last executing test programs: 8.463291475s ago: executing program 4 (id=920): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a80)={0x4, 0x0, [{0x8080000, 0xe5, &(0x7f0000000580)=""/229}, {0x10000, 0xc, &(0x7f0000000200)=""/12}, {0x1000, 0xf3, &(0x7f00000006c0)=""/243}, {0x4, 0xffffffffffffff66, &(0x7f0000000980)=""/31}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000000801040000000000000000000000000600cfd8000000000c000480080002401b0000000500030011c5000014120480080001400000fffffffaa7b8d155510c00c7ec7ac3a05977a3afde8af7b43ada708797614dffc32e2ee2556d51413a"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='\\{\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001c0001000000fc0500000000ff"], 0x14}}, 0x0) 7.993096667s ago: executing program 4 (id=924): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af30, &(0x7f0000001480)) 7.797042662s ago: executing program 4 (id=925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)=' ', 0x1, 0x48014, &(0x7f00000000c0)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xf}, 0x13}, 0x1c) (async, rerun: 32) setsockopt$inet6_int(r1, 0x84, 0x4, 0x0, 0x0) (async, rerun: 32) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) (async, rerun: 32) syz_pidfd_open(0x0, 0x0) (async, rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = fanotify_init(0x202, 0x400) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = dup2(r3, r2) read$FUSE(r4, 0x0, 0x0) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0xffffffffffffffc1) (async) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) (async, rerun: 32) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) (async) prlimit64(0x0, 0x9, 0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)) (rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) unshare(0x42040200) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) 7.443149328s ago: executing program 4 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x7f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x202, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) syz_io_uring_setup(0x2846, &(0x7f0000000140)={0x0, 0xb487, 0x80, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0xb6, 0x2, 0x0, 0x8001, 0x8a, 0x2, 0x2, 0x6, 0x6, 0xd, 0x4, 0x0, 0xaaf, 0x2, 0xb2, 0x0, 0x81, 0x6e, '\x00', 0x0, 0x8}) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7, @loopback, 0x4}, 0x1c) ioctl$SIOCGSTAMP(r10, 0x8906, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) recvfrom(r10, 0x0, 0x0, 0x1, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./cgroup/pids.max\x00', &(0x7f0000000240)='./cgroup/pids.max/../file0\x00', r4, 0x0, 0x1}) io_setup(0x8, &(0x7f0000004200)=0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000380)='net/fib_trie\x00') io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x3, 0x0, r12, 0x0}]) r13 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r14, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x2, 0x0) r15 = getpgid(0x0) syz_open_procfs(r15, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_RUN(r13, 0xae80, 0x0) 7.054628029s ago: executing program 0 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x80001}, 0x1c) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = io_uring_setup(0x42d6, &(0x7f0000000300)={0x0, 0x2417, 0x800, 0x0, 0xa6}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1010, r9, 0x8000000) socket$inet_dccp(0x2, 0x6, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x0, 0x120, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r10, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000100)={{0x2, 0x2}, {0x5, 0x9}, 0x4, 0x1, 0x81}) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 6.788279974s ago: executing program 0 (id=934): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x12) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) socket$rds(0x15, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6) 6.599049944s ago: executing program 4 (id=935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x80001}, 0x1c) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = io_uring_setup(0x42d6, &(0x7f0000000300)={0x0, 0x2417, 0x800, 0x0, 0xa6}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1010, r8, 0x8000000) socket$inet_dccp(0x2, 0x6, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x0, 0x120, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000100)={{0x2, 0x2}, {0x5, 0x9}, 0x4, 0x1, 0x81}) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 6.456989277s ago: executing program 1 (id=936): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000980)={0x0, 0x6, 0x1, 'N'}, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840)) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000980)={0x0, 0x6, 0x1, 'N'}, 0x0, 0x0}) (async) 5.869638296s ago: executing program 4 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x4e4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 4.45676374s ago: executing program 0 (id=938): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xfff, 0x5, 0x369, 0x9, 0x80, 0xb00, 0x1}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000340)}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r4, 0x4}, 0x8) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1a240000517a000000000000000000d49c41e2efec23bc5e80531869eeba83bb8dcb78464540fff0536dec55ccbab3d88c0f6e23f0c6e8db992d39a962e047a7b81f7024883e"], 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x14) recvmsg$can_raw(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1}, 0x2101) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = socket(0x10, 0x6, 0x0) sendto$inet6(r9, &(0x7f00000018c0)="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", 0x1fe, 0x84, 0x0, 0x0) preadv2(r8, 0x0, 0x0, 0x2, 0x6, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x24, 0x51, {0x51, 0x5, "3b069599d5e3863b5180c9e4ebc29d6354672b7e63af913341b155978f7b0b038829bb92a5a2325481d4dcd5992a972b6b80d1a042a1c37bb5e62f6cecf90a10bf1a0ca9916845b92780a4b76ac6e7"}}, &(0x7f00000004c0)={0x0, 0x3, 0xac, @string={0xac, 0x3, "e81fd892c346eb131f7d8c4bc318695ff6c382bcf7f7e8fc1d52c2f46d4e43cd3c0bbe72e4c546b7b4e5c283dae62c19b80be042c07472f57c90f3d10d5a79ebccd14ee897e4709163ff2fff09289e1c05db8371a934f71e9cd8bc524bc42488cf73ba95169d155967f5bae57b9a24516571813524a2e795c28f9bc8a9dd90a724c9d822c0ad41397879c12acc1258e58f79bc82b651b041b4bfe19dcd627b2bba07e7bc482a972f16b4"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x8, 0xc, "1a2f5596", "f6628358"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x7, 0x6, 0xc, 0xe, 0xfeff, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x17, 0xb5, "2f152b0283ca399a050dd79bf698008164a080bab9e8f3a72476342fd722c4c5d15a2e65369195de63ad94a3e2cebc352444cee0eda3591e5b917b0c0f6ae47159205949643422a9731ae11a61690e11386fef4961989ab12b8489279f2a6d9f6c65c37de80dfdac0f0390425f6580a9b9790c34d9546bc8e46424f4dda8975360721f1c94994297c4192382fb4cc5fb1b06082f0ec0a4b29fcf99d350a4aa4e32a676aa405211994dbb6947aecfcf7c7c490e77ff"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf23}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x45}, &(0x7f0000000800)={0x40, 0xb, 0x2, '\f>'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xbd9}, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "08f8"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9a}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xd}}) 4.261285814s ago: executing program 2 (id=939): r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, r1, 0x2feb6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x6) 3.047283033s ago: executing program 3 (id=941): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000040010000000400ae"], 0x18}}, 0x810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000090c0)={0x0, 0x0, &(0x7f0000009080)={&(0x7f00000004c0)=@newtaction={0x14, 0x4e, 0x334239e91bf4481f, 0x0, 0x0, {0x0, 0x1b}}, 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002b80)=""/4088, 0xff8}, {&(0x7f0000000580)=""/261, 0x105}, {&(0x7f0000001a80)=""/207, 0xcf}], 0x6}, 0x80000000}], 0x4, 0x10000, 0x0) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 2.792930553s ago: executing program 2 (id=942): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x30, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1) 2.685570838s ago: executing program 2 (id=943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) epoll_create(0x3f) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x5, 0xab85}, 0x8) memfd_create(&(0x7f0000000040)='\x00', 0x5) 2.354488248s ago: executing program 3 (id=944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x80001}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = io_uring_setup(0x42d6, &(0x7f0000000300)={0x0, 0x2417, 0x800, 0x0, 0xa6}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x1010, r9, 0x8000000) socket$inet_dccp(0x2, 0x6, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x0, 0x120, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r10, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000100)={{0x2, 0x2}, {0x5, 0x9}, 0x4, 0x1, 0x81}) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2.25307956s ago: executing program 1 (id=945): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) (async) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x20010, r0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0x5, 0xb, {0xb, 0x9, "1a9c2238defa233768"}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r2, 0x8b21, &(0x7f0000000040)) (async) unshare(0x2c020400) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (async) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x80}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xffffffc0, 0xfffff801, 0x2f2982d6, 0x21002, r4, 0x6780c722, '\x00', r7, r4, 0x0, 0x3, 0x3, 0x5, @void, @value, @void, @value}, 0x50) (async) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) fcntl$setpipe(r9, 0x407, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, 0x0, 0x0}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', r7, 0x29, 0x0, 0x3, 0x2, 0x79, @remote, @mcast1, 0x700, 0x7800, 0x7}}) 2.105990811s ago: executing program 0 (id=946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000040)=""/63, &(0x7f0000000080)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.066898312s ago: executing program 3 (id=947): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0xa0, 0x0, 0x0, 0xa7c0, 0x6, 0x0, 0x8497811, 0x1, 0x0}) 1.861751503s ago: executing program 0 (id=948): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 1.801951001s ago: executing program 3 (id=949): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x12) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000)) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x6) 1.678423769s ago: executing program 2 (id=950): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x7}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x3) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000020c0), 0x80000) sendto$inet(r3, &(0x7f0000002100)="27febe71a8e64998e1b08ec63f03d813c5a92b9b1ea78df6bf17c53e8cafd0a80e9992e63f0e038c54a3a5f2ada5e80b22c2e2400a7646476d5c68460d33c7ba8b3897dfc36f5e7c683f0376ee046c7d6525f6ff9d57da472ceec338beab987edda9b8ddbadb367898285b56bb83e382f977", 0x72, 0x40000, &(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 1.676459308s ago: executing program 0 (id=951): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffff8c6ca5eae6036ee8ffa1a4b24bba04aaffbbbbbbbbbbbb08004500007800000000000190780b014102ac1410b754c99078010000004700ac1e01010000000044440fd3ac1e0001000001016401010100010000ffffffff00088000e00000010000000c640101000000000064010101000004000a01010200000000e0000001000000064404000100"/150], 0x0) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010060000904000000010100000a240100000002010205240506000904010000010200000904010101010200000e240201000000009290d2199a5a09050109000000040007250180000000090402000001020000090402010101021b00082402010000000007240100000000090582090002"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r3) sendmsg$nl_route(r1, 0x0, 0x4000000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x2, 'batadv_slave_1\x00', {0x6}, 0x9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r6}) 1.41376401s ago: executing program 2 (id=952): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)="086b80d1edebefad3a1a29f68286adfddf37f7086b9115e6e0eb24504df0b228edcaf0d578a09f58087be37827d0db761aeed85531a497d55342591fed91d86379", 0x41}, {&(0x7f0000000380)="6ea106d718d8dc8b959d1305b44ee55d4083169b06c30e6daa84fba71eb00e0792493c30e4b7ffa05bd0a8a7156a916abee9b93c860645926130711eed9e394cee406d410543df5dee951e8878469c00711ed80a72ddae229bc10a5e5022a1ae0cc3cc967ffde95790fb8212ec60774cfc22bdae00a9345ac1fccfd0b678fa6f7b1b65419b25", 0x86}, {&(0x7f0000000440)="bee629250923821accf0a232192b7a5c017c7736fa1910c2b17fd8b4ba562a1df6f354c8de2ec07214db1f6f938d63c23bdf64b7ca249ad669309c922f155588f7a3b715dd9c2edb5ebc8f5f9da96f5c642c62686f8854d7d1c7957c571c948c7202fbf81213a08ebf9e1c24d4e1e8257e54931492160eee7cfd415c063ffc32f6f543abb730322e4d5f608299de83ef102e9d8f178578aecf3f3a5abee2df22e88384aac5bb4abd500bdf178ffb613c492354b8acef7b4ae6d2b05994849ee291fb8c2ba5a7561fff5b36e5735cb1eba165", 0xd2}, {&(0x7f0000000540)="e1a56ad0ebd353b39cc7f728ee0af741eeb11a45681a7a9a31b4421d23d08ddec65f10c076eda6b93663684952f1eae7ab3b2c860c130f1f724344ef8f0be6541d037aeb710cebd9b370c55b0bf903d8", 0x50}, {&(0x7f00000005c0)="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", 0x1000}], 0x5, &(0x7f0000001640)=[@assoc={0x18, 0x117, 0x4, 0x25}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x78, 0x4}, 0x20000010) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000840}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd7000feff1bdbdf2512000006000500000008000600040000000800070003000000080008007f000000300001800800000000", @ANYRES32=r9, @ANYBLOB="080003000740468b1400020077673200000000000000000000000000080003000200000008000900faffffff"], 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x4090) 873.282881ms ago: executing program 1 (id=953): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x30, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1) 598.519441ms ago: executing program 1 (id=954): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="2c385aa3d49100dc6626c892b6bc436a33807dabb2", 0x30) 397.837267ms ago: executing program 2 (id=955): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000340)={@random, @local, @void, {@llc_tr={0x11, {@llc={0xaa, 0xbc, '\\'}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000180)="3bc3d8ed05e7c5f93315ce66354355bd884c067990d3ddb5711a402a8cfff152b5cef39adf0989aea3e19a98038f0c0141f6dd6eee4e4165f7613c77ae2a2ba4b693e3a2d8bb40474baff071683df66de0bd17eeaa233533051f1e957989e87f98260ff701e431c6022e0e29c2919a7e", 0x70}, {&(0x7f0000000380)="4f5fcaaaa50daf1bdd46780061678a4beec6ff130f31a92cdccf6315e89d6ae232b9294239d980be0e4b6567f42d50532160d8c500fc1bcf00fd84797fd1b6128d363046bbefac21a37de5b5d399459bbd095f2153af71c345d702c74d4881c52dc24c1a7e17862a2c6127c079fe18ab9c139219544686d40216749bc0801295b4ccb6776548e8595851838f808ae95bcc2c88950c5d66b455365aef496601fd6e7435f306f703339c86484be9d1ab9b216e2a8c29d8fff0849ecd5f24ad30c4e167569b581420777771c58af7755e274717d8576aa2bc24dbbc3e9d2bb05a46c998a4bbd06816030cf100ffa8af6b8520466837406bb06ad9fe676088", 0xfd}, {&(0x7f0000000200)="dff79a554d765deeec3bfb38e9fff6f1df344b822038084b02677385714fb50824edd21f13e0", 0x26}, {&(0x7f0000000280)="5592128d3fd85e7c6ac04b577d4992f86de7e7c4e441528d66c669a8e39363fc031e96f85ba89f0129b98ab6e708fd8dca93998b46b77a0904c5", 0x3a}, {&(0x7f00000005c0)="72223752ac624d7cef7903690522668f3a8d25bf78db969792e16778be0fc21afb310d0dbc26778a6dc0506b3aa151e3acc9586837c1775eee17c6802e6635ebc451fc52daac2e1e4ad238496d67f9b27ff70c045aeff7402825a6b5407ecf6f47a6d72b76db0bcf95c8a70daacb82e56c604bdfad9ae63a0056eecfceb0b05725d386e0b4aed8ef89474cb15d9defe6377d394f47bd88f5b6e516f4231da95babdbf7d8efba165714f105e98148f82f11f5f27c47fd79dfdc65df2d75b07a82747ffa2d92183b043258e1df2e1a6ac2d046af774b00f24b56c6089f9ff350779bde0b82556780", 0xe7}, {&(0x7f00000004c0)="5471988c6cd7f1bc258d9d9c743958f8fecbd35f986502e64305caf5001692a6400818d5070c134ef19b6795ffb85f22332cac3efce74d49d9", 0x39}, {&(0x7f00000006c0)="08e6ebb341403dbe0cddeafc2e91873bf72e9dfaf681b1f590fe044f473e1e0b5bbcf9ab2025a18115a7ae0929ff1a27f4afe377948564eb7f80dcac5834c4d4ed0febc43839cf95c4564349bc4cc6375c1d6449945d850f136a3fc4b2ce6f2e24cf95cc837664da0e170c7b", 0x6c}, {&(0x7f0000000800)="fd15daecf8bb82a46395f219d403829b308f3390d75340804df6a94b2f79c4381467461bf6585c84d95c19a68866b7063f72d707237cb784df5237a6503b38cabdc8954bfcf0859bfe8281c6dd38af77f4af5ed0770d71d7e05f01e174dd72e2de88d611d330eec7e502c9c6def821c5879c6b2a372c494ef497a0b1054db68b3c44b61eb69313272cb5dc524da484adf4d4d816db8cf37804bb457945b6c072eb504a39791a07aae6a29f41e7ff4d287f97a0cd9e23b00b67dd99fb9219dbd7a952123602b0e5fa046888c9e65cd561", 0xd0}, {&(0x7f0000000900)="28e7e199a8cb7bba0e016bd00f5a6b7ff0533cf64891b0c087505778723dc1c9deb5b4cfffd6f2c034982dea8fe68c13e65b4db1dc9ac6d26908cee48cfe1c5fac254129ea9e1514e926d85e719271b758368d94be50bc3d4f235bf0a043e3fd0ec204032707bfc97af1681352ec79722ef5f34b683537780a2c30f0e7a3ad52dd98ad4e238ae4bafeff2d7f6dffe96543e76c318f813b0bddd84dcd2df9359dc817bdb237c01414bfb95a3f1e3f6778d00a65a1f9c8760c20ab32dfcfc641760f0096c22d92ee862202c5f084a03f2b9f1f7b2ce7c97b572484c80c27f2d544838deb", 0xe3}, {&(0x7f0000000500)="be945c66749dea9cb9ef98cb6af70fa3cddf7f3e98e4", 0x16}], 0xa, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x38}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02008000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r6}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) 299.640492ms ago: executing program 1 (id=956): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x88a02, 0x0) recvfrom$inet(r1, &(0x7f0000000200)=""/96, 0x60, 0x10000, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r8}}) syz_io_uring_submit(r2, r7, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x9, 0x4007, @fd=r4, 0x80000007, 0x0, 0x0, 0x0, 0x0, {0x2, r8}}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) 179.020913ms ago: executing program 3 (id=957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000020000008000003000000040004001c000180180010"], 0x34}}, 0x84) 38.504425ms ago: executing program 1 (id=958): r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd_index=0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x0, {0x3}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/sco\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) 0s ago: executing program 3 (id=959): signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r0 = syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0xfada, 0x8, 0x2, 0x166}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f0000000040)=""/63, &(0x7f0000000080)=0x3f) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7ff0}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xc6c3}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x3008000}]}}]}, 0x58}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) kernel console output (not intermixed with test programs): le Compute Engine, BIOS Google 02/12/2025 [ 135.911916][ T6416] Call Trace: [ 135.911924][ T6416] [ 135.911932][ T6416] dump_stack_lvl+0x241/0x360 [ 135.911970][ T6416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.912000][ T6416] ? __pfx__printk+0x10/0x10 [ 135.912034][ T6416] ? __pfx___might_resched+0x10/0x10 [ 135.912064][ T6416] should_fail_ex+0x424/0x570 [ 135.912090][ T6416] should_failslab+0xac/0x100 [ 135.912121][ T6416] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 135.912152][ T6416] ? __alloc_skb+0x1c2/0x480 [ 135.912168][ T6416] ? rtnl_mdb_add+0x2b7/0x4c0 [ 135.912202][ T6416] __alloc_skb+0x1c2/0x480 [ 135.912227][ T6416] ? __pfx___alloc_skb+0x10/0x10 [ 135.912253][ T6416] ? netlink_ack_tlv_len+0x6e/0x200 [ 135.912284][ T6416] netlink_ack+0x147/0xa70 [ 135.912310][ T6416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.912346][ T6416] ? ref_tracker_free+0x63e/0x7e0 [ 135.912376][ T6416] netlink_rcv_skb+0x296/0x480 [ 135.912405][ T6416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.912436][ T6416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.912484][ T6416] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.912515][ T6416] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.912546][ T6416] netlink_unicast+0x7f8/0x9a0 [ 135.912589][ T6416] ? __pfx_netlink_unicast+0x10/0x10 [ 135.912617][ T6416] ? skb_put+0x114/0x1f0 [ 135.912641][ T6416] netlink_sendmsg+0x8c3/0xcd0 [ 135.912684][ T6416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.912718][ T6416] ? aa_sock_msg_perm+0x91/0x160 [ 135.912752][ T6416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.912779][ T6416] __sock_sendmsg+0x221/0x270 [ 135.912811][ T6416] ____sys_sendmsg+0x523/0x860 [ 135.912848][ T6416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.912867][ T6416] ? __fget_files+0x2a/0x420 [ 135.912889][ T6416] ? __fget_files+0x2a/0x420 [ 135.912917][ T6416] __sys_sendmsg+0x271/0x360 [ 135.912945][ T6416] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.913024][ T6416] ? do_syscall_64+0xb6/0x230 [ 135.913053][ T6416] do_syscall_64+0xf3/0x230 [ 135.913078][ T6416] ? clear_bhb_loop+0x45/0xa0 [ 135.913102][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.913122][ T6416] RIP: 0033:0x7f8376d8d169 [ 135.913139][ T6416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.913155][ T6416] RSP: 002b:00007f8377c84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.913177][ T6416] RAX: ffffffffffffffda RBX: 00007f8376fa5fa0 RCX: 00007f8376d8d169 [ 135.913192][ T6416] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 135.913204][ T6416] RBP: 00007f8377c84090 R08: 0000000000000000 R09: 0000000000000000 [ 135.913217][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.913228][ T6416] R13: 0000000000000000 R14: 00007f8376fa5fa0 R15: 00007f83770cfa28 [ 135.913260][ T6416] [ 136.427245][ T6420] trusted_key: encrypted_key: keylen parameter is missing [ 136.469554][ T6418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.543195][ T976] usb 1-1: USB disconnect, device number 6 [ 137.050699][ T30] audit: type=1800 audit(1744329061.955:3): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.150" name="file1" dev="tmpfs" ino=153 res=0 errno=0 [ 137.115737][ T6447] debugfs: Directory '!' with parent 'ieee80211' already present! [ 137.387559][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.443640][ T6461] geneve1: entered promiscuous mode [ 137.449146][ T6461] geneve1: entered allmulticast mode [ 137.458508][ T6459] No such timeout policy "syz0" [ 137.497646][ T5891] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.567475][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 137.588337][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.601575][ T5894] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.623639][ T5894] usb 1-1: config 1 has no interface number 1 [ 137.631087][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 137.664258][ T5894] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.795707][ T5891] usb 4-1: config 0 has no interfaces? [ 137.819328][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 137.831457][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.841042][ T5891] usb 4-1: Product: syz [ 137.845573][ T5891] usb 4-1: Manufacturer: syz [ 137.853851][ T5891] usb 4-1: SerialNumber: syz [ 137.866217][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.879745][ T5891] usb 4-1: config 0 descriptor?? [ 137.930123][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.969652][ T5894] usb 1-1: Product: syz [ 137.978258][ T5894] usb 1-1: Manufacturer: syz [ 137.997619][ T5832] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.013707][ T5894] usb 1-1: SerialNumber: syz [ 138.127926][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.151'. [ 138.218872][ T5832] usb 2-1: config 0 has no interfaces? [ 138.232460][ T5832] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 138.241879][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.289354][ T5832] usb 2-1: Product: syz [ 138.375403][ T5832] usb 2-1: Manufacturer: syz [ 138.377909][ T5894] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 138.387459][ T5832] usb 2-1: SerialNumber: syz [ 138.413668][ T5894] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 138.429905][ T5894] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 138.443026][ T5832] usb 2-1: config 0 descriptor?? [ 138.712180][ T5894] usb 1-1: USB disconnect, device number 7 [ 139.055121][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.453516][ T6494] debugfs: Directory '!' with parent 'ieee80211' already present! [ 140.817124][ T2154] usb 4-1: USB disconnect, device number 10 [ 140.903227][ T6497] No such timeout policy "syz0" [ 141.339391][ T6501] macvlan1: entered promiscuous mode [ 141.393657][ T6501] macvlan1: left promiscuous mode [ 141.694534][ T976] usb 2-1: USB disconnect, device number 6 [ 141.951637][ T6517] trusted_key: encrypted_key: keylen parameter is missing [ 141.967623][ T2154] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.980526][ T6518] netlink: 'syz.4.172': attribute type 4 has an invalid length. [ 142.018822][ T6512] xt_CT: No such helper "snmp" [ 142.107350][ T6518] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.172'. [ 142.150596][ T2154] usb 4-1: Using ep0 maxpacket: 8 [ 142.172099][ T2154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.211644][ T2154] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.239295][ T2154] usb 4-1: config 1 has no interface number 1 [ 142.265592][ T2154] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 142.326906][ T2154] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.370619][ T2154] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.380334][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.391818][ T2154] usb 4-1: Product: syz [ 142.402707][ T2154] usb 4-1: Manufacturer: syz [ 142.470481][ T2154] usb 4-1: SerialNumber: syz [ 142.780469][ T6537] usb usb8: usbfs: process 6537 (syz.2.178) did not claim interface 0 before use [ 142.830216][ T6537] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 142.847465][ T6537] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.866389][ T2154] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 142.867924][ T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.878004][ T2154] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 142.917019][ T2154] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 143.003841][ T2154] usb 4-1: USB disconnect, device number 11 [ 143.078277][ T6539] No such timeout policy "syz0" [ 143.177519][ T5894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.237357][ T976] usb 2-1: config 0 has no interfaces? [ 143.244844][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.249436][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 143.284068][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.317596][ T976] usb 2-1: Product: syz [ 143.327337][ T976] usb 2-1: Manufacturer: syz [ 143.340024][ T976] usb 2-1: SerialNumber: syz [ 143.361879][ T976] usb 2-1: config 0 descriptor?? [ 143.386150][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 143.499523][ T5894] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 143.541387][ T5894] usb 3-1: config 0 has no interface number 0 [ 143.584018][ T5894] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 143.614177][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.634715][ T5894] usb 3-1: Product: syz [ 143.645315][ T5894] usb 3-1: Manufacturer: syz [ 143.655794][ T5894] usb 3-1: SerialNumber: syz [ 143.677267][ T5894] usb 3-1: config 0 descriptor?? [ 143.884622][ T6548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.177'. [ 144.077973][ T976] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.262876][ T976] usb 5-1: config 0 has no interfaces? [ 144.274960][ T976] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.289067][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.342579][ T976] usb 5-1: Product: syz [ 144.396121][ T976] usb 5-1: Manufacturer: syz [ 144.427895][ T976] usb 5-1: SerialNumber: syz [ 144.503769][ T976] usb 5-1: config 0 descriptor?? [ 144.525745][ T5894] peak_usb 3-1:0.83 can0: unable to request usb[type=0 value=1] err=-71 [ 144.589996][ T5894] peak_usb 3-1:0.83: unable to read PCAN-USB Pro firmware info (err -71) [ 145.178424][ T5894] peak_usb 3-1:0.83: probe with driver peak_usb failed with error -71 [ 145.203614][ T5894] usb 3-1: USB disconnect, device number 9 [ 146.035607][ T6576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.191'. [ 146.076631][ T5894] usb 2-1: USB disconnect, device number 7 [ 146.713238][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.724628][ T2154] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.887492][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 146.895735][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.030969][ T5894] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.177752][ T2154] usb 3-1: config 0 has no interfaces? [ 147.206578][ T5894] usb 2-1: config 1 has no interface number 1 [ 147.249893][ T2154] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.267516][ T5894] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 147.296610][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.322497][ T5894] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.345044][ T2154] usb 3-1: Product: syz [ 147.402715][ T2154] usb 3-1: Manufacturer: syz [ 147.475195][ T2154] usb 3-1: SerialNumber: syz [ 147.490222][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.522526][ T2154] usb 3-1: config 0 descriptor?? [ 147.532892][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.554528][ T5894] usb 2-1: Product: syz [ 147.562672][ T5894] usb 2-1: Manufacturer: syz [ 147.640437][ T5894] usb 2-1: SerialNumber: syz [ 147.691294][ T5832] usb 5-1: USB disconnect, device number 8 [ 147.861374][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.871199][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.908815][ T5894] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 147.916690][ T5894] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 148.010029][ T5894] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 148.189016][ T5894] usb 2-1: USB disconnect, device number 8 [ 148.603427][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.677627][ T6595] usb usb8: usbfs: process 6595 (syz.1.198) did not claim interface 0 before use [ 148.979349][ T6599] trusted_key: encrypted_key: keylen parameter is missing [ 149.904162][ T2154] usb 3-1: USB disconnect, device number 10 [ 149.978344][ T5894] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.008971][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.204'. [ 150.178339][ T5894] usb 5-1: config 0 has no interfaces? [ 150.191570][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.201618][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.239696][ T5894] usb 5-1: Product: syz [ 150.297893][ T5894] usb 5-1: Manufacturer: syz [ 150.322311][ T5894] usb 5-1: SerialNumber: syz [ 150.371877][ T5894] usb 5-1: config 0 descriptor?? [ 150.636456][ T6610] netlink: 36 bytes leftover after parsing attributes in process `syz.4.203'. [ 150.717533][ T976] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.923064][ T976] usb 4-1: config 0 has no interfaces? [ 150.941826][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.955282][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.963611][ T976] usb 4-1: Product: syz [ 150.971597][ T976] usb 4-1: Manufacturer: syz [ 150.976747][ T976] usb 4-1: SerialNumber: syz [ 150.991853][ T976] usb 4-1: config 0 descriptor?? [ 151.117512][ T5832] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.277570][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 151.285391][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.295926][ T5832] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.452203][ T5832] usb 1-1: config 1 has no interface number 1 [ 151.460933][ T5832] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 151.478738][ T5832] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.499318][ T5832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.513909][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.523551][ T5832] usb 1-1: Product: syz [ 151.530855][ T5832] usb 1-1: Manufacturer: syz [ 151.535714][ T5832] usb 1-1: SerialNumber: syz [ 152.310030][ T6628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.436055][ T5832] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 152.452926][ T5832] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 152.499883][ T5832] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 152.595319][ T5832] usb 1-1: USB disconnect, device number 8 [ 152.804389][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 152.931520][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.187661][ T976] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 153.366073][ T976] usb 3-1: config 0 has no interfaces? [ 153.384516][ T976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 153.394399][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.407336][ T6647] No such timeout policy "syz0" [ 153.413089][ T976] usb 3-1: Product: syz [ 153.426800][ T976] usb 3-1: Manufacturer: syz [ 153.440561][ T976] usb 3-1: SerialNumber: syz [ 153.457315][ T976] usb 3-1: config 0 descriptor?? [ 153.584043][ T6649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'. [ 153.733838][ T976] usb 5-1: USB disconnect, device number 9 [ 154.030902][ T6658] netlink: 'syz.4.218': attribute type 10 has an invalid length. [ 154.046254][ T5894] usb 4-1: USB disconnect, device number 12 [ 154.359002][ T6658] team0: Port device dummy0 added [ 154.457740][ T5832] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.591019][ T6660] team0: Port device dummy0 removed [ 154.675086][ T6660] bridge_slave_0: left allmulticast mode [ 154.691281][ T6660] bridge_slave_0: left promiscuous mode [ 154.709964][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.744525][ T6660] bridge_slave_1: left allmulticast mode [ 154.750621][ T6660] bridge_slave_1: left promiscuous mode [ 154.756630][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.833319][ T6660] bond0: (slave bond_slave_0): Releasing backup interface [ 154.895799][ T6660] bond0: (slave bond_slave_1): Releasing backup interface [ 154.972106][ T6660] team0: Port device team_slave_0 removed [ 154.996777][ T6660] team0: Port device team_slave_1 removed [ 155.011965][ T5832] usb 1-1: config 0 has no interfaces? [ 155.022633][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.031591][ T5832] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.040804][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.053079][ T5832] usb 1-1: Product: syz [ 155.058378][ T5832] usb 1-1: Manufacturer: syz [ 155.063261][ T5832] usb 1-1: SerialNumber: syz [ 155.075393][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.084519][ T5832] usb 1-1: config 0 descriptor?? [ 155.102825][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.115865][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.427720][ T6661] netlink: 36 bytes leftover after parsing attributes in process `syz.0.228'. [ 155.493772][ T6668] trusted_key: encrypted_key: keylen parameter is missing [ 156.397577][ T5891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.440344][ T976] usb 3-1: USB disconnect, device number 11 [ 156.587710][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 156.603109][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.674259][ T5891] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 156.703509][ T5891] usb 5-1: config 1 has no interface number 1 [ 156.755824][ T5891] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 156.822102][ T5891] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.866395][ T5891] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.903884][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.924901][ T6687] IPv6: Can't replace route, no match found [ 156.931061][ T5891] usb 5-1: Product: syz [ 156.952975][ T5891] usb 5-1: Manufacturer: syz [ 156.978155][ T5891] usb 5-1: SerialNumber: syz [ 157.091551][ T6689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.229'. [ 157.218445][ T6683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.258573][ T5891] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 157.274439][ T5891] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 157.289634][ T5891] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 157.337858][ T5891] usb 5-1: USB disconnect, device number 10 [ 157.753923][ T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.790820][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.985503][ T2154] usb 1-1: USB disconnect, device number 9 [ 158.058450][ T976] usb 2-1: config 0 has no interfaces? [ 158.093749][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 158.194455][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.225271][ T976] usb 2-1: Product: syz [ 158.241334][ T976] usb 2-1: Manufacturer: syz [ 158.255774][ T976] usb 2-1: SerialNumber: syz [ 158.285606][ T976] usb 2-1: config 0 descriptor?? [ 158.820552][ T6716] netlink: 'syz.4.240': attribute type 4 has an invalid length. [ 159.484059][ T6722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.241'. [ 159.653488][ T976] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.877491][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 159.894523][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.968053][ T976] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.987491][ T5891] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 160.082373][ T976] usb 3-1: config 1 has no interface number 1 [ 160.101818][ T976] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 160.164685][ T976] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.226336][ T976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.240697][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.281233][ T976] usb 3-1: Product: syz [ 160.294516][ T976] usb 3-1: Manufacturer: syz [ 160.320581][ T976] usb 3-1: SerialNumber: syz [ 160.350961][ T5891] usb 5-1: config 0 has no interfaces? [ 160.362315][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.371667][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.401034][ T5891] usb 5-1: Product: syz [ 160.449944][ T5891] usb 5-1: Manufacturer: syz [ 160.512079][ T5891] usb 5-1: SerialNumber: syz [ 160.539647][ T5891] usb 5-1: config 0 descriptor?? [ 160.547199][ T6721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.595682][ T976] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 160.643043][ T976] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 160.677833][ T976] usb 3-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 160.730106][ T976] usb 3-1: USB disconnect, device number 12 [ 160.809104][ T6726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.243'. [ 160.885693][ T2154] usb 2-1: USB disconnect, device number 9 [ 161.003596][ T6737] trusted_key: encrypted_key: keylen parameter is missing [ 161.074269][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.613174][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.2.251'. [ 161.625034][ T6750] sock: sock_timestamping_bind_phc: sock not bind to device [ 161.792977][ T6756] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 162.254168][ T6762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.254'. [ 162.431003][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.077012][ T976] usb 5-1: USB disconnect, device number 11 [ 167.467474][ T6898] tun0: tun_chr_ioctl cmd 1076910123 [ 168.963132][ T30] audit: type=1326 audit(1744329093.875:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe798d169 code=0x7fc00000 [ 169.277489][ T5832] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.463097][ T30] audit: type=1326 audit(1744329094.375:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8376d8d169 code=0x7ffc0000 [ 169.499348][ T5832] usb 1-1: config 0 has no interfaces? [ 169.524837][ T5832] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 169.539723][ T30] audit: type=1326 audit(1744329094.385:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8376d8d169 code=0x7ffc0000 [ 169.545054][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.641066][ T5832] usb 1-1: Product: syz [ 169.657598][ T5832] usb 1-1: Manufacturer: syz [ 169.677772][ T5832] usb 1-1: SerialNumber: syz [ 169.687590][ T30] audit: type=1326 audit(1744329094.385:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8376d8d169 code=0x7ffc0000 [ 169.718492][ T5832] usb 1-1: config 0 descriptor?? [ 169.833592][ T30] audit: type=1326 audit(1744329094.385:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8376d8d169 code=0x7ffc0000 [ 169.937768][ T30] audit: type=1326 audit(1744329094.385:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f8376d8d169 code=0x7ffc0000 [ 170.057570][ T30] audit: type=1326 audit(1744329094.385:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8376d8d169 code=0x7ffc0000 [ 170.132697][ T30] audit: type=1326 audit(1744329094.385:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8376d8d169 code=0x7ffc0000 [ 170.164837][ T30] audit: type=1326 audit(1744329094.545:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdbe798d169 code=0x7fc00000 [ 171.433155][ T7008] fuse: blksize only supported for fuseblk [ 171.821550][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 172.375240][ T2154] usb 1-1: USB disconnect, device number 10 [ 174.033913][ T7037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.041572][ T7037] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 174.269235][ T7037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.295683][ T7037] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 174.404626][ T7037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.592812][ T7037] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 174.632586][ T7037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.667543][ T7037] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 174.914939][ T7037] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.957479][ T7037] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 175.801074][ T7056] netlink: 168 bytes leftover after parsing attributes in process `syz.2.373'. [ 176.116968][ T7065] VFS: Mount too revealing [ 176.458896][ T7068] Zero length message leads to an empty skb [ 177.355401][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.365980][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.375305][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.387189][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.437559][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.450049][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.471333][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.489378][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.518415][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.528802][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 177.558797][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 177.752977][ T5894] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.766557][ T5894] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 177.789465][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.809938][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 177.863931][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 177.925314][ T5894] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.936353][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.947428][ T5894] usb 4-1: Product: syz [ 177.958388][ T5894] usb 4-1: Manufacturer: syz [ 177.986747][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 177.992887][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 178.017861][ T5894] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 178.036001][ T5894] cdc_wdm 4-1:1.0: Unknown control protocol [ 178.313474][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 178.313703][ T976] usb 4-1: USB disconnect, device number 13 [ 178.320433][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 178.332301][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 178.342229][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.392447][ T7088] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 178.893869][ T7107] syz_tun: entered allmulticast mode [ 178.906887][ T7107] syz_tun: left allmulticast mode [ 181.878660][ T7144] gretap0: entered promiscuous mode [ 181.893803][ T7144] vlan2: entered promiscuous mode [ 182.402166][ T7156] __nla_validate_parse: 26 callbacks suppressed [ 182.402184][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 182.680634][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'. [ 182.805664][ T7159] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 182.872248][ T7161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.615518][ T7182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.414'. [ 183.901127][ T7189] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 183.915901][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.032088][ T7189] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 186.795031][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 187.003798][ T7214] syz.4.424 (7214): drop_caches: 2 [ 188.449976][ T7237] xt_nfacct: accounting object `syz1' does not exists [ 188.758689][ T7240] fuse: blksize only supported for fuseblk [ 189.651122][ T30] audit: type=1326 audit(1744329114.565:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 189.720971][ T30] audit: type=1326 audit(1744329114.565:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 189.799960][ T30] audit: type=1326 audit(1744329114.565:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 189.850957][ T30] audit: type=1326 audit(1744329114.565:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 189.939967][ T30] audit: type=1326 audit(1744329114.565:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 190.036324][ T30] audit: type=1326 audit(1744329114.565:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 190.102767][ T30] audit: type=1326 audit(1744329114.565:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 190.152208][ T30] audit: type=1326 audit(1744329114.565:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 190.198897][ T30] audit: type=1326 audit(1744329114.565:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff23c38d169 code=0x7ffc0000 [ 190.221173][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.295091][ T30] audit: type=1326 audit(1744329114.565:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.1.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 190.317494][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.690646][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 192.210366][ T7284] tipc: Started in network mode [ 192.237706][ T7284] tipc: Node identity ac14140f, cluster identity 4711 [ 192.245093][ T7284] tipc: New replicast peer: 255.255.255.255 [ 192.348992][ T7284] tipc: Enabled bearer , priority 10 [ 193.468625][ T976] tipc: Node number set to 2886997007 [ 194.238170][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.244823][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.929230][ T7349] macvlan1: entered promiscuous mode [ 196.936431][ T7349] ipvlan0: entered promiscuous mode [ 196.948983][ T7349] ipvlan0: left promiscuous mode [ 196.961012][ T7349] macvlan1: left promiscuous mode [ 197.957528][ T976] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.289673][ T976] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.299894][ T976] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 198.331342][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.355682][ T976] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.404485][ T976] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.415058][ T976] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.423495][ T976] usb 5-1: Product: syz [ 198.434590][ T976] usb 5-1: Manufacturer: syz [ 198.452594][ T976] cdc_wdm 5-1:1.0: skipping garbage [ 198.457955][ T976] cdc_wdm 5-1:1.0: skipping garbage [ 198.467988][ T976] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 202.283517][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'. [ 202.574292][ T24] usb 5-1: USB disconnect, device number 12 [ 202.617898][ T7408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.227573][ T976] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 205.507637][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 205.528930][ T976] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 205.551903][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.577177][ T976] usb 2-1: Product: syz [ 205.587582][ T976] usb 2-1: Manufacturer: syz [ 205.592226][ T976] usb 2-1: SerialNumber: syz [ 205.600015][ T976] usb 2-1: config 0 descriptor?? [ 205.630057][ T976] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 206.873841][ T976] gspca_stk1135: reg_w 0x7 err -71 [ 206.892849][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 206.905728][ T976] gspca_stk1135: Sensor write failed [ 206.922267][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 206.953885][ T976] gspca_stk1135: Sensor write failed [ 206.964080][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 207.108326][ T7473] vlan0: entered promiscuous mode [ 207.121855][ T976] gspca_stk1135: Sensor read failed [ 207.127141][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 207.145450][ T976] gspca_stk1135: Sensor read failed [ 207.161017][ T976] gspca_stk1135: Detected sensor type unknown (0x0) [ 207.196563][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 207.226331][ T976] gspca_stk1135: Sensor read failed [ 207.267894][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 207.274294][ T976] gspca_stk1135: Sensor read failed [ 207.336473][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 207.349984][ T976] gspca_stk1135: Sensor write failed [ 207.361535][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 207.379187][ T976] gspca_stk1135: Sensor write failed [ 207.389855][ T976] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 207.423600][ T976] usb 2-1: USB disconnect, device number 10 [ 207.605755][ T7482] fuse: Bad value for 'fd' [ 207.899399][ T7490] FAULT_INJECTION: forcing a failure. [ 207.899399][ T7490] name failslab, interval 1, probability 0, space 0, times 0 [ 208.004986][ T7490] CPU: 0 UID: 0 PID: 7490 Comm: syz.3.510 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 208.005017][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.005029][ T7490] Call Trace: [ 208.005037][ T7490] [ 208.005045][ T7490] dump_stack_lvl+0x241/0x360 [ 208.005084][ T7490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.005120][ T7490] ? __pfx__printk+0x10/0x10 [ 208.005153][ T7490] ? __pfx___might_resched+0x10/0x10 [ 208.005184][ T7490] should_fail_ex+0x424/0x570 [ 208.005212][ T7490] should_failslab+0xac/0x100 [ 208.005242][ T7490] __kmalloc_cache_noprof+0x73/0x370 [ 208.005271][ T7490] ? nf_tables_newchain+0x138e/0x3390 [ 208.005306][ T7490] nf_tables_newchain+0x138e/0x3390 [ 208.005367][ T7490] ? __pfx_nf_tables_newchain+0x10/0x10 [ 208.005426][ T7490] ? __lock_acquire+0xad5/0xd80 [ 208.005470][ T7490] ? __nla_parse+0x40/0x60 [ 208.005499][ T7490] nfnetlink_rcv+0x12eb/0x28f0 [ 208.005557][ T7490] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 208.005633][ T7490] ? skb_clone+0x240/0x390 [ 208.005668][ T7490] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.005701][ T7490] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.005732][ T7490] netlink_unicast+0x7f8/0x9a0 [ 208.005766][ T7490] ? __pfx_netlink_unicast+0x10/0x10 [ 208.005794][ T7490] ? skb_put+0x114/0x1f0 [ 208.005818][ T7490] netlink_sendmsg+0x8c3/0xcd0 [ 208.005860][ T7490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.005894][ T7490] ? aa_sock_msg_perm+0x91/0x160 [ 208.005929][ T7490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.005955][ T7490] __sock_sendmsg+0x221/0x270 [ 208.005986][ T7490] ____sys_sendmsg+0x523/0x860 [ 208.006016][ T7490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.006036][ T7490] ? __fget_files+0x2a/0x420 [ 208.006058][ T7490] ? __fget_files+0x2a/0x420 [ 208.006086][ T7490] __sys_sendmsg+0x271/0x360 [ 208.006113][ T7490] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.006196][ T7490] ? do_syscall_64+0xb6/0x230 [ 208.006225][ T7490] do_syscall_64+0xf3/0x230 [ 208.006250][ T7490] ? clear_bhb_loop+0x45/0xa0 [ 208.006286][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.006305][ T7490] RIP: 0033:0x7fa85718d169 [ 208.006322][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.006337][ T7490] RSP: 002b:00007fa857f71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.006358][ T7490] RAX: ffffffffffffffda RBX: 00007fa8573a5fa0 RCX: 00007fa85718d169 [ 208.006373][ T7490] RDX: 00000000200000d4 RSI: 0000200000000080 RDI: 0000000000000003 [ 208.006385][ T7490] RBP: 00007fa857f71090 R08: 0000000000000000 R09: 0000000000000000 [ 208.006396][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.006408][ T7490] R13: 0000000000000000 R14: 00007fa8573a5fa0 R15: 00007fa8574cfa28 [ 208.006437][ T7490] [ 208.064298][ T7496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.562297][ T7510] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 208.587538][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 208.771494][ T24] usb 1-1: config 0 has no interfaces? [ 208.780697][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.790623][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.798948][ T24] usb 1-1: Product: syz [ 208.803336][ T24] usb 1-1: Manufacturer: syz [ 208.808047][ T24] usb 1-1: SerialNumber: syz [ 208.821265][ T24] usb 1-1: config 0 descriptor?? [ 210.193524][ T7537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.527'. [ 210.323201][ T7538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.073770][ T5891] usb 1-1: USB disconnect, device number 11 [ 211.690544][ T7591] debugfs: Directory '!' with parent 'ieee80211' already present! [ 211.828072][ T976] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 211.857119][ T7596] loop2: detected capacity change from 0 to 7 [ 211.880922][ T7596] Dev loop2: unable to read RDB block 7 [ 211.887137][ T7596] loop2: unable to read partition table [ 211.893515][ T7596] loop2: partition table beyond EOD, truncated [ 211.900613][ T7596] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.977485][ T5891] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 211.987191][ T976] usb 2-1: device descriptor read/64, error -71 [ 212.017918][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 212.017938][ T30] audit: type=1326 audit(1744329136.925:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f331b18d169 code=0x7ffc0000 [ 212.167544][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 212.174940][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.196575][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.214247][ T5891] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 212.237516][ T976] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 212.245286][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.264723][ T5891] usb 3-1: config 0 descriptor?? [ 212.387523][ T976] usb 2-1: device descriptor read/64, error -71 [ 212.407763][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 212.497979][ T976] usb usb2-port1: attempt power cycle [ 212.589917][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.625675][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.642500][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.666286][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.677191][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.715944][ T24] usb 5-1: config 0 descriptor?? [ 212.729405][ T5891] zeroplus 0003:0C12:0030.0002: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.2-1/input0 [ 212.777485][ T5891] zeroplus 0003:0C12:0030.0002: no inputs found [ 212.857517][ T976] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 212.878762][ T976] usb 2-1: device descriptor read/8, error -71 [ 213.127798][ T976] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 213.142489][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x3 [ 213.158299][ T976] usb 2-1: device descriptor read/8, error -71 [ 213.182408][ T24] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 213.204374][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 213.264360][ T24] usb 5-1: USB disconnect, device number 13 [ 213.280606][ T976] usb usb2-port1: unable to enumerate USB device [ 214.378413][ T7659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.573'. [ 214.390519][ T7660] veth1_macvtap: left promiscuous mode [ 214.396060][ T7660] macsec0: entered promiscuous mode [ 214.412211][ T7660] veth1_macvtap: entered promiscuous mode [ 214.425369][ T7660] macsec0: left promiscuous mode [ 214.441679][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.4.571'. [ 214.697758][ T976] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 214.783470][ T2154] usb 3-1: USB disconnect, device number 13 [ 214.870446][ T7672] No such timeout policy "syz0" [ 214.919693][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 214.955420][ T976] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 214.970615][ T976] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.982035][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.003184][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.019260][ T7676] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 215.034820][ T5891] IPVS: starting estimator thread 0... [ 215.047596][ T976] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.101393][ T976] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.141619][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.150134][ T7677] IPVS: using max 28 ests per chain, 67200 per kthread [ 215.417649][ T2154] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.458062][ T976] usb 5-1: usb_control_msg returned -32 [ 215.474961][ T976] usbtmc 5-1:16.0: can't read capabilities [ 215.497557][ T5891] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 215.593059][ T2154] usb 2-1: config 0 has no interfaces? [ 215.615838][ T2154] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 215.637252][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.667787][ T2154] usb 2-1: Product: syz [ 215.681004][ T2154] usb 2-1: Manufacturer: syz [ 215.692070][ T2154] usb 2-1: SerialNumber: syz [ 215.710087][ T2154] usb 2-1: config 0 descriptor?? [ 215.912005][ T7703] netlink: 452 bytes leftover after parsing attributes in process `syz.2.589'. [ 215.940117][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.980666][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.043177][ T2154] usb 2-1: USB disconnect, device number 15 [ 216.222149][ T7712] No such timeout policy "syz0" [ 216.457752][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.532960][ T7720] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073053398785) [ 216.543392][ T7720] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 216.628209][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 216.654387][ T9] usb 3-1: config 2 has an invalid interface number: 117 but max is 0 [ 216.677869][ T9] usb 3-1: config 2 has no interface number 0 [ 216.704538][ T9] usb 3-1: config 2 interface 117 has no altsetting 0 [ 216.734350][ T9] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 216.750398][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.759445][ T9] usb 3-1: Product: syz [ 216.763938][ T9] usb 3-1: Manufacturer: syz [ 216.769820][ T9] usb 3-1: SerialNumber: syz [ 216.786657][ T9] usb-storage 3-1:2.117: USB Mass Storage device detected [ 216.820125][ T9] usb-storage 3-1:2.117: Quirks match for vid 0781 pid 0100: 1 [ 216.995556][ T2154] usb 3-1: USB disconnect, device number 14 [ 217.326826][ T9] usb 5-1: USB disconnect, device number 14 [ 217.417804][ T2154] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 217.424630][ T7743] capability: warning: `syz.4.605' uses deprecated v2 capabilities in a way that may be insecure [ 217.597514][ T2154] usb 2-1: Using ep0 maxpacket: 16 [ 217.621471][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.606'. [ 217.635903][ T2154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.666100][ T2154] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.691818][ T2154] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.722546][ T2154] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 217.765667][ T2154] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.804728][ T2154] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 217.837494][ T2154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.866876][ T2154] usb 2-1: config 0 descriptor?? [ 217.949375][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 217.999740][ T7756] syz_tun: entered allmulticast mode [ 218.007130][ T7756] syz_tun: left allmulticast mode [ 218.137011][ T5832] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 218.278152][ T5891] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 218.292234][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.300736][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 218.312863][ T5832] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 218.326017][ T2154] hid (null): unknown global tag 0xc [ 218.335890][ T5832] usb 5-1: config 0 has no interface number 0 [ 218.354330][ T5891] usb 1-1: config 0 descriptor?? [ 218.358272][ T2154] hid (null): unknown global tag 0x5d [ 218.365416][ T5832] usb 5-1: config 0 interface 29 has no altsetting 0 [ 218.389087][ T5891] usb 1-1: can't set config #0, error -71 [ 218.389730][ T2154] hid (null): unknown global tag 0xe [ 218.411134][ T2154] hid (null): report_id 3182415208 is invalid [ 218.418509][ T5832] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 218.428346][ T5891] usb 1-1: USB disconnect, device number 12 [ 218.435499][ T2154] hid (null): unknown global tag 0xe [ 218.446344][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.464695][ T2154] hid (null): unknown global tag 0xe [ 218.478280][ T5832] usb 5-1: Product: syz [ 218.494769][ T5832] usb 5-1: Manufacturer: syz [ 218.502901][ T5832] usb 5-1: SerialNumber: syz [ 218.527869][ T2154] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0004/input/input7 [ 218.528819][ T5832] usb 5-1: config 0 descriptor?? [ 218.566098][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.612'. [ 218.680495][ T2154] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 218.796396][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.815141][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.817753][ T2154] usb 2-1: USB disconnect, device number 16 [ 218.850856][ T5832] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 218.894255][ T5832] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 218.993172][ T5832] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 219.237961][ T5832] usb 5-1: USB disconnect, device number 15 [ 219.327079][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.618'. [ 219.958168][ T7790] random: crng reseeded on system resumption [ 220.403946][ T7796] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 220.507718][ T2154] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.697487][ T2154] usb 1-1: Using ep0 maxpacket: 16 [ 220.708064][ T2154] usb 1-1: config 0 has no interfaces? [ 220.719745][ T2154] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 220.756754][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.793195][ T2154] usb 1-1: Product: syz [ 220.802821][ T2154] usb 1-1: Manufacturer: syz [ 220.815392][ T2154] usb 1-1: SerialNumber: syz [ 220.918902][ T2154] usb 1-1: config 0 descriptor?? [ 221.030635][ T30] audit: type=1326 audit(1744329145.945:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbe798d169 code=0x0 [ 221.146825][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.167883][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.193979][ T5891] usb 1-1: USB disconnect, device number 13 [ 221.630579][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 222.493393][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 222.890561][ T7854] FAULT_INJECTION: forcing a failure. [ 222.890561][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.941038][ T7854] CPU: 1 UID: 0 PID: 7854 Comm: syz.3.646 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 222.941068][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.941079][ T7854] Call Trace: [ 222.941086][ T7854] [ 222.941094][ T7854] dump_stack_lvl+0x241/0x360 [ 222.941131][ T7854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.941160][ T7854] ? __pfx__printk+0x10/0x10 [ 222.941199][ T7854] should_fail_ex+0x424/0x570 [ 222.941224][ T7854] _copy_to_user+0x31/0xb0 [ 222.941257][ T7854] video_usercopy+0xdfd/0x1330 [ 222.941289][ T7854] ? __pfx___video_do_ioctl+0x10/0x10 [ 222.941309][ T7854] ? __pfx_video_usercopy+0x10/0x10 [ 222.941342][ T7854] ? __fget_files+0x2a/0x420 [ 222.941364][ T7854] ? __fget_files+0x2a/0x420 [ 222.941385][ T7854] v4l2_ioctl+0x189/0x1e0 [ 222.941415][ T7854] ? __pfx_v4l2_ioctl+0x10/0x10 [ 222.941447][ T7854] __se_sys_ioctl+0xf1/0x160 [ 222.941473][ T7854] do_syscall_64+0xf3/0x230 [ 222.941500][ T7854] ? clear_bhb_loop+0x45/0xa0 [ 222.941524][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.941544][ T7854] RIP: 0033:0x7fa85718d169 [ 222.941561][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.941577][ T7854] RSP: 002b:00007fa857f71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.941599][ T7854] RAX: ffffffffffffffda RBX: 00007fa8573a5fa0 RCX: 00007fa85718d169 [ 222.941614][ T7854] RDX: 00002000000001c0 RSI: 00000000c0205647 RDI: 0000000000000003 [ 222.941627][ T7854] RBP: 00007fa857f71090 R08: 0000000000000000 R09: 0000000000000000 [ 222.941639][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.941651][ T7854] R13: 0000000000000000 R14: 00007fa8573a5fa0 R15: 00007fa8574cfa28 [ 222.941681][ T7854] [ 223.459062][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 223.577911][ T7871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.654'. [ 223.757324][ T7881] syz_tun: entered allmulticast mode [ 223.766142][ T7881] syz_tun: left allmulticast mode [ 224.045437][ T5832] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 224.119158][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.658'. [ 224.257680][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 224.269388][ T5832] usb 1-1: config 252 has an invalid interface number: 165 but max is 0 [ 224.289187][ T5832] usb 1-1: config 252 has no interface number 0 [ 224.306867][ T5832] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 224.357826][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.472111][ T5832] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 224.509446][ T5832] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 224.625629][ T7887] delete_channel: no stack [ 224.708764][ T5894] usb 1-1: USB disconnect, device number 14 [ 225.747351][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 225.842434][ T7908] vlan2: entered allmulticast mode [ 225.877727][ T7908] dummy0: entered allmulticast mode [ 225.987008][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 226.030361][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 226.043769][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.671'. [ 226.415464][ T7925] mmap: syz.3.672 (7925): VmData 37498880 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 227.220074][ T7941] No such timeout policy "syz0" [ 227.528780][ T7954] FAULT_INJECTION: forcing a failure. [ 227.528780][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 227.549561][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'. [ 227.565683][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.0.685 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 227.565716][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.565729][ T7954] Call Trace: [ 227.565737][ T7954] [ 227.565746][ T7954] dump_stack_lvl+0x241/0x360 [ 227.565786][ T7954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.565817][ T7954] ? __pfx__printk+0x10/0x10 [ 227.565852][ T7954] ? __pfx___might_resched+0x10/0x10 [ 227.565882][ T7954] should_fail_ex+0x424/0x570 [ 227.565911][ T7954] should_failslab+0xac/0x100 [ 227.565943][ T7954] __kmalloc_noprof+0xdf/0x4d0 [ 227.565970][ T7954] ? __local_bh_enable_ip+0x168/0x200 [ 227.565991][ T7954] ? sock_kmalloc+0xd7/0x160 [ 227.566020][ T7954] sock_kmalloc+0xd7/0x160 [ 227.566047][ T7954] alg_setkey+0x59/0x1c0 [ 227.566077][ T7954] alg_setsockopt+0x383/0x450 [ 227.566115][ T7954] ? __pfx_alg_setsockopt+0x10/0x10 [ 227.566140][ T7954] do_sock_setsockopt+0x3b1/0x710 [ 227.566168][ T7954] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 227.566188][ T7954] ? __fget_files+0x2a/0x420 [ 227.566211][ T7954] ? __fget_files+0x39d/0x420 [ 227.566228][ T7954] ? __fget_files+0x2a/0x420 [ 227.566257][ T7954] __x64_sys_setsockopt+0x1ee/0x280 [ 227.566287][ T7954] do_syscall_64+0xf3/0x230 [ 227.566314][ T7954] ? clear_bhb_loop+0x45/0xa0 [ 227.566339][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.566366][ T7954] RIP: 0033:0x7f331b18d169 [ 227.566386][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.566403][ T7954] RSP: 002b:00007f331c040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 227.566426][ T7954] RAX: ffffffffffffffda RBX: 00007f331b3a5fa0 RCX: 00007f331b18d169 [ 227.566442][ T7954] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 227.566455][ T7954] RBP: 00007f331c040090 R08: 000000000000001c R09: 0000000000000000 [ 227.566469][ T7954] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 227.566482][ T7954] R13: 0000000000000000 R14: 00007f331b3a5fa0 R15: 00007f331b4cfa28 [ 227.566511][ T7954] [ 227.812923][ T7948] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 227.910377][ T7961] batadv0: entered promiscuous mode [ 227.918383][ T7961] batadv_slave_0: entered promiscuous mode [ 227.924430][ T7961] batadv_slave_0: left promiscuous mode [ 227.944803][ T7961] batadv0: left promiscuous mode [ 227.979436][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 228.017352][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 228.032175][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 228.687494][ T5832] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 228.830865][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 228.885680][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.902183][ T5832] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.937190][ T5832] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.955852][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.982033][ T5832] usb 4-1: Product: syz [ 228.986434][ T5832] usb 4-1: Manufacturer: syz [ 229.031873][ T5832] usb 4-1: SerialNumber: syz [ 229.105501][ T5832] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 229.130715][ T5832] cdc_mbim 4-1:1.0: bind() failure [ 229.237299][ T8003] FAULT_INJECTION: forcing a failure. [ 229.237299][ T8003] name failslab, interval 1, probability 0, space 0, times 0 [ 229.275252][ T8003] CPU: 1 UID: 0 PID: 8003 Comm: syz.2.702 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 229.275285][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.275298][ T8003] Call Trace: [ 229.275307][ T8003] [ 229.275315][ T8003] dump_stack_lvl+0x241/0x360 [ 229.275356][ T8003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.275386][ T8003] ? __pfx__printk+0x10/0x10 [ 229.275416][ T8003] ? io_file_get_flags+0xd9/0x160 [ 229.275445][ T8003] should_fail_ex+0x424/0x570 [ 229.275473][ T8003] should_failslab+0xac/0x100 [ 229.275505][ T8003] __kmalloc_noprof+0xdf/0x4d0 [ 229.275540][ T8003] ? io_cache_alloc_new+0x44/0x100 [ 229.275578][ T8003] io_cache_alloc_new+0x44/0x100 [ 229.275612][ T8003] io_arm_poll_handler+0x55f/0xc80 [ 229.275652][ T8003] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 229.275688][ T8003] ? __pfx_io_prep_rwv+0x10/0x10 [ 229.275710][ T8003] ? __pfx_io_issue_sqe+0x10/0x10 [ 229.275735][ T8003] io_queue_async+0xa4/0x4e0 [ 229.275765][ T8003] io_submit_sqes+0xdfc/0x1ce0 [ 229.275821][ T8003] __se_sys_io_uring_enter+0x2cd/0x3560 [ 229.275851][ T8003] ? rcu_read_lock_any_held+0xbb/0x160 [ 229.275880][ T8003] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 229.275912][ T8003] ? vfs_write+0xb29/0xd10 [ 229.275946][ T8003] ? ksys_write+0x24e/0x2d0 [ 229.275976][ T8003] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 229.276006][ T8003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.276031][ T8003] ? __fget_files+0x2a/0x420 [ 229.276054][ T8003] ? __fget_files+0x2a/0x420 [ 229.276080][ T8003] ? fput+0x9b/0xd0 [ 229.276098][ T8003] ? ksys_write+0x275/0x2d0 [ 229.276133][ T8003] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 229.276157][ T8003] do_syscall_64+0xf3/0x230 [ 229.276183][ T8003] ? clear_bhb_loop+0x45/0xa0 [ 229.276208][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.276227][ T8003] RIP: 0033:0x7f8376d8d169 [ 229.276245][ T8003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.276263][ T8003] RSP: 002b:00007f8377c84038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 229.276286][ T8003] RAX: ffffffffffffffda RBX: 00007f8376fa5fa0 RCX: 00007f8376d8d169 [ 229.276301][ T8003] RDX: 0000000000007f00 RSI: 00000000000047ba RDI: 0000000000000005 [ 229.276314][ T8003] RBP: 00007f8377c84090 R08: 0000000000000000 R09: 0000000000000000 [ 229.276327][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.276339][ T8003] R13: 0000000000000000 R14: 00007f8376fa5fa0 R15: 00007f83770cfa28 [ 229.276372][ T8003] [ 229.308441][ T7979] fuse: Unknown parameter '00000000000000000000000©Z0Î@ö…Lp±JɈbnú{û35D±Ìù5\ Û-zd»+°èîƒô¤».’ÚM°ëAñVR.|tX+xŠ÷ [ 229.308441][ T7979] ;ËâM7l]–tœLø5Îd[ à.×B½VÕ;öÎó¸ÜʼýJL´' [ 229.406796][ T8000] syzkaller0: entered promiscuous mode [ 229.571135][ T5832] usb 4-1: USB disconnect, device number 14 [ 229.577294][ T8000] syzkaller0: entered allmulticast mode [ 229.646302][ T8012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.706'. [ 229.743716][ T8015] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.041838][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.710'. [ 230.291836][ T8017] fuse: Bad value for 'fd' [ 230.499796][ T5832] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 230.538071][ T976] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 230.637716][ T5832] usb 2-1: device descriptor read/64, error -71 [ 230.703458][ T976] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 230.712459][ T976] usb 3-1: config 0 has no interface number 0 [ 230.719108][ T976] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 230.729457][ T976] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.743183][ T976] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 230.753474][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.761616][ T976] usb 3-1: Product: syz [ 230.767266][ T976] usb 3-1: Manufacturer: syz [ 230.772020][ T976] usb 3-1: SerialNumber: syz [ 230.796573][ T976] usb 3-1: config 0 descriptor?? [ 230.802484][ T8017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.812381][ T976] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 230.832139][ T976] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 230.879270][ T5832] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.027833][ T5832] usb 2-1: device descriptor read/64, error -71 [ 231.148355][ T5832] usb usb2-port1: attempt power cycle [ 231.302188][ T5891] usb 3-1: USB disconnect, device number 15 [ 231.344652][ T5891] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 231.360837][ T5891] cyberjack 3-1:0.69: device disconnected [ 231.500589][ T5832] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 231.533043][ T5832] usb 2-1: device descriptor read/8, error -71 [ 231.746852][ T8029] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 231.783878][ T5832] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 231.844498][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.712'. [ 231.867481][ T5832] usb 2-1: device descriptor read/8, error -71 [ 232.005066][ T5832] usb usb2-port1: unable to enumerate USB device [ 232.617829][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 232.882272][ T24] usb 4-1: config 0 has no interfaces? [ 232.892957][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 232.902102][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.945063][ T24] usb 4-1: Product: syz [ 233.057117][ T24] usb 4-1: Manufacturer: syz [ 233.177554][ T24] usb 4-1: SerialNumber: syz [ 233.318570][ T24] usb 4-1: config 0 descriptor?? [ 233.709615][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.726'. [ 233.844551][ T8077] No such timeout policy "syz0" [ 234.357460][ T8089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.719'. [ 234.557552][ T5894] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.565356][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 234.733098][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 234.752899][ T5894] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 234.765302][ T24] usb 2-1: config 0 has no interfaces? [ 234.837653][ T5891] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 234.912138][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 234.958012][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.011408][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.032136][ T5894] usb 5-1: Product: syz [ 235.036354][ T5894] usb 5-1: Manufacturer: syz [ 235.061546][ T24] usb 2-1: Product: syz [ 235.072914][ T24] usb 2-1: Manufacturer: syz [ 235.077519][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 235.077776][ T5894] usb 5-1: SerialNumber: syz [ 235.092048][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 235.099725][ T24] usb 2-1: SerialNumber: syz [ 235.128284][ T8093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.147396][ T5894] usb 5-1: config 0 descriptor?? [ 235.156128][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 235.185861][ T5894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 235.204399][ T24] usb 2-1: config 0 descriptor?? [ 235.315366][ T5891] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 235.329383][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.365492][ T5891] usb 3-1: Product: syz [ 235.373821][ T5891] usb 3-1: Manufacturer: syz [ 235.395942][ T5891] usb 3-1: SerialNumber: syz [ 235.507590][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'. [ 235.611053][ T5891] usb 3-1: config 0 descriptor?? [ 235.867009][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.910407][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.989380][ T5891] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 236.038391][ T5894] gspca_stk1135: reg_w 0x2 err -110 [ 236.063870][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.070571][ T5894] gspca_stk1135: Sensor write failed [ 236.075926][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.082406][ T5894] gspca_stk1135: Sensor write failed [ 236.088004][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.100597][ T5894] gspca_stk1135: Sensor read failed [ 236.127068][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.184723][ T5891] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 236.193070][ T5894] gspca_stk1135: Sensor read failed [ 236.233117][ T5894] gspca_stk1135: Detected sensor type unknown (0x0) [ 236.265386][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.304221][ T5891] usb 3-1: USB disconnect, device number 16 [ 236.316767][ T5894] gspca_stk1135: Sensor read failed [ 236.340723][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.342439][ T976] usb 4-1: USB disconnect, device number 15 [ 236.374172][ T5894] gspca_stk1135: Sensor read failed [ 236.415668][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.435997][ T5894] gspca_stk1135: Sensor write failed [ 236.460536][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 236.492399][ T5894] gspca_stk1135: Sensor write failed [ 236.506397][ T5894] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 236.539236][ T5894] usb 5-1: USB disconnect, device number 16 [ 237.143632][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.738'. [ 237.597547][ T5891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 237.676920][ T976] usb 2-1: USB disconnect, device number 21 [ 237.773293][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.800130][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.815290][ T5891] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.825967][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.845266][ T5891] usb 5-1: SerialNumber: syz [ 237.947467][ T5894] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.116773][ T5891] usb 5-1: 0:2 : does not exist [ 238.130754][ T5891] usb 5-1: unit 5: unexpected type 0x03 [ 238.140443][ T5891] usb 5-1: unit 17 not found! [ 238.177630][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 238.190024][ T5894] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 238.205001][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.227036][ T5891] usb 5-1: USB disconnect, device number 17 [ 238.313811][ T5894] usb 1-1: Product: syz [ 238.335282][ T5894] usb 1-1: Manufacturer: syz [ 238.356280][ T5894] usb 1-1: SerialNumber: syz [ 238.383274][ T5894] r8152-cfgselector 1-1: Unknown version 0x0000 [ 238.404768][ T5894] r8152-cfgselector 1-1: config 0 descriptor?? [ 238.490274][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.678852][ T5894] r8152-cfgselector 1-1: Unknown version 0x0000 [ 238.702530][ T5894] r8152-cfgselector 1-1: bad CDC descriptors [ 238.953851][ T5894] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 239.700102][ T8140] could not allocate digest TFM handle sha384-ce [ 240.125281][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 240.476838][ T8168] No such timeout policy "syz0" [ 240.529076][ T8172] FAULT_INJECTION: forcing a failure. [ 240.529076][ T8172] name failslab, interval 1, probability 0, space 0, times 0 [ 240.583796][ T8172] CPU: 0 UID: 0 PID: 8172 Comm: syz.2.756 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 240.583827][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.583840][ T8172] Call Trace: [ 240.583849][ T8172] [ 240.583858][ T8172] dump_stack_lvl+0x241/0x360 [ 240.583897][ T8172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.583928][ T8172] ? __pfx__printk+0x10/0x10 [ 240.583962][ T8172] ? __pfx___might_resched+0x10/0x10 [ 240.583994][ T8172] should_fail_ex+0x424/0x570 [ 240.584021][ T8172] should_failslab+0xac/0x100 [ 240.584055][ T8172] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 240.584085][ T8172] ? __alloc_skb+0x1c2/0x480 [ 240.584111][ T8172] __alloc_skb+0x1c2/0x480 [ 240.584137][ T8172] ? __pfx___alloc_skb+0x10/0x10 [ 240.584159][ T8172] ? netlink_autobind+0xd6/0x2f0 [ 240.584189][ T8172] ? netlink_autobind+0x2b0/0x2f0 [ 240.584225][ T8172] netlink_sendmsg+0x638/0xcd0 [ 240.584270][ T8172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.584305][ T8172] ? aa_sock_msg_perm+0x91/0x160 [ 240.584340][ T8172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.584369][ T8172] __sock_sendmsg+0x221/0x270 [ 240.584400][ T8172] ____sys_sendmsg+0x523/0x860 [ 240.584432][ T8172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.584452][ T8172] ? __fget_files+0x2a/0x420 [ 240.584475][ T8172] ? __fget_files+0x2a/0x420 [ 240.584511][ T8172] __sys_sendmsg+0x271/0x360 [ 240.584539][ T8172] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.584617][ T8172] ? do_syscall_64+0xb6/0x230 [ 240.584647][ T8172] do_syscall_64+0xf3/0x230 [ 240.584673][ T8172] ? clear_bhb_loop+0x45/0xa0 [ 240.584698][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.584719][ T8172] RIP: 0033:0x7f8376d8d169 [ 240.584737][ T8172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.584755][ T8172] RSP: 002b:00007f8377c84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.584779][ T8172] RAX: ffffffffffffffda RBX: 00007f8376fa5fa0 RCX: 00007f8376d8d169 [ 240.584794][ T8172] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 240.584808][ T8172] RBP: 00007f8377c84090 R08: 0000000000000000 R09: 0000000000000000 [ 240.584827][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.584839][ T8172] R13: 0000000000000000 R14: 00007f8376fa5fa0 R15: 00007f83770cfa28 [ 240.584870][ T8172] [ 240.957950][ T5894] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 241.182149][ T5894] usb 1-1: config 0 has no interfaces? [ 241.264536][ T5894] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 241.285975][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.305320][ T5894] usb 1-1: Product: syz [ 241.330932][ T5894] usb 1-1: Manufacturer: syz [ 241.340907][ T5894] usb 1-1: SerialNumber: syz [ 241.381853][ T5894] usb 1-1: config 0 descriptor?? [ 241.751375][ T8200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.754'. [ 242.165010][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 242.567506][ T5891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 242.752520][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 242.761582][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.782646][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.802961][ T5891] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.822731][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.841252][ T5891] usb 3-1: Product: syz [ 242.850121][ T5891] usb 3-1: Manufacturer: syz [ 242.862558][ T5891] usb 3-1: SerialNumber: syz [ 242.981733][ T30] audit: type=1400 audit(1744329167.895:28): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8233 comm="syz.1.773" [ 243.520081][ T5832] usb 1-1: USB disconnect, device number 16 [ 243.653964][ T8245] syz_tun: entered allmulticast mode [ 243.661981][ T8245] syz_tun: left allmulticast mode [ 243.839680][ T5891] usb 3-1: 0:2 : does not exist [ 243.940834][ T5891] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 244.062125][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 244.085829][ T5891] usb 3-1: USB disconnect, device number 17 [ 244.347560][ T2154] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 244.449313][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.567816][ T2154] usb 2-1: Using ep0 maxpacket: 8 [ 244.617594][ T2154] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 244.630780][ T2154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.657036][ T2154] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 244.707151][ T2154] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 244.719301][ T2154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.732826][ T2154] usb 2-1: config 0 descriptor?? [ 244.867615][ T5891] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 244.949826][ T2154] usb 2-1: USB disconnect, device number 22 [ 245.032372][ T5891] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 245.067322][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.106131][ T5891] usb 4-1: Product: syz [ 245.127138][ T5891] usb 4-1: Manufacturer: syz [ 245.166965][ T5891] usb 4-1: SerialNumber: syz [ 245.208367][ T5891] usb 4-1: config 0 descriptor?? [ 245.438952][ T8256] netlink: 192 bytes leftover after parsing attributes in process `syz.3.780'. [ 245.501169][ T5891] usb 4-1: USB disconnect, device number 16 [ 245.786927][ T8277] netem: incorrect ge model size [ 245.832889][ T8277] netem: change failed [ 245.923054][ T8281] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073053398785) [ 245.967848][ T8281] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 246.017480][ T5891] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 246.145632][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.791'. [ 246.178662][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 246.207717][ T5891] usb 3-1: config 0 has no interfaces? [ 246.221935][ T5891] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.231979][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.246203][ T5891] usb 3-1: Product: syz [ 246.260850][ T5891] usb 3-1: Manufacturer: syz [ 246.265483][ T5891] usb 3-1: SerialNumber: syz [ 246.320829][ T5891] usb 3-1: config 0 descriptor?? [ 246.412487][ T8296] syz_tun: entered allmulticast mode [ 246.421217][ T8292] syz_tun: left allmulticast mode [ 246.768089][ T8275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 248.624363][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 248.871896][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.804'. [ 248.911610][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.934140][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.150900][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 249.422279][ T2154] usb 3-1: USB disconnect, device number 18 [ 249.612359][ T8339] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 249.885828][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 250.167767][ T5891] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 250.194380][ T8367] No such timeout policy "syz0" [ 250.222279][ T5894] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 250.470482][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 250.481609][ T5891] usb 1-1: config 0 has no interfaces? [ 250.498649][ T5891] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 250.507226][ T5894] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 250.507934][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.507959][ T5891] usb 1-1: Product: syz [ 250.507975][ T5891] usb 1-1: Manufacturer: syz [ 250.507991][ T5891] usb 1-1: SerialNumber: syz [ 250.665802][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.676996][ T5894] usb 3-1: config 0 has no interface number 0 [ 250.685899][ T5891] usb 1-1: config 0 descriptor?? [ 250.701601][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 250.711194][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.720608][ T5894] usb 3-1: Product: syz [ 250.730703][ T5894] usb 3-1: Manufacturer: syz [ 250.899695][ T5894] usb 3-1: SerialNumber: syz [ 250.907297][ T5891] usb 1-1: USB disconnect, device number 17 [ 250.942850][ T5894] usb 3-1: config 0 descriptor?? [ 251.194023][ T5894] usb 3-1: USB disconnect, device number 19 [ 251.856407][ T8373] capability: warning: `syz.1.823' uses 32-bit capabilities (legacy support in use) [ 252.008385][ T8388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 252.806028][ T8401] netlink: 452 bytes leftover after parsing attributes in process `syz.3.833'. [ 252.857635][ T8400] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 253.137988][ T8415] FAULT_INJECTION: forcing a failure. [ 253.137988][ T8415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.173952][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.3.836 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 253.173984][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.174003][ T8415] Call Trace: [ 253.174011][ T8415] [ 253.174021][ T8415] dump_stack_lvl+0x241/0x360 [ 253.174060][ T8415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.174091][ T8415] ? __pfx__printk+0x10/0x10 [ 253.174133][ T8415] should_fail_ex+0x424/0x570 [ 253.174167][ T8415] _copy_from_user+0x2d/0xb0 [ 253.174199][ T8415] copy_msghdr_from_user+0xb3/0x580 [ 253.174233][ T8415] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 253.174280][ T8415] __sys_sendmmsg+0x361/0x7b0 [ 253.174316][ T8415] ? __pfx___sys_sendmmsg+0x10/0x10 [ 253.174376][ T8415] ? rcu_read_lock_any_held+0xbb/0x160 [ 253.174405][ T8415] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 253.174437][ T8415] ? vfs_write+0xb29/0xd10 [ 253.174472][ T8415] ? ksys_write+0x24e/0x2d0 [ 253.174500][ T8415] ? __mutex_unlock_slowpath+0x229/0x800 [ 253.174558][ T8415] ? ksys_write+0x275/0x2d0 [ 253.174597][ T8415] __x64_sys_sendmmsg+0xa0/0xb0 [ 253.174619][ T8415] do_syscall_64+0xf3/0x230 [ 253.174642][ T8415] ? clear_bhb_loop+0x45/0xa0 [ 253.174664][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.174686][ T8415] RIP: 0033:0x7fa85718d169 [ 253.174702][ T8415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.174718][ T8415] RSP: 002b:00007fa857f50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 253.174738][ T8415] RAX: ffffffffffffffda RBX: 00007fa8573a6080 RCX: 00007fa85718d169 [ 253.174752][ T8415] RDX: 000000000400021c RSI: 0000200000002ec0 RDI: 0000000000000004 [ 253.174764][ T8415] RBP: 00007fa857f50090 R08: 0000000000000000 R09: 0000000000000000 [ 253.174776][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.174786][ T8415] R13: 0000000000000001 R14: 00007fa8573a6080 R15: 00007fa8574cfa28 [ 253.174814][ T8415] [ 253.551780][ T8421] syz_tun: entered allmulticast mode [ 253.559499][ T8421] syz_tun: left allmulticast mode [ 254.086930][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.839'. [ 254.125268][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.839'. [ 254.176089][ T8424] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.839'. [ 254.697864][ T5891] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 254.700504][ T2154] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 254.883659][ T2154] usb 5-1: Using ep0 maxpacket: 8 [ 254.910875][ T2154] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 254.920453][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.937536][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 254.947446][ T2154] usb 5-1: Product: syz [ 254.954307][ T5891] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 254.973944][ T2154] usb 5-1: Manufacturer: syz [ 254.976073][ T5891] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 254.992191][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.000601][ T2154] usb 5-1: SerialNumber: syz [ 255.001660][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'. [ 255.023919][ T5891] usb 2-1: Product: syz [ 255.035483][ T5891] usb 2-1: Manufacturer: syz [ 255.045470][ T5891] usb 2-1: SerialNumber: syz [ 255.071780][ T2154] usb 5-1: config 0 descriptor?? [ 255.074978][ T5891] usb 2-1: config 0 descriptor?? [ 255.081009][ T2154] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 255.343425][ T8433] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 255.391915][ T5891] hub 2-1:0.0: bad descriptor, ignoring hub [ 255.406488][ T5891] hub 2-1:0.0: probe with driver hub failed with error -5 [ 255.443614][ T5891] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 255.672217][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.683193][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.162179][ T2154] gspca_sonixj: reg_r err -32 [ 256.218218][ T2154] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 256.247947][ T2154] usb 5-1: USB disconnect, device number 18 [ 256.324977][ T5838] udevd[5838]: setting mode of /dev/bus/usb/005/018 to 020664 failed: No such file or directory [ 256.365400][ T5838] udevd[5838]: setting owner of /dev/bus/usb/005/018 to uid=0, gid=0 failed: No such file or directory [ 256.391418][ T8456] FAULT_INJECTION: forcing a failure. [ 256.391418][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 256.477484][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.2.851 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 256.477517][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.477530][ T8456] Call Trace: [ 256.477539][ T8456] [ 256.477547][ T8456] dump_stack_lvl+0x241/0x360 [ 256.477587][ T8456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.477619][ T8456] ? __pfx__printk+0x10/0x10 [ 256.477654][ T8456] ? __pfx___might_resched+0x10/0x10 [ 256.477689][ T8456] should_fail_ex+0x424/0x570 [ 256.477717][ T8456] should_failslab+0xac/0x100 [ 256.477749][ T8456] __kmalloc_noprof+0xdf/0x4d0 [ 256.477776][ T8456] ? __local_bh_enable_ip+0x168/0x200 [ 256.477797][ T8456] ? sock_kmalloc+0xd7/0x160 [ 256.477826][ T8456] sock_kmalloc+0xd7/0x160 [ 256.477853][ T8456] alg_setkey+0x59/0x1c0 [ 256.477884][ T8456] alg_setsockopt+0x383/0x450 [ 256.477914][ T8456] ? __pfx_alg_setsockopt+0x10/0x10 [ 256.477938][ T8456] do_sock_setsockopt+0x3b1/0x710 [ 256.477966][ T8456] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 256.477984][ T8456] ? __fget_files+0x2a/0x420 [ 256.478009][ T8456] ? __fget_files+0x39d/0x420 [ 256.478026][ T8456] ? __fget_files+0x2a/0x420 [ 256.478055][ T8456] __x64_sys_setsockopt+0x1ee/0x280 [ 256.478093][ T8456] do_syscall_64+0xf3/0x230 [ 256.478120][ T8456] ? clear_bhb_loop+0x45/0xa0 [ 256.478145][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.478166][ T8456] RIP: 0033:0x7f8376d8d169 [ 256.478184][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.478203][ T8456] RSP: 002b:00007f8377c84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.478225][ T8456] RAX: ffffffffffffffda RBX: 00007f8376fa5fa0 RCX: 00007f8376d8d169 [ 256.478241][ T8456] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 256.478254][ T8456] RBP: 00007f8377c84090 R08: 0000000000000013 R09: 0000000000000000 [ 256.478267][ T8456] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 256.478280][ T8456] R13: 0000000000000000 R14: 00007f8376fa5fa0 R15: 00007f83770cfa28 [ 256.478313][ T8456] [ 256.724933][ T5892] usb 2-1: USB disconnect, device number 23 [ 256.724973][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 256.743164][ T8459] FAULT_INJECTION: forcing a failure. [ 256.743164][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.756579][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.0.852 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 256.756608][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.756621][ T8459] Call Trace: [ 256.756636][ T8459] [ 256.756645][ T8459] dump_stack_lvl+0x241/0x360 [ 256.756685][ T8459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.756715][ T8459] ? __pfx__printk+0x10/0x10 [ 256.756756][ T8459] should_fail_ex+0x424/0x570 [ 256.756792][ T8459] _copy_from_user+0x2d/0xb0 [ 256.756823][ T8459] alg_setkey+0xbc/0x1c0 [ 256.756853][ T8459] alg_setsockopt+0x383/0x450 [ 256.756890][ T8459] ? __pfx_alg_setsockopt+0x10/0x10 [ 256.756914][ T8459] do_sock_setsockopt+0x3b1/0x710 [ 256.756943][ T8459] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 256.756962][ T8459] ? __fget_files+0x2a/0x420 [ 256.756986][ T8459] ? __fget_files+0x39d/0x420 [ 256.757004][ T8459] ? __fget_files+0x2a/0x420 [ 256.757031][ T8459] __x64_sys_setsockopt+0x1ee/0x280 [ 256.757061][ T8459] do_syscall_64+0xf3/0x230 [ 256.757088][ T8459] ? clear_bhb_loop+0x45/0xa0 [ 256.757113][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.757133][ T8459] RIP: 0033:0x7f331b18d169 [ 256.757152][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.757170][ T8459] RSP: 002b:00007f331c040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.757193][ T8459] RAX: ffffffffffffffda RBX: 00007f331b3a5fa0 RCX: 00007f331b18d169 [ 256.757209][ T8459] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 256.757222][ T8459] RBP: 00007f331c040090 R08: 000000000000001c R09: 0000000000000000 [ 256.757235][ T8459] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 256.757249][ T8459] R13: 0000000000000000 R14: 00007f331b3a5fa0 R15: 00007f331b4cfa28 [ 256.757282][ T8459] [ 257.107474][ T2154] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 257.165330][ T8466] batadv0: entered promiscuous mode [ 257.208166][ T8466] batadv_slave_0: entered promiscuous mode [ 257.214417][ T8466] batadv_slave_0: left promiscuous mode [ 257.271558][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 257.294424][ T8466] batadv0: left promiscuous mode [ 257.302731][ T2154] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 257.314380][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.325348][ T2154] usb 5-1: Product: syz [ 257.343118][ T2154] usb 5-1: Manufacturer: syz [ 257.356573][ T2154] usb 5-1: SerialNumber: syz [ 257.357034][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 257.376211][ T2154] usb 5-1: config 0 descriptor?? [ 257.397987][ T5894] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 257.762713][ T2154] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 257.774769][ T2154] usb 5-1: setting power ON [ 257.779552][ T5892] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 257.791691][ T2154] dvb-usb: bulk message failed: -22 (2/0) [ 257.838848][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.851094][ T5894] usb 1-1: too many configurations: 132, using maximum allowed: 8 [ 257.871876][ T2154] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 257.891393][ T5894] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 257.915107][ T5894] usb 1-1: can't read configurations, error -71 [ 257.937624][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 257.947172][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.965412][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.000690][ T2154] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 258.014241][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.028628][ T2154] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 258.091621][ T5892] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 258.103203][ T2154] usb 5-1: USB disconnect, device number 19 [ 258.180534][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.220435][ T5892] usb 2-1: config 0 descriptor?? [ 258.312606][ T8485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.862'. [ 258.451111][ T5892] koneplus 0003:1E7D:2E22.0005: item fetching failed at offset 3/5 [ 258.499283][ T8492] xt_connbytes: Forcing CT accounting to be enabled [ 258.515957][ T5892] koneplus 0003:1E7D:2E22.0005: parse failed [ 258.542468][ T5892] koneplus 0003:1E7D:2E22.0005: probe with driver koneplus failed with error -22 [ 258.547015][ T8492] set match dimension is over the limit! [ 258.649542][ T5891] usb 2-1: USB disconnect, device number 24 [ 258.947237][ T8501] netlink: 88 bytes leftover after parsing attributes in process `syz.3.868'. [ 259.105552][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 259.117680][ T5891] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 259.307500][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 259.320014][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 259.328002][ T5891] usb 5-1: can't read configurations, error -61 [ 259.405366][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.876'. [ 259.469189][ T5891] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 259.508121][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 259.524232][ T8503] fuse: Bad value for 'fd' [ 259.669107][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 259.681226][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 259.697951][ T5891] usb 5-1: can't read configurations, error -61 [ 259.704913][ T5891] usb usb5-port1: attempt power cycle [ 259.764660][ T8525] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 259.774246][ T8525] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 259.795849][ T8525] kvm: user requested TSC rate below hardware speed [ 259.827720][ T5894] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 259.989764][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 260.004273][ T9] usb 3-1: too many configurations: 132, using maximum allowed: 8 [ 260.014843][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 260.026991][ T9] usb 3-1: can't read configurations, error -71 [ 260.031362][ T5894] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 260.089698][ T5894] usb 1-1: config 0 has no interface number 0 [ 260.107559][ T5894] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 260.127726][ T5891] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 260.136718][ T5894] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.188624][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 260.194254][ T5894] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 260.202562][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 260.203380][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.219171][ T5894] usb 1-1: Product: syz [ 260.223381][ T5894] usb 1-1: Manufacturer: syz [ 260.234009][ T5894] usb 1-1: SerialNumber: syz [ 260.268899][ T5894] usb 1-1: config 0 descriptor?? [ 260.271580][ T5891] usb 5-1: can't read configurations, error -61 [ 260.279218][ T8503] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 260.309934][ T5894] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 260.389060][ T5894] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 260.611419][ T5891] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 260.658003][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 260.667046][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 260.694049][ T5891] usb 5-1: can't read configurations, error -61 [ 260.770649][ T5891] usb usb5-port1: unable to enumerate USB device [ 260.881274][ T5892] usb 1-1: USB disconnect, device number 20 [ 260.930417][ T5892] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 260.956236][ T5892] cyberjack 1-1:0.69: device disconnected [ 261.005111][ T8539] FAULT_INJECTION: forcing a failure. [ 261.005111][ T8539] name failslab, interval 1, probability 0, space 0, times 0 [ 261.045895][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz.3.879 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 261.045927][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.045940][ T8539] Call Trace: [ 261.045949][ T8539] [ 261.045958][ T8539] dump_stack_lvl+0x241/0x360 [ 261.045997][ T8539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.046028][ T8539] ? __pfx__printk+0x10/0x10 [ 261.046063][ T8539] ? __pfx___might_resched+0x10/0x10 [ 261.046095][ T8539] should_fail_ex+0x424/0x570 [ 261.046122][ T8539] should_failslab+0xac/0x100 [ 261.046154][ T8539] kmem_cache_alloc_noprof+0x78/0x390 [ 261.046184][ T8539] ? __kernfs_new_node+0xdf/0x890 [ 261.046212][ T8539] __kernfs_new_node+0xdf/0x890 [ 261.046236][ T8539] ? __lock_acquire+0xad5/0xd80 [ 261.046265][ T8539] ? __pfx___kernfs_new_node+0x10/0x10 [ 261.046300][ T8539] ? kernfs_root+0x1c/0x230 [ 261.046323][ T8539] ? kernfs_root+0x1c/0x230 [ 261.046347][ T8539] kernfs_new_node+0x114/0x220 [ 261.046376][ T8539] __kernfs_create_file+0x49/0x2e0 [ 261.046409][ T8539] sysfs_add_file_mode_ns+0x24a/0x310 [ 261.046450][ T8539] internal_create_group+0x7ea/0x1320 [ 261.046474][ T8539] ? kernfs_add_one+0xf8/0x530 [ 261.046511][ T8539] ? __pfx_internal_create_group+0x10/0x10 [ 261.046548][ T8539] sysfs_create_groups+0x56/0x120 [ 261.046573][ T8539] device_add_attrs+0x1be/0x670 [ 261.046603][ T8539] ? __pfx_device_add_attrs+0x10/0x10 [ 261.046640][ T8539] device_add+0x576/0xbf0 [ 261.046675][ T8539] ? device_initialize+0x266/0x460 [ 261.046704][ T8539] netdev_register_kobject+0x157/0x2f0 [ 261.046733][ T8539] register_netdevice+0x12b0/0x1b80 [ 261.046757][ T8539] ? rcu_is_watching+0x15/0xb0 [ 261.046799][ T8539] ? __pfx_register_netdevice+0x10/0x10 [ 261.046822][ T8539] ? dev_addr_mod+0xf4/0x430 [ 261.046845][ T8539] ? __asan_memset+0x23/0x50 [ 261.046871][ T8539] ? netif_inherit_tso_max+0x1f3/0x340 [ 261.046897][ T8539] veth_newlink+0x4c3/0xb80 [ 261.046932][ T8539] ? __pfx_veth_newlink+0x10/0x10 [ 261.046956][ T8539] ? rtnetlink_rcv_msg+0x80f/0xd70 [ 261.046984][ T8539] ? netlink_rcv_skb+0x208/0x480 [ 261.047010][ T8539] ? netlink_unicast+0x7f8/0x9a0 [ 261.047034][ T8539] ? netlink_sendmsg+0x8c3/0xcd0 [ 261.047061][ T8539] ? __sock_sendmsg+0x221/0x270 [ 261.047087][ T8539] ? __sys_sendmsg+0x271/0x360 [ 261.047107][ T8539] ? do_syscall_64+0xf3/0x230 [ 261.047131][ T8539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.047224][ T8539] ? rtnl_create_link+0xb36/0xea0 [ 261.047254][ T8539] ? __pfx_veth_newlink+0x10/0x10 [ 261.047283][ T8539] rtnl_newlink_create+0x39b/0xcb0 [ 261.047317][ T8539] ? __mutex_lock+0x380/0x10c0 [ 261.047350][ T8539] ? __pfx_aa_get_newest_label+0x10/0x10 [ 261.047383][ T8539] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 261.047419][ T8539] ? __pfx___mutex_lock+0x10/0x10 [ 261.047457][ T8539] ? ns_capable+0x8a/0xf0 [ 261.047483][ T8539] rtnl_newlink+0x18b0/0x1fe0 [ 261.047515][ T8539] ? stack_depot_save_flags+0x44/0x940 [ 261.047555][ T8539] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.047582][ T8539] ? __netlink_deliver_tap+0x561/0x7f0 [ 261.047609][ T8539] ? netlink_deliver_tap+0x19d/0x1b0 [ 261.047637][ T8539] ? netlink_unicast+0x7c6/0x9a0 [ 261.047667][ T8539] ? netlink_sendmsg+0x8c3/0xcd0 [ 261.047695][ T8539] ? __sock_sendmsg+0x221/0x270 [ 261.047720][ T8539] ? ____sys_sendmsg+0x523/0x860 [ 261.047739][ T8539] ? __sys_sendmsg+0x271/0x360 [ 261.047758][ T8539] ? do_syscall_64+0xf3/0x230 [ 261.047782][ T8539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.047877][ T8539] ? aa_get_newest_label+0x101/0x6f0 [ 261.047914][ T8539] ? __lock_acquire+0xad5/0xd80 [ 261.047959][ T8539] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.047991][ T8539] rtnetlink_rcv_msg+0x80f/0xd70 [ 261.048020][ T8539] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 261.048055][ T8539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.048094][ T8539] ? ref_tracker_free+0x63e/0x7e0 [ 261.048125][ T8539] netlink_rcv_skb+0x208/0x480 [ 261.048157][ T8539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.048189][ T8539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.048238][ T8539] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.048272][ T8539] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.048305][ T8539] netlink_unicast+0x7f8/0x9a0 [ 261.048342][ T8539] ? __pfx_netlink_unicast+0x10/0x10 [ 261.048372][ T8539] ? skb_put+0x114/0x1f0 [ 261.048397][ T8539] netlink_sendmsg+0x8c3/0xcd0 [ 261.048442][ T8539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.048478][ T8539] ? aa_sock_msg_perm+0x91/0x160 [ 261.048514][ T8539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.048542][ T8539] __sock_sendmsg+0x221/0x270 [ 261.048574][ T8539] ____sys_sendmsg+0x523/0x860 [ 261.048607][ T8539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.048627][ T8539] ? __fget_files+0x2a/0x420 [ 261.048650][ T8539] ? __fget_files+0x2a/0x420 [ 261.048686][ T8539] __sys_sendmsg+0x271/0x360 [ 261.048716][ T8539] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.048800][ T8539] ? do_syscall_64+0xb6/0x230 [ 261.048829][ T8539] do_syscall_64+0xf3/0x230 [ 261.048856][ T8539] ? clear_bhb_loop+0x45/0xa0 [ 261.048881][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.048902][ T8539] RIP: 0033:0x7fa85718d169 [ 261.048920][ T8539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.048938][ T8539] RSP: 002b:00007fa857f71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.048962][ T8539] RAX: ffffffffffffffda RBX: 00007fa8573a5fa0 RCX: 00007fa85718d169 [ 261.048977][ T8539] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 261.048991][ T8539] RBP: 00007fa857f71090 R08: 0000000000000000 R09: 0000000000000000 [ 261.049004][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.049017][ T8539] R13: 0000000000000000 R14: 00007fa8573a5fa0 R15: 00007fa8574cfa28 [ 261.049050][ T8539] [ 261.628731][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 261.787470][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 261.795378][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.804239][ T9] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 261.814668][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.826190][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.836271][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.844668][ T9] usb 3-1: Product: syz [ 261.881593][ T9] usb 3-1: Manufacturer: syz [ 261.886384][ T9] usb 3-1: SerialNumber: syz [ 261.897907][ T8545] netlink: 88 bytes leftover after parsing attributes in process `syz.4.881'. [ 262.113496][ T9] usb 3-1: 0:2 : does not exist [ 262.185833][ T9] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 262.224853][ T9] usb 3-1: USB disconnect, device number 21 [ 262.510205][ T6073] udevd[6073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.219089][ T8567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.478007][ T8571] netlink: 88 bytes leftover after parsing attributes in process `syz.3.892'. [ 263.692040][ T8579] No such timeout policy "syz0" [ 263.849985][ T8586] FAULT_INJECTION: forcing a failure. [ 263.849985][ T8586] name failslab, interval 1, probability 0, space 0, times 0 [ 263.940218][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.1.897 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 263.940251][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.940264][ T8586] Call Trace: [ 263.940272][ T8586] [ 263.940281][ T8586] dump_stack_lvl+0x241/0x360 [ 263.940320][ T8586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.940350][ T8586] ? __pfx__printk+0x10/0x10 [ 263.940383][ T8586] ? __pfx___might_resched+0x10/0x10 [ 263.940413][ T8586] should_fail_ex+0x424/0x570 [ 263.940450][ T8586] should_failslab+0xac/0x100 [ 263.940482][ T8586] __kmalloc_noprof+0xdf/0x4d0 [ 263.940511][ T8586] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 263.940542][ T8586] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 263.940578][ T8586] tomoyo_realpath_from_path+0xcf/0x5e0 [ 263.940624][ T8586] tomoyo_path_number_perm+0x245/0x790 [ 263.940657][ T8586] ? tomoyo_path_number_perm+0x215/0x790 [ 263.940687][ T8586] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.940722][ T8586] ? ksys_write+0x24e/0x2d0 [ 263.940755][ T8586] ? __lock_acquire+0xad5/0xd80 [ 263.940798][ T8586] ? __fget_files+0x2a/0x420 [ 263.940816][ T8586] ? __fget_files+0x2a/0x420 [ 263.940836][ T8586] ? __fget_files+0x2a/0x420 [ 263.940861][ T8586] security_file_ioctl+0xc6/0x2a0 [ 263.940888][ T8586] __se_sys_ioctl+0x46/0x160 [ 263.940916][ T8586] do_syscall_64+0xf3/0x230 [ 263.940944][ T8586] ? clear_bhb_loop+0x45/0xa0 [ 263.940969][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.940990][ T8586] RIP: 0033:0x7ff23c38d169 [ 263.941008][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.941026][ T8586] RSP: 002b:00007ff23d129038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.941049][ T8586] RAX: ffffffffffffffda RBX: 00007ff23c5a6080 RCX: 00007ff23c38d169 [ 263.941068][ T8586] RDX: 0000200000000080 RSI: 00000000c0045006 RDI: 0000000000000003 [ 263.941083][ T8586] RBP: 00007ff23d129090 R08: 0000000000000000 R09: 0000000000000000 [ 263.941096][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.941109][ T8586] R13: 0000000000000001 R14: 00007ff23c5a6080 R15: 00007ff23c6cfa28 [ 263.941141][ T8586] [ 263.945177][ T8586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.606465][ T8601] FAULT_INJECTION: forcing a failure. [ 264.606465][ T8601] name failslab, interval 1, probability 0, space 0, times 0 [ 264.636932][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.0.904 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 264.636965][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.636978][ T8601] Call Trace: [ 264.636993][ T8601] [ 264.637002][ T8601] dump_stack_lvl+0x241/0x360 [ 264.637049][ T8601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.637079][ T8601] ? __pfx__printk+0x10/0x10 [ 264.637121][ T8601] should_fail_ex+0x424/0x570 [ 264.637148][ T8601] should_failslab+0xac/0x100 [ 264.637179][ T8601] __kmalloc_cache_noprof+0x73/0x370 [ 264.637207][ T8601] ? sctp_add_bind_addr+0x89/0x3a0 [ 264.637239][ T8601] sctp_add_bind_addr+0x89/0x3a0 [ 264.637271][ T8601] sctp_copy_local_addr_list+0x313/0x500 [ 264.637301][ T8601] ? sctp_copy_local_addr_list+0xad/0x500 [ 264.637329][ T8601] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 264.637374][ T8601] ? sctp_v6_is_any+0x60/0x70 [ 264.637406][ T8601] ? sctp_copy_one_addr+0x94/0x360 [ 264.637437][ T8601] sctp_bind_addr_copy+0xad/0x3b0 [ 264.637466][ T8601] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 264.637495][ T8601] sctp_connect_new_asoc+0x337/0x700 [ 264.637521][ T8601] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 264.637539][ T8601] ? sctp_sendmsg+0xf30/0x3620 [ 264.637579][ T8601] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 264.637598][ T8601] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 264.637625][ T8601] sctp_sendmsg+0x2009/0x3620 [ 264.637683][ T8601] ? __pfx_sctp_sendmsg+0x10/0x10 [ 264.637720][ T8601] ? aa_sk_perm+0x96f/0xac0 [ 264.637766][ T8601] ? inet_sendmsg+0x330/0x390 [ 264.637795][ T8601] __sock_sendmsg+0x1a6/0x270 [ 264.637828][ T8601] ____sys_sendmsg+0x523/0x860 [ 264.637861][ T8601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.637881][ T8601] ? __fget_files+0x2a/0x420 [ 264.637905][ T8601] ? __fget_files+0x2a/0x420 [ 264.637935][ T8601] __sys_sendmmsg+0x3a0/0x7b0 [ 264.637971][ T8601] ? __pfx___sys_sendmmsg+0x10/0x10 [ 264.638035][ T8601] ? rcu_read_lock_any_held+0xbb/0x160 [ 264.638064][ T8601] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 264.638097][ T8601] ? vfs_write+0xb29/0xd10 [ 264.638133][ T8601] ? ksys_write+0x24e/0x2d0 [ 264.638162][ T8601] ? __mutex_unlock_slowpath+0x229/0x800 [ 264.638224][ T8601] ? ksys_write+0x275/0x2d0 [ 264.638261][ T8601] __x64_sys_sendmmsg+0xa0/0xb0 [ 264.638287][ T8601] do_syscall_64+0xf3/0x230 [ 264.638313][ T8601] ? clear_bhb_loop+0x45/0xa0 [ 264.638339][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.638365][ T8601] RIP: 0033:0x7f331b18d169 [ 264.638384][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.638402][ T8601] RSP: 002b:00007f331c040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.638425][ T8601] RAX: ffffffffffffffda RBX: 00007f331b3a5fa0 RCX: 00007f331b18d169 [ 264.638441][ T8601] RDX: 0000000000000001 RSI: 00002000000031c0 RDI: 0000000000000003 [ 264.638454][ T8601] RBP: 00007f331c040090 R08: 0000000000000000 R09: 0000000000000000 [ 264.638467][ T8601] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000002 [ 264.638480][ T8601] R13: 0000000000000000 R14: 00007f331b3a5fa0 R15: 00007f331b4cfa28 [ 264.638513][ T8601] [ 265.077477][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 265.207479][ T9] usb 2-1: device descriptor read/64, error -71 [ 265.236080][ T8608] netlink: 56 bytes leftover after parsing attributes in process `syz.3.907'. [ 265.247622][ T8604] vlan3: entered allmulticast mode [ 265.252793][ T8604] bond0: entered allmulticast mode [ 265.447688][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 265.447926][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 265.583007][ T8606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 265.590859][ T8617] FAULT_INJECTION: forcing a failure. [ 265.590859][ T8617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.593525][ T8606] netlink: 'syz.0.906': attribute type 7 has an invalid length. [ 265.605595][ T9] usb 2-1: device descriptor read/64, error -71 [ 265.619216][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.2.909 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 265.619259][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.619273][ T8617] Call Trace: [ 265.619283][ T8617] [ 265.619293][ T8617] dump_stack_lvl+0x241/0x360 [ 265.619334][ T8617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.619368][ T8617] ? __pfx__printk+0x10/0x10 [ 265.619415][ T8617] should_fail_ex+0x424/0x570 [ 265.619445][ T8617] _copy_from_user+0x2d/0xb0 [ 265.619480][ T8617] input_event_from_user+0x211/0x510 [ 265.619513][ T8617] ? __pfx_input_event_from_user+0x10/0x10 [ 265.619545][ T8617] ? input_inject_event+0xd9/0x360 [ 265.619581][ T8617] evdev_write+0x4c4/0x7d0 [ 265.619615][ T8617] ? __pfx_evdev_write+0x10/0x10 [ 265.619641][ T8617] ? bpf_lsm_file_permission+0x9/0x10 [ 265.619669][ T8617] ? rw_verify_area+0x246/0x630 [ 265.619693][ T8617] ? __pfx_evdev_write+0x10/0x10 [ 265.619717][ T8617] vfs_write+0x2bc/0xd10 [ 265.619757][ T8617] ? __pfx_vfs_write+0x10/0x10 [ 265.619783][ T8617] ? __fget_files+0x2a/0x420 [ 265.619803][ T8617] ? __fget_files+0x2a/0x420 [ 265.619826][ T8617] ? __fget_files+0x39d/0x420 [ 265.619844][ T8617] ? __fget_files+0x2a/0x420 [ 265.619876][ T8617] ksys_write+0x19d/0x2d0 [ 265.619904][ T8617] ? __pfx_ksys_write+0x10/0x10 [ 265.619937][ T8617] ? do_syscall_64+0xb6/0x230 [ 265.619969][ T8617] do_syscall_64+0xf3/0x230 [ 265.619998][ T8617] ? clear_bhb_loop+0x45/0xa0 [ 265.620025][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.620046][ T8617] RIP: 0033:0x7f8376d8d169 [ 265.620067][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.620087][ T8617] RSP: 002b:00007f8377c84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.620110][ T8617] RAX: ffffffffffffffda RBX: 00007f8376fa5fa0 RCX: 00007f8376d8d169 [ 265.620125][ T8617] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 265.620138][ T8617] RBP: 00007f8377c84090 R08: 0000000000000000 R09: 0000000000000000 [ 265.620150][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.620162][ T8617] R13: 0000000000000000 R14: 00007f8376fa5fa0 R15: 00007f83770cfa28 [ 265.620194][ T8617] [ 265.708110][ T9] usb usb2-port1: attempt power cycle [ 265.712143][ T8606] netlink: 'syz.0.906': attribute type 8 has an invalid length. [ 265.866830][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 265.889952][ T8606] gretap0: entered promiscuous mode [ 265.896974][ T8606] batadv_slave_1: entered promiscuous mode [ 265.932043][ T8606] gretap0: left promiscuous mode [ 265.949489][ T8606] batadv_slave_1: left promiscuous mode [ 266.051058][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 266.091520][ T9] usb 2-1: device descriptor read/8, error -71 [ 266.377517][ T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 266.467222][ T9] usb 2-1: device descriptor read/8, error -71 [ 266.660973][ T9] usb usb2-port1: unable to enumerate USB device [ 266.699060][ T5894] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 266.707940][ T5892] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 266.888989][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.899118][ T5894] usb 5-1: too many configurations: 132, using maximum allowed: 8 [ 266.913115][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 266.941385][ T5894] usb 5-1: can't read configurations, error -71 [ 267.140846][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.166952][ T5892] usb 3-1: too many configurations: 132, using maximum allowed: 8 [ 267.190278][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 267.206009][ T5892] usb 3-1: can't read configurations, error -71 [ 267.650264][ T8635] netlink: 56 bytes leftover after parsing attributes in process `syz.4.918'. [ 267.722308][ T8640] No such timeout policy "syz0" [ 267.987699][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 268.369407][ T8654] No such timeout policy "syz0" [ 268.810104][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 268.900327][ T8665] kvm: user requested TSC rate below hardware speed [ 269.056127][ T8664] cgroup: fork rejected by pids controller in /syz4 [ 270.067650][ T5892] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 270.297507][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 270.316374][ T5892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 270.432550][ T6071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.589912][ T6071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.615450][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 270.624661][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.637293][ T5892] usb 2-1: Product: syz [ 270.644039][ T5892] usb 2-1: Manufacturer: syz [ 270.652178][ T5892] usb 2-1: SerialNumber: syz [ 270.661533][ T5892] usb 2-1: config 0 descriptor?? [ 270.704320][ T5892] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 270.757881][ T6071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.920230][ T6071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.217527][ T5891] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 272.302353][ T8615] Set syz1 is full, maxelem 65536 reached [ 272.427514][ T5891] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.447527][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.454212][ T5891] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 272.527472][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.567062][ T5891] usb 1-1: config 0 descriptor?? [ 272.674139][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.702310][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.723287][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.752678][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.767815][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.784373][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.796017][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.806654][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.818655][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.826720][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.846473][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.940'. [ 272.939575][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.940'. [ 273.019579][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.940'. [ 273.047709][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.940'. [ 273.214972][ T5891] hid-alps 0003:044E:1215.0006: unknown main item tag 0x5 [ 273.252434][ T5891] hid-alps 0003:044E:1215.0006: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 273.526077][ T5891] usb 1-1: USB disconnect, device number 21 [ 273.626879][ T6071] bond0 (unregistering): Released all slaves [ 273.797205][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.822890][ T5892] gspca_zc3xx: reg_r err -32 [ 273.828177][ T5892] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 273.844060][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.916092][ T5892] usb 2-1: USB disconnect, device number 29 [ 273.994036][ T8843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.267658][ T8855] usb usb8: usbfs: process 8855 (syz.3.947) did not claim interface 0 before use [ 274.337860][ T5892] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 274.530379][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 274.533174][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 274.571773][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.613284][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.649650][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.674152][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.720631][ T5892] usb 2-1: config 0 descriptor?? [ 274.743163][ T5892] hub 2-1:0.0: USB hub found [ 274.763854][ T8874] No such timeout policy "syz0" [ 274.898035][ T5842] Bluetooth: hci2: command tx timeout [ 274.944434][ T5892] hub 2-1:0.0: 26 ports detected [ 274.959861][ T5892] hub 2-1:0.0: insufficient power available to use all downstream ports [ 274.968872][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 275.263916][ T5892] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 275.271696][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 275.276847][ T5892] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 275.289668][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.303878][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 275.316184][ T24] usb 1-1: config 1 has no interface number 1 [ 275.323167][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 275.336658][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 275.377682][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.405914][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.432332][ T5892] usb 2-1: USB disconnect, device number 30 [ 275.484953][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.524832][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.554551][ T24] usb 1-1: Product: syz [ 275.563380][ T24] usb 1-1: Manufacturer: syz [ 275.573149][ T24] usb 1-1: SerialNumber: syz [ 275.784931][ T6071] hsr_slave_0: left promiscuous mode [ 275.848059][ T6071] hsr_slave_1: left promiscuous mode [ 275.909431][ T6071] veth1_macvtap: left promiscuous mode [ 275.915476][ T6071] veth0_macvtap: left promiscuous mode [ 275.942310][ T6071] veth1_vlan: left promiscuous mode [ 276.081182][ T8897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.113034][ T8899] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 276.259420][ T6071] [ 276.261806][ T6071] ====================================================== [ 276.268851][ T6071] WARNING: possible circular locking dependency detected [ 276.275980][ T6071] 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 Not tainted [ 276.283117][ T6071] ------------------------------------------------------ [ 276.290162][ T6071] kworker/u8:8/6071 is trying to acquire lock: [ 276.296318][ T6071] ffff888035a40e00 (team->team_lock_key){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 276.306302][ T6071] [ 276.306302][ T6071] but task is already holding lock: [ 276.313669][ T6071] ffff88805f75cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 276.325270][ T6071] [ 276.325270][ T6071] which lock already depends on the new lock. [ 276.325270][ T6071] [ 276.335765][ T6071] [ 276.335765][ T6071] the existing dependency chain (in reverse order) is: [ 276.344787][ T6071] [ 276.344787][ T6071] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 276.353247][ T6071] lock_acquire+0x116/0x2f0 [ 276.358286][ T6071] __mutex_lock+0x1a5/0x10c0 [ 276.363432][ T6071] dev_set_mtu+0x11c/0x270 [ 276.368379][ T6071] team_add_slave+0x83b/0x28b0 [ 276.373757][ T6071] do_set_master+0x579/0x730 [ 276.378878][ T6071] do_setlink+0xf76/0x4390 [ 276.383824][ T6071] rtnl_newlink+0x17e2/0x1fe0 [ 276.389030][ T6071] rtnetlink_rcv_msg+0x80f/0xd70 [ 276.394586][ T6071] netlink_rcv_skb+0x208/0x480 [ 276.399880][ T6071] netlink_unicast+0x7f8/0x9a0 [ 276.405259][ T6071] netlink_sendmsg+0x8c3/0xcd0 [ 276.410562][ T6071] __sock_sendmsg+0x221/0x270 [ 276.415801][ T6071] ____sys_sendmsg+0x523/0x860 [ 276.421094][ T6071] __sys_sendmsg+0x271/0x360 [ 276.426212][ T6071] do_syscall_64+0xf3/0x230 [ 276.431240][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.437657][ T6071] [ 276.437657][ T6071] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 276.445749][ T6071] validate_chain+0xa69/0x24e0 [ 276.451042][ T6071] __lock_acquire+0xad5/0xd80 [ 276.456248][ T6071] lock_acquire+0x116/0x2f0 [ 276.461271][ T6071] __mutex_lock+0x1a5/0x10c0 [ 276.466392][ T6071] team_vlan_rx_kill_vid+0x36/0xe0 [ 276.472294][ T6071] vlan_vid_del+0x483/0x770 [ 276.477334][ T6071] vlan_device_event+0x23c/0x1e00 [ 276.482883][ T6071] notifier_call_chain+0x1a5/0x3f0 [ 276.488617][ T6071] dev_close_many+0x33e/0x4c0 [ 276.493823][ T6071] unregister_netdevice_many_notify+0x628/0x2510 [ 276.500678][ T6071] default_device_exit_batch+0x7ff/0x880 [ 276.506837][ T6071] cleanup_net+0x8af/0xd60 [ 276.511783][ T6071] process_scheduled_works+0xac3/0x18e0 [ 276.517873][ T6071] worker_thread+0x870/0xd50 [ 276.522988][ T6071] kthread+0x7b7/0x940 [ 276.527585][ T6071] ret_from_fork+0x4b/0x80 [ 276.532525][ T6071] ret_from_fork_asm+0x1a/0x30 [ 276.537813][ T6071] [ 276.537813][ T6071] other info that might help us debug this: [ 276.537813][ T6071] [ 276.548046][ T6071] Possible unsafe locking scenario: [ 276.548046][ T6071] [ 276.555496][ T6071] CPU0 CPU1 [ 276.560860][ T6071] ---- ---- [ 276.566219][ T6071] lock(&dev_instance_lock_key#3); [ 276.571441][ T6071] lock(team->team_lock_key); [ 276.578729][ T6071] lock(&dev_instance_lock_key#3); [ 276.586462][ T6071] lock(team->team_lock_key); [ 276.591232][ T6071] [ 276.591232][ T6071] *** DEADLOCK *** [ 276.591232][ T6071] [ 276.599469][ T6071] 5 locks held by kworker/u8:8/6071: [ 276.604776][ T6071] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 276.615696][ T6071] #1: ffffc900050afc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 276.626267][ T6071] #2: ffffffff900f0890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 276.635697][ T6071] #3: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 276.645731][ T6071] #4: ffff88805f75cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 276.657768][ T6071] [ 276.657768][ T6071] stack backtrace: [ 276.663676][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 276.663701][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.663714][ T6071] Workqueue: netns cleanup_net [ 276.663745][ T6071] Call Trace: [ 276.663754][ T6071] [ 276.663762][ T6071] dump_stack_lvl+0x241/0x360 [ 276.663789][ T6071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.663813][ T6071] ? __pfx__printk+0x10/0x10 [ 276.663836][ T6071] ? print_lock+0x171/0x1a0 [ 276.663858][ T6071] print_circular_bug+0x2e1/0x300 [ 276.663882][ T6071] check_noncircular+0x142/0x160 [ 276.663905][ T6071] validate_chain+0xa69/0x24e0 [ 276.663936][ T6071] __lock_acquire+0xad5/0xd80 [ 276.663956][ T6071] lock_acquire+0x116/0x2f0 [ 276.663973][ T6071] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 276.663995][ T6071] __mutex_lock+0x1a5/0x10c0 [ 276.664015][ T6071] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 276.664036][ T6071] ? __cancel_work+0x24c/0x390 [ 276.664059][ T6071] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 276.664074][ T6071] ? __cancel_work+0x2f0/0x390 [ 276.664095][ T6071] ? __pfx___mutex_lock+0x10/0x10 [ 276.664115][ T6071] ? __pfx___cancel_work+0x10/0x10 [ 276.664138][ T6071] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.664165][ T6071] team_vlan_rx_kill_vid+0x36/0xe0 [ 276.664183][ T6071] vlan_vid_del+0x483/0x770 [ 276.664212][ T6071] vlan_device_event+0x23c/0x1e00 [ 276.664230][ T6071] ? br_device_event+0x28f/0xae0 [ 276.664251][ T6071] ? __pfx_phonet_device_notify+0x10/0x10 [ 276.664269][ T6071] ? __pfx_vlan_device_event+0x10/0x10 [ 276.664291][ T6071] ? __pfx_br_device_event+0x10/0x10 [ 276.664312][ T6071] ? raw_notifier+0x9d/0x740 [ 276.664334][ T6071] ? isotp_notifier+0xa4/0x6b0 [ 276.664350][ T6071] ? cgw_notifier+0xd8/0x3b0 [ 276.664364][ T6071] ? packet_notifier+0x76/0xa30 [ 276.664387][ T6071] notifier_call_chain+0x1a5/0x3f0 [ 276.664412][ T6071] dev_close_many+0x33e/0x4c0 [ 276.664437][ T6071] ? __pfx_dev_close_many+0x10/0x10 [ 276.664476][ T6071] unregister_netdevice_many_notify+0x628/0x2510 [ 276.664500][ T6071] ? lockdep_hardirqs_on+0x9d/0x150 [ 276.664520][ T6071] ? __local_bh_enable_ip+0x168/0x200 [ 276.664538][ T6071] ? batadv_tt_local_remove+0x119/0x230 [ 276.664554][ T6071] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 276.664570][ T6071] ? batadv_tt_local_remove+0x119/0x230 [ 276.664587][ T6071] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 276.664613][ T6071] ? unregister_netdevice_queue+0x2c4/0x400 [ 276.664635][ T6071] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 276.664660][ T6071] default_device_exit_batch+0x7ff/0x880 [ 276.664689][ T6071] ? __pfx_default_device_exit_batch+0x10/0x10 [ 276.664715][ T6071] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 276.664738][ T6071] ? cfg802154_pernet_exit+0xc3/0xe0 [ 276.664754][ T6071] ? __pfx_default_device_exit_batch+0x10/0x10 [ 276.664779][ T6071] cleanup_net+0x8af/0xd60 [ 276.664806][ T6071] ? __pfx_cleanup_net+0x10/0x10 [ 276.664835][ T6071] ? process_scheduled_works+0x9cb/0x18e0 [ 276.664853][ T6071] process_scheduled_works+0xac3/0x18e0 [ 276.664882][ T6071] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.664905][ T6071] ? assign_work+0x367/0x3d0 [ 276.664924][ T6071] worker_thread+0x870/0xd50 [ 276.664949][ T6071] ? __kthread_parkme+0x1a8/0x200 [ 276.664970][ T6071] ? __pfx_worker_thread+0x10/0x10 [ 276.664990][ T6071] kthread+0x7b7/0x940 [ 276.665013][ T6071] ? __pfx_worker_thread+0x10/0x10 [ 276.665034][ T6071] ? __pfx_kthread+0x10/0x10 [ 276.665056][ T6071] ? __pfx_kthread+0x10/0x10 [ 276.665078][ T6071] ? __pfx_kthread+0x10/0x10 [ 276.665100][ T6071] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.665122][ T6071] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.665138][ T6071] ? lockdep_hardirqs_on+0x9d/0x150 [ 276.665156][ T6071] ? __pfx_kthread+0x10/0x10 [ 276.665179][ T6071] ret_from_fork+0x4b/0x80 [ 276.665196][ T6071] ? __pfx_kthread+0x10/0x10 [ 276.665218][ T6071] ret_from_fork_asm+0x1a/0x30 [ 276.665240][ T6071] [ 277.048329][ T5842] Bluetooth: hci2: command tx timeout [ 277.822225][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.829788][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.837020][ T8810] bridge_slave_0: entered allmulticast mode [ 277.844061][ T8810] bridge_slave_0: entered promiscuous mode [ 277.923882][ T8909] vlan3: entered allmulticast mode [ 277.948086][ T8909] bond0: entered allmulticast mode [ 277.967747][ T8909] bond_slave_0: entered allmulticast mode [ 277.989297][ T8909] bond_slave_1: entered allmulticast mode [ 278.362371][ T24] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 278.391158][ T24] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 278.418921][ T24] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 278.521993][ T24] usb 1-1: USB disconnect, device number 22