last executing test programs: 8.031736279s ago: executing program 4 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x181d}, 0x4000) 7.911225184s ago: executing program 4 (id=525): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 7.727587656s ago: executing program 2 (id=526): mlock(&(0x7f0000ff7000/0x9000)=nil, 0x9000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x4000000000000000, 0xfffffffffefffffe, 0x0, 0x6}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000001540)={0x0, 0x0, 0x5, &(0x7f0000001500)={0x0, "ca764c69d4a8e5a7595e19d70d56ee7b54260cda39d3f60c63815a66e1bd04bfcc"}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) r5 = eventfd2(0x0, 0x801) eventfd(0x4) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000001010101000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x20000090) 6.839557921s ago: executing program 1 (id=528): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{0x20, ')\t\xc8\xc7\xc8{\b\"\xb4\xae\aI\xed>\xa4/^d<\x94\xef\x19E\xa0\x16\xc7T\v+\xc8\x16\x80\x13r\f\x85\x9d\x13{\x00\a1\x88&H\xd6.\xe3\xac@\xeba\xde\x9e\x9f\xd1+\xff\xe4\xf5C\x94\xfbI;7\x1f\x88eCo\xc7iq\xc3\x18\xd4\x02\xde\x95\xe2\xfbRP\xceV6\x85\xe2\xaa\xda\x8f\xc3\xfe&q\xe1\x12\xe4\x06\x8d\xab\xf3k\xf6pNWao\x13f\xda\x88\xf0\xb5\x16\x1b\xb6\x03D\xe9\xe6\xdd\x13\xc0\f\xcb\x13\r\xa6\x04v\xc5\x83\t\x00\xaa\xc9\xd0atZg\x90mg\xb5\xfa\xd6\x8a\x88\x1e\x03;\xb0,\xa9\xd2%V\x06F\x16\xc0]\xb3*\x99\x02\r\x81\xba\xa6.\xc1\x1d\x00\x00\x00\x00\x00\x00\x00\x04)@\xef\"\xa6\x12'}]}, 0xc4) close(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4093, 0xffd, 0x1, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x51, 0x0, 0xcb, 0x0, 0xfffffffd, 0xd1, 0x4, 0x4, 0x8, 0xa, 0x9, 0x8, 0x0, 0x2, 0x992b, 0x10, 0x40, 0x40, 0x1, '\x00', 0xc, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.637388722s ago: executing program 1 (id=533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x400000000000156, 0x8000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0xff4, "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"/4084}, &(0x7f0000000280)=0xffc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000080)={r8, 0x3e5bfee4}, 0x8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT=r8], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24008051) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8f}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYRES32=r1, @ANYRESOCT=r5, @ANYRES32=r11, @ANYRES16=r4], 0xa0}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) syz_io_uring_setup(0x57ce, &(0x7f00000000c0)={0x0, 0x658b, 0x1, 0xfffffffe, 0x1b0, 0x0, r6}, &(0x7f00000001c0), &(0x7f0000000300)) 5.608470405s ago: executing program 0 (id=534): syz_open_dev$video(&(0x7f0000000440), 0x7, 0x321000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x22a801) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) userfaultfd(0x80001) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) eventfd2(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x2) epoll_create(0x4) epoll_create1(0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(gcm(aes))\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2], 0x20) 5.131785469s ago: executing program 0 (id=537): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7ffffdc5}]}) uname(0xfffffffffffffffe) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x4d, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20010845, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000280)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000001600)=""/131, 0x83}], 0x2, &(0x7f0000001740)=""/230, 0xe6}, 0x80}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001580)=""/56, 0x38}, {&(0x7f0000001840)=""/120, 0x78}, {&(0x7f0000001900)=""/241, 0xf1}, {&(0x7f00000015c0)}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001a40)=""/166, 0xa6}, {&(0x7f0000001d80)=""/243, 0xf3}, {&(0x7f0000001c00)=""/126, 0x7e}], 0x8, &(0x7f0000000400)=""/35, 0x23}, 0x7e56}], 0x3, 0x100, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r5 = dup2(r4, r4) write$tun(r5, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r2, @ANYRES8], 0x46) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}, 0x1}], 0x1, 0x2000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x40880) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1118) 4.660669806s ago: executing program 4 (id=539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c400000019000100000000000000000064011c02000000000000000000000000fe8000000000000000000000000000bb000c0000000000000220000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ff03000000000000000000000000000000000000000000000100000010000a0027bd70002abd700003000000"], 0xc4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e1d, @broadcast}, 0x10) syz_emit_ethernet(0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000000400ab95ff2cb088643fa82ffa02524a1b04d3e4941e5b0a59c247398c7b5304d4fac406a7e58370ab749ecf4ff8f9f9d037917f33d60b0a3d37b7c9b800"/85], 0x0) syz_io_uring_setup(0x2377, &(0x7f0000000000)={0x0, 0xc05f, 0x800, 0x2}, &(0x7f0000000240), &(0x7f0000000280)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) io_pgetevents(0x0, 0x493a, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x4) ppoll(&(0x7f0000000180)=[{r4, 0x4000}, {r4, 0x4}], 0x2, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x4182, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8dd4, 0x9, 0x14, 0xc2}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) r7 = socket$alg(0x26, 0x5, 0x0) (async) syz_io_uring_setup(0x621d, &(0x7f00000002c0)={0x0, 0x32b8, 0x20, 0x3, 0x101, 0x0, r5}, &(0x7f0000000340), &(0x7f0000000380)) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async, rerun: 32) close(0x3) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x8920, &(0x7f0000000200)) (async) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.512798714s ago: executing program 2 (id=540): prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x800, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x81, 0x53b, 0x7ffffffc, 0xa1, 0x1f, "c644c0009d00000800004800"}) r1 = syz_open_pts(r0, 0x40841) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000e00)={0x9, {"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", 0xdfb}}, 0x1006) 4.317645779s ago: executing program 2 (id=542): prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x800, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x81, 0x53b, 0x7ffffffc, 0xa1, 0x1f, "c644c0009d00000800004800"}) syz_usb_connect(0x2, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000875ac908651918004dd90102030109023f00010700a00c09046d040503a4430209050903200006070a09050c00400005067f0905030b00020005060905020000020e7f050905af77"], 0x0) r1 = syz_open_pts(r0, 0x40841) r2 = dup(r1) syz_usb_connect(0x1, 0xb9d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x55, 0x8b, 0x4f, 0x8, 0xe8d, 0x33, 0x944b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8b, 0x3, 0x8, 0x6, 0x10, 0xff, [{{0x9, 0x4, 0xa, 0xd, 0x10, 0xa, 0x0, 0x0, 0x7f, [], [{{0x9, 0x5, 0x0, 0x2, 0x200, 0x4, 0x88, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4e, 0x0, 0x5, [@generic={0x19, 0x4, "17b4f7228db95885146ddfed865bd244d88c80309fc437"}, @generic={0x6f, 0x22, "6188f10967c367a089161d344e71320e6345aa2a1fd67b238cec0c576fd5c6d7e262d939fd5e02e3a3c49f57319e54bd2fe3cec56c06d99c32652e437d68f4b84ba8a8ff33fc4ffdd7c26d802e6d76ac8ff45f2f115f5ba74b035e97d62d4a8b494327140d0916eaca766e8498"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x9, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x70, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xf8, 0xc8, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}, @generic={0xaf, 0x23, "0722f68a59d29b8042e3a081a045a3d71ad8d2380a67fd012006aa9207ff5c80a920b1c0b562885cbcc1b65910210063c1b4c72f6ff968023f104a92d90b4da0f834ac552324a407a019c56f08c992aa6cc4fd3cf30883b317a5f7afb49cead49b44c3ea98af97c60c2391552b22f1e34cd93d3aa3b15ad55b7bab434cac69bfba805e391795e8de47e2d979dc39b8eca46fd3910b07a31ce323a7ad586fe12e1ab8e67d20114437f96bb3d9fb"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x0, 0x81, 0x4}}, {{0x9, 0x5, 0x6, 0x17, 0x200, 0x9, 0x1, 0x7, [@generic={0xf3, 0xf, "13ff8a543ef762cdd1b355cac26c9003a874fd186768efadcb0b7cc80984e765cb9611897a759b8ce4a8e235e3e8c38d6ebe9e20bed4f81b9f147b466fbdc3398e629c51a14ebd6ea254753b91457f3968b8301d6247d12dda5950b9c1c302122a63735e9dfb89fa316ea4c5604d85261a17960780a0bd03ad3c3bcdda08ccfd09f81a87d6005642c75e70662a47fa20309c325d0e1c86aac7c19d2322d96ec787320412bc47a2a6bec541a239bf4f840b109b6e505557a3dd7e1790a9eaa040b2aea5faa8382a0f1c73aadbbf58226902d43abc5020661b516d01409cd86ad1020e50b759881081ec3b31ee817fc95d55"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x2, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x60, 0xf, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xd80}, @generic={0x3c, 0x3, "0e03f4fee29f61150940dccfc74b864720c2290f7ffd3eadceedfc833c9028b9cbaf7498f800b9037b26a0d523affd6040e7c537196926a2fb6e"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x2, 0x1, 0xfc, [@generic={0x90, 0x30, "5881674cd53ffb25cb290d5cf6b1e47e70b3f8c47e7f7d08fc8a25d5d2cb3b5732c04919e5e7c9939240fc265c0fc2fa8823e5417808da53e51410de9809a40c813f76a84296c8c8630e7acd16268ff64fd9284453a2a51cb40538c0f98a0396747c37bdc80a96796b3044bfad35cadfb9fe7a15c11a2992f86e048006a89621335dd4be660dadbb4e4689c34fe2"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xff, 0x0, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}, @generic={0x57, 0x9, "b7b8e5555c17b6905e490c0946437ff3b52fb74959a8d9dafe946fa4810bbbb74823cb1b685c1932b888ece0f0ed687bef1d0af4568a5f675d15fb7b0df16ccc5cdb2c7991e395f7dc8d9a8ea652e773f5ed14c6fa"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0x3, 0x23, [@generic={0x67, 0x22, "01f2732bee78f2e6e718b9dcfd7f0ff2c682d057a5c23927db01467f450e7f641f8aec1c7ff09cb64aa91753db42bc905c73bc4e26a7f2189160e234b7ad3372fe1e19cdf458ba9e82f808c59a90e1dad7d9a5a90617aa27c54db707013c085fd44e60c723"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xe85e}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x1, 0x0, 0x6a, [@generic={0xee, 0x23, "620a2b00cf229f5d71579a107e5b7cfd18ef50a8a62970fe91599c4a5f642dd713f7608613798eb3963f6e8f59cbe31d0f7671839be7304bff9ad1d68b764e76fbd60d98e7e41be7b1ee5b214d183c36fd8fdd1266a2901b419c428475cf0bd381ca04922074595b40113637b89ada6375fabb6f47d73882e6ee4f5951bd47ca26b1aba5770ce3c989d264ae0f1c32824eb1d0369e04b36b5ed54f652230a9560d35ec76fc2d06282cc3be40e5164e5a3898e5930e8e532058ab40d1e795be5d59d0a38571c6cfb331bad0b9a866725f9e4b749f4489244b52885cf32d8282c6c91ded47343c03861e858d3a"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x9, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x8}, @generic={0xc6, 0x2, "c67c5cd0e94a305f497b78d734e04c9d8536b23c4dbafe64129110e2daad5cc3fbd9b28d77ee4a38875fd702cfc9a7381ecd282ffc806034b729dbb8f743e3c1ca834f70f30bb72112111010a6e9298a12fb566bc0e9b70996eeca511446d08411fff1bac845cb7899d0c7814b82db2948a0fe0d5a2856793db6afda31ab8c56665f38092b5c95b3998d8d5d60ea6697001ffa51a6a45fb722fa530d12dd3e970b040121c174846086bcf62e33dce6d5b710bd2809326b7f669fbe22cda30aa4c8801c55"}]}}]}}, {{0x9, 0x4, 0x6c, 0x1, 0x9, 0xa1, 0x4, 0x23, 0x2, [], [{{0x9, 0x5, 0x80, 0x4, 0x8, 0x81, 0x6, 0xc9, [@generic={0xd4, 0x4, "2889ff0ab17a6562dba222324bb19b5cdff1e6815b91a594b5cd3a0d6efad4cd7ce2cf610d61f82cf47d845ebc82bd92c678e38a62edeac16b8a5f231598a3ef1a5b27bc485a69da25939bcb401f4c29065d27276d11948e4226f85b63675392cb9ba1c4a74f14788255f61866e1326c53f1c63acaece51d5cfa5f75ec91d5deb25db5b8796fa7a3294285d6fc9c373abc1cced1f177733002267233bad430eeb627f3e8ce6f96211e32da83704c6114a68f5b7d39fc6236905553ce28d36c19fc6d69868001978bf5f1e9930bdada690983"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x4, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xd, 0x401}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0xa0, 0x5, [@generic={0x2e, 0x23, "a9508536e1b0d968f3afbf5bb7daa2453343e7809acba563e8b5efb9217c853bc5657855bf82c944ad97b3dc"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0xff, 0x7}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x7, 0xbb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x40}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x9, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x48}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5f, 0x1, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xf72a}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x8, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x8000}, @generic={0x2b, 0xd, "6a8dce7d11f11d3c735cc3aad41fa603c81a0d65985dc39d5cf3e0d94a7a5856eea38bdf53a2301a76"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x4, 0x7, 0xff, [@generic={0x28, 0x23, "ec707491246baff8869ae2c0c74f3274d651288cf35b224214d24fdabdde56fd82ab20445d69"}, @generic={0xe5, 0x3, "ce1db30074bd111715540edff6b1a266c78cdcff61038dc8350a714f93e7a404e9bc9ca0f9c05d50bf4a6aaf12eb411628beaeb736a1051fe174492f147495a9ccf529261ab5b026327e1b9cda9c23315c8b6089f7a61dc6f303267dae8bc880f7e2d5b2d50c43b936c1050dfad3db1769e486934423bae02f0b455f448e8a6b6d3d85b08c33fc0de7846f95e451c1b6355026ac442f14b155d99ed73e0227928a0e6024449f482afed6185ddfbc2487e22e349d021c8566ef532fd27f5d9810070d443c5e1be39be221b65f8d94f30e7a7bb16278200df1725867fe6d0e3f69908f60"}]}}]}}, {{0x9, 0x4, 0x7, 0x8, 0xa, 0x4f, 0x8, 0x9f, 0x4, [], [{{0x9, 0x5, 0x1a9018768e1b6f27, 0x2, 0x10, 0x98, 0xc, 0x80}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0x6, 0x40}}, {{0x9, 0x5, 0x80, 0x1a, 0x40, 0x1, 0x2f, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}, @generic={0xef, 0x21, "18ec9393a20a9396f7fa50bbcda9d53095f026c31a65bc28fc1bfa6ff074804d251caafa29c9afb26bbd0e9a826dd14cbe47756341a4555a26d720ee00c71cb62884191ca82ad07f3d02f6c4e04525f7771a7f82b2e94412bbc2ae1ca6abc2b2e2d496552fb8501a83d870e63e30f632ff0fafccc4c118e35e0f94587adfce93b91d6341e6ecea0f61e532721929697fbddb0db9a1614cbd95dc391e1ae629664d7b5f98f1f23aa6101b40f73906e4bb07b9fbd98111bb81c344848ca72e57c1ef4dd3445cbe245e1c9ffa641acdb9406fc15a320f9cba82352875f0a4b9380ce0d4490d1193cbe4a4b7126074"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0xc6, 0xdf, 0x9, [@generic={0xec, 0x4, "56d88ffa65f5f245218aa625a77fa43746d4c5ece10ff71d9891298b983fc26df211cd6dd65209add2c30d0ad5edea8926167c05e8e92288890903ff06278260dfc64174b080f8485ea8daa7d09966442c39807a0650d4ff1c2a6d44a787d8ad860ac6e8ab6d6c70b89c1a27f8918f35c020a21172f1901acf7536aed06e110bdf39fefa5cc4a321757c36c9c5486f32bf2686e648208ccca2705a14d52d6021f9469050251152a456f4a289b187d440df5521a6b139a11598ee46e96434b338898fa5bcd065f7d18cf6728f1642981e361518379bd359889395d4acdc3d20f5f0cf708aac646b067c0a"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x7, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5c}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x2, 0x9b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x1, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x3}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x1, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x6, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4fa}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x4f, 0x5, 0xf9}}]}}]}}]}}, &(0x7f0000002000)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x110, 0x3, 0xa, 0xc0, 0x40, 0xc}, 0x11, &(0x7f0000000cc0)={0x5, 0xf, 0x11, 0x1, [@generic={0xc, 0x10, 0x3, "1e0a3fe86063119cf3"}]}, 0x6, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x4001}}, {0xdc, &(0x7f0000001e40)=@string={0xdc, 0x3, "dee2f700aa1694fac65cf04dbd983773192f611f7d8b8ebe3a07d1c25af1d90b72fc715efe14a155a84bcc5a003d2e92ae68d168a2c90f8213de0bfee2f37df13e21ad9d78180d14eb926337aba20ae11ca55e47395dbcc6d204ab36caddb22198b13b89666f2933b94c20a6d8e53826f5ce1492223de4214cc46156950f98dfd482b6c11dae4fbd14b731410752b0039f953fec4f3314d25e6b903720e1f05ec67be34dfa9a85a29baf11a3d672ca339b709fe9516833e3f77362814d8c262263d46b4b3c707d424362226f23e6fc6d0a0d41ca896cf6c77b75"}}, {0x72, &(0x7f0000000d40)=@string={0x72, 0x3, "b8ae98615cceba976d34a833036f29f4f2d3efac26654361b6a5c2f264896fd3adb556b774afb998b646a09504708215af2aa958895a93c038a8ad01db8889f013c671470c794eae513fb833026d6ceebd455052a33d32a997a3eec611de6aaefa0d17a1a492ca95fbc5744c00e715da"}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x422}}]}) write$UHID_INPUT(r2, &(0x7f0000000e00)={0x9, {"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", 0xdfb}}, 0x1006) 4.031478082s ago: executing program 4 (id=545): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000001040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x15}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 7) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x70}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = dup2(r7, r7) ioctl$vim2m_VIDIOC_S_FMT(r8, 0x40045b17, 0x0) r9 = accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) sendmmsg$alg(r9, &(0x7f00000042c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000005440)=[@op={0x10, 0x117, 0x3, 0x3}, @iv={0x10}], 0x20, 0x4000000}], 0x1, 0x840) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000000)={0x80a0000, 0x11c000, 0x24}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r13, 0xc0cc5615, &(0x7f00000002c0)={0x4, @output={0x1000, 0x0, {0x1ff, 0xf53}, 0x5, 0xd00}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.809200597s ago: executing program 0 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x181d}, 0x4000) 3.543628945s ago: executing program 0 (id=548): r0 = syz_io_uring_setup(0xc17, &(0x7f0000000140)={0x0, 0x3ae7, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x41) 2.705555925s ago: executing program 0 (id=551): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000190001000000000000000000640101010000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000a"], 0x108}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, 0x0, &(0x7f00000004c0)) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902440001015d6938215d72db8dd7c0670b000100090400000002060000052406000005240000000d240f01000000000000000000090581034000000000090582020000"], 0x0) syz_usb_ep_read(r2, 0x3, 0x0, 0x0) 2.308427299s ago: executing program 2 (id=553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x3, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0x10, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @generic={0x22, 0x12, "d45c3ed8adc5d2758354774abfc23fbf"}, @eol, @mss={0x2, 0x4, 0x1}, @sack={0x5, 0x1a, [0xda8, 0x4, 0x9, 0xffff, 0x7ff, 0x4]}, @md5sig={0x13, 0x12, "3c979df9fe71260d6d4deaeae4f1cc77"}, @nop]}}}}}}}, 0x0) 2.186625833s ago: executing program 2 (id=554): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="a6479f435760feec676203db3bf2532515fad85107bf2daf84b5994810f18b3a97e032c9eb169a6d519c14efea5c76773725d9602d2473e305d0ce5c260210a5429be90c1efa12d8a5d6a1e5f91e48d4596fe84206347f5824884030d330d35ec2817948181b96feae1821ef847c23f3ec58231633fbdef3e7762507f3d28c3ac29c535516dafa6ad5d37b40", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00'], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x48}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = accept4$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000f0ffff0100000008000300", @ANYRES32=r10], 0x28}}, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) r11 = syz_open_pts(r5, 0x0) dup3(r11, r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) pidfd_getfd(r4, r1, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r13, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x7}, 0xb) write$P9_RAUTH(r13, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) read$FUSE(r13, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0xffce) faccessat(r12, &(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r14, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r15}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) 1.770798293s ago: executing program 1 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x1400, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.698829123s ago: executing program 3 (id=557): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x204) 1.52329887s ago: executing program 3 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x181d}, 0x4000) 1.491964121s ago: executing program 1 (id=559): unshare(0x22020600) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 1.438452801s ago: executing program 3 (id=560): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 1.285160899s ago: executing program 1 (id=561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000100), 0x4001) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs(r5, &(0x7f0000000180)='net/nfsfs\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 1.285017295s ago: executing program 2 (id=562): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04040a00000000000019871b02"], 0xd) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) 555.993601ms ago: executing program 0 (id=563): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x3}) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000362000/0x2000)=nil, 0x2000, &(0x7f00000006c0)=""/279) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x6, {0x0, 0x4}, {0x1, 0x9}, @const={0x4, {0x0, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r3], 0x50}, 0x1, 0x7}, 0x1) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_usb_control_io$printer(r0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x29, 0x0, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) 552.701879ms ago: executing program 3 (id=564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x3, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0x10, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @generic={0x22, 0x12, "d45c3ed8adc5d2758354774abfc23fbf"}, @eol, @mss={0x2, 0x4, 0x1}, @sack={0x5, 0x1a, [0xda8, 0x4, 0x9, 0xffff, 0x7ff, 0x4]}, @md5sig={0x13, 0x12, "3c979df9fe71260d6d4deaeae4f1cc77"}]}}}}}}}, 0x0) 536.738943ms ago: executing program 4 (id=565): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, @remote, 0x1, 0xffe4, 0x1, 0x0, 0x7, 0x3, r5}) (async, rerun: 64) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) (async, rerun: 32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000) (async) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0x88, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [@dstopts={0x80, 0x7, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x9b, 0xf, [0xfffffffe, 0x100, 0x3, 0xaaee, 0x9, 0x0]}}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) (async, rerun: 64) set_mempolicy(0x3, &(0x7f0000000000)=0xb, 0x7) (async, rerun: 64) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r15, 0x4048aecb, &(0x7f0000000080)=ANY=[]) (async) ioctl$KVM_GET_VCPU_EVENTS(r15, 0x4048aecb, &(0x7f0000000080)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r16, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fbdbdf254300000008000300", @ANYRES32=r12, @ANYBLOB="0c0058001f00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (rerun: 64) 189.715232ms ago: executing program 4 (id=566): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x8000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x0, 0x21, 0x6, {0x6, 0xf, "9665f574"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x0, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x1, 0x5, 0x1, 0x0, 0x8, 0x9e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x746, 0x6, 0x10, "7e82e75285c23896a6"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x1, 0x8, "90d610f364ae44"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x1}, @as_header={0x7, 0x24, 0x1, 0x2, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x22, 0xd, 0x9, {0x7, 0x25, 0x1, 0x80, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x4, 0x6f, 0x9, "f7b48fbd9f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x8, 0x0, {0x7, 0x25, 0x1, 0x81, 0xa, 0x4}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x5, 0xc, 0x6, 0x40, 0xf}, 0x58, &(0x7f00000003c0)={0x5, 0xf, 0x58, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "4b28c40ea999d306fc609d762ad2eaba"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "2e377d3e984c955b6bd4a936e8763817"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x2, 0x0, 0xfe01}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "7efbce100115a408881114df3149415b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb6, 0xc, 0x2, 0x3ff}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x400c4152, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x2000, 0x4, 0x3, 0xe, 0x3, 0x10, 0xd, 0x8, 0x40, 0xb, 0x7}, {0x8080000, 0x80a0000, 0xf9d1b9d96d04b77d, 0x87, 0xe, 0x8, 0x5, 0x40, 0x5, 0xe, 0x4, 0x8}, {0x80a0000, 0x10000, 0xa, 0xfe, 0x4, 0x5, 0xc, 0x9, 0x6, 0xe, 0xc0, 0x47}, {0xe6ff0002, 0xeeef0000, 0x9, 0x4, 0x5, 0x2, 0x4, 0x9, 0x5, 0x1, 0x1, 0x10}, {0x5000, 0x8080000, 0xc, 0x2, 0xd, 0x8, 0x6, 0x2, 0x6, 0x9c, 0x9, 0x2}, {0x6000, 0x3000, 0x8, 0x10, 0x4, 0x5, 0x4, 0xfa, 0x4, 0x7, 0xb, 0x5}, {0xeeee0000, 0x8080000, 0x4, 0x26, 0x4, 0x6e, 0x80, 0x5, 0x8, 0x10, 0x0, 0x2}, {0x2, 0xdddd0000, 0xe, 0x8, 0x2, 0xc, 0x4, 0xf9, 0x1, 0x2, 0x1, 0x5}, {0x0, 0x7}, {0x8080000, 0x718}, 0x8, 0x0, 0x5, 0x10060, 0x6, 0x200, 0xffff1000, [0xf4, 0x1, 0x2, 0x3]}) bind$alg(r4, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) 167.678676ms ago: executing program 3 (id=567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x18) 66.924549ms ago: executing program 1 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000a400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$FS_IOC_GETVERSION(r5, 0x40015b19, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c0d0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a40)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40440c1}, 0x20008040) clock_getres(0xa, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}}, 0x20040810) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008042) 0s ago: executing program 3 (id=569): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000240)={0x0, 0x2}) kernel console output (not intermixed with test programs): 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 180.979146][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 181.040450][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 181.065682][ T5927] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 181.079416][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.213543][ T5927] usb 2-1: Product: syz [ 181.345862][ T5927] usb 2-1: Manufacturer: syz [ 181.383275][ T5927] usb 2-1: SerialNumber: syz [ 181.394120][ T5927] usb 2-1: config 0 descriptor?? [ 181.526499][ T2154] usbhid 1-1:0.0: can't add hid device: -71 [ 181.552165][ T2154] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.591937][ T2154] usb 1-1: USB disconnect, device number 6 [ 181.641594][ T6433] Can't find ip_set type hash:ipÿ [ 181.824676][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.843012][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.863383][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.882489][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.904909][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.935977][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.952347][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.962951][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 181.983107][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.028987][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.035129][ T6445] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 182.055729][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.070062][ T1223] usb 3-1: USB disconnect, device number 5 [ 182.074111][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.101761][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.133557][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.147587][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.156994][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.182229][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.210930][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.246432][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.254315][ T5927] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 182.260382][ T5927] input input11: Timeout waiting for response from device. [ 182.278495][ T5927] usb 2-1: USB disconnect, device number 10 [ 182.459066][ T6456] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 182.599171][ T6456] bond1: entered allmulticast mode [ 182.625764][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.737423][ T6459] bond1: (slave ip6gretap1): making interface the new active one [ 182.802952][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 182.802974][ T30] audit: type=1326 audit(1744407380.634:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 182.866903][ T6459] ip6gretap1: entered allmulticast mode [ 182.868948][ T30] audit: type=1326 audit(1744407380.634:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000 [ 182.875243][ T6459] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 182.895818][ T30] audit: type=1326 audit(1744407380.634:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 182.932585][ T30] audit: type=1326 audit(1744407380.634:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 182.954407][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.992144][ T30] audit: type=1326 audit(1744407380.634:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000 [ 183.077190][ T30] audit: type=1326 audit(1744407380.634:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 183.147730][ T30] audit: type=1326 audit(1744407380.634:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000 [ 183.211578][ T30] audit: type=1326 audit(1744407380.634:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 183.259922][ T30] audit: type=1326 audit(1744407380.634:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf746d598 code=0x7ffc0000 [ 183.311118][ T30] audit: type=1326 audit(1744407380.634:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 184.531632][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 185.237671][ T6491] syz.2.155 (6491) used greatest stack depth: 17720 bytes left [ 186.556752][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 187.544192][ T1223] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 187.967561][ T1223] usb 4-1: config 0 has no interfaces? [ 188.030613][ T1223] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 188.047833][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.061706][ T1223] usb 4-1: Product: syz [ 188.066953][ T1223] usb 4-1: Manufacturer: syz [ 188.071668][ T1223] usb 4-1: SerialNumber: syz [ 188.082428][ T1223] usb 4-1: config 0 descriptor?? [ 188.161867][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 188.294515][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 188.472041][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 188.594990][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.604280][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.763877][ T5896] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.946385][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 188.978539][ T5896] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 188.989571][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.010543][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.071415][ T5896] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.100846][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.118918][ T5896] usb 2-1: Product: syz [ 189.123319][ T5896] usb 2-1: Manufacturer: syz [ 189.137907][ T5896] usb 2-1: SerialNumber: syz [ 189.161385][ T6555] FAULT_INJECTION: forcing a failure. [ 189.161385][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 189.247583][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.4.173 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 189.247616][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.247634][ T6555] Call Trace: [ 189.247642][ T6555] [ 189.247650][ T6555] dump_stack_lvl+0x241/0x360 [ 189.247702][ T6555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.247740][ T6555] ? __wake_up_klogd+0xcc/0x110 [ 189.247778][ T6555] should_fail_ex+0x424/0x570 [ 189.247805][ T6555] should_failslab+0xac/0x100 [ 189.247837][ T6555] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 189.247878][ T6555] ? __alloc_skb+0x1c2/0x480 [ 189.247903][ T6555] __alloc_skb+0x1c2/0x480 [ 189.247929][ T6555] ? __pfx___alloc_skb+0x10/0x10 [ 189.247951][ T6555] ? netlink_autobind+0xd6/0x2f0 [ 189.247981][ T6555] ? netlink_autobind+0x2b0/0x2f0 [ 189.248016][ T6555] netlink_sendmsg+0x638/0xcd0 [ 189.248060][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.248095][ T6555] ? __import_iovec+0x585/0x830 [ 189.248124][ T6555] ? aa_sock_msg_perm+0x91/0x160 [ 189.248160][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.248188][ T6555] __sock_sendmsg+0x221/0x270 [ 189.248220][ T6555] ____sys_sendmsg+0x523/0x860 [ 189.248252][ T6555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.248293][ T6555] __sys_sendmsg+0x271/0x360 [ 189.248322][ T6555] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.248398][ T6555] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 189.248426][ T6555] ? lockdep_hardirqs_on+0x9d/0x150 [ 189.248453][ T6555] __do_fast_syscall_32+0xb4/0x110 [ 189.248480][ T6555] ? exc_page_fault+0x5f8/0x920 [ 189.248517][ T6555] do_fast_syscall_32+0x34/0x80 [ 189.248544][ T6555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.248574][ T6555] RIP: 0023:0xf749d579 [ 189.248596][ T6555] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.248612][ T6555] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 189.248642][ T6555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0 [ 189.248656][ T6555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.248667][ T6555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.248679][ T6555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.248692][ T6555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.248722][ T6555] [ 189.813205][ T5896] usb 2-1: 0:2 : does not exist [ 189.961779][ T6568] process 'syz.0.189' launched './file1' with NULL argv: empty string added [ 190.057653][ T5927] usb 4-1: USB disconnect, device number 6 [ 190.397804][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 190.435549][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 191.662945][ T5896] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 191.774340][ T5896] usb 2-1: USB disconnect, device number 11 [ 191.784230][ T1223] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.945138][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 191.956387][ T1223] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 191.965706][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.974114][ T1223] usb 4-1: Product: syz [ 191.979352][ T1223] usb 4-1: Manufacturer: syz [ 191.984221][ T1223] usb 4-1: SerialNumber: syz [ 192.002323][ T1223] usb 4-1: config 0 descriptor?? [ 192.020057][ T1223] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 192.154076][ T5927] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.303970][ T5896] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.364383][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 192.373134][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.404697][ T5927] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 192.414874][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.423099][ T5927] usb 1-1: Product: syz [ 192.428232][ T5927] usb 1-1: Manufacturer: syz [ 192.433428][ T5927] usb 1-1: SerialNumber: syz [ 192.509511][ T5927] usb 1-1: config 0 descriptor?? [ 192.517840][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 192.664706][ T1223] gspca_m5602: Failed to find a sensor [ 192.666100][ T5927] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 192.670419][ T1223] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 192.687030][ T1223] usb 4-1: USB disconnect, device number 7 [ 192.690228][ T5896] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.781637][ T5927] usb 1-1: selecting invalid altsetting 1 [ 192.788048][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.807933][ T5896] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 192.817700][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.841671][ T5896] usb 2-1: config 0 descriptor?? [ 193.267221][ T5896] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 193.294887][ T5896] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 193.310288][ T5896] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 193.318675][ T5927] gspca_stk014: reg_r err -110 [ 193.325959][ T5927] stk014 1-1:0.0: probe with driver stk014 failed with error -110 [ 193.335748][ T5896] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 193.350678][ T5896] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 193.364549][ T5896] bigben 0003:146B:0902.0001: unknown main item tag 0x0 [ 193.431901][ T5896] bigben 0003:146B:0902.0001: hidraw0: USB HID v0.05 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 193.455408][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.469391][ T5896] bigben 0003:146B:0902.0001: missing HID_OUTPUT_REPORT 0 [ 193.482509][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.521516][ T5896] bigben 0003:146B:0902.0001: no output report found [ 193.557477][ T6323] udevd[6323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.575191][ T1223] usb 1-1: USB disconnect, device number 7 [ 193.626312][ T9] usb 2-1: USB disconnect, device number 12 [ 193.884068][ T882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.054271][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.070730][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.105051][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.126806][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 194.194884][ T882] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 194.249433][ T9] usb 2-1: no configurations [ 194.259351][ T9] usb 2-1: can't read configurations, error -22 [ 194.358623][ T882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.399512][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.407014][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.484906][ T882] usb 4-1: config 0 descriptor?? [ 194.531271][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 194.775555][ T9] usb 2-1: no configurations [ 194.782371][ T9] usb 2-1: can't read configurations, error -22 [ 194.944498][ T9] usb usb2-port1: attempt power cycle [ 195.064468][ T882] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 195.189450][ T882] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 195.229219][ T6626] tipc: Invalid UDP bearer configuration [ 195.229288][ T6626] tipc: Enabling of bearer rejected, failed to enable media [ 195.413894][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 195.455715][ T9] usb 2-1: no configurations [ 195.460424][ T9] usb 2-1: can't read configurations, error -22 [ 195.482096][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.496812][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.517157][ T6650] capability: warning: `syz.2.207' uses 32-bit capabilities (legacy support in use) [ 195.542758][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.561776][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.663956][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 195.705406][ T9] usb 2-1: no configurations [ 195.710142][ T9] usb 2-1: can't read configurations, error -22 [ 195.788710][ T9] usb usb2-port1: unable to enumerate USB device [ 195.925284][ T6656] "syz.4.208" (6656) uses obsolete ecb(arc4) skcipher [ 195.944592][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.208'. [ 196.099343][ T882] cp2112 0003:10C4:EA90.0002: error requesting version [ 196.176877][ T882] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 196.264867][ T882] usb 4-1: USB disconnect, device number 8 [ 196.298340][ T5897] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 196.484699][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 196.491782][ T5897] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x4 has invalid maxpacket 36864, setting to 1024 [ 196.523860][ T5897] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 1024 [ 196.550200][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.560276][ T6664] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 196.575260][ T5897] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 196.584770][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.592817][ T5897] usb 3-1: Product: syz [ 196.597182][ T5897] usb 3-1: Manufacturer: syz [ 196.601907][ T5897] usb 3-1: SerialNumber: syz [ 196.620821][ T5897] usb 3-1: config 0 descriptor?? [ 196.642647][ T5897] gs_usb 3-1:0.0: Required endpoints not found [ 196.864565][ T1223] usb 3-1: USB disconnect, device number 6 [ 197.193966][ T5897] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 197.201522][ T882] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 197.233924][ T5927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.354033][ T882] usb 2-1: Using ep0 maxpacket: 16 [ 197.363666][ T882] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 197.388567][ T5897] usb 1-1: config 0 has no interfaces? [ 197.405528][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 197.413067][ T5927] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 197.422365][ T882] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.422912][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.440011][ T882] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.480081][ T5927] usb 4-1: config 0 descriptor?? [ 197.483318][ T882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.506076][ T5927] go7007 4-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 197.516814][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.529605][ T882] usb 2-1: Product: syz [ 197.552362][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 197.568850][ T882] usb 2-1: Manufacturer: syz [ 197.574096][ T882] usb 2-1: SerialNumber: syz [ 197.580952][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.600900][ T5897] usb 1-1: Product: syz [ 197.611019][ T5897] usb 1-1: Manufacturer: syz [ 197.620884][ T5897] usb 1-1: SerialNumber: syz [ 197.631420][ T5897] usb 1-1: config 0 descriptor?? [ 197.705940][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.716351][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.745731][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.769395][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.857914][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.875507][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.939788][ T6673] netlink: 48 bytes leftover after parsing attributes in process `syz.0.213'. [ 198.072932][ T5897] usb 4-1: USB disconnect, device number 9 [ 198.371321][ T5927] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 198.687675][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.701313][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 198.781728][ T5927] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 198.811909][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.847794][ T5927] usb 3-1: config 0 descriptor?? [ 199.641993][ T5927] usb 3-1: string descriptor 0 read error: -71 [ 199.705993][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 199.734071][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 199.785117][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 199.867397][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 199.939742][ T5927] usb 3-1: media controller created [ 199.999690][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.071951][ T882] usb 2-1: USB disconnect, device number 17 [ 200.080502][ T5896] usb 1-1: USB disconnect, device number 8 [ 200.126330][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 200.175481][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 200.240680][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 200.325264][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 200.347234][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 200.402590][ T5927] usb 3-1: USB disconnect, device number 7 [ 200.460118][ T6323] udevd[6323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.603903][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 200.642199][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 200.680951][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 202.247171][ T6732] FAULT_INJECTION: forcing a failure. [ 202.247171][ T6732] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 202.296556][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.2.234 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 202.296587][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.296600][ T6732] Call Trace: [ 202.296612][ T6732] [ 202.296621][ T6732] dump_stack_lvl+0x241/0x360 [ 202.296660][ T6732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.296690][ T6732] ? __pfx__printk+0x10/0x10 [ 202.296733][ T6732] should_fail_ex+0x424/0x570 [ 202.296761][ T6732] _copy_from_iter+0x211/0x1c70 [ 202.296794][ T6732] ? __build_skb_around+0x247/0x3d0 [ 202.296819][ T6732] ? __alloc_skb+0x298/0x480 [ 202.296838][ T6732] ? __pfx__copy_from_iter+0x10/0x10 [ 202.296868][ T6732] ? __pfx___alloc_skb+0x10/0x10 [ 202.296890][ T6732] ? skb_put+0x114/0x1f0 [ 202.296915][ T6732] netlink_sendmsg+0x73c/0xcd0 [ 202.296960][ T6732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.296994][ T6732] ? __import_iovec+0x585/0x830 [ 202.297022][ T6732] ? aa_sock_msg_perm+0x91/0x160 [ 202.297057][ T6732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.297085][ T6732] __sock_sendmsg+0x221/0x270 [ 202.297116][ T6732] ____sys_sendmsg+0x523/0x860 [ 202.297149][ T6732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.297189][ T6732] __sys_sendmsg+0x271/0x360 [ 202.297217][ T6732] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.297293][ T6732] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 202.297318][ T6732] ? lockdep_hardirqs_on+0x9d/0x150 [ 202.297346][ T6732] __do_fast_syscall_32+0xb4/0x110 [ 202.297371][ T6732] ? exc_page_fault+0x5f8/0x920 [ 202.297400][ T6732] do_fast_syscall_32+0x34/0x80 [ 202.297425][ T6732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.297458][ T6732] RIP: 0023:0xf73ed579 [ 202.297475][ T6732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 202.297492][ T6732] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 202.297514][ T6732] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001240 [ 202.297528][ T6732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.297540][ T6732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.297551][ T6732] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.297563][ T6732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.297592][ T6732] [ 202.611476][ T6736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.235'. [ 204.362146][ T6762] fuse: Unknown parameter 'rootmmde' [ 204.391872][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 204.442317][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 205.007871][ T6775] FAULT_INJECTION: forcing a failure. [ 205.007871][ T6775] name fail_futex, interval 1, probability 0, space 0, times 1 [ 205.039316][ T6775] CPU: 1 UID: 0 PID: 6775 Comm: syz.2.245 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 205.039347][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.039378][ T6775] Call Trace: [ 205.039387][ T6775] [ 205.039397][ T6775] dump_stack_lvl+0x241/0x360 [ 205.039436][ T6775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.039467][ T6775] ? __pfx__printk+0x10/0x10 [ 205.039489][ T6775] ? try_to_wake_up+0xa27/0x15d0 [ 205.039518][ T6775] ? __pfx_try_to_wake_up+0x10/0x10 [ 205.039541][ T6775] should_fail_ex+0x424/0x570 [ 205.039560][ T6775] get_futex_key+0x1a6/0xf50 [ 205.039583][ T6775] ? __lock_acquire+0xad5/0xd80 [ 205.039601][ T6775] ? __pfx_get_futex_key+0x10/0x10 [ 205.039630][ T6775] futex_wake+0x12c/0x5d0 [ 205.039651][ T6775] ? __pfx_futex_wake+0x10/0x10 [ 205.039678][ T6775] do_futex+0x3d5/0x5a0 [ 205.039703][ T6775] ? __pfx_do_futex+0x10/0x10 [ 205.039726][ T6775] ? __might_fault+0xaa/0x120 [ 205.039751][ T6775] mm_release+0x195/0x430 [ 205.039769][ T6775] ? __pfx_mm_release+0x10/0x10 [ 205.039782][ T6775] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.039807][ T6775] exit_mm+0xb7/0x310 [ 205.039832][ T6775] ? __pfx_exit_mm+0x10/0x10 [ 205.039850][ T6775] ? taskstats_exit+0x326/0xa60 [ 205.039865][ T6775] ? lockdep_hardirqs_on+0x9d/0x150 [ 205.039884][ T6775] do_exit+0x994/0x27f0 [ 205.039908][ T6775] ? do_raw_spin_lock+0x151/0x370 [ 205.039931][ T6775] ? __pfx_do_exit+0x10/0x10 [ 205.039950][ T6775] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.039986][ T6775] do_group_exit+0x207/0x2c0 [ 205.040004][ T6775] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.040018][ T6775] ? lockdep_hardirqs_on+0x9d/0x150 [ 205.040037][ T6775] get_signal+0x1696/0x1730 [ 205.040063][ T6775] ? __pfx_get_signal+0x10/0x10 [ 205.040084][ T6775] arch_do_signal_or_restart+0x98/0x840 [ 205.040109][ T6775] ? __pfx___up_read+0x10/0x10 [ 205.040129][ T6775] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 205.040163][ T6775] ? syscall_exit_to_user_mode+0xa3/0x340 [ 205.040183][ T6775] syscall_exit_to_user_mode+0xce/0x340 [ 205.040204][ T6775] __do_fast_syscall_32+0xc1/0x110 [ 205.040240][ T6775] ? exc_page_fault+0x5f8/0x920 [ 205.040260][ T6775] do_fast_syscall_32+0x34/0x80 [ 205.040278][ T6775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.040297][ T6775] RIP: 0023:0xf73ed579 [ 205.040309][ T6775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 205.040320][ T6775] RSP: 002b:00000000f503455c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 205.040336][ T6775] RAX: ffffffffffffffa1 RBX: 0000000080000000 RCX: 0000000000600000 [ 205.040346][ T6775] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.040354][ T6775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.040362][ T6775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.040370][ T6775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.040389][ T6775] [ 205.766242][ T6789] random: crng reseeded on system resumption [ 205.834287][ T5898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.908822][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 205.987323][ T5898] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 206.035077][ T5898] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 206.051355][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.059984][ T5898] usb 4-1: Product: syz [ 206.067217][ T5898] usb 4-1: Manufacturer: syz [ 206.071833][ T5898] usb 4-1: SerialNumber: syz [ 206.075498][ T5898] usb 4-1: config 0 descriptor?? [ 206.089102][ T5898] hub 4-1:0.0: Invalid hub with more than one config or interface [ 206.102009][ T5898] hub 4-1:0.0: probe with driver hub failed with error -22 [ 206.110142][ T6789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 206.116784][ T6789] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 206.130978][ T6789] vhci_hcd vhci_hcd.0: Device attached [ 206.294484][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.304865][ T882] vhci_hcd: vhci_device speed not set [ 206.311120][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.324520][ T5898] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 206.359387][ T5898] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 206.367797][ T882] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 206.375931][ T5898] dib0700: firmware download failed at 7 with -22 [ 206.389903][ T5898] usb 4-1: USB disconnect, device number 10 [ 206.952336][ T6800] FAULT_INJECTION: forcing a failure. [ 206.952336][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 206.986449][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.0.254 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 206.986477][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.986490][ T6800] Call Trace: [ 206.986496][ T6800] [ 206.986503][ T6800] dump_stack_lvl+0x241/0x360 [ 206.986532][ T6800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.986554][ T6800] ? __pfx__printk+0x10/0x10 [ 206.986578][ T6800] ? __pfx___might_resched+0x10/0x10 [ 206.986600][ T6800] should_fail_ex+0x424/0x570 [ 206.986619][ T6800] should_failslab+0xac/0x100 [ 206.986642][ T6800] __kmalloc_noprof+0xdf/0x4d0 [ 206.986663][ T6800] ? sock_kmalloc+0xd7/0x160 [ 206.986684][ T6800] sock_kmalloc+0xd7/0x160 [ 206.986703][ T6800] __ip_mc_join_group+0x364/0x500 [ 206.986731][ T6800] do_ip_setsockopt+0x266a/0x39c0 [ 206.986757][ T6800] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 206.986777][ T6800] ? aa_sk_perm+0x96f/0xac0 [ 206.986805][ T6800] ? ksys_write+0x24e/0x2d0 [ 206.986822][ T6800] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.986842][ T6800] ? __lock_acquire+0xad5/0xd80 [ 206.986861][ T6800] ip_setsockopt+0x63/0x100 [ 206.986880][ T6800] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.986900][ T6800] do_sock_setsockopt+0x3b1/0x710 [ 206.986921][ T6800] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.986935][ T6800] ? __fget_files+0x2a/0x420 [ 206.986950][ T6800] ? __fget_files+0x39d/0x420 [ 206.986962][ T6800] ? __fget_files+0x2a/0x420 [ 206.986981][ T6800] __ia32_sys_setsockopt+0x1f2/0x280 [ 206.987002][ T6800] __do_fast_syscall_32+0xb4/0x110 [ 206.987021][ T6800] ? exc_page_fault+0x5f8/0x920 [ 206.987041][ T6800] do_fast_syscall_32+0x34/0x80 [ 206.987060][ T6800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.987078][ T6800] RIP: 0023:0xf747d579 [ 206.987091][ T6800] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.987103][ T6800] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 206.987119][ T6800] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 206.987129][ T6800] RDX: 0000000000000023 RSI: 0000000080000100 RDI: 000000000000000c [ 206.987138][ T6800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.987146][ T6800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.987154][ T6800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.987175][ T6800] [ 206.988026][ T6802] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 207.244328][ T6803] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 207.274406][ T6800] netlink: 'syz.0.254': attribute type 4 has an invalid length. [ 207.313990][ T6800] netlink: 'syz.0.254': attribute type 4 has an invalid length. [ 207.347694][ T6793] vhci_hcd: connection reset by peer [ 207.358908][ T53] vhci_hcd: stop threads [ 207.363216][ T53] vhci_hcd: release socket [ 207.368664][ T53] vhci_hcd: disconnect device [ 207.637667][ T6812] FAULT_INJECTION: forcing a failure. [ 207.637667][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.651010][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.0.259 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 207.651038][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.651051][ T6812] Call Trace: [ 207.651059][ T6812] [ 207.651067][ T6812] dump_stack_lvl+0x241/0x360 [ 207.651104][ T6812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.651133][ T6812] ? __pfx__printk+0x10/0x10 [ 207.651174][ T6812] should_fail_ex+0x424/0x570 [ 207.651201][ T6812] _copy_from_iter+0x211/0x1c70 [ 207.651234][ T6812] ? __build_skb_around+0x247/0x3d0 [ 207.651258][ T6812] ? __alloc_skb+0x298/0x480 [ 207.651275][ T6812] ? __pfx__copy_from_iter+0x10/0x10 [ 207.651304][ T6812] ? __pfx___alloc_skb+0x10/0x10 [ 207.651326][ T6812] ? skb_put+0x114/0x1f0 [ 207.651349][ T6812] netlink_sendmsg+0x73c/0xcd0 [ 207.651392][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.651443][ T6812] ? __import_iovec+0x585/0x830 [ 207.651471][ T6812] ? aa_sock_msg_perm+0x91/0x160 [ 207.651506][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.651534][ T6812] __sock_sendmsg+0x221/0x270 [ 207.651565][ T6812] ____sys_sendmsg+0x523/0x860 [ 207.651597][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.651637][ T6812] __sys_sendmsg+0x271/0x360 [ 207.651665][ T6812] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.651741][ T6812] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 207.651774][ T6812] ? lockdep_hardirqs_on+0x9d/0x150 [ 207.651802][ T6812] __do_fast_syscall_32+0xb4/0x110 [ 207.651827][ T6812] ? exc_page_fault+0x5f8/0x920 [ 207.651856][ T6812] do_fast_syscall_32+0x34/0x80 [ 207.651882][ T6812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.651906][ T6812] RIP: 0023:0xf747d579 [ 207.651924][ T6812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.651940][ T6812] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 207.651962][ T6812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 207.651976][ T6812] RDX: 0000000000004084 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.651988][ T6812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.652000][ T6812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.652011][ T6812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.652041][ T6812] [ 208.863138][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 208.875778][ T6831] FAULT_INJECTION: forcing a failure. [ 208.875778][ T6831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.982837][ T6831] CPU: 1 UID: 0 PID: 6831 Comm: syz.0.266 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 208.982869][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.982883][ T6831] Call Trace: [ 208.982891][ T6831] [ 208.982901][ T6831] dump_stack_lvl+0x241/0x360 [ 208.982941][ T6831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.982972][ T6831] ? __pfx__printk+0x10/0x10 [ 208.983014][ T6831] should_fail_ex+0x424/0x570 [ 208.983042][ T6831] _copy_to_user+0x31/0xb0 [ 208.983076][ T6831] simple_read_from_buffer+0xc4/0x170 [ 208.983111][ T6831] proc_fail_nth_read+0x1ef/0x260 [ 208.983137][ T6831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.983163][ T6831] ? rw_verify_area+0x246/0x630 [ 208.983185][ T6831] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.983209][ T6831] vfs_read+0x21f/0xb90 [ 208.983238][ T6831] ? __pfx___mutex_lock+0x10/0x10 [ 208.983267][ T6831] ? __pfx_vfs_read+0x10/0x10 [ 208.983293][ T6831] ? __fget_files+0x2a/0x420 [ 208.983315][ T6831] ? __fget_files+0x39d/0x420 [ 208.983332][ T6831] ? __fget_files+0x2a/0x420 [ 208.983362][ T6831] ksys_read+0x19d/0x2d0 [ 208.983389][ T6831] ? __pfx_ksys_read+0x10/0x10 [ 208.983416][ T6831] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 208.983442][ T6831] ? lockdep_hardirqs_on+0x9d/0x150 [ 208.983471][ T6831] __do_fast_syscall_32+0xb4/0x110 [ 208.983497][ T6831] ? exc_page_fault+0x5f8/0x920 [ 208.983527][ T6831] do_fast_syscall_32+0x34/0x80 [ 208.983554][ T6831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.983580][ T6831] RIP: 0023:0xf747d579 [ 208.983598][ T6831] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 208.983615][ T6831] RSP: 002b:00000000f5106590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 208.983644][ T6831] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5106620 [ 208.983659][ T6831] RDX: 000000000000000f RSI: 00000000f746dff4 RDI: 0000000000000000 [ 208.983672][ T6831] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 208.983684][ T6831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 208.983696][ T6831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.983727][ T6831] [ 209.722473][ T6841] FAULT_INJECTION: forcing a failure. [ 209.722473][ T6841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.809449][ T6841] CPU: 1 UID: 0 PID: 6841 Comm: syz.1.268 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 209.809481][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.809494][ T6841] Call Trace: [ 209.809502][ T6841] [ 209.809511][ T6841] dump_stack_lvl+0x241/0x360 [ 209.809551][ T6841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.809582][ T6841] ? __pfx__printk+0x10/0x10 [ 209.809623][ T6841] should_fail_ex+0x424/0x570 [ 209.809651][ T6841] _copy_to_user+0x31/0xb0 [ 209.809684][ T6841] simple_read_from_buffer+0xc4/0x170 [ 209.809719][ T6841] proc_fail_nth_read+0x1ef/0x260 [ 209.809744][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.809770][ T6841] ? rw_verify_area+0x246/0x630 [ 209.809792][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.809815][ T6841] vfs_read+0x21f/0xb90 [ 209.809851][ T6841] ? __pfx___mutex_lock+0x10/0x10 [ 209.809879][ T6841] ? __pfx_vfs_read+0x10/0x10 [ 209.809906][ T6841] ? __fget_files+0x2a/0x420 [ 209.809927][ T6841] ? __fget_files+0x39d/0x420 [ 209.809944][ T6841] ? __fget_files+0x2a/0x420 [ 209.809973][ T6841] ksys_read+0x19d/0x2d0 [ 209.809999][ T6841] ? __pfx_ksys_read+0x10/0x10 [ 209.810026][ T6841] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 209.810051][ T6841] ? lockdep_hardirqs_on+0x9d/0x150 [ 209.810079][ T6841] __do_fast_syscall_32+0xb4/0x110 [ 209.810105][ T6841] ? exc_page_fault+0x5f8/0x920 [ 209.810135][ T6841] do_fast_syscall_32+0x34/0x80 [ 209.810161][ T6841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.810186][ T6841] RIP: 0023:0xf73fd579 [ 209.810204][ T6841] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 209.810220][ T6841] RSP: 002b:00000000f5086590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 209.810243][ T6841] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5086620 [ 209.810257][ T6841] RDX: 000000000000000f RSI: 00000000f73edff4 RDI: 0000000000000000 [ 209.810269][ T6841] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 209.810281][ T6841] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.810293][ T6841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.810323][ T6841] [ 210.403532][ T6853] batadv_slave_0: entered promiscuous mode [ 210.425207][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 210.434458][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.481963][ T6853] netlink: 'syz.1.274': attribute type 21 has an invalid length. [ 210.562622][ T6854] batadv_slave_0 (unregistering): left promiscuous mode [ 210.570842][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.767814][ T6853] netlink: 'syz.1.274': attribute type 6 has an invalid length. [ 210.803594][ T6853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.274'. [ 210.829207][ T6867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.024049][ T5896] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 211.504115][ T882] vhci_hcd: vhci_device speed not set [ 211.691860][ T36] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 211.735823][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.749066][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.763718][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.779500][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.800976][ T5896] usb 3-1: Product: syz [ 211.812016][ T6874] FAULT_INJECTION: forcing a failure. [ 211.812016][ T6874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.836207][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 211.842704][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 211.844595][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.849048][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 211.855529][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.863823][ T5896] usb 3-1: Manufacturer: syz [ 211.871511][ T5896] usb 3-1: SerialNumber: syz [ 211.877594][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.1.281 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 211.877623][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.877635][ T6874] Call Trace: [ 211.877643][ T6874] [ 211.877652][ T6874] dump_stack_lvl+0x241/0x360 [ 211.877690][ T6874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.877720][ T6874] ? __pfx__printk+0x10/0x10 [ 211.877762][ T6874] should_fail_ex+0x424/0x570 [ 211.877790][ T6874] _copy_from_iter+0x211/0x1c70 [ 211.877837][ T6874] ? __build_skb_around+0x247/0x3d0 [ 211.877861][ T6874] ? __alloc_skb+0x298/0x480 [ 211.877879][ T6874] ? __pfx__copy_from_iter+0x10/0x10 [ 211.877909][ T6874] ? __pfx___alloc_skb+0x10/0x10 [ 211.877931][ T6874] ? skb_put+0x114/0x1f0 [ 211.877955][ T6874] netlink_sendmsg+0x73c/0xcd0 [ 211.877998][ T6874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.878031][ T6874] ? __import_iovec+0x585/0x830 [ 211.878058][ T6874] ? aa_sock_msg_perm+0x91/0x160 [ 211.878093][ T6874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.878120][ T6874] __sock_sendmsg+0x221/0x270 [ 211.878151][ T6874] ____sys_sendmsg+0x523/0x860 [ 211.878183][ T6874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.878221][ T6874] __sys_sendmsg+0x271/0x360 [ 211.878249][ T6874] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.878322][ T6874] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 211.878347][ T6874] ? lockdep_hardirqs_on+0x9d/0x150 [ 211.878374][ T6874] __do_fast_syscall_32+0xb4/0x110 [ 211.878398][ T6874] ? exc_page_fault+0x5f8/0x920 [ 211.878433][ T6874] do_fast_syscall_32+0x34/0x80 [ 211.878459][ T6874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.878482][ T6874] RIP: 0023:0xf73fd579 [ 211.878499][ T6874] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 211.878515][ T6874] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 211.878536][ T6874] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 211.878550][ T6874] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.878561][ T6874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.878573][ T6874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 211.878584][ T6874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.878612][ T6874] [ 212.117275][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.166920][ T6877] veth0_to_hsr: entered promiscuous mode [ 212.173177][ T6877] veth0_to_hsr: entered allmulticast mode [ 212.513973][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.606919][ T6876] veth0_to_hsr: left allmulticast mode [ 212.612692][ T6876] veth0_to_hsr: left promiscuous mode [ 212.673944][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 212.684945][ T5897] usb 1-1: config 0 has no interfaces? [ 212.737803][ T5897] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 212.769467][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.781049][ T5897] usb 1-1: config 0 descriptor?? [ 213.015736][ T6881] bridge0: port 3(dummy0) entered blocking state [ 213.022198][ T6881] bridge0: port 3(dummy0) entered disabled state [ 213.052610][ T6881] dummy0: entered allmulticast mode [ 213.061441][ T6881] dummy0: entered promiscuous mode [ 213.118405][ T6881] bridge0: port 3(dummy0) entered blocking state [ 213.125027][ T6881] bridge0: port 3(dummy0) entered forwarding state [ 213.150022][ T882] usb 1-1: USB disconnect, device number 9 [ 213.731829][ T5896] cdc_ncm 3-1:1.0: bind() failure [ 213.757471][ T5896] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 213.785532][ T5896] cdc_ncm 3-1:1.1: bind() failure [ 213.847267][ T5896] usb 3-1: USB disconnect, device number 8 [ 213.961554][ T6906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.287'. [ 214.120728][ T6914] FAULT_INJECTION: forcing a failure. [ 214.120728][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.164277][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.4.290 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 214.164308][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.164321][ T6914] Call Trace: [ 214.164329][ T6914] [ 214.164338][ T6914] dump_stack_lvl+0x241/0x360 [ 214.164381][ T6914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.164411][ T6914] ? __pfx__printk+0x10/0x10 [ 214.164451][ T6914] should_fail_ex+0x424/0x570 [ 214.164477][ T6914] _copy_from_iter+0x211/0x1c70 [ 214.164511][ T6914] ? __build_skb_around+0x247/0x3d0 [ 214.164534][ T6914] ? __alloc_skb+0x298/0x480 [ 214.164552][ T6914] ? __pfx__copy_from_iter+0x10/0x10 [ 214.164580][ T6914] ? __pfx___alloc_skb+0x10/0x10 [ 214.164602][ T6914] ? skb_put+0x114/0x1f0 [ 214.164626][ T6914] netlink_sendmsg+0x73c/0xcd0 [ 214.164669][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.164703][ T6914] ? __import_iovec+0x585/0x830 [ 214.164730][ T6914] ? aa_sock_msg_perm+0x91/0x160 [ 214.164765][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.164792][ T6914] __sock_sendmsg+0x221/0x270 [ 214.164823][ T6914] ____sys_sendmsg+0x523/0x860 [ 214.164855][ T6914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.164894][ T6914] __sys_sendmsg+0x271/0x360 [ 214.164921][ T6914] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.164995][ T6914] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 214.165021][ T6914] ? lockdep_hardirqs_on+0x9d/0x150 [ 214.165047][ T6914] __do_fast_syscall_32+0xb4/0x110 [ 214.165073][ T6914] ? exc_page_fault+0x5f8/0x920 [ 214.165103][ T6914] do_fast_syscall_32+0x34/0x80 [ 214.165130][ T6914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.165155][ T6914] RIP: 0023:0xf749d579 [ 214.165172][ T6914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 214.165189][ T6914] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 214.165212][ T6914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 214.165234][ T6914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.165246][ T6914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.165257][ T6914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.165269][ T6914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.165298][ T6914] [ 214.407652][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.525928][ T882] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 214.558944][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.617924][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.697753][ T882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.708096][ T882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 214.714244][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.733804][ T882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.743867][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 214.756059][ T882] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 214.792105][ T882] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.802636][ T882] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.859697][ T882] usb 1-1: Manufacturer: syz [ 214.870905][ T882] usb 1-1: config 0 descriptor?? [ 214.916920][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 214.931123][ T5896] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 214.952366][ T24] usb 2-1: device descriptor read/all, error -71 [ 214.969072][ T5896] usb 3-1: config 0 has no interface number 0 [ 214.990927][ T5896] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.041923][ T5896] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.056307][ T5896] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 215.073851][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 215.092336][ T5896] usb 3-1: Product: syz [ 215.107916][ T5896] usb 3-1: SerialNumber: syz [ 215.163893][ T5897] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 215.181075][ T5896] usb 3-1: config 0 descriptor?? [ 215.196572][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 215.196591][ T30] audit: type=1800 audit(1744407413.024:136): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=16570 res=0 errno=0 [ 215.260308][ T5896] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 215.311997][ T5896] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 215.327951][ T882] rc_core: IR keymap rc-hauppauge not found [ 215.353916][ T5897] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 215.381515][ T882] Registered IR keymap rc-empty [ 215.396874][ T5897] usb 4-1: config 65 has no interface number 0 [ 215.409428][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.428234][ T6936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.298'. [ 215.451392][ T5897] usb 4-1: string descriptor 0 read error: -22 [ 215.459888][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 215.472751][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.483073][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.516526][ T882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 215.552689][ T5897] usbtest 4-1:65.95: Linux gadget zero [ 215.577940][ T882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 215.592077][ T5897] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt) [ 215.641676][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.684400][ T6919] openvswitch: netlink: Tunnel attr 59 out of range max 16 [ 215.685566][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.707667][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.744769][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.746365][ T5896] usb 4-1: USB disconnect, device number 11 [ 215.778578][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.787515][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.834205][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.846068][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.855136][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.863865][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.873369][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.874419][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.880585][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.901817][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.909059][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.916551][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.926744][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.933966][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.948211][ T5927] usb 3-1: USB disconnect, device number 9 [ 215.954124][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 215.966840][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.985397][ T5927] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 216.014028][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.058134][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.094264][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.125037][ T882] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.148544][ T882] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.168198][ T882] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 216.198623][ T882] usb 1-1: USB disconnect, device number 10 [ 216.723491][ T6953] FAULT_INJECTION: forcing a failure. [ 216.723491][ T6953] name failslab, interval 1, probability 0, space 0, times 0 [ 216.894464][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.3.303 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 216.894496][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.894509][ T6953] Call Trace: [ 216.894517][ T6953] [ 216.894526][ T6953] dump_stack_lvl+0x241/0x360 [ 216.894564][ T6953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.894592][ T6953] ? __pfx__printk+0x10/0x10 [ 216.894627][ T6953] ? ref_tracker_alloc+0x316/0x4c0 [ 216.894654][ T6953] should_fail_ex+0x424/0x570 [ 216.894682][ T6953] should_failslab+0xac/0x100 [ 216.894713][ T6953] kmem_cache_alloc_noprof+0x78/0x390 [ 216.894754][ T6953] ? skb_clone+0x20c/0x390 [ 216.894782][ T6953] skb_clone+0x20c/0x390 [ 216.894810][ T6953] __netlink_deliver_tap+0x3c4/0x7f0 [ 216.894850][ T6953] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.894878][ T6953] netlink_deliver_tap+0x19d/0x1b0 [ 216.894909][ T6953] netlink_sendskb+0x68/0x140 [ 216.894938][ T6953] netlink_unicast+0x39f/0x9a0 [ 216.894961][ T6953] ? __asan_memcpy+0x40/0x70 [ 216.894991][ T6953] ? __pfx_netlink_unicast+0x10/0x10 [ 216.895038][ T6953] netlink_rcv_skb+0x296/0x480 [ 216.895069][ T6953] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.895101][ T6953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.895149][ T6953] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.895180][ T6953] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.895212][ T6953] netlink_unicast+0x7f8/0x9a0 [ 216.895248][ T6953] ? __pfx_netlink_unicast+0x10/0x10 [ 216.895277][ T6953] ? skb_put+0x114/0x1f0 [ 216.895301][ T6953] netlink_sendmsg+0x8c3/0xcd0 [ 216.895343][ T6953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.895376][ T6953] ? __import_iovec+0x585/0x830 [ 216.895403][ T6953] ? aa_sock_msg_perm+0x91/0x160 [ 216.895438][ T6953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.895465][ T6953] __sock_sendmsg+0x221/0x270 [ 216.895496][ T6953] ____sys_sendmsg+0x523/0x860 [ 216.895529][ T6953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.895569][ T6953] __sys_sendmsg+0x271/0x360 [ 216.895597][ T6953] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.895673][ T6953] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 216.895699][ T6953] ? lockdep_hardirqs_on+0x9d/0x150 [ 216.895726][ T6953] __do_fast_syscall_32+0xb4/0x110 [ 216.895771][ T6953] ? exc_page_fault+0x5f8/0x920 [ 216.895801][ T6953] do_fast_syscall_32+0x34/0x80 [ 216.895829][ T6953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.895855][ T6953] RIP: 0023:0xf746d579 [ 216.895873][ T6953] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 216.895891][ T6953] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 216.895914][ T6953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 216.895929][ T6953] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.895942][ T6953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.895954][ T6953] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.895966][ T6953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.896006][ T6953] [ 217.208071][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.342802][ T6961] netlink: 116 bytes leftover after parsing attributes in process `syz.2.306'. [ 217.521429][ T6964] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 217.697128][ T6972] FAULT_INJECTION: forcing a failure. [ 217.697128][ T6972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.738259][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: syz.1.308 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 217.738292][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.738306][ T6972] Call Trace: [ 217.738314][ T6972] [ 217.738323][ T6972] dump_stack_lvl+0x241/0x360 [ 217.738363][ T6972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.738394][ T6972] ? __pfx__printk+0x10/0x10 [ 217.738439][ T6972] should_fail_ex+0x424/0x570 [ 217.738467][ T6972] _copy_from_user+0x2d/0xb0 [ 217.738500][ T6972] get_compat_msghdr+0xb3/0x730 [ 217.738540][ T6972] ? __pfx_get_compat_msghdr+0x10/0x10 [ 217.738576][ T6972] ? udp_sendmsg+0x787/0x2ca0 [ 217.738598][ T6972] ? __sys_sendmmsg+0x54d/0x7b0 [ 217.738630][ T6972] __sys_sendmmsg+0x464/0x7b0 [ 217.738664][ T6972] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.738694][ T6972] ? __lock_acquire+0xad5/0xd80 [ 217.738758][ T6972] ? vfs_write+0xb29/0xd10 [ 217.738801][ T6972] ? __mutex_unlock_slowpath+0x229/0x800 [ 217.738838][ T6972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.738863][ T6972] ? __fget_files+0x2a/0x420 [ 217.738896][ T6972] ? fput+0x9b/0xd0 [ 217.738915][ T6972] ? ksys_write+0x275/0x2d0 [ 217.738950][ T6972] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 217.738987][ T6972] __do_fast_syscall_32+0xb4/0x110 [ 217.739013][ T6972] ? exc_page_fault+0x5f8/0x920 [ 217.739043][ T6972] do_fast_syscall_32+0x34/0x80 [ 217.739071][ T6972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.739096][ T6972] RIP: 0023:0xf73fd579 [ 217.739114][ T6972] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 217.739132][ T6972] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 217.739156][ T6972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007fc0 [ 217.739171][ T6972] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 217.739280][ T6972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.739299][ T6972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.739311][ T6972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.739341][ T6972] [ 217.974341][ T6978] netlink: 76 bytes leftover after parsing attributes in process `syz.3.313'. [ 217.978207][ T5842] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 217.997354][ T5842] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 218.242673][ T6982] netlink: 3 bytes leftover after parsing attributes in process `syz.0.315'. [ 218.242738][ T6982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.334048][ T882] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 218.543377][ T6986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.317'. [ 218.608126][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 218.653894][ T882] usb 4-1: Using ep0 maxpacket: 32 [ 218.664449][ T882] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 218.688459][ T882] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 218.701409][ T882] usb 4-1: can't read configurations, error -61 [ 218.833966][ T882] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 218.994029][ T882] usb 4-1: Using ep0 maxpacket: 32 [ 219.005306][ T882] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 219.167581][ T882] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 219.175381][ T882] usb 4-1: can't read configurations, error -61 [ 219.182674][ T882] usb usb4-port1: attempt power cycle [ 219.313939][ T1223] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 219.443883][ T1223] usb 3-1: device descriptor read/64, error -71 [ 219.587796][ T882] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 219.631207][ T882] usb 4-1: Using ep0 maxpacket: 32 [ 219.653048][ T882] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 219.676506][ T882] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 219.684278][ T1223] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.719611][ T882] usb 4-1: can't read configurations, error -61 [ 219.823982][ T1223] usb 3-1: device descriptor read/64, error -71 [ 219.874109][ T882] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 219.904668][ T882] usb 4-1: Using ep0 maxpacket: 32 [ 219.911824][ T882] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 219.931033][ T882] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 219.939411][ T1223] usb usb3-port1: attempt power cycle [ 219.951927][ T882] usb 4-1: can't read configurations, error -61 [ 219.967865][ T882] usb usb4-port1: unable to enumerate USB device [ 220.307373][ T1223] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.347182][ T1223] usb 3-1: device descriptor read/8, error -71 [ 220.583909][ T1223] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 220.604840][ T1223] usb 3-1: device descriptor read/8, error -71 [ 220.620434][ T7011] ALSA: mixer_oss: invalid OSS volume '' [ 220.718569][ T1223] usb usb3-port1: unable to enumerate USB device [ 220.853933][ T1223] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 220.986269][ T1223] usb 1-1: device descriptor read/64, error -71 [ 221.233439][ T7021] netlink: 'syz.3.327': attribute type 4 has an invalid length. [ 221.245618][ T1223] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 221.303404][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 221.324984][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 221.413928][ T1223] usb 1-1: device descriptor read/64, error -71 [ 221.534513][ T1223] usb usb1-port1: attempt power cycle [ 221.747699][ T7040] FAULT_INJECTION: forcing a failure. [ 221.747699][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.764175][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.4.333 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 221.764206][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.764220][ T7040] Call Trace: [ 221.764229][ T7040] [ 221.764238][ T7040] dump_stack_lvl+0x241/0x360 [ 221.764278][ T7040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.764310][ T7040] ? __pfx__printk+0x10/0x10 [ 221.764351][ T7040] should_fail_ex+0x424/0x570 [ 221.764380][ T7040] _copy_to_user+0x31/0xb0 [ 221.764414][ T7040] simple_read_from_buffer+0xc4/0x170 [ 221.764449][ T7040] proc_fail_nth_read+0x1ef/0x260 [ 221.764476][ T7040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.764502][ T7040] ? rw_verify_area+0x246/0x630 [ 221.764525][ T7040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.764549][ T7040] vfs_read+0x21f/0xb90 [ 221.764578][ T7040] ? __pfx___mutex_lock+0x10/0x10 [ 221.764606][ T7040] ? __pfx_vfs_read+0x10/0x10 [ 221.764641][ T7040] ? __fget_files+0x2a/0x420 [ 221.764662][ T7040] ? __fget_files+0x39d/0x420 [ 221.764680][ T7040] ? __fget_files+0x2a/0x420 [ 221.764709][ T7040] ksys_read+0x19d/0x2d0 [ 221.764734][ T7040] ? __pfx_ksys_read+0x10/0x10 [ 221.764760][ T7040] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 221.764786][ T7040] ? lockdep_hardirqs_on+0x9d/0x150 [ 221.764812][ T7040] __do_fast_syscall_32+0xb4/0x110 [ 221.764839][ T7040] ? exc_page_fault+0x5f8/0x920 [ 221.764868][ T7040] do_fast_syscall_32+0x34/0x80 [ 221.764895][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.764921][ T7040] RIP: 0023:0xf749d579 [ 221.764939][ T7040] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 221.764957][ T7040] RSP: 002b:00000000f5105590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 221.764979][ T7040] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5105620 [ 221.764993][ T7040] RDX: 000000000000000f RSI: 00000000f748dff4 RDI: 0000000000000000 [ 221.765006][ T7040] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 221.765018][ T7040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 221.765031][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.765061][ T7040] [ 221.787753][ T7041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.334'. [ 221.904110][ T1223] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 222.057652][ T1223] usb 1-1: device descriptor read/8, error -71 [ 222.192784][ T7049] FAULT_INJECTION: forcing a failure. [ 222.192784][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 222.205723][ T7049] CPU: 1 UID: 0 PID: 7049 Comm: syz.2.336 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 222.205769][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.205783][ T7049] Call Trace: [ 222.205792][ T7049] [ 222.205801][ T7049] dump_stack_lvl+0x241/0x360 [ 222.205842][ T7049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.205874][ T7049] ? __pfx__printk+0x10/0x10 [ 222.205911][ T7049] ? __pfx___might_resched+0x10/0x10 [ 222.205943][ T7049] should_fail_ex+0x424/0x570 [ 222.205971][ T7049] should_failslab+0xac/0x100 [ 222.206003][ T7049] __kvmalloc_node_noprof+0x170/0x5a0 [ 222.206036][ T7049] ? alloc_netdev_mqs+0x92c/0x1210 [ 222.206070][ T7049] alloc_netdev_mqs+0x92c/0x1210 [ 222.206105][ T7049] rtnl_create_link+0x2f7/0xea0 [ 222.206141][ T7049] rtnl_newlink_create+0x2f2/0xcb0 [ 222.206163][ T7049] ? __mutex_lock+0x380/0x10c0 [ 222.206194][ T7049] ? __pfx_aa_get_newest_label+0x10/0x10 [ 222.206229][ T7049] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 222.206254][ T7049] ? __pfx___mutex_lock+0x10/0x10 [ 222.206292][ T7049] ? ns_capable+0x8a/0xf0 [ 222.206319][ T7049] rtnl_newlink+0x18b0/0x1fe0 [ 222.206352][ T7049] ? stack_depot_save_flags+0x44/0x940 [ 222.206392][ T7049] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.206419][ T7049] ? __netlink_deliver_tap+0x561/0x7f0 [ 222.206449][ T7049] ? netlink_deliver_tap+0x19d/0x1b0 [ 222.206478][ T7049] ? netlink_unicast+0x7c6/0x9a0 [ 222.206508][ T7049] ? netlink_sendmsg+0x8c3/0xcd0 [ 222.206537][ T7049] ? __sock_sendmsg+0x221/0x270 [ 222.206563][ T7049] ? ____sys_sendmsg+0x523/0x860 [ 222.206590][ T7049] ? __sys_sendmsg+0x271/0x360 [ 222.206610][ T7049] ? __do_fast_syscall_32+0xb4/0x110 [ 222.206636][ T7049] ? do_fast_syscall_32+0x34/0x80 [ 222.206662][ T7049] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.206728][ T7049] ? kasan_quarantine_put+0xdc/0x230 [ 222.206751][ T7049] ? lockdep_hardirqs_on+0x9d/0x150 [ 222.206780][ T7049] ? nlmon_xmit+0xaf/0x100 [ 222.206821][ T7049] ? __local_bh_enable_ip+0x168/0x200 [ 222.206842][ T7049] ? lockdep_hardirqs_on+0x9d/0x150 [ 222.206877][ T7049] ? aa_get_newest_label+0x101/0x6f0 [ 222.206915][ T7049] ? __lock_acquire+0xad5/0xd80 [ 222.206961][ T7049] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.206995][ T7049] rtnetlink_rcv_msg+0x80f/0xd70 [ 222.207023][ T7049] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 222.207059][ T7049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.207098][ T7049] ? ref_tracker_free+0x63e/0x7e0 [ 222.207130][ T7049] netlink_rcv_skb+0x208/0x480 [ 222.207162][ T7049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.207195][ T7049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.207247][ T7049] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.207280][ T7049] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.207314][ T7049] netlink_unicast+0x7f8/0x9a0 [ 222.207352][ T7049] ? __pfx_netlink_unicast+0x10/0x10 [ 222.207382][ T7049] ? skb_put+0x114/0x1f0 [ 222.207408][ T7049] netlink_sendmsg+0x8c3/0xcd0 [ 222.207454][ T7049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.207490][ T7049] ? __import_iovec+0x585/0x830 [ 222.207519][ T7049] ? aa_sock_msg_perm+0x91/0x160 [ 222.207556][ T7049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.207593][ T7049] __sock_sendmsg+0x221/0x270 [ 222.207625][ T7049] ____sys_sendmsg+0x523/0x860 [ 222.207659][ T7049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.207701][ T7049] __sys_sendmsg+0x271/0x360 [ 222.207732][ T7049] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.207822][ T7049] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 222.207848][ T7049] ? lockdep_hardirqs_on+0x9d/0x150 [ 222.207877][ T7049] __do_fast_syscall_32+0xb4/0x110 [ 222.207903][ T7049] ? exc_page_fault+0x5f8/0x920 [ 222.207933][ T7049] do_fast_syscall_32+0x34/0x80 [ 222.207960][ T7049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.207984][ T7049] RIP: 0023:0xf73ed579 [ 222.208002][ T7049] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 222.208020][ T7049] RSP: 002b:00000000f503455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 222.208043][ T7049] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 222.208057][ T7049] RDX: 0000000004004850 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.208070][ T7049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.208082][ T7049] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.208094][ T7049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.208125][ T7049] [ 222.713927][ T1223] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 222.768335][ T1223] usb 1-1: device descriptor read/8, error -71 [ 222.897069][ T1223] usb usb1-port1: unable to enumerate USB device [ 223.068080][ T7053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.098021][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 223.190634][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 223.316322][ T7064] FAULT_INJECTION: forcing a failure. [ 223.316322][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.329769][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.3.343 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 223.329798][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.329811][ T7064] Call Trace: [ 223.329819][ T7064] [ 223.329828][ T7064] dump_stack_lvl+0x241/0x360 [ 223.329865][ T7064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.329895][ T7064] ? __pfx__printk+0x10/0x10 [ 223.329936][ T7064] should_fail_ex+0x424/0x570 [ 223.329963][ T7064] _copy_from_user+0x2d/0xb0 [ 223.329993][ T7064] copy_from_buffer+0x66/0xd0 [ 223.330019][ T7064] copy_uabi_to_xstate+0x339/0x9e0 [ 223.330047][ T7064] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 223.330077][ T7064] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 223.330110][ T7064] fpu__restore_sig+0xdb6/0x11d0 [ 223.330130][ T7064] ? fpu__restore_sig+0xbdc/0x11d0 [ 223.330153][ T7064] ? __lock_acquire+0xad5/0xd80 [ 223.330176][ T7064] ? __pfx_fpu__restore_sig+0x10/0x10 [ 223.330228][ T7064] ia32_restore_sigcontext+0x633/0x9d0 [ 223.330256][ T7064] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 223.330280][ T7064] ? lockdep_hardirqs_on+0x9d/0x150 [ 223.330306][ T7064] ? _raw_spin_unlock_irq+0x2e/0x50 [ 223.330326][ T7064] ? __set_current_blocked+0x312/0x380 [ 223.330369][ T7064] __do_compat_sys_rt_sigreturn+0x17d/0x250 [ 223.330398][ T7064] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 223.330431][ T7064] ? do_int80_emulation+0xe8/0x200 [ 223.330461][ T7064] do_int80_emulation+0x11f/0x200 [ 223.330485][ T7064] ? clear_bhb_loop+0x45/0xa0 [ 223.330508][ T7064] ? clear_bhb_loop+0x45/0xa0 [ 223.330544][ T7064] asm_int80_emulation+0x1a/0x20 [ 223.330563][ T7064] RIP: 0023:0xf746d577 [ 223.330580][ T7064] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 223.330596][ T7064] RSP: 002b:00000000f50f655c EFLAGS: 00000206 [ 223.330615][ T7064] RAX: 0000000000000004 RBX: 0000000000000003 RCX: 0000000080000040 [ 223.330628][ T7064] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.330640][ T7064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.330652][ T7064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.330664][ T7064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.330712][ T7064] [ 223.565106][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.573480][ T5842] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 223.729421][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.740548][ T5842] usb 3-1: config 0 has no interfaces? [ 223.746164][ T5842] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 223.755739][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.771355][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 223.771539][ T5842] usb 3-1: config 0 descriptor?? [ 223.861674][ T7069] vlan0: entered allmulticast mode [ 223.868472][ T7069] syz_tun: entered allmulticast mode [ 224.274355][ T5842] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 224.442108][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.465323][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.488033][ T5842] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 224.497716][ T5842] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 224.509638][ T5842] usb 1-1: Manufacturer: syz [ 224.517360][ T5842] usb 1-1: config 0 descriptor?? [ 224.576432][ T5927] usb 3-1: USB disconnect, device number 14 [ 224.662927][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.939767][ T7104] FAULT_INJECTION: forcing a failure. [ 224.939767][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 224.982596][ T7104] CPU: 0 UID: 0 PID: 7104 Comm: syz.3.358 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 224.982627][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.982640][ T7104] Call Trace: [ 224.982648][ T7104] [ 224.982657][ T7104] dump_stack_lvl+0x241/0x360 [ 224.982696][ T7104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.982725][ T7104] ? __pfx__printk+0x10/0x10 [ 224.982759][ T7104] ? __pfx___might_resched+0x10/0x10 [ 224.982789][ T7104] should_fail_ex+0x424/0x570 [ 224.982817][ T7104] should_failslab+0xac/0x100 [ 224.982847][ T7104] __kmalloc_noprof+0xdf/0x4d0 [ 224.982875][ T7104] ? tomoyo_encode+0x26f/0x540 [ 224.982911][ T7104] tomoyo_encode+0x26f/0x540 [ 224.982949][ T7104] tomoyo_realpath_from_path+0x59e/0x5e0 [ 224.982994][ T7104] tomoyo_path_number_perm+0x245/0x790 [ 224.983020][ T7104] ? __lock_acquire+0xad5/0xd80 [ 224.983044][ T7104] ? tomoyo_path_number_perm+0x215/0x790 [ 224.983073][ T7104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.983138][ T7104] ? __fget_files+0x2a/0x420 [ 224.983155][ T7104] ? __fget_files+0x2a/0x420 [ 224.983176][ T7104] ? __fget_files+0x2a/0x420 [ 224.983200][ T7104] security_file_ioctl_compat+0xc6/0x2a0 [ 224.983232][ T7104] __se_compat_sys_ioctl+0xd8/0xc30 [ 224.983257][ T7104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.983304][ T7104] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 224.983339][ T7104] ? __fget_files+0x2a/0x420 [ 224.983364][ T7104] ? fput+0x9b/0xd0 [ 224.983383][ T7104] ? ksys_write+0x275/0x2d0 [ 224.983427][ T7104] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 224.983451][ T7104] ? lockdep_hardirqs_on+0x9d/0x150 [ 224.983478][ T7104] __do_fast_syscall_32+0xb4/0x110 [ 224.983504][ T7104] ? exc_page_fault+0x5f8/0x920 [ 224.983532][ T7104] do_fast_syscall_32+0x34/0x80 [ 224.983558][ T7104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.983584][ T7104] RIP: 0023:0xf746d579 [ 224.983601][ T7104] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 224.983618][ T7104] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 224.983640][ T7104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0245629 [ 224.983654][ T7104] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.983666][ T7104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.983678][ T7104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.983688][ T7104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.983716][ T7104] [ 225.262888][ T7104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.280868][ T5842] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 225.462030][ T5842] usb 1-1: USB disconnect, device number 15 [ 226.143957][ T5897] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 226.329551][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 226.353433][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.421682][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.473656][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.539745][ T5897] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 226.571632][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.606084][ T5897] usb 2-1: config 0 descriptor?? [ 226.729203][ T7144] Invalid logical block size (768) [ 226.737995][ T7146] netlink: 76 bytes leftover after parsing attributes in process `syz.0.370'. [ 226.837272][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 226.864216][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 227.019954][ T5897] usbhid 2-1:0.0: can't add hid device: -71 [ 227.026663][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 227.137928][ T5897] usb 2-1: USB disconnect, device number 20 [ 227.162172][ T30] audit: type=1326 audit(1744407424.994:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.0.374" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747d579 code=0x0 [ 227.183467][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.209839][ T7152] loop6: detected capacity change from 0 to 63 [ 227.221751][ C0] blk_print_req_error: 7 callbacks suppressed [ 227.221770][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.237178][ C0] buffer_io_error: 7 callbacks suppressed [ 227.237194][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.251296][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.260494][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.273244][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.282506][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.296658][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.305861][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.314948][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.324353][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.336277][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.345503][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.357780][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.367000][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.376018][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.385265][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.395564][ T5896] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 227.421908][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.431148][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.439347][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.448601][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.457804][ T7152] ldm_validate_partition_table(): Disk read failed. [ 227.471075][ T7152] Dev loop6: unable to read RDB block 0 [ 227.495923][ T7152] loop6: unable to read partition table [ 227.501832][ T7152] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 227.573839][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 227.613500][ T5896] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 227.666692][ T5896] usb 4-1: config 0 has no interface number 0 [ 227.792837][ T5896] usb 4-1: New USB device found, idVendor=04e2, idProduct=1402, bcdDevice=71.29 [ 227.834162][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.852091][ T5896] usb 4-1: Product: syz [ 227.861709][ T5896] usb 4-1: Manufacturer: syz [ 227.876466][ T5896] usb 4-1: SerialNumber: syz [ 227.902754][ T5896] usb 4-1: config 0 descriptor?? [ 228.133857][ T5896] usb 4-1: USB disconnect, device number 16 [ 228.189005][ T7168] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 228.195569][ T7168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.210603][ T7168] vhci_hcd vhci_hcd.0: Device attached [ 228.239380][ T7168] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 228.245948][ T7168] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 228.284451][ T7168] vhci_hcd vhci_hcd.0: Device attached [ 228.492240][ T5897] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 228.503381][ T7172] vhci_hcd: connection closed [ 228.533866][ T5842] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 228.547042][ T36] vhci_hcd: stop threads [ 228.553153][ T36] vhci_hcd: release socket [ 228.560673][ T7169] vhci_hcd: connection closed [ 228.560830][ T36] vhci_hcd: disconnect device [ 228.574166][ T7170] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 228.598128][ T36] vhci_hcd: stop threads [ 228.626381][ T36] vhci_hcd: release socket [ 228.635147][ T36] vhci_hcd: disconnect device [ 228.732547][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 228.757838][ T5842] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 228.777073][ T5842] usb 3-1: config 0 has no interface number 0 [ 228.806867][ T5842] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 228.836693][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.850101][ T5842] usb 3-1: Product: syz [ 228.862612][ T5842] usb 3-1: Manufacturer: syz [ 228.877638][ T5842] usb 3-1: SerialNumber: syz [ 228.908532][ T5842] usb 3-1: config 0 descriptor?? [ 229.329220][ T30] audit: type=1326 audit(1744407427.164:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd579 code=0x0 [ 229.350447][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.359628][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.391023][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.412469][ T7202] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.388'. [ 229.464664][ T7202] netlink: zone id is out of range [ 229.501685][ T7202] netlink: zone id is out of range [ 229.944236][ T7202] netlink: zone id is out of range [ 230.022035][ T7202] netlink: get zone limit has 8 unknown bytes [ 230.133452][ T1223] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 230.146176][ T7212] fuse: Bad value for 'group_id' [ 230.153154][ T7212] fuse: Bad value for 'group_id' [ 230.168396][ T7216] loop6: detected capacity change from 0 to 63 [ 230.184497][ T7216] ldm_validate_partition_table(): Disk read failed. [ 230.211892][ T7216] Dev loop6: unable to read RDB block 0 [ 230.261499][ T7216] loop6: unable to read partition table [ 230.271862][ T7216] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 230.315780][ T1223] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 230.325805][ T1223] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 230.354640][ T1223] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 230.433403][ T5842] usb 3-1: USB disconnect, device number 15 [ 230.447096][ T1223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.469288][ T1223] usb 2-1: config 0 has no interfaces? [ 230.478988][ T1223] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 230.490635][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.510952][ T1223] usb 2-1: config 0 descriptor?? [ 230.574349][ T7226] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 230.587355][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.613484][ T6323] udevd[6323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.687324][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.694784][ T7226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.703595][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.710863][ T7226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.743839][ T30] audit: type=1326 audit(1744407428.574:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 230.765691][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.784236][ T30] audit: type=1326 audit(1744407428.574:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 230.788603][ T7226] team0: Port device bridge0 added [ 230.882554][ T30] audit: type=1326 audit(1744407428.574:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 230.951087][ T30] audit: type=1326 audit(1744407428.574:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 231.020852][ T30] audit: type=1326 audit(1744407428.614:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 231.097288][ T30] audit: type=1326 audit(1744407428.614:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 231.129630][ T30] audit: type=1326 audit(1744407428.614:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 231.155180][ T30] audit: type=1326 audit(1744407428.614:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 231.275540][ T7238] fuse: Bad value for 'group_id' [ 231.281411][ T7238] fuse: Bad value for 'group_id' [ 231.708009][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.402'. [ 231.873364][ T7249] wg1: entered promiscuous mode [ 231.878670][ T7249] wg1: entered allmulticast mode [ 232.007890][ T5898] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 232.017782][ T1223] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 232.124412][ T7251] capability: warning: `syz.3.403' uses deprecated v2 capabilities in a way that may be insecure [ 232.164107][ T5898] usb 3-1: device descriptor read/64, error -71 [ 232.193091][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.206042][ T7251] program syz.3.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.215250][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.225505][ T1223] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 232.236765][ T1223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.252366][ T1223] usb 1-1: config 0 descriptor?? [ 232.361664][ T9] usb 2-1: USB disconnect, device number 21 [ 232.404558][ T5898] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 232.543926][ T5898] usb 3-1: device descriptor read/64, error -71 [ 232.547865][ T7257] netlink: 'syz.1.404': attribute type 4 has an invalid length. [ 232.654371][ T5898] usb usb3-port1: attempt power cycle [ 232.868414][ T1223] usb 1-1: string descriptor 0 read error: -22 [ 233.014048][ T5898] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 233.055458][ T5898] usb 3-1: device descriptor read/8, error -71 [ 233.070029][ T1223] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 233.312277][ T5898] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 233.354582][ T5898] usb 3-1: device descriptor read/8, error -71 [ 233.415030][ T1223] usb 1-1: USB disconnect, device number 16 [ 233.468119][ T5898] usb usb3-port1: unable to enumerate USB device [ 233.514124][ T5842] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 233.664865][ T5897] vhci_hcd: vhci_device speed not set [ 233.685637][ T5842] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 233.698357][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.731642][ T5842] usb 2-1: config 0 descriptor?? [ 233.749860][ T5842] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 233.929111][ T7285] FAULT_INJECTION: forcing a failure. [ 233.929111][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.953943][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.3.413 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 233.953977][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.953990][ T7285] Call Trace: [ 233.953997][ T7285] [ 233.954005][ T7285] dump_stack_lvl+0x241/0x360 [ 233.954043][ T7285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.954083][ T7285] ? __pfx__printk+0x10/0x10 [ 233.954128][ T7285] should_fail_ex+0x424/0x570 [ 233.954156][ T7285] _copy_to_iter+0x43f/0x1c90 [ 233.954197][ T7285] ? __pfx__copy_to_iter+0x10/0x10 [ 233.954217][ T7285] ? __import_iovec+0x175/0x830 [ 233.954257][ T7285] ? import_iovec+0xeb/0x120 [ 233.954286][ T7285] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 233.954316][ T7285] ? skb_recv_datagram+0x26e/0x310 [ 233.954344][ T7285] __skb_datagram_iter+0x101/0x940 [ 233.954364][ T7285] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 233.954386][ T7285] skb_copy_datagram_iter+0xd1/0x250 [ 233.954413][ T7285] netlink_recvmsg+0x2d4/0x1180 [ 233.954454][ T7285] ? __pfx_netlink_recvmsg+0x10/0x10 [ 233.954487][ T7285] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.954507][ T7285] ? iovec_from_user+0x87/0x240 [ 233.954526][ T7285] ? copy_compat_iovec_from_user+0x114/0x160 [ 233.954551][ T7285] ? aa_sock_msg_perm+0x91/0x160 [ 233.954584][ T7285] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 233.954602][ T7285] ? __pfx_netlink_recvmsg+0x10/0x10 [ 233.954633][ T7285] sock_recvmsg+0x22f/0x280 [ 233.954660][ T7285] ____sys_recvmsg+0x1c8/0x480 [ 233.954684][ T7285] ? __pfx_____sys_recvmsg+0x10/0x10 [ 233.954699][ T7285] ? get_compat_msghdr+0x45e/0x730 [ 233.954755][ T7285] do_recvmmsg+0x53e/0xab0 [ 233.954788][ T7285] ? __pfx_do_recvmmsg+0x10/0x10 [ 233.954823][ T7285] ? __lock_acquire+0xad5/0xd80 [ 233.954868][ T7285] ? get_old_timespec32+0x18d/0x280 [ 233.954908][ T7285] __sys_recvmmsg+0x140/0x280 [ 233.954938][ T7285] ? __pfx___sys_recvmmsg+0x10/0x10 [ 233.954957][ T7285] ? ksys_write+0x275/0x2d0 [ 233.954981][ T7285] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 233.954999][ T7285] __do_fast_syscall_32+0xb4/0x110 [ 233.955028][ T7285] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.955050][ T7285] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.955076][ T7285] do_fast_syscall_32+0x34/0x80 [ 233.955102][ T7285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.955120][ T7285] RIP: 0023:0xf746d579 [ 233.955132][ T7285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 233.955145][ T7285] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 233.955165][ T7285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 233.955180][ T7285] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 233.955193][ T7285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.955205][ T7285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 233.955217][ T7285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.955244][ T7285] [ 234.262386][ T5842] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 234.400313][ T7287] netlink: 80 bytes leftover after parsing attributes in process `syz.0.415'. [ 234.507425][ T7292] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 234.515522][ T7292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.522761][ T7292] IPv6: NLM_F_CREATE should be set when creating new route [ 234.532339][ T7292] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 234.540513][ T7292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.548190][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.569348][ T5842] gspca_cpia1: usb_control_msg 01, error -71 [ 234.575744][ T5842] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 234.613790][ T5842] usb 2-1: USB disconnect, device number 22 [ 234.882875][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'. [ 235.328786][ T7320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.426'. [ 235.386230][ T5927] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 235.563895][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 235.765694][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.779227][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 235.803236][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.834952][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.028657][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.039364][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.115868][ T5896] usb 2-1: config 0 descriptor?? [ 236.121751][ T7321] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 236.266599][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 236.357183][ T7336] bond1: entered promiscuous mode [ 236.363169][ T7336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.436300][ T7341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.446168][ T7341] bond2: entered promiscuous mode [ 236.454241][ T7341] bond1: (slave bond2): Enslaving as an active interface with an up link [ 236.541883][ T5896] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 236.562399][ T5927] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 236.636442][ T5896] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 236.677361][ T5896] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 236.805241][ T5927] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.833530][ T5896] usb 2-1: USB disconnect, device number 23 [ 236.847533][ T5927] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 236.859981][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.886432][ T5927] usb 1-1: Product: syz [ 236.912259][ T5927] usb 1-1: Manufacturer: syz [ 236.921234][ T5927] usb 1-1: SerialNumber: syz [ 236.944305][ T5898] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 236.951435][ T5927] usb 1-1: config 0 descriptor?? [ 237.124558][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 237.131905][ T5898] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 237.146597][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.158817][ T5898] usb 3-1: config 0 descriptor?? [ 237.172359][ T5898] gspca_main: sunplus-2.14.0 probing 041e:400b [ 237.211016][ T7365] sch_tbf: burst 7710 is lower than device lo mtu (11337746) ! [ 237.333864][ T5896] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 237.507228][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 237.540108][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.552433][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 237.569787][ T5896] usb 4-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 237.579380][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.608685][ T5896] usb 4-1: config 0 descriptor?? [ 237.718556][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 237.901049][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 237.951144][ T7377] netlink: 1 bytes leftover after parsing attributes in process `syz.3.442'. [ 238.043804][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 238.043827][ T30] audit: type=1326 audit(1744407435.864:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.102104][ T5898] gspca_sunplus: reg_r err -110 [ 238.138880][ T5898] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 238.173155][ T30] audit: type=1326 audit(1744407435.864:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246330][ T30] audit: type=1326 audit(1744407435.864:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246386][ T30] audit: type=1326 audit(1744407435.864:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246512][ T30] audit: type=1326 audit(1744407435.864:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246583][ T30] audit: type=1326 audit(1744407435.864:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246630][ T30] audit: type=1326 audit(1744407435.864:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246676][ T30] audit: type=1326 audit(1744407435.864:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246722][ T30] audit: type=1326 audit(1744407435.864:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.246767][ T30] audit: type=1326 audit(1744407435.864:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 238.555867][ T7349] fuse: Invalid rootmode [ 239.396201][ T5898] usb 1-1: USB disconnect, device number 17 [ 239.626003][ T7408] fuse: Bad value for 'fd' [ 240.278819][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 240.304493][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 240.343120][ T5896] usb 4-1: USB disconnect, device number 18 [ 240.496594][ T7432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.503934][ T7432] IPv6: NLM_F_CREATE should be set when creating new route [ 240.511329][ T7432] IPv6: NLM_F_CREATE should be set when creating new route [ 240.706673][ T5898] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 240.854533][ T7442] dccp_invalid_packet: P.Data Offset(0) too small [ 240.883852][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 240.892738][ T5898] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 240.924145][ T5898] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 240.933163][ T5898] usb 2-1: config 0 has no interface number 1 [ 240.970160][ T5898] usb 2-1: config 0 interface 216 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.996682][ T5898] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 198, using maximum allowed: 30 [ 241.013221][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 198 [ 241.065057][ T5898] usb 2-1: New USB device found, idVendor=07af, idProduct=0004, bcdDevice= 1.01 [ 241.090750][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.133544][ T5898] usb 2-1: Product: syz [ 241.149402][ T5898] usb 2-1: Manufacturer: syz [ 241.160265][ T5898] usb 2-1: SerialNumber: syz [ 241.184806][ T5898] usb 2-1: config 0 descriptor?? [ 241.292550][ T5898] usb-storage 2-1:0.216: USB Mass Storage device detected [ 241.356069][ T5898] usb-storage 2-1:0.216: Quirks match for vid 07af pid 0004: 4 [ 241.482003][ T5898] usb-storage 2-1:0.0: USB Mass Storage device detected [ 241.538231][ T5898] usb-storage 2-1:0.0: Quirks match for vid 07af pid 0004: 4 [ 241.684504][ T5898] usb 2-1: USB disconnect, device number 24 [ 242.329431][ T55] Bluetooth: hci0: ISO packet for unknown connection handle 3072 [ 242.814097][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 243.005697][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 243.063881][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 243.087011][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.118186][ T24] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 243.119269][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.142340][ T5896] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.154005][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.164586][ T5896] usb 4-1: Product: syz [ 243.168796][ T5896] usb 4-1: Manufacturer: syz [ 243.173562][ T5896] usb 4-1: SerialNumber: syz [ 243.179913][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.182008][ T5896] usb 4-1: config 0 descriptor?? [ 243.201120][ T5896] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.211297][ T7485] netlink: 64 bytes leftover after parsing attributes in process `syz.2.474'. [ 243.221119][ T5896] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 243.274045][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 243.403991][ T24] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 243.622187][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 243.629739][ T24] usb usb1-port1: attempt power cycle [ 243.834177][ T5896] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 243.849057][ T5896] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 243.898872][ T5927] usb 3-1: USB disconnect, device number 20 [ 243.943178][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 243.984153][ T24] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 244.026916][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 244.148253][ T7477] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.176234][ T24] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 244.266699][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 244.276968][ T24] usb usb1-port1: unable to enumerate USB device [ 245.036326][ T5896] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 245.043329][ T5896] em28xx 4-1:0.0: No AC97 audio processor [ 245.422533][ T5896] usb 4-1: USB disconnect, device number 19 [ 245.450028][ T5896] em28xx 4-1:0.0: Disconnecting em28xx [ 245.460755][ T5896] em28xx 4-1:0.0: Freeing device [ 245.583944][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 245.781033][ T24] usb 2-1: config 0 has no interfaces? [ 245.792571][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 245.804067][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.823523][ T24] usb 2-1: Product: syz [ 245.828909][ T24] usb 2-1: Manufacturer: syz [ 245.840873][ T24] usb 2-1: SerialNumber: syz [ 245.851191][ T24] usb 2-1: config 0 descriptor?? [ 246.153019][ T7518] netlink: 72 bytes leftover after parsing attributes in process `syz.1.483'. [ 246.251703][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.263732][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.283872][ T5927] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 246.343858][ T24] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 246.463878][ T5927] usb 4-1: device descriptor read/64, error -71 [ 246.506569][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.519747][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.579096][ T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 246.608494][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.642682][ T24] usb 1-1: config 0 descriptor?? [ 246.669259][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 246.680056][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 246.697646][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 246.706324][ T5927] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 246.716894][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 246.724155][ T24] usb 1-1: media controller created [ 246.735176][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.789636][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 246.827059][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 246.843871][ T5927] usb 4-1: device descriptor read/64, error -71 [ 246.861592][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 246.878314][ T7528] dvb-usb: bulk message failed: -22 (2/0) [ 246.893699][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 246.902500][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 246.972085][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.995336][ T5927] usb usb4-port1: attempt power cycle [ 247.048936][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.057596][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 247.066898][ T24] dvb-usb: error while querying for an remote control event. [ 247.249723][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 247.281752][ T24] dvb-usb: error while querying for an remote control event. [ 247.364043][ T5927] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 247.382710][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 247.382726][ T30] audit: type=1326 audit(1744407445.214:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7fc00000 [ 247.427603][ T5927] usb 4-1: device descriptor read/8, error -71 [ 247.474961][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 247.481016][ T24] dvb-usb: error while querying for an remote control event. [ 247.654070][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 247.668362][ T24] dvb-usb: error while querying for an remote control event. [ 247.676264][ T5927] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 247.705274][ T5927] usb 4-1: device descriptor read/8, error -71 [ 247.816847][ T5927] usb usb4-port1: unable to enumerate USB device [ 247.844755][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 247.850715][ T5927] dvb-usb: error while querying for an remote control event. [ 248.027454][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 248.033516][ T5896] dvb-usb: error while querying for an remote control event. [ 248.203810][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 248.209787][ T5896] dvb-usb: error while querying for an remote control event. [ 248.383996][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 248.394504][ T5896] dvb-usb: error while querying for an remote control event. [ 248.574110][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 248.619144][ T5896] dvb-usb: error while querying for an remote control event. [ 248.804189][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 248.810196][ T5896] dvb-usb: error while querying for an remote control event. [ 248.983897][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 248.989822][ T24] dvb-usb: error while querying for an remote control event. [ 249.120115][ T24] usb 1-1: USB disconnect, device number 22 [ 249.213357][ T5898] usb 2-1: USB disconnect, device number 25 [ 249.416955][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 249.921460][ T7574] team0: Device ipip0 is of different type [ 250.027668][ T7575] ip6t_srh: unknown srh match flags 4000 [ 250.241049][ T7581] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.282000][ T7581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.502'. [ 251.216762][ T7598] netlink: 76 bytes leftover after parsing attributes in process `syz.1.506'. [ 253.360134][ T7626] netlink: 'syz.2.515': attribute type 5 has an invalid length. [ 253.533854][ T5898] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 253.713879][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 253.760588][ T5898] usb 3-1: config 1 has an invalid interface number: 233 but max is 0 [ 253.783952][ T5898] usb 3-1: config 1 has no interface number 0 [ 253.813922][ T5898] usb 3-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 253.825380][ T7639] netlink: 64 bytes leftover after parsing attributes in process `syz.4.519'. [ 253.846349][ T5898] usb 3-1: config 1 interface 233 has no altsetting 0 [ 253.871019][ T5898] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 253.890443][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.953899][ T5898] usb 3-1: Product: syz [ 253.958127][ T5898] usb 3-1: Manufacturer: syz [ 253.973013][ T5898] usb 3-1: SerialNumber: syz [ 254.005750][ T7628] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.178610][ T7646] xt_cgroup: invalid path, errno=-2 [ 254.487524][ T5898] imon_raw 3-1:1.233: IR endpoint missing [ 254.540771][ T5898] usb 3-1: USB disconnect, device number 21 [ 255.573952][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 255.812050][ T5896] usb 3-1: config 0 has no interfaces? [ 255.847224][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865680][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.923545][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 255.965386][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.992833][ T5896] usb 3-1: Product: syz [ 256.008636][ T5896] usb 3-1: Manufacturer: syz [ 256.047947][ T5896] usb 3-1: SerialNumber: syz [ 256.099350][ T5896] usb 3-1: config 0 descriptor?? [ 256.221349][ T7678] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 256.432213][ T7678] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.625195][ T7667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.526'. [ 257.949497][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 258.119947][ T5896] usb 3-1: USB disconnect, device number 22 [ 258.813982][ T5898] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 258.985698][ T5898] usb 3-1: config 7 has an invalid interface number: 109 but max is 0 [ 259.003905][ T5898] usb 3-1: config 7 has no interface number 0 [ 259.016620][ T5898] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 259.058815][ T5898] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 259.178317][ T5898] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 259.208714][ T5898] usb 3-1: config 7 interface 109 altsetting 4 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 259.251001][ T5898] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 259.296114][ T5898] usb 3-1: config 7 interface 109 altsetting 4 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.322884][ T5898] usb 3-1: config 7 interface 109 has no altsetting 0 [ 259.345096][ T5898] usb 3-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 259.355704][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.363828][ T5898] usb 3-1: Product: syz [ 259.376892][ T5898] usb 3-1: Manufacturer: syz [ 259.391620][ T5898] usb 3-1: SerialNumber: syz [ 259.412258][ T7728] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.654016][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.677947][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.814756][ T5898] usb 3-1: USB disconnect, device number 23 [ 260.233474][ T7752] netlink: 84 bytes leftover after parsing attributes in process `syz.0.551'. [ 260.350961][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 260.367963][ T7754] FAULT_INJECTION: forcing a failure. [ 260.367963][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 260.382464][ T7754] CPU: 1 UID: 0 PID: 7754 Comm: syz.3.552 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 260.382494][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.382507][ T7754] Call Trace: [ 260.382516][ T7754] [ 260.382525][ T7754] dump_stack_lvl+0x241/0x360 [ 260.382564][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.382595][ T7754] ? __pfx__printk+0x10/0x10 [ 260.382629][ T7754] ? __pfx___might_resched+0x10/0x10 [ 260.382661][ T7754] should_fail_ex+0x424/0x570 [ 260.382688][ T7754] should_failslab+0xac/0x100 [ 260.382718][ T7754] __kmalloc_cache_noprof+0x73/0x370 [ 260.382744][ T7754] ? cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 260.382786][ T7754] cfg80211_sinfo_alloc_tid_stats+0x77/0x100 [ 260.382815][ T7754] sta_set_sinfo+0x1e0f/0x48b0 [ 260.382868][ T7754] ? sta_info_get_bss+0x50/0x320 [ 260.382893][ T7754] ieee80211_get_station+0xe6/0x140 [ 260.382919][ T7754] rdev_get_station+0x123/0x2b0 [ 260.382948][ T7754] nl80211_get_station+0x183/0x420 [ 260.382979][ T7754] ? __pfx_nl80211_get_station+0x10/0x10 [ 260.383005][ T7754] ? __rtnl_unlock+0xcc/0xf0 [ 260.383067][ T7754] genl_rcv_msg+0xb38/0xf00 [ 260.383117][ T7754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.383138][ T7754] ? __dev_queue_xmit+0x1780/0x3f60 [ 260.383160][ T7754] ? kasan_save_track+0x3f/0x80 [ 260.383182][ T7754] ? __kasan_slab_alloc+0x66/0x80 [ 260.383213][ T7754] ? __do_fast_syscall_32+0xb4/0x110 [ 260.383258][ T7754] ? __lock_acquire+0xad5/0xd80 [ 260.383281][ T7754] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 260.383300][ T7754] ? __pfx_nl80211_get_station+0x10/0x10 [ 260.383327][ T7754] ? __pfx_nl80211_post_doit+0x10/0x10 [ 260.383362][ T7754] netlink_rcv_skb+0x208/0x480 [ 260.383393][ T7754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.383418][ T7754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.383470][ T7754] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.383507][ T7754] genl_rcv+0x28/0x40 [ 260.383526][ T7754] netlink_unicast+0x7f8/0x9a0 [ 260.383562][ T7754] ? __pfx_netlink_unicast+0x10/0x10 [ 260.383592][ T7754] ? skb_put+0x114/0x1f0 [ 260.383617][ T7754] netlink_sendmsg+0x8c3/0xcd0 [ 260.383660][ T7754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.383692][ T7754] ? __import_iovec+0x585/0x830 [ 260.383720][ T7754] ? aa_sock_msg_perm+0x91/0x160 [ 260.383761][ T7754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.383789][ T7754] __sock_sendmsg+0x221/0x270 [ 260.383820][ T7754] ____sys_sendmsg+0x523/0x860 [ 260.383851][ T7754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.383891][ T7754] __sys_sendmsg+0x271/0x360 [ 260.383919][ T7754] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.383995][ T7754] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 260.384020][ T7754] ? lockdep_hardirqs_on+0x9d/0x150 [ 260.384047][ T7754] __do_fast_syscall_32+0xb4/0x110 [ 260.384073][ T7754] ? exc_page_fault+0x5f8/0x920 [ 260.384102][ T7754] do_fast_syscall_32+0x34/0x80 [ 260.384128][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.384154][ T7754] RIP: 0023:0xf746d579 [ 260.384171][ T7754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 260.384188][ T7754] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 260.384210][ T7754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 260.384224][ T7754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.384236][ T7754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.384248][ T7754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.384259][ T7754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.384288][ T7754] [ 260.464174][ T7758] fuse: Bad value for 'user_id' [ 260.468917][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.474358][ T7758] fuse: Bad value for 'user_id' [ 260.583866][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 260.931398][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 261.083899][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 261.098243][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 261.107807][ T24] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 261.136676][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 261.166232][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.180899][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.207526][ T24] usb 1-1: Product: syz [ 261.216622][ T24] usb 1-1: Manufacturer: syz [ 261.228024][ T24] usb 1-1: SerialNumber: syz [ 261.407179][ T55] Bluetooth: hci1: connection err: -111 [ 261.481441][ T24] usb 1-1: USB disconnect, device number 23 [ 261.672953][ T5927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 261.883878][ T5927] usb 3-1: device descriptor read/64, error -71 [ 262.193865][ T5927] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 262.334398][ T5927] usb 3-1: device descriptor read/64, error -71 [ 262.445135][ T5927] usb usb3-port1: attempt power cycle [ 262.533854][ T5896] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 262.695620][ T5896] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 262.705017][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.754828][ T5896] usb 1-1: config 0 descriptor?? [ 262.783994][ T5927] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 262.814611][ T5927] usb 3-1: device descriptor read/8, error -71 [ 262.903889][ T5898] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.029088][ T7799] netlink: 1900 bytes leftover after parsing attributes in process `syz.0.563'. [ 263.038790][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 263.054343][ T5896] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 263.055160][ T7799] [ 263.062986][ T5896] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 263.065223][ T7799] ====================================================== [ 263.065234][ T7799] WARNING: possible circular locking dependency detected [ 263.065244][ T7799] 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 Not tainted [ 263.065256][ T7799] ------------------------------------------------------ [ 263.065265][ T7799] syz.0.563/7799 is trying to acquire lock: [ 263.065277][ T7799] ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 263.065336][ T7799] [ 263.065336][ T7799] but task is already holding lock: [ 263.065343][ T7799] ffff888029d5a1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 263.065395][ T7799] [ 263.065395][ T7799] which lock already depends on the new lock. [ 263.065395][ T7799] [ 263.065403][ T7799] [ 263.065403][ T7799] the existing dependency chain (in reverse order) is: [ 263.065410][ T7799] [ 263.065410][ T7799] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 263.065442][ T7799] lock_acquire+0x116/0x2f0 [ 263.065463][ T7799] __mutex_lock+0x1a5/0x10c0 [ 263.065486][ T7799] smc_switch_to_fallback+0x35/0xda0 [ 263.077696][ T5927] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 263.080244][ T7799] smc_sendmsg+0x11f/0x530 [ 263.080272][ T7799] __sock_sendmsg+0x221/0x270 [ 263.106835][ T5927] usb 3-1: device descriptor read/8, error -71 [ 263.107364][ T7799] __sys_sendto+0x365/0x4c0 [ 263.107390][ T7799] __ia32_sys_sendto+0xdd/0x100 [ 263.212004][ T7799] __do_fast_syscall_32+0xb4/0x110 [ 263.217676][ T7799] do_fast_syscall_32+0x34/0x80 [ 263.223085][ T7799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.224205][ T5927] usb usb3-port1: unable to enumerate USB device [ 263.229944][ T7799] [ 263.229944][ T7799] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 263.229986][ T7799] lock_acquire+0x116/0x2f0 [ 263.230009][ T7799] lock_sock_nested+0x48/0x100 [ 263.230037][ T7799] do_ip_setsockopt+0x17e9/0x39c0 [ 263.230060][ T7799] ip_setsockopt+0x63/0x100 [ 263.230084][ T7799] do_sock_setsockopt+0x3b1/0x710 [ 263.230104][ T7799] __ia32_sys_setsockopt+0x1f2/0x280 [ 263.230124][ T7799] __do_fast_syscall_32+0xb4/0x110 [ 263.230151][ T7799] do_fast_syscall_32+0x34/0x80 [ 263.230177][ T7799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.230203][ T7799] [ 263.230203][ T7799] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 263.230237][ T7799] validate_chain+0xa69/0x24e0 [ 263.230264][ T7799] __lock_acquire+0xad5/0xd80 [ 263.230284][ T7799] lock_acquire+0x116/0x2f0 [ 263.230303][ T7799] __mutex_lock+0x1a5/0x10c0 [ 263.230334][ T7799] do_ip_getsockopt+0x11ae/0x2ba0 [ 263.230359][ T7799] ip_getsockopt+0xef/0x2e0 [ 263.230384][ T7799] tcp_getsockopt+0x16f/0x1d0 [ 263.230414][ T7799] smc_getsockopt+0x1c6/0x400 [ 263.230438][ T7799] do_sock_getsockopt+0x391/0x740 [ 263.230458][ T7799] __ia32_sys_getsockopt+0x2a1/0x370 [ 263.230479][ T7799] __do_fast_syscall_32+0xb4/0x110 [ 263.360109][ T7799] do_fast_syscall_32+0x34/0x80 [ 263.365536][ T7799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.372444][ T7799] [ 263.372444][ T7799] other info that might help us debug this: [ 263.372444][ T7799] [ 263.382691][ T7799] Chain exists of: [ 263.382691][ T7799] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 263.382691][ T7799] [ 263.396293][ T7799] Possible unsafe locking scenario: [ 263.396293][ T7799] [ 263.403756][ T7799] CPU0 CPU1 [ 263.409128][ T7799] ---- ---- [ 263.414502][ T7799] lock(&smc->clcsock_release_lock); [ 263.419906][ T7799] lock(sk_lock-AF_INET); [ 263.426868][ T7799] lock(&smc->clcsock_release_lock); [ 263.434786][ T7799] lock(rtnl_mutex); [ 263.438804][ T7799] [ 263.438804][ T7799] *** DEADLOCK *** [ 263.438804][ T7799] [ 263.446965][ T7799] 1 lock held by syz.0.563/7799: [ 263.451916][ T7799] #0: ffff888029d5a1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 263.462506][ T7799] [ 263.462506][ T7799] stack backtrace: [ 263.468425][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.0.563 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 263.468446][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.468460][ T7799] Call Trace: [ 263.468470][ T7799] [ 263.468481][ T7799] dump_stack_lvl+0x241/0x360 [ 263.468515][ T7799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.468542][ T7799] ? __pfx__printk+0x10/0x10 [ 263.468563][ T7799] ? print_lock+0x171/0x1a0 [ 263.468583][ T7799] print_circular_bug+0x2e1/0x300 [ 263.468608][ T7799] check_noncircular+0x142/0x160 [ 263.468639][ T7799] validate_chain+0xa69/0x24e0 [ 263.468676][ T7799] __lock_acquire+0xad5/0xd80 [ 263.468695][ T7799] lock_acquire+0x116/0x2f0 [ 263.468710][ T7799] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 263.468732][ T7799] __mutex_lock+0x1a5/0x10c0 [ 263.468756][ T7799] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 263.468783][ T7799] ? __lock_acquire+0xad5/0xd80 [ 263.468805][ T7799] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 263.468828][ T7799] ? __pfx___mutex_lock+0x10/0x10 [ 263.468853][ T7799] do_ip_getsockopt+0x11ae/0x2ba0 [ 263.468874][ T7799] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 263.468902][ T7799] ? __resched_curr+0x20c/0x450 [ 263.468925][ T7799] ? look_up_lock_class+0x7b/0x170 [ 263.468950][ T7799] ? register_lock_class+0x54/0x330 [ 263.468973][ T7799] ? __lock_acquire+0xad5/0xd80 [ 263.468995][ T7799] ? __mutex_trylock_common+0x184/0x2e0 [ 263.469027][ T7799] ? __pfx___mutex_trylock_common+0x10/0x10 [ 263.469071][ T7799] ip_getsockopt+0xef/0x2e0 [ 263.469096][ T7799] ? __pfx_ip_getsockopt+0x10/0x10 [ 263.469119][ T7799] ? smc_getsockopt+0x131/0x400 [ 263.469136][ T7799] tcp_getsockopt+0x16f/0x1d0 [ 263.469157][ T7799] ? __pfx_tcp_getsockopt+0x10/0x10 [ 263.469180][ T7799] ? aa_sk_perm+0x96f/0xac0 [ 263.469205][ T7799] ? sock_common_getsockopt+0x2e/0xb0 [ 263.469232][ T7799] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 263.469257][ T7799] smc_getsockopt+0x1c6/0x400 [ 263.469280][ T7799] ? __pfx_smc_getsockopt+0x10/0x10 [ 263.469296][ T7799] ? aa_sock_opt_perm+0x79/0x120 [ 263.469317][ T7799] ? __pfx_smc_getsockopt+0x10/0x10 [ 263.469341][ T7799] do_sock_getsockopt+0x391/0x740 [ 263.469363][ T7799] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 263.469381][ T7799] ? __fget_files+0x2a/0x420 [ 263.469398][ T7799] ? __fget_files+0x39d/0x420 [ 263.469410][ T7799] ? __fget_files+0x2a/0x420 [ 263.469423][ T7799] __ia32_sys_getsockopt+0x2a1/0x370 [ 263.469440][ T7799] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 263.469454][ T7799] ? __secure_computing+0xef/0x2f0 [ 263.469480][ T7799] __do_fast_syscall_32+0xb4/0x110 [ 263.469505][ T7799] ? exc_page_fault+0x5f8/0x920 [ 263.469528][ T7799] do_fast_syscall_32+0x34/0x80 [ 263.469550][ T7799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.469567][ T7799] RIP: 0023:0xf747d579 [ 263.469579][ T7799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.469591][ T7799] RSP: 002b:00000000f50e555c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 263.469606][ T7799] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 263.469620][ T7799] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 00000000800000c0 [ 263.469633][ T7799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.469645][ T7799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.469656][ T7799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.469674][ T7799] [ 263.817408][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 263.823975][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.835272][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.846298][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.856477][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.869675][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.878819][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.956641][ T5896] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 263.963577][ T5896] [drm] Initialized udl on minor 2 [ 264.141239][ T5898] usb 2-1: GET_CAPABILITIES returned 0 [ 264.146864][ T5898] usbtmc 2-1:16.0: can't read capabilities [ 264.350106][ T5898] usb 2-1: USB disconnect, device number 26 [ 265.289643][ T5896] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 265.298979][ T5896] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 265.306268][ T5927] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 265.320296][ T5896] usb 1-1: USB disconnect, device number 24 [ 265.326778][ T5927] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 265.335530][ T5927] udl 1-1:0.0: [drm] Cannot find any crtc or sizes