ T9318] ? pppol2tp_sock_to_session+0x86/0x690 [ 311.165167][ T9318] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 311.165189][ T9318] sock_wmalloc+0xab/0x120 [ 311.165208][ T9318] pppol2tp_sendmsg+0x17b/0x5e0 [ 311.165226][ T9318] ? aa_sock_msg_perm+0x91/0x160 [ 311.165268][ T9318] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 311.165284][ T9318] __sock_sendmsg+0x221/0x270 [ 311.165307][ T9318] ____sys_sendmsg+0x523/0x860 [ 311.165329][ T9318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.165352][ T9318] ? __sys_sendmmsg+0x4d4/0x7b0 [ 311.165371][ T9318] __sys_sendmmsg+0x4a3/0x7b0 [ 311.165395][ T9318] ? __pfx___sys_sendmmsg+0x10/0x10 [ 311.165415][ T9318] ? __lock_acquire+0xad5/0xd80 [ 311.165458][ T9318] ? vfs_write+0xb29/0xd10 [ 311.165487][ T9318] ? __mutex_unlock_slowpath+0x229/0x800 [ 311.165513][ T9318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.165531][ T9318] ? __fget_files+0x2a/0x420 [ 311.165553][ T9318] ? fput+0x9b/0xd0 [ 311.165566][ T9318] ? ksys_write+0x275/0x2d0 [ 311.165590][ T9318] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 311.165617][ T9318] __do_fast_syscall_32+0xb4/0x110 [ 311.165635][ T9318] ? exc_page_fault+0x5f8/0x920 [ 311.165656][ T9318] do_fast_syscall_32+0x34/0x80 [ 311.165675][ T9318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.165692][ T9318] RIP: 0023:0xf705d579 [ 311.165705][ T9318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 311.165717][ T9318] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 311.165733][ T9318] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080005f80 [ 311.165743][ T9318] RDX: 00000000000001ce RSI: 0000000000008040 RDI: 0000000000000000 [ 311.165752][ T9318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.165761][ T9318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.165770][ T9318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.165790][ T9318] [ 311.994216][ T9331] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 312.000805][ T9331] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 312.025878][ T9331] vhci_hcd vhci_hcd.0: Device attached [ 312.212734][ T5847] vhci_hcd: vhci_device speed not set [ 312.294855][ T5847] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 312.443738][ T9332] vhci_hcd: connection reset by peer [ 312.452367][ T5928] vhci_hcd: stop threads [ 312.545926][ T5928] vhci_hcd: release socket [ 312.546854][ T9343] loop2: detected capacity change from 0 to 7 [ 312.571051][ T9343] Dev loop2: unable to read RDB block 7 [ 312.577565][ T9343] loop2: AHDI p3 p4 [ 312.584096][ T9343] loop2: partition table partially beyond EOD, truncated [ 312.595274][ T5928] vhci_hcd: disconnect device [ 312.920738][ T9345] loop2: detected capacity change from 0 to 7 [ 313.018967][ T9345] Dev loop2: unable to read RDB block 7 [ 313.026983][ T9345] loop2: unable to read partition table [ 313.053788][ T9345] loop2: partition table beyond EOD, truncated [ 313.076941][ T9345] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 313.138366][ T5931] usb 4-1: USB disconnect, device number 34 [ 313.598023][ T975] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 313.776351][ T975] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 313.838442][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.937394][ T975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.953998][ T9354] netlink: 'syz.0.879': attribute type 6 has an invalid length. [ 314.000990][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 314.203947][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 314.378352][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.512031][ T975] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 314.581447][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.591054][ T975] usb 5-1: Product: syz [ 314.625082][ T975] usb 5-1: Manufacturer: syz [ 314.640946][ T975] usb 5-1: SerialNumber: syz [ 314.677940][ T5844] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 314.698582][ T975] usb 5-1: config 0 descriptor?? [ 314.710165][ T975] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 314.867954][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 314.884950][ T5844] usb 4-1: config 8 has an invalid interface number: 72 but max is 0 [ 314.895841][ T5844] usb 4-1: config 8 has no interface number 0 [ 314.904521][ T5844] usb 4-1: config 8 interface 72 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 314.920516][ T5844] usb 4-1: config 8 interface 72 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 314.935233][ T5844] usb 4-1: config 8 interface 72 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 314.948689][ T5844] usb 4-1: config 8 interface 72 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 314.966672][ T5844] usb 4-1: config 8 interface 72 has no altsetting 0 [ 314.983249][ T5844] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 314.993695][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.020672][ T5844] usb 4-1: Product: syz [ 315.029511][ T5844] usb 4-1: Manufacturer: syz [ 315.037696][ T5844] usb 4-1: SerialNumber: syz [ 315.097349][ T9358] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 315.112864][ T9358] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 315.339221][ T5844] smsc75xx v1.0.0 [ 315.399161][ T5844] smsc75xx 4-1:8.72 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 315.531068][ T5844] smsc75xx 4-1:8.72: probe with driver smsc75xx failed with error -71 [ 315.546314][ T975] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 315.591704][ T5844] usb 4-1: USB disconnect, device number 35 [ 316.166352][ T9377] tipc: Started in network mode [ 316.202010][ T9377] tipc: Node identity 4, cluster identity 4711 [ 316.234251][ T9377] tipc: Node number set to 4 [ 316.278372][ T5902] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 316.407892][ T5902] usb 2-1: device descriptor read/64, error -71 [ 316.495608][ T9385] loop2: detected capacity change from 0 to 7 [ 316.504091][ T9385] Dev loop2: unable to read RDB block 7 [ 316.542495][ T9385] loop2: unable to read partition table [ 316.551094][ T9385] loop2: partition table beyond EOD, truncated [ 316.562336][ T9385] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 316.700827][ T5902] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 316.838362][ T5844] usb 5-1: USB disconnect, device number 36 [ 316.875219][ T5902] usb 2-1: device descriptor read/64, error -71 [ 317.018853][ T5902] usb usb2-port1: attempt power cycle [ 317.168083][ T5896] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 317.211675][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.218464][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.243304][ T9398] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 317.243304][ T9398] program syz.3.886 not setting count and/or reply_len properly [ 317.271507][ T9398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.886'. [ 317.346106][ T5931] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 317.370789][ T5896] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 317.381871][ T5896] usb 3-1: config 0 has no interface number 0 [ 317.426873][ T5902] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 317.436135][ T5896] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.438061][ T5847] vhci_hcd: vhci_device speed not set [ 317.447983][ T5896] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 317.466950][ T5896] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 317.478983][ T5902] usb 2-1: device descriptor read/8, error -71 [ 317.485748][ T5896] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 317.615994][ T5931] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 317.625812][ T5931] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 317.637006][ T5931] usb 1-1: config 220 has no interface number 2 [ 317.643765][ T5896] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 317.656103][ T5931] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 317.676889][ T5896] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.697854][ T5931] usb 1-1: config 220 interface 0 has no altsetting 0 [ 317.714975][ T5931] usb 1-1: config 220 interface 76 has no altsetting 0 [ 317.722915][ T5896] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 317.732213][ T5902] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 317.735411][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.748195][ T5931] usb 1-1: config 220 interface 1 has no altsetting 0 [ 317.756576][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.759530][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.767007][ T5902] usb 2-1: device descriptor read/8, error -71 [ 317.784232][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.795136][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.805111][ T5931] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 317.809557][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.821361][ T5896] usb 3-1: config 0 descriptor?? [ 317.830663][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.839172][ T5931] usb 1-1: Product: syz [ 317.843982][ T9389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.851637][ T9389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.871356][ T5896] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 317.879865][ T5931] usb 1-1: Manufacturer: syz [ 317.884575][ T5931] usb 1-1: SerialNumber: syz [ 317.893122][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.938224][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.938802][ T5902] usb usb2-port1: unable to enumerate USB device [ 317.947072][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 317.947097][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 318.114272][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.144775][ T9403] [ 318.147129][ T9403] ====================================================== [ 318.154138][ T9403] WARNING: possible circular locking dependency detected [ 318.161149][ T9403] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 Not tainted [ 318.168275][ T9403] ------------------------------------------------------ [ 318.175283][ T9403] syz.2.888/9403 is trying to acquire lock: [ 318.181164][ T9403] ffff888033148aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xda0 [ 318.191872][ T9403] [ 318.191872][ T9403] but task is already holding lock: [ 318.199243][ T9403] ffff888033148258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 318.207949][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.208158][ T9403] [ 318.208158][ T9403] which lock already depends on the new lock. [ 318.208158][ T9403] [ 318.226310][ T9403] [ 318.226310][ T9403] the existing dependency chain (in reverse order) is: [ 318.235388][ T9403] [ 318.235388][ T9403] -> #2 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 318.243159][ T9403] lock_acquire+0x116/0x2f0 [ 318.248193][ T9403] lock_sock_nested+0x48/0x100 [ 318.253515][ T9403] do_ipv6_setsockopt+0xccd/0x3680 [ 318.259172][ T9403] ipv6_setsockopt+0x5d/0x170 [ 318.264390][ T9403] do_sock_setsockopt+0x3b1/0x710 [ 318.269944][ T9403] __ia32_sys_setsockopt+0x1f2/0x280 [ 318.275755][ T9403] __do_fast_syscall_32+0xb4/0x110 [ 318.281398][ T9403] do_fast_syscall_32+0x34/0x80 [ 318.286786][ T9403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.293643][ T9403] [ 318.293643][ T9403] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 318.300870][ T9403] lock_acquire+0x116/0x2f0 [ 318.305901][ T9403] __mutex_lock+0x1a5/0x10c0 [ 318.311025][ T9403] start_sync_thread+0xde/0x2d60 [ 318.316496][ T9403] do_ip_vs_set_ctl+0x48e/0xe50 [ 318.321872][ T9403] nf_setsockopt+0x295/0x2c0 [ 318.326996][ T9403] smc_setsockopt+0x25c/0xd50 [ 318.332207][ T9403] do_sock_setsockopt+0x3b1/0x710 [ 318.337762][ T9403] __ia32_sys_setsockopt+0x1f2/0x280 [ 318.343587][ T9403] __do_fast_syscall_32+0xb4/0x110 [ 318.349242][ T9403] do_fast_syscall_32+0x34/0x80 [ 318.354716][ T9403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.361575][ T9403] [ 318.361575][ T9403] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 318.370194][ T9403] validate_chain+0xa69/0x24e0 [ 318.375490][ T9403] __lock_acquire+0xad5/0xd80 [ 318.380694][ T9403] lock_acquire+0x116/0x2f0 [ 318.385724][ T9403] __mutex_lock+0x1a5/0x10c0 [ 318.390845][ T9403] smc_switch_to_fallback+0x35/0xda0 [ 318.396659][ T9403] smc_sendmsg+0x11f/0x530 [ 318.401606][ T9403] __sock_sendmsg+0x221/0x270 [ 318.406822][ T9403] __sys_sendto+0x365/0x4c0 [ 318.411850][ T9403] __ia32_sys_sendto+0xdd/0x100 [ 318.417224][ T9403] __do_fast_syscall_32+0xb4/0x110 [ 318.422873][ T9403] do_fast_syscall_32+0x34/0x80 [ 318.428252][ T9403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.435110][ T9403] [ 318.435110][ T9403] other info that might help us debug this: [ 318.435110][ T9403] [ 318.445353][ T9403] Chain exists of: [ 318.445353][ T9403] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET6 [ 318.445353][ T9403] [ 318.459027][ T9403] Possible unsafe locking scenario: [ 318.459027][ T9403] [ 318.466483][ T9403] CPU0 CPU1 [ 318.471847][ T9403] ---- ---- [ 318.477212][ T9403] lock(sk_lock-AF_INET6); [ 318.481727][ T9403] lock(rtnl_mutex); [ 318.488237][ T9403] lock(sk_lock-AF_INET6); [ 318.495268][ T9403] lock(&smc->clcsock_release_lock); [ 318.500653][ T9403] [ 318.500653][ T9403] *** DEADLOCK *** [ 318.500653][ T9403] [ 318.508800][ T9403] 1 lock held by syz.2.888/9403: [ 318.513736][ T9403] #0: ffff888033148258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 318.523074][ T9403] [ 318.523074][ T9403] stack backtrace: [ 318.528964][ T9403] CPU: 1 UID: 0 PID: 9403 Comm: syz.2.888 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 318.528987][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.528998][ T9403] Call Trace: [ 318.529006][ T9403] [ 318.529013][ T9403] dump_stack_lvl+0x241/0x360 [ 318.529041][ T9403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.529066][ T9403] ? __pfx__printk+0x10/0x10 [ 318.529091][ T9403] ? print_lock+0x171/0x1a0 [ 318.529113][ T9403] print_circular_bug+0x2e1/0x300 [ 318.529136][ T9403] check_noncircular+0x142/0x160 [ 318.529162][ T9403] validate_chain+0xa69/0x24e0 [ 318.529188][ T9403] ? look_up_lock_class+0x7b/0x170 [ 318.529210][ T9403] ? register_lock_class+0x54/0x330 [ 318.529230][ T9403] __lock_acquire+0xad5/0xd80 [ 318.529250][ T9403] lock_acquire+0x116/0x2f0 [ 318.529266][ T9403] ? smc_switch_to_fallback+0x35/0xda0 [ 318.529291][ T9403] __mutex_lock+0x1a5/0x10c0 [ 318.529312][ T9403] ? smc_switch_to_fallback+0x35/0xda0 [ 318.529336][ T9403] ? smc_switch_to_fallback+0x35/0xda0 [ 318.529361][ T9403] ? __pfx___mutex_lock+0x10/0x10 [ 318.529385][ T9403] ? __local_bh_enable_ip+0x168/0x200 [ 318.529402][ T9403] ? lockdep_hardirqs_on+0x9d/0x150 [ 318.529423][ T9403] ? __local_bh_enable_ip+0x168/0x200 [ 318.529440][ T9403] smc_switch_to_fallback+0x35/0xda0 [ 318.529460][ T9403] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.529488][ T9403] smc_sendmsg+0x11f/0x530 [ 318.529507][ T9403] ? __pfx_smc_sendmsg+0x10/0x10 [ 318.529526][ T9403] __sock_sendmsg+0x221/0x270 [ 318.529551][ T9403] __sys_sendto+0x365/0x4c0 [ 318.529568][ T9403] ? __pfx___sys_sendto+0x10/0x10 [ 318.529582][ T9403] ? do_futex+0x3d5/0x5a0 [ 318.529623][ T9403] __ia32_sys_sendto+0xdd/0x100 [ 318.529640][ T9403] __do_fast_syscall_32+0xb4/0x110 [ 318.529663][ T9403] ? ret_from_fork_asm+0x1a/0x30 [ 318.529678][ T9403] ? lockdep_hardirqs_on+0x9d/0x150 [ 318.529699][ T9403] do_fast_syscall_32+0x34/0x80 [ 318.529721][ T9403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.529743][ T9403] RIP: 0023:0xf7fd6579 [ 318.529758][ T9403] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 318.529774][ T9403] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 318.529792][ T9403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 318.529803][ T9403] RDX: 0000000000000000 RSI: 00000000ffff7ffe RDI: 0000000080000140 [ 318.529814][ T9403] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 318.529825][ T9403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 318.529835][ T9403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.529851][ T9403] [ 318.797384][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.062866][ T5931] usb 1-1: selecting invalid altsetting 0 [ 319.069466][ T5931] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 319.075952][ T5931] usb 1-1: No valid video chain found. [ 319.110212][ T5931] usb 1-1: selecting invalid altsetting 0 [ 319.117066][ T5931] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 319.141007][ T5931] usb 1-1: USB disconnect, device number 53 [ 319.479929][ T5931] usb 3-1: USB disconnect, device number 35 [ 319.491970][ T5931] ldusb 3-1:0.55: LD USB Device #0 now disconnected