last executing test programs: 11.073790475s ago: executing program 3 (id=2321): r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@generic, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r4, &(0x7f0000000580)=[{&(0x7f00000001c0)="1f7f3b04058596ee57763bada0bfd80581957074a2c663d2422c38973ff047e34f977ec1b4e085e06dda1cc290", 0x2d}, {&(0x7f0000000340)="b2af40df1d44acb066bf9ce134662722edab695dd35a3f9ccea17b873f0d66737f5b40aa2c3e48afc9030163acce2fbf688c558b08e7bcb3a4255b1c37c9382a2592273eb5b58696a8651874daca8fc43633e4d033b193d5aefd625d279662d0ce2578772a4c7411918f5e80913dfe23fe5f6874d1e6df460b518df1d77c496b0bf8e291a50abc2fda6c024c85b9170a2c7df61c1a77a9c93f162b558b37dd69e872c8464a23f3dacd21d6acfe26f292244fcaf54b99a0c86f03a2aa0d2cc84667324c445e350523f0bc98b94367e6d5b2235b81706bd7935ef64128f85d7dd070", 0xe1}, {&(0x7f0000000200)="4ac85bb86a395bbca7ea20c1f05d0481a5806ce28ff8c54bdaba", 0x1a}, {&(0x7f0000000240)="d603276359cc2b960c2aeb821097cf8178a4ee436f94a717f5071c88ae9e5a0951e8163fe3defce1d8f1e275dde42576a891e27d796a914c062c1aa61689f0b201bf2f23c61e", 0x46}, {&(0x7f0000000440)="7d160c8c8cf75e6cf383bf1a79c03db76df0f5dcf9b3dfd8f1c091015c180f1ca153922eff9300d3de963054955d41a9fb27753e2cead026d1ed8eaf21094df9ef2e53c3da762fe2dd2185731ee1bdcea5cac6ae743933561a39c8efa0b25312c9c17846ee95bce36077c327c1ba374404ab3c942e1a337e5c75026349bc7a58fd2aeca6f0580d400a893a71873cf7bb5ad751fee3f1bf2f99641ed3ba1ce16722dc06285826c1497a3f24b309fb", 0xae}, {&(0x7f0000000500)="5a7544866128a8325404738bdf9b456572e31abe43e675ae154fa2a774c87bdcbeda4556ee9cd5d136731c8591a24ee265bae61d34a8e14badbd849e6c0aedfad88830c37410a8a78b048b40d326ed9f30c54d6ca93c0b1c5a435cfcad2765da", 0x60}, {&(0x7f0000000680)="3acd0e1f74bf620c889c25759020afd2d82bd24882a79932b8422b706963b3caca35d18dd97612eacb59d3852314c07b01902bb57885869ee7f8ab4c93dbfdaa7ea7ebc72bc8362a4dc748b5e297e6f1be18e131f5f10722a752f73668030b", 0x5f}], 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$setpipe(r0, 0x407, 0x8000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) accept4(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000000)=0x80, 0x800) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) unshare(0x28020480) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 9.54769363s ago: executing program 3 (id=2331): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001286272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 9.499046259s ago: executing program 3 (id=2332): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x26, 0x803, 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x578, 0x3f, 0x4, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0x100}) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r9 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0xf0, 0x0, 0x0) preadv(r9, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) 7.205937075s ago: executing program 2 (id=2345): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@empty, 0x4e21, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02"]) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) syz_io_uring_setup(0x39, 0x0, 0x0, &(0x7f0000001880)) (async) msgctl$IPC_INFO(0x0, 0x3, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) 6.132048808s ago: executing program 2 (id=2351): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 6.048444084s ago: executing program 2 (id=2352): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x1c, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x46000040}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5.623081267s ago: executing program 2 (id=2353): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), 0x0) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0xd978, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x80543, 0x12345}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.616274872s ago: executing program 1 (id=2357): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@remote, 0x4e22, 0xeb, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x7fffffff, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e24, 0xfffffffb, @empty, 0x6}}}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) r6 = socket(0x22, 0x80000, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40004) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x8, 0xfffffffe, {0x40000000}, {0x4, 0x2}, {0x4000000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtclass={0x24, 0x28, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x8, 0x4}, {0xffff, 0x9}, {0x0, 0xa}}}, 0x24}}, 0x0) 4.18402183s ago: executing program 1 (id=2358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x80000001, 0x8, 0x6, 0x1, 0x7, 0x4, 0x9}, {0xd, 0x8001, 0x5, 0xfffffffb, 0xbc, 0xbf, 0xffff}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f0000000500)=@canfd={{0x1, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "cb17ddf9d99e3c64f91c67884953fecffed172a2744431cc2d86d0c72318fdabc512bcd92d1b75b15542959da00c24a760ac78de88d660648ad64c2782d48063"}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32], 0xc4}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000180)={0x2c, &(0x7f0000000200)={0x40, 0x7, 0xfd, {0xfd, 0x11, "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"}}, &(0x7f0000000340)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "6d52dec65f23896b2bff5c50565f80406ad96fd8c13726d02ab64f479a4f33cf15d6d977677475c6f8af8bd05e7a8eb00ffd3e4c58ab27f5c790d4"}}, &(0x7f0000000600)={0x0, 0xf, 0x1ba, {0x5, 0xf, 0x1ba, 0x6, [@generic={0xdd, 0x10, 0xa, "a134967fa9dd5ac0d7e0dc8f9047bc23f69214015970c51a1f08da0f9b4ccdba9e0f4f28862d9974ae2ff28410212687a583a4488a70653b021a165f0f206752c61812f3bbe7c804bc3d93a6831ce0398f4ef26198f6e3e734e605476a11f137e402b4449024280f469d3d435d15feb8db2ddf179692798b0dc033aa1f89a3c41dfc2461339d61389818d7b60b64bdfd249fe63752b971054ba0ac282799a8cf2c4d26937783f04698dcc1b0bf571a45b2913c475d8e8ffeb956d4873cdc8595425dfceee33fb8098dc8d484cae9c866c5e4616090e221d006b5"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x1, 0x6}, @generic={0xbb, 0x10, 0x4, "aac59dc83bd89ef216d8a92bee5e22ff5c84c7f3c2ba4f29681d9d616bba0e3754aa379873c23d1fbc788d32f85c1d882e87fc5e8d7978db6dbb1eab222ea566734eba705143639707d8b1e65bba50d9981c280348ae98e178731ac4074ccc2861478446f30292f95c00537a6474991169da808c0dd948591c4013b687b2029689993f7625f7468578951c45c16f532dee9f91ca77878784f11c5fc1e21cbe9148794f659d7bb530aed32d29c9dbb65ea105fc5e53f4a92d"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0xd, 0xd}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7, 0xf, 0x7}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x2, 0xe5, "7f626980", "6f2dacea"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x1c, 0x9, 0x1, 0x81, 0x2}}}, &(0x7f0000000b80)={0x84, &(0x7f00000003c0)={0x20, 0x16, 0xb8, "113567f1e050e382165baeff03e002ffc96e9090bb432fce78772fe341bc03d6c5112d355582ad0a996ee5a78d00422313d73abfb5efef1555d4d43ab43072b4902759a703f82c8f3c3cb54b7644b98cc487461ece2afc3965d032d48e2f08b5f1da98efda4b0a2e527cc9e4c34d850df5e8b95beec0fcc58ec1c0be9e93870a44c965e5e112eae658af3c9ef3904d71f0ed442bbc34ba9468ab16f2dc1c1667ba03ba98bd02e5c8e07e0d1b366947b7d66d28306db57413"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000940)={0x40, 0xb, 0x2, "43e9"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "b4ea"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x21}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x17}, &(0x7f0000000b40)={0x40, 0x21, 0x1}}) 3.722585207s ago: executing program 4 (id=2359): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) (async, rerun: 64) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1201000000000010ac0592024000010203010902240001010000000904000000030102000921000000012200000805"], 0x0) 3.477927158s ago: executing program 3 (id=2361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xf0ffffffffffffff, 0x0, 0x71, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3e}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3.051827528s ago: executing program 3 (id=2363): r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@generic, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r3, &(0x7f0000000580)=[{&(0x7f00000001c0)="1f7f3b04058596ee57763bada0bfd80581957074a2c663d2422c38973ff047e34f977ec1b4e085e06dda1cc290", 0x2d}, {&(0x7f0000000340)="b2af40df1d44acb066bf9ce134662722edab695dd35a3f9ccea17b873f0d66737f5b40aa2c3e48afc9030163acce2fbf688c558b08e7bcb3a4255b1c37c9382a2592273eb5b58696a8651874daca8fc43633e4d033b193d5aefd625d279662d0ce2578772a4c7411918f5e80913dfe23fe5f6874d1e6df460b518df1d77c496b0bf8e291a50abc2fda6c024c85b9170a2c7df61c1a77a9c93f162b558b37dd69e872c8464a23f3dacd21d6acfe26f292244fcaf54b99a0c86f03a2aa0d2cc84667324c445e350523f0bc98b94367e6d5b2235b81706bd7935ef64128f85d7dd070", 0xe1}, {0x0}, {&(0x7f0000000240)}, {&(0x7f0000000440)="7d160c8c8cf75e6cf383bf1a79c03db76df0f5dcf9b3dfd8f1c091015c180f1ca153922eff9300d3de963054955d41a9fb27753e2cead026d1ed8eaf21094df9ef2e53c3da762fe2dd2185731ee1bdcea5cac6ae743933561a39c8efa0b25312c9c17846ee95bce36077c327c1ba374404ab3c942e1a337e5c75026349bc7a58fd2aeca6f0580d400a893a71873cf7bb5ad751fee3f1bf2f99641ed3ba1ce16722dc06285826c1497a3f24b309fb751089cd6796372a5c1e02616d94a4a3", 0xbe}, {&(0x7f0000000500)="5a7544866128a8325404738bdf9b456572e31abe43e675ae154fa2a774c87bdcbeda4556ee9cd5d136731c8591a24ee265bae61d34a8e14badbd849e6c0aedfad88830c37410a8a78b048b40d326ed9f30c54d6ca93c0b1c5a43", 0x5a}, {&(0x7f0000000680)="3acd0e1f74bf620c889c25759020afd2d82bd24882a79932b8422b706963b3caca35d18dd97612eacb59d3852314c07b01902bb57885869ee7f8ab4c93dbfdaa7ea7ebc72bc8362a4dc748b5e297e6f1be18e131", 0x54}], 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$setpipe(r0, 0x407, 0x8000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) accept4(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000000)=0x80, 0x800) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) unshare(0x28020480) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 3.042969969s ago: executing program 4 (id=2364): io_setup(0x1, &(0x7f0000002580)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfeffff}]) 2.999919186s ago: executing program 0 (id=2365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb886b5c28def66bafc0cb000ee0f20e035000400000f22e0470f35c4e27d25f4b9510200000f320f01ba418ca44966400f3882b7cdce00004785d565460f01cf66400f38812503000000", 0x4e}], 0x1, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080), 0x4) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480140035"], 0x38}, 0x1, 0x300}, 0x20008000) fcntl$getflags(r5, 0x1) 2.883928597s ago: executing program 4 (id=2366): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) keyctl$get_persistent(0x16, r5, r0) keyctl$get_persistent(0x16, 0x0, r0) 2.855659275s ago: executing program 0 (id=2367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x24, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.801281128s ago: executing program 4 (id=2368): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)="00000102", 0xfffff, r2) keyctl$read(0xb, r3, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x9, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x46000040}, @generic={0x5, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 2.559611579s ago: executing program 4 (id=2369): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x24, 0x0, 0x1}, {0x20, 0x0, 0x3, 0xfbfff010}, {0x6, 0x2}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) (async) r4 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) (async) r5 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140)='\x00', 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) (async) getresgid(&(0x7f0000000180), &(0x7f0000002000), &(0x7f0000000080)) 2.529734018s ago: executing program 4 (id=2370): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="000706020000889a70e69f94"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x2, "be1a"}, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 2.470988645s ago: executing program 0 (id=2371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fremovexattr(0xffffffffffffffff, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) close(0xffffffffffffffff) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.45014038s ago: executing program 2 (id=2372): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x28, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x46000040}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.259894832s ago: executing program 2 (id=2373): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x0, 0x31, 0xda, {0xda, 0x0, "dddcc61a3185e376406f8155f869aa475ccd3a60c53c8b84a1c416a1e33d4c7d8ac87bf8f7ac680256a1f6ba4e3250c12ca6a1909dcaab8f4d3751d53193cf9c4368e44b5f697dd8335a585ca91c109fdd790b2aebd7b7d4ef2fb47683e95170a33f6266ed5a27d22e97b7ebebe9e29571c655a483267ddecbd37af8c00a53733037f98a6f5cd842c8352f5d96b71f0b89cae4e86381799b20e7df62c41acb39f6a56fd911de8afcbc7bb642e47c6820a5a705bf1c2b289ac243627d6c203d5f570615b01ad6b00cce7dd69b80c184509c4f4bc19f5812f1"}}, &(0x7f0000000100)={0x0, 0x3, 0x62, @string={0x62, 0x3, "3e582ef263cb52b5e5e638e8456d44990b3fb7afc850b8397c38c1b79fe138b5c932cdec4d847bab260abab74e9b5b7604eb0801ea2a62e814876ce29a191132345c1025ce9f5d4428592f8fc639f0741841230450c2388662510165c17901a1"}}, &(0x7f00000001c0)={0x0, 0xf, 0xa4, {0x5, 0xf, 0xa4, 0x5, [@generic={0x82, 0x10, 0xb, "b5c2351e76a0f94a1ccf8b4ab83e09c4cc9b63d94b217b4674472faff0ee8f27073fdc25515082493a0d30370b9b9a8cd4837aed9d0cff64a840fa94fed76c3537127ea084482fcb8b6686176829e1ad0e979ee914fdca592726a0308da402a8e3f7962dcd6b84e3bdde4004e32989fdf9a1aada82ce4f72df8b95c6e89dfe"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x67, 0x4, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xd, 0x10, 0x1, "2d206f2b6ce29235eed3"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x4, 0x2, "978e3f81", "e9b0d209"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x2, 0x0, 0x6, 0xe, 0xc641, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x6d, "e060d1fbaf53c86c0b52101eb0d05ad4c2e1dc96215e9a2a2727f996a67c3d2280053b1cb8d1b4cbc3a3418290742d7913c9cb567d088f9cffd30388282eb8039ce3757a353bd05dc1904ee28b32c982fb826f6353d21717cb0ff44ad277d2a7bae168effa92310d6937a131cb"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x100, 0x80}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf4}, &(0x7f0000000580)={0x40, 0xb, 0x2, "d537"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x24}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="3bb58448eba9"}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "8936"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x47, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="2006010000009e"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.358970984s ago: executing program 0 (id=2374): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500000000fd8f7110ab00000000007e05000000000301950000000000000063bd5e0d430909ceda87491a99a4c1bcfb2dab0a783512cc15c8c5782f057ef44634dab5951515626e24e85bc457eddfa200a1638e2e18f705fe25e5d565d9059b3709722193983dfaf7db2b82e465bd894f3bec179b53bc334a6d8ca7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1.319754689s ago: executing program 0 (id=2375): epoll_create(0x3) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200040) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) (async) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x70bd27, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) brk(0xa00000000000) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3}) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140), &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x8) (async, rerun: 64) dup3(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x1, 0x50, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x2005}}}}]}}]}}, 0x0) 1.245008549s ago: executing program 3 (id=2376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$netlink(0x10, 0x3, 0xa) r4 = socket(0x15, 0x5, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) pread64(r5, &(0x7f0000002200)=""/89, 0x59, 0x10000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x7, 0x1, "9f4124e97cdf8607accbd3ee700be6a5996964ba9992a7a7e665251c40d747a039777a4e9eef1032a0ffe0accb2b3b677fceb40db406b7d926d463bcecf2c7cb97e31bb6a10629eb8ff6761bc86a87a41a50498799027e1a6f62e86d23f18e428a671414642cc02c86cb3bff0e8ecac0d1486c78978efc6a171a2df5d20f6f88900bef0716729f7188db2216a341b692a4ae0d415fa9506f3cbcc35a457bd126f8c7cc5f151ccd8e77ec0daae44e27ffce045d998c9dcddf291d7ffdc00e96999c9c7b6b27620ddd5627dd5937365fedc2e690dc2f5a0ea6cc408de017a1057b70d2bb091e743179be33941896217130e4ae90f2d6c85193cfe7531beabe5d44"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000292966085e04840263f80102030109022400010000000909042600021197f80009050e00ff03817f0609b71a04cbc247f1da"], 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r10, r7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.135959544s ago: executing program 1 (id=2377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x4, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x6000000) 1.133254488s ago: executing program 1 (id=2378): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x9, 0x7fe2, 0x1, 0x885}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000380), 0x0}, 0x20) 1.084697051s ago: executing program 1 (id=2379): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000300}, 0x84) 1.012079406s ago: executing program 1 (id=2380): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x800, 0x8b5b, 0xffff}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x60000000, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, @rc={0x1f, @any, 0x4}, @qipcrtr={0x2a, 0x0, 0x4001}, @l2={0x1f, 0x1, @any, 0xe4f2, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x171, &(0x7f0000000100)='team_slave_1\x00', 0x802f, 0xfffffffffffffffb, 0x6}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0xff5c, 0x4, 0xc, 0x62d, 0xf10, 0x7, 0x5, 0x0, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={r3, 0x6}, 0x8) syz_usb_connect(0x3, 0x6f3, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xe1, 0xf, 0xbd, 0xff, 0x1b3d, 0x14a, 0x6129, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e1, 0x4, 0x3, 0x3, 0xb8, 0x2, [{{0x9, 0x4, 0x7a, 0xe8, 0xf, 0x65, 0x40, 0x1c, 0x2, [], [{{0x9, 0x5, 0xb, 0x1, 0x400, 0x9, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x7, 0xd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x0, 0x9, 0x7}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x0, 0x7, 0x80}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x9c, 0x80, 0x8a}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x8, 0x6, 0x1}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x2, 0x2, 0x19}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x2, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xff11}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xff, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x1, 0x2, 0x4, [@generic={0x92, 0x31, "9f471214371ae4bbb63b716d0aca4061348bbd37433f5be07df5751f6d1b1dac405882919b7db45e243af376f7e7428492384cdecf92058293227949e1cb490c78f28f3c20854217a113410fb1a3e48d965c9049d01dbd62ccfd7d1c58a97f5ca41a1f2ad58e04e634a8047aa94a46f7519bd801aedc401b9d2fde8a7d55d83331c5b1aec9647468c2d09973a62bd4af"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x600, 0x5, 0x8d, 0x2, [@generic={0x7, 0x1, "df2cc6ed5c"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0xae, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x8, 0x6, 0x70, [@generic={0x91, 0x1, "d8d54d59fd6bbe6fb9b54a19edca3fb5ec4ad90fc7457c7bbd24332b7f6176411bca52e78226545683a3b2b286add05f17f3a9364f66f0c2a569ecdfa7b48a17f804cb527df7d52302686ee07f8482362d4cdbd831b26b8530b5bdfb44c3d352f778f54f7137cfea703ca6fed1059ae8becedf551b570c92b21a3efa58197bdb5d1f68747de362846b59ca22c7a97a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xca, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3ae8}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x3, 0x1, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}]}}, {{0x9, 0x4, 0xc1, 0xc2, 0xf, 0x2a, 0x0, 0xb9, 0x75, [@uac_as], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x2, 0x5, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}, @generic={0x101, 0x10, "8a443d8d34fe5e06be6e6a4bac79e0da5ae971f4ec4b84c20396bc53b6a0f7dd8d4e9aa22e7785ce6d73af67caa96ba934f22c0558e52fc4d31e033d517d93b5efe09c4fa761b15d1c75a1992334c55c4dacfcfd0872bab0b2449ba1c55069d7e77a7029d7d8d99f317ca385f455f58cdfbae6b8de7568841035af6f565b82ddb8e10d18617e214e69a8927f95b20f2ef7a04f63a81fa62f513c3e82bdc9a575e6427673c426bd9c7e31d947a36d8036ba60adc9237f6e925288802046744c537f7bf5814d1706a2c3ed562174ba561e47713febb9c4849805b94b45954711a14b9c06efea93ff75c90d579f2a79ce8197a50f3e3875acabd9701aed456df5"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x1, 0xba, 0x75, [@generic={0x48, 0x10, "ddbf6e542b0c6ceb10cb588d508f79509496b2f02a24eedd972895696d2122371747fa7259c0f52f453b9db0fc669b0be7ad8366633f8d21a503023613f60d3e0d2da919bea3"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xb}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x10, 0x4, 0x2, [@generic={0x96, 0x1d, "fa942ad291d22c47d096cf8ef66581c33d7345a3b00abfa941ddead2e5cfce194660093d5042d66a812533aacbbd38bba21377896ab0465ae272ac6904a203dcb8bc610169ab24baf825bab466ea100ab45b8776bcca8e9c42bfda1892ec5d4dcbe5aad75fc3ad5597eb96178fce6433272308bec4262310d731db0983cd2c0634890d7a90ab1d139a112942db202515e455e0eb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x3, 0xc, 0x1, [@generic={0x49, 0x30, "2b1edcf22226804ab2d2215347e3fca7e51ede1c3ed6f98556167348f1614b0d2456888d7aec0b5ad858f80c3eb6820e249e7a78395e47d7631357ee7b42adb995830be45ee154"}]}}, {{0x9, 0x5, 0x4ec826332fcfd9ad, 0x0, 0x10, 0xfe, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x4}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x3}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x5, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x262}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7b, 0x3, 0xd}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xff, 0x3, 0x6, [@generic={0xd1, 0x2, "fe536f9965799d1040ed960431dc87a6e378067a91d2a144e73f5410b838bdb642ca7c3add627a8754d9f2937db1b749e730aed0ac9b77d11a0f0dae3a1d76a3fc4187805fe87abd460cbcf9db28e60e31a6bfa890ff8029006bd1eb633794f9e77376e0aaf8ce6ae8112984ac058ab288b1a8a495cd58e5b4e101eed52cab4caa9988dfcbc48c0bf53a84be42063bec5403bbbd40f89f5a50bb1085a7d435f3d66edd8991afc23936f0b38106c324bf2c56ef6de2c8076f713809eca517e4019844d11c8c9e9ca4cbbf8d9839a93b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x2b, 0x4, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x40, 0xff, 0x9}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x4, 0x7, 0x18, [@generic={0x73, 0x1, "54315b7454624456080ad3007f7bc3d6ba0155f74895764d6ca7c56a61aa1a23cd376f84ffa4b5c779cb429ab829ebfc8cecc1ed0e6838aef848815002f97d9d2e4e258aa40243e80f7d27762d694d8209da1ab5efbc6a6f22ee02c6296c8c9224cd2b1653ca132a5da61915bdbe3f2f81"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x57, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x9, 0x2, 0x4}}]}}, {{0x9, 0x4, 0x7, 0xa, 0x1, 0xcb, 0xe3, 0x85, 0xb0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "3df174"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8001, 0x0, 0xb}, {0x6, 0x24, 0x1a, 0x5, 0x31}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x9, 0x0, 0x3, 0x1, 0x23}]}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6, 0x5, "1ed6596337"}]}], [{{0x9, 0x5, 0xd, 0x8, 0x8, 0xfb, 0x4, 0x80}}]}}, {{0x9, 0x4, 0x82, 0x1, 0x0, 0x6a, 0xfd, 0x4d, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "647a3579a86a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff, 0x1, 0x6}}, @cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x6f, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x1, 0x80, 0x1, 0x6, 0xbd}, @mdlm={0x15, 0x24, 0x12, 0xfffc}]}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x310, 0x80, 0x6, 0x1, 0x20}, 0x7c, &(0x7f0000000a40)={0x5, 0xf, 0x7c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "d454f16c56641d6aa94b4e41029f2fcc"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x2, 0xf00, 0x9, [0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x918d, 0xf000, 0x9, [0xff60, 0x0, 0xf, 0x3f00, 0x0, 0x3f3f]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x0, 0x0, 0xb0, [0xff00c0, 0xffc000, 0xff81cf]}, @ss_container_id={0x14, 0x10, 0x4, 0xa9, "a77847d6692b3aa3089b2bb781f3dafa"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2401}}, {0xc, &(0x7f0000000b40)=@string={0xc, 0x3, "ada89da0c31175792031"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x42f}}]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r4, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0xb5d1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000dc0)='nicvf0\x00', 0x10) sendmsg$inet_sctp(r1, &(0x7f0000001040)={&(0x7f0000000e00)=@in6={0xa, 0x4e23, 0x8, @mcast1, 0x5}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000e40)="e32dcf48228964b20e5b8dd0bdb18746b2c5d2fc39eeabb150715e32564c74d755f101089f8d52123586845f68f9cf698ca00dc531387040f36fe8e1b5f481099cf28a8d88115727af7ad0", 0x4b}], 0x1, &(0x7f0000000f00)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0x397, 0x2, 0x7, 0x91}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8000, 0x0, 0x0, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x7f, 0xc00c, 0x8, 0x5, 0x6c, 0x7, 0x6, r3}}, @init={0x18, 0x84, 0x0, {0x3, 0x0, 0x4, 0x2}}, @init={0x18, 0x84, 0x0, {0x7, 0x8000, 0x7, 0xfffc}}, @sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x8, 0xb, 0x7fffffff, 0xffffffd9, 0xdb9, 0x3, 0x3, r3}}, @init={0x18, 0x84, 0x0, {0x8000, 0x5, 0x81, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0x130, 0x801}, 0x4000050) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000010c0)) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000001100), &(0x7f0000001140)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000013c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001380)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000001400)={0x5, 0x10, 0xfa00, {&(0x7f0000001180), r6, 0x1}}, 0x18) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000001780)={&(0x7f0000001440)=@in6={0xa, 0x4e24, 0xdd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000001480)}, {&(0x7f00000014c0)="0b9443286ed7c6f940154a45da22f480f4f29727fa4bbad2c0e07648453490ba80e26fbeb9f042a567845a1b7795a664d844225dce82f28af3bd8d941c588579b89cc19acbc46ae5ca28b782741d4d3ef0f06e585fd6fbf1cff4675dfeba5fbf2eb8f71c1ffeb205fd509a693b41130ec5f06fc7ff3093f5c1a59f44e71287f472edfde4956b9f903a17aca477af5f0b34b491b922fd25a75a33f3916403ef7aa131dd35925315dd269e951c3fef101eaa91a0697f78e9365a1108a49670be199f9e416888e053ca09f090842c45e529db01ab4ffde0697a", 0xd8}, {&(0x7f00000015c0)="07a3a336d199288476d6f69b1c1fc6ee6356ca2e265877f48625b6308f96412b48528c088b1bffb93d2be5a4196e4f5ecaa7821716965527dc72119e4a3bff1666be047bbd662a3ef652f0f494f1fb99980860ef506017350e14ad461b039dd2b7c4f83a1cc2726ae2dfe43114d37ed8a539855a88c3c733ab42d86c08389d9c19e7d4b7edcf5b92cb9efbf557a91637e4e4e4e75d8a4aa564d478fb74fddc831907ac6bd8dbcf16b686b8619727466ee7dba8b88f602160b630d8195e22", 0xbe}], 0x3, &(0x7f00000016c0)=[@dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x9a49, 0x400, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x200, 0x9, 0x8001}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x98, 0x2000c010}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000017c0)={0x10200, 0x2, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001800)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001880)={'\x00', 0x5, 0x5, 0x7ff, 0xcac9, 0x9a, r8}) r9 = socket$inet6(0xa, 0x3, 0xa) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000001900)=0x40, 0x4) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001980)=@o_path={&(0x7f0000001940)='./file0\x00', 0x0, 0x4000, r2}, 0x18) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000019c0)={0xf, 0xff, 0x4, 0x10000, 0x8}) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000001a00)='bridge0\x00', 0x10) getsockopt$netlink(r5, 0x10e, 0x7, &(0x7f0000001a40), &(0x7f0000001a80)) 0s ago: executing program 0 (id=2381): r0 = syz_usb_connect(0x4, 0x4c, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x31, 0x7b, 0x6f, 0x10, 0xbb4, 0xa49, 0x50ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb9, 0x0, 0x0, 0xfe, 0x8e, 0xf5, 0x0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "a4c5db9b1c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xfff, 0x5, 0xa0}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0xf20, 0x4, 0x2, 0x2}]}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x7d, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x5, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xfff4, 0xfff2, 0x6}, {0x6, 0x24, 0x1a, 0xd}, [@acm={0x4, 0x24, 0x2, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x14, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x84, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x69, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x6, 0x5}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x0, 0x40, 0x10, 0xff}, 0x39, &(0x7f0000000280)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "a016af3e3d229bb81f6f7849711ab88a"}, @ssp_cap={0x20, 0x10, 0xa, 0xf7, 0x5, 0x6, 0x1100f, 0xfff2, [0x30, 0x0, 0xff0000, 0x0, 0x30]}]}, 0x8, [{0xee, &(0x7f00000002c0)=@string={0xee, 0x3, "924cd7288690c36dc97c2535cf0e288d1c1e39b8b7b3cab31441980b61a01e993477c75e19d1b5d094e8a3f0d0189cd10565b1142a900c033665382f70be11804f936cbb98b850962ed229f7a57f96a82eaa80027d6f4cb795131c6298ede9b4830d00f4e20d11c052b8801491b053103ba14710700f4469fd60c4e9e34c7135cdc6f1ed42bc238e6c3933ad6db1f878e2f7ab5a0e52cea860a674acec346ef57bbd611204281074a0ee43a7ee2f25cdacefeda84caf09eca33cc33a746e7915c08561577c0e4f91af46ca9ae990501b9c78e81a3f32338c30fc836d946b802830fe6746feb4d8f3b85f8523"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc14}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1004}}, {0x3a, &(0x7f0000000580)=@string={0x3a, 0x3, "e4960f9da4f00cd0f467bb7296e5d8f1c92876e93ccfa3006924b102dea1d0958508b61d43a52edf30e601500f4d841872a98587218785b1"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr, 0x400000}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="71e1a25206ce62b5828919e80f8a9c5fd0962d255dbbadb9c070475be6940dd3f7ddb6b06adae5b3bc00561c6c99898e6e", 0x31, 0x8085, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x20, 0xf, 0x3, "ed8c58"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 427.065956][ T7721] usb 1-1: config 0 descriptor?? [ 427.182101][ T979] usb usb2-port1: unable to enumerate USB device [ 427.332799][ T7721] usb-storage 1-1:0.0: USB Mass Storage device detected [ 427.368964][ T7721] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 427.423388][ T7718] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.492382][ T7721] usb 1-1: USB disconnect, device number 66 [ 427.525318][ T7718] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 427.552870][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.572653][ T7718] usb 3-1: USB disconnect, device number 70 [ 427.611217][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1904'. [ 427.641239][ T979] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 427.790906][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 427.798102][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 7 [ 427.817178][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9653, setting to 1024 [ 427.830227][ T979] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 427.845591][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.882059][ T979] usb 4-1: Product: syz [ 427.889380][ T979] usb 4-1: Manufacturer: syz [ 427.900822][ T979] usb 4-1: SerialNumber: syz [ 427.933476][ T979] usb 4-1: config 0 descriptor?? [ 427.950455][ T979] hub 4-1:0.0: bad descriptor, ignoring hub [ 427.957589][ T979] hub 4-1:0.0: probe with driver hub failed with error -5 [ 427.967652][ T979] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 428.066674][T12493] syzkaller1: entered promiscuous mode [ 428.074292][T12493] syzkaller1: entered allmulticast mode [ 428.121077][ T7718] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 428.245614][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.272981][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.311670][ T7718] usb 5-1: device descriptor read/64, error -71 [ 428.562528][ T7718] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 428.790962][ T7718] usb 5-1: device descriptor read/64, error -71 [ 428.901210][ T7718] usb usb5-port1: attempt power cycle [ 428.960954][ T7719] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 429.120050][ T7719] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 429.143251][ T7719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.165937][ T7719] usb 2-1: Product: syz [ 429.170203][ T7719] usb 2-1: Manufacturer: syz [ 429.204070][ T7719] usb 2-1: SerialNumber: syz [ 429.219200][ T7719] usb 2-1: config 0 descriptor?? [ 429.260869][ T7718] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 429.296462][ T7718] usb 5-1: device descriptor read/8, error -71 [ 429.511640][ T10] usb 4-1: USB disconnect, device number 86 [ 429.523134][T12521] netlink: 'syz.0.1913': attribute type 15 has an invalid length. [ 429.541168][ T7718] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 429.552508][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 429.592867][ T7718] usb 5-1: device descriptor read/8, error -71 [ 429.731788][T12513] fuse: root generation should be zero [ 429.743973][ T7718] usb usb5-port1: unable to enumerate USB device [ 429.810931][T12527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1914'. [ 430.150960][ T7715] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 430.211645][ T7719] usb 2-1: Firmware version (0.0) predates our first public release. [ 430.221102][ T7719] usb 2-1: Please update to version 0.2 or newer [ 430.333702][ T7719] usb 2-1: USB disconnect, device number 83 [ 430.340336][ T7715] usb 4-1: Using ep0 maxpacket: 16 [ 430.394970][ T7715] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 430.403454][ T7715] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 430.416011][ T7715] usb 4-1: config 4 has no interface number 0 [ 430.428078][ T7715] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.446734][ T7715] usb 4-1: config 4 interface 51 has no altsetting 0 [ 430.456244][ T7715] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 430.467593][ T7715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.477496][ T7715] usb 4-1: Product: syz [ 430.482064][ T7715] usb 4-1: Manufacturer: syz [ 430.486880][ T7715] usb 4-1: SerialNumber: syz [ 430.504500][ T7715] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 430.541001][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 430.700848][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 430.709502][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 430.720249][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.739014][ T10] usb 3-1: Product: syz [ 430.743469][ T10] usb 3-1: Manufacturer: syz [ 430.759710][ T10] usb 3-1: SerialNumber: syz [ 430.810080][T12540] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1918'. [ 430.819633][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 430.890998][T12542] loop6: detected capacity change from 0 to 63 [ 430.898956][ T7839] buffer_io_error: 2 callbacks suppressed [ 430.898970][ T7839] Buffer I/O error on dev loop6, logical block 0, async page read [ 430.959890][ T7839] Buffer I/O error on dev loop6, logical block 0, async page read [ 430.974795][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.048506][T12546] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 431.048692][ T7839] Buffer I/O error on dev loop6, logical block 1, async page read [ 431.071160][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.130268][T12545] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 431.181197][ T7839] loop6: unable to read partition table [ 431.181498][T12545] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 431.207241][T12545] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 431.216090][T12545] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 431.227060][T12545] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 431.236311][T12545] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 431.344726][T12542] ldm_validate_partition_table(): Disk read failed. [ 431.377123][T12542] Dev loop6: unable to read RDB block 0 [ 431.383502][ T979] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 431.406674][T12542] loop6: unable to read partition table [ 431.571161][T12542] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 431.580913][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 431.587574][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.602002][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.612348][ T979] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 431.621724][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.643354][ T979] usb 2-1: config 0 descriptor?? [ 431.797782][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.815245][ T10] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 431.838479][ T10] usb 3-1: USB disconnect, device number 71 [ 431.889228][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.084604][ T7715] usb 4-1: USB disconnect, device number 87 [ 432.103242][ T979] glorious 0003:258A:0033.001A: unknown main item tag 0x1 [ 432.122274][ T979] glorious 0003:258A:0033.001A: unknown main item tag 0x2 [ 432.132957][ T979] glorious 0003:258A:0033.001A: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 432.303857][ T979] usb 2-1: USB disconnect, device number 84 [ 432.627614][T12565] syzkaller1: entered promiscuous mode [ 432.696795][T12565] syzkaller1: entered allmulticast mode [ 433.480912][ T7715] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 433.699392][T12590] ptrace attach of "./syz-executor exec"[7901] was attempted by "./syz-executor exec"[12590] [ 433.768169][ T7715] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.814043][ T7715] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 433.867013][ T7715] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 434.013718][ T7715] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 434.061114][ T7715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.197707][T12579] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.533382][T12604] pim6reg1: entered promiscuous mode [ 435.583612][T12604] pim6reg1: entered allmulticast mode [ 435.908301][T12619] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 435.950955][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 436.180832][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 436.187511][ T10] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 436.196309][ T10] usb 2-1: config 0 has no interface number 0 [ 436.202867][ T10] usb 2-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 436.214372][ T10] usb 2-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.386938][T12623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1940'. [ 436.439663][ T7715] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 436.459232][ T7715] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input38 [ 436.530836][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 436.543373][ T7715] usb 3-1: USB disconnect, device number 72 [ 436.549329][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 436.594664][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1940'. [ 436.604838][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.646876][T12623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1940'. [ 436.670137][T12623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1940'. [ 436.689898][ T10] usb 2-1: Product: syz [ 436.704369][ T10] usb 2-1: Manufacturer: syz [ 436.709033][ T10] usb 2-1: SerialNumber: syz [ 436.784685][ T10] usb 2-1: config 0 descriptor?? [ 436.791975][ T10] xbox_remote_probe: Unexpected endpoint_in [ 437.580227][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 437.966799][ T5922] usb 2-1: USB disconnect, device number 85 [ 438.032033][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 438.086291][T12651] bridge_slave_1 (unregistering): left allmulticast mode [ 438.094291][T12651] bridge_slave_1 (unregistering): left promiscuous mode [ 438.104209][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.316971][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 438.321014][ T7719] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 438.503418][ T7719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.526048][ T7719] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 438.551011][ T7719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.571842][ T7719] usb 1-1: config 0 descriptor?? [ 438.683282][ T7719] pwc: Askey VC010 type 2 USB webcam detected. [ 438.966961][T12665] fuse: Bad value for 'fd' [ 439.360913][ T7715] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 439.540331][T12677] tipc: Enabled bearer , priority 0 [ 439.550363][T12677] syzkaller0: entered promiscuous mode [ 439.559279][T12677] syzkaller0: entered allmulticast mode [ 439.579606][T12677] tipc: Resetting bearer [ 439.606140][T12675] tipc: Resetting bearer [ 439.625080][ T7715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 439.639020][T12675] tipc: Disabling bearer [ 439.667598][ T7715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 439.700026][ T7715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 439.726166][ T7715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 439.765485][ T7715] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 439.809797][ T7715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.855633][ T7715] usb 3-1: Product: syz [ 439.924533][ T7715] usb 3-1: Manufacturer: syz [ 439.959691][ T7715] usb 3-1: SerialNumber: syz [ 439.988265][ T7715] usb 3-1: config 0 descriptor?? [ 440.234216][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.240725][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.266980][ T7715] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 440.495996][ T10] usb 3-1: USB disconnect, device number 73 [ 441.060171][T12693] netlink: 'syz.1.1960': attribute type 10 has an invalid length. [ 441.114595][T12693] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 441.224928][T12701] fuse: Bad value for 'fd' [ 441.425697][ T7719] pwc: recv_control_msg error -71 req 02 val 2b00 [ 441.477006][T12708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1964'. [ 441.523753][ T7719] pwc: recv_control_msg error -71 req 02 val 2700 [ 441.580372][ T7719] pwc: recv_control_msg error -71 req 02 val 2c00 [ 441.602535][ T7719] pwc: recv_control_msg error -71 req 04 val 1000 [ 441.613094][T12709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.630095][ T7719] pwc: recv_control_msg error -71 req 04 val 1300 [ 441.639141][ T7715] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 441.671474][ T7719] pwc: recv_control_msg error -71 req 04 val 1400 [ 441.693969][ T7719] pwc: recv_control_msg error -71 req 02 val 2000 [ 441.754867][ T7719] pwc: recv_control_msg error -71 req 02 val 2100 [ 441.777033][T12713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 441.788393][ T7719] pwc: recv_control_msg error -71 req 04 val 1500 [ 441.819175][ T7719] pwc: recv_control_msg error -71 req 02 val 2500 [ 441.876854][T12718] ptrace attach of "./syz-executor exec"[5874] was attempted by "./syz-executor exec"[12718] [ 441.887390][ T7715] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 441.911159][ T7719] pwc: recv_control_msg error -71 req 02 val 2400 [ 441.937942][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.951208][ T7719] pwc: recv_control_msg error -71 req 02 val 2600 [ 442.008503][ T7719] pwc: recv_control_msg error -71 req 02 val 2900 [ 442.018646][ T7715] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.030964][ T5922] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 442.080986][ T7719] pwc: recv_control_msg error -71 req 02 val 2800 [ 442.150997][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.222994][ T7719] pwc: recv_control_msg error -71 req 04 val 1100 [ 442.243322][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.254828][ T7719] pwc: recv_control_msg error -71 req 04 val 1200 [ 442.269754][ T7719] pwc: Registered as video103. [ 442.275745][ T7719] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 442.330879][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 442.335976][ T7719] usb 1-1: USB disconnect, device number 67 [ 442.348958][ T7715] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 442.356727][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.435616][ T7715] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.494567][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.520677][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.552260][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.554473][ T5922] usb 4-1: can't read configurations, error -61 [ 442.684230][ T7715] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 442.692124][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.704373][ T7715] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.716735][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.731258][ T7715] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.750210][ T7715] usb 3-1: string descriptor 0 read error: -22 [ 442.757338][ T7715] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.771461][ T7715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.794278][ T7715] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 442.820824][ T5922] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 442.999026][T12729] loop6: detected capacity change from 0 to 7 [ 443.007474][T12729] Dev loop6: unable to read RDB block 7 [ 443.016258][T12729] loop6: unable to read partition table [ 443.022054][ T7719] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 443.033149][T12729] loop6: partition table beyond EOD, truncated [ 443.039534][T12729] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.090975][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 443.136900][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 443.184487][ T7719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 443.205831][ T7719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 443.227072][ T7719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 443.257731][ T7719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 443.284473][ T7719] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 443.301398][ T5922] usb 4-1: can't read configurations, error -61 [ 443.301394][ T7719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.301424][ T7719] usb 1-1: Product: syz [ 443.327746][ T5922] usb usb4-port1: attempt power cycle [ 443.349138][ T7719] usb 1-1: Manufacturer: syz [ 443.360497][ T7719] usb 1-1: SerialNumber: syz [ 443.377723][ T7719] usb 1-1: config 0 descriptor?? [ 443.687539][ T7719] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 443.740909][ T5922] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 443.860421][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 443.889330][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 443.892170][ T7719] usb 1-1: USB disconnect, device number 68 [ 443.903298][ T5922] usb 4-1: can't read configurations, error -61 [ 444.081068][ T5922] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 444.121318][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 444.139257][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 444.168519][ T5922] usb 4-1: can't read configurations, error -61 [ 444.181076][ T7715] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 444.263847][ T5922] usb usb4-port1: unable to enumerate USB device [ 444.331659][ T7715] usb 2-1: Using ep0 maxpacket: 8 [ 444.345208][ T7715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.368524][ T7715] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.412301][ T7715] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 444.429445][ T7715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.448524][ T7715] usb 2-1: Product: syz [ 444.457574][ T7715] usb 2-1: Manufacturer: syz [ 444.468428][ T7715] usb 2-1: SerialNumber: syz [ 444.485368][ T7715] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 444.503454][ T7715] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 444.724893][T12734] loop2: detected capacity change from 0 to 7 [ 445.607317][T12740] fuse: Bad value for 'fd' [ 445.929507][ T10] usb 3-1: USB disconnect, device number 74 [ 446.027265][T12750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'. [ 446.121152][ T5922] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 446.282124][ T5922] usb 5-1: config 1 has an invalid descriptor of length 182, skipping remainder of the config [ 446.304324][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.328194][ T5922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.337597][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.345773][ T5922] usb 5-1: Product: syz [ 446.349980][ T5922] usb 5-1: Manufacturer: syz [ 446.354676][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 446.362546][ T5922] usb 5-1: SerialNumber: syz [ 446.379278][T12757] pim6reg1: entered promiscuous mode [ 446.384792][T12757] pim6reg1: entered allmulticast mode [ 446.434086][T12753] overlayfs: missing 'lowerdir' [ 446.510966][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 446.518178][ T10] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 446.529262][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 446.563912][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 446.579255][ T5922] usb 5-1: 0:2 : does not exist [ 446.595847][ T5922] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 446.613691][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.627462][ T5922] usb 5-1: USB disconnect, device number 64 [ 446.721189][ T979] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 446.744726][ T10] usb 1-1: config 0 descriptor?? [ 446.920859][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 446.927436][ T979] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 446.927575][ T7719] usb 2-1: USB disconnect, device number 86 [ 446.936187][ T979] usb 3-1: config 0 has no interface number 0 [ 446.948180][ T979] usb 3-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 446.959388][ T979] usb 3-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.991706][ T979] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 447.013373][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.022889][ T979] usb 3-1: Product: syz [ 447.027117][ T979] usb 3-1: Manufacturer: syz [ 447.037059][ T979] usb 3-1: SerialNumber: syz [ 447.048586][ T979] usb 3-1: config 0 descriptor?? [ 447.056093][ T979] xbox_remote_probe: Unexpected endpoint_in [ 447.490163][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1981'. [ 448.161427][T12787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1987'. [ 448.223445][ T979] usb 3-1: USB disconnect, device number 75 [ 448.645347][T12800] FAULT_INJECTION: forcing a failure. [ 448.645347][T12800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.661522][T12800] CPU: 1 UID: 0 PID: 12800 Comm: syz.1.1993 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 448.661555][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.661568][T12800] Call Trace: [ 448.661576][T12800] [ 448.661585][T12800] dump_stack_lvl+0x189/0x250 [ 448.661614][T12800] ? __pfx____ratelimit+0x10/0x10 [ 448.661642][T12800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.661666][T12800] ? __pfx__printk+0x10/0x10 [ 448.661697][T12800] ? rcu_is_watching+0x15/0xb0 [ 448.661719][T12800] should_fail_ex+0x414/0x560 [ 448.661748][T12800] _copy_to_user+0x31/0xb0 [ 448.661773][T12800] simple_read_from_buffer+0xe1/0x170 [ 448.661805][T12800] proc_fail_nth_read+0x1b3/0x220 [ 448.661829][T12800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.661853][T12800] ? rw_verify_area+0x2a6/0x4d0 [ 448.661877][T12800] ? lock_acquire+0x5f/0x360 [ 448.661905][T12800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.661928][T12800] vfs_read+0x1fd/0xa30 [ 448.661952][T12800] ? rcu_is_watching+0x15/0xb0 [ 448.661975][T12800] ? __pfx_vfs_read+0x10/0x10 [ 448.662000][T12800] ? sg_ioctl+0x1697/0x2230 [ 448.662022][T12800] ? __pfx_sg_ioctl+0x10/0x10 [ 448.662043][T12800] ksys_read+0x145/0x250 [ 448.662070][T12800] ? __pfx_ksys_read+0x10/0x10 [ 448.662098][T12800] ? rcu_is_watching+0x15/0xb0 [ 448.662120][T12800] do_syscall_64+0xfa/0x3b0 [ 448.662150][T12800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.662171][T12800] ? clear_bhb_loop+0x60/0xb0 [ 448.662194][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.662213][T12800] RIP: 0033:0x7f195ff8d5fc [ 448.662241][T12800] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 448.662259][T12800] RSP: 002b:00007f1960d46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.662282][T12800] RAX: ffffffffffffffda RBX: 00007f19601b5fa0 RCX: 00007f195ff8d5fc [ 448.662297][T12800] RDX: 000000000000000f RSI: 00007f1960d460a0 RDI: 0000000000000004 [ 448.662310][T12800] RBP: 00007f1960d46090 R08: 0000000000000000 R09: 0000000000000000 [ 448.662323][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.662335][T12800] R13: 00007f19601b6038 R14: 00007f19601b5fa0 R15: 00007f19602dfa28 [ 448.662358][T12800] [ 449.172015][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 449.281637][ T979] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 449.440945][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 449.455997][ T979] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 449.465907][ T979] usb 2-1: config 0 has no interface number 0 [ 449.472318][ T979] usb 2-1: config 0 interface 184 has no altsetting 0 [ 449.498827][ T979] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 449.534038][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.548033][ T979] usb 2-1: Product: syz [ 449.553923][ T979] usb 2-1: Manufacturer: syz [ 449.568466][ T979] usb 2-1: SerialNumber: syz [ 449.582654][ T979] usb 2-1: config 0 descriptor?? [ 449.603290][ T979] smsc75xx v1.0.0 [ 449.606969][ T979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 449.619357][ T979] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 449.760864][ T7715] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 449.859267][T12805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.874999][T12805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.931641][T12805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.939284][T12805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.954264][ T7715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.965567][ T7715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.984883][ T7715] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 450.009873][ T7715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.034973][ T7715] usb 3-1: config 0 descriptor?? [ 450.458310][ T7719] usb 1-1: USB disconnect, device number 69 [ 450.521306][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.553634][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.037228][ T7715] usbhid 3-1:0.0: can't add hid device: -71 [ 451.046183][ T7715] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 451.080205][ T7715] usb 3-1: USB disconnect, device number 76 [ 451.136984][T12856] FAULT_INJECTION: forcing a failure. [ 451.136984][T12856] name failslab, interval 1, probability 0, space 0, times 0 [ 451.150338][T12856] CPU: 1 UID: 0 PID: 12856 Comm: syz.3.2010 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 451.150371][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.150385][T12856] Call Trace: [ 451.150393][T12856] [ 451.150402][T12856] dump_stack_lvl+0x189/0x250 [ 451.150431][T12856] ? __pfx____ratelimit+0x10/0x10 [ 451.150459][T12856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.150483][T12856] ? __pfx__printk+0x10/0x10 [ 451.150512][T12856] ? fs_reclaim_acquire+0x7d/0x100 [ 451.150543][T12856] ? rcu_is_watching+0x15/0xb0 [ 451.150562][T12856] ? __pfx___might_resched+0x10/0x10 [ 451.150580][T12856] ? lock_acquire+0x5f/0x360 [ 451.150608][T12856] should_fail_ex+0x414/0x560 [ 451.150638][T12856] should_failslab+0xa8/0x100 [ 451.150669][T12856] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 451.150697][T12856] ? __alloc_skb+0x112/0x2d0 [ 451.150728][T12856] __alloc_skb+0x112/0x2d0 [ 451.150766][T12856] netlink_sendmsg+0x5c6/0xb30 [ 451.150802][T12856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.150833][T12856] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.150852][T12856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.150874][T12856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.150904][T12856] __sock_sendmsg+0x219/0x270 [ 451.150930][T12856] ____sys_sendmsg+0x505/0x830 [ 451.150954][T12856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.150979][T12856] ? import_iovec+0x74/0xa0 [ 451.151003][T12856] ___sys_sendmsg+0x21f/0x2a0 [ 451.151024][T12856] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.151062][T12856] ? __fget_files+0x2a/0x420 [ 451.151078][T12856] ? __fget_files+0x3a0/0x420 [ 451.151101][T12856] __x64_sys_sendmsg+0x19b/0x260 [ 451.151123][T12856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.151148][T12856] ? __pfx_ksys_write+0x10/0x10 [ 451.151173][T12856] ? rcu_is_watching+0x15/0xb0 [ 451.151195][T12856] ? rcu_is_watching+0x15/0xb0 [ 451.151216][T12856] do_syscall_64+0xfa/0x3b0 [ 451.151253][T12856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.151272][T12856] ? clear_bhb_loop+0x60/0xb0 [ 451.151295][T12856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.151315][T12856] RIP: 0033:0x7fd256f8ebe9 [ 451.151333][T12856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.151350][T12856] RSP: 002b:00007fd257dbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.151372][T12856] RAX: ffffffffffffffda RBX: 00007fd2571b5fa0 RCX: 00007fd256f8ebe9 [ 451.151388][T12856] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 451.151402][T12856] RBP: 00007fd257dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 451.151415][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.151428][T12856] R13: 00007fd2571b6038 R14: 00007fd2571b5fa0 R15: 00007fd2572dfa28 [ 451.151451][T12856] [ 451.476470][T12860] syzkaller1: entered promiscuous mode [ 451.484679][T12860] syzkaller1: entered allmulticast mode [ 451.872824][ T979] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 451.937736][ T7700] usb 2-1: USB disconnect, device number 87 [ 452.021082][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 452.040873][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 452.054010][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.078633][ T979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 452.087112][ T979] usb 4-1: can't read configurations, error -61 [ 452.132642][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'. [ 452.151658][ T7719] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 452.162455][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 452.181265][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 452.194526][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 452.205732][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 452.223217][ T10] usb 3-1: string descriptor 0 read error: -22 [ 452.239588][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 452.249086][ T979] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 452.257165][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 452.272893][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 452.282632][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 452.297408][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 452.304878][ T10] usb 3-1: media controller created [ 452.323001][ T7719] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 452.325683][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.340899][ T7719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.368891][ T7719] usb 1-1: config 0 descriptor?? [ 452.388288][ T7719] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 452.420939][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 452.429928][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.440439][ T979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 452.449541][ T979] usb 4-1: can't read configurations, error -61 [ 452.466103][ T979] usb usb4-port1: attempt power cycle [ 452.659883][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 452.821337][ T979] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 452.851739][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 452.859503][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.946370][T12896] sctp: [Deprecated]: syz.1.2029 (pid 12896) Use of int in maxseg socket option. [ 452.946370][T12896] Use struct sctp_assoc_value instead [ 452.997542][ T979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 453.014456][ T979] usb 4-1: can't read configurations, error -61 [ 453.170905][ T979] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 453.226655][ T7719] gspca_stv06xx: I2C: Read error writing address: -71 [ 453.237478][ T7719] usb 1-1: USB disconnect, device number 70 [ 453.271220][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 453.282896][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 453.379222][ T979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 453.393753][ T979] usb 4-1: can't read configurations, error -61 [ 453.402822][ T979] usb usb4-port1: unable to enumerate USB device [ 453.431033][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 453.468244][ T10] usb 3-1: USB disconnect, device number 77 [ 454.153674][T12917] tipc: Started in network mode [ 454.170432][T12917] tipc: Node identity 6ebc883e7a8e, cluster identity 4711 [ 454.255330][T12917] tipc: Enabled bearer , priority 0 [ 454.274716][T12918] syzkaller0: entered promiscuous mode [ 454.280229][T12918] syzkaller0: entered allmulticast mode [ 454.442405][T12916] tipc: Resetting bearer [ 454.480410][T12915] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 454.581394][T12915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.603681][T12916] tipc: Disabling bearer [ 455.540409][T12951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2045'. [ 455.614782][T12955] tipc: Enabled bearer , priority 0 [ 455.631742][T12955] syzkaller0: entered promiscuous mode [ 455.647535][T12955] syzkaller0: entered allmulticast mode [ 455.668021][T12954] tipc: Resetting bearer [ 455.681274][ T7715] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 455.694600][T12954] tipc: Disabling bearer [ 455.811134][ T7715] usb 5-1: device descriptor read/64, error -71 [ 455.891247][ T7719] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 456.061922][ T7715] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 456.102529][ T7719] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 456.112816][ T7719] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.126208][ T7719] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 456.135471][ T7719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.144859][ T7719] usb 1-1: config 0 descriptor?? [ 456.241684][ T7715] usb 5-1: device descriptor read/64, error -71 [ 456.362521][ T7715] usb usb5-port1: attempt power cycle [ 456.432314][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 456.711205][ T7715] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 456.749610][ T7715] usb 5-1: device descriptor read/8, error -71 [ 456.990997][ T7715] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 457.011510][ T7715] usb 5-1: device descriptor read/8, error -71 [ 457.121240][ T7715] usb usb5-port1: unable to enumerate USB device [ 457.431134][ T10] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 457.570851][ T10] usb 3-1: device descriptor read/64, error -71 [ 457.750196][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2055'. [ 457.759773][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 457.830897][ T10] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 457.972605][ T10] usb 3-1: device descriptor read/64, error -71 [ 457.981030][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2056'. [ 458.085030][ T10] usb usb3-port1: attempt power cycle [ 458.451108][ T10] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 458.559855][ T10] usb 3-1: device descriptor read/8, error -71 [ 458.826049][ T10] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 458.851464][ T10] usb 3-1: device descriptor read/8, error -71 [ 458.962262][ T10] usb usb3-port1: unable to enumerate USB device [ 459.041561][ T7719] usb 1-1: string descriptor 0 read error: -71 [ 459.050129][ T7719] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 459.103455][ T7719] usb 1-1: USB disconnect, device number 71 [ 459.440847][ T7715] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 459.612321][ T7715] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 459.623351][ T7715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.653613][ T7715] usb 5-1: config 0 descriptor?? [ 459.699694][T13043] pim6reg1: entered promiscuous mode [ 459.706531][T13043] pim6reg1: entered allmulticast mode [ 460.111365][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 460.272798][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 460.342777][ T10] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 460.360811][ T10] usb 2-1: config 0 has no interface number 0 [ 460.438016][ T10] usb 2-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 460.527966][T13049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.536165][T13049] netlink: 'syz.2.2072': attribute type 21 has an invalid length. [ 460.711545][ T10] usb 2-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.727682][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'. [ 460.739432][ T7715] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 460.750405][ T7715] usb 5-1: USB disconnect, device number 69 [ 460.839448][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 460.869236][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.869556][T13057] vlan2: entered promiscuous mode [ 460.880987][ T10] usb 2-1: Product: syz [ 460.887204][ T10] usb 2-1: Manufacturer: syz [ 460.943763][ T10] usb 2-1: SerialNumber: syz [ 460.953838][ T10] usb 2-1: config 0 descriptor?? [ 461.005808][ T10] xbox_remote_probe: Unexpected endpoint_in [ 461.130917][ T979] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 461.336727][ T979] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 461.346620][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.373965][ T979] usb 1-1: config 0 has no interface number 0 [ 461.428560][ T979] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 461.454499][ T979] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.470711][ T979] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 461.480427][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.488787][ T979] usb 1-1: Product: syz [ 461.493218][ T979] usb 1-1: Manufacturer: syz [ 461.497900][ T979] usb 1-1: SerialNumber: syz [ 461.506067][ T979] usb 1-1: config 0 descriptor?? [ 461.729077][T13069] tipc: Enabled bearer , priority 0 [ 461.740617][T13066] tipc: Resetting bearer [ 461.757888][ T7700] usb 2-1: USB disconnect, device number 88 [ 461.775669][T13065] tipc: Disabling bearer [ 462.024035][T13076] FAULT_INJECTION: forcing a failure. [ 462.024035][T13076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.037565][T13076] CPU: 0 UID: 0 PID: 13076 Comm: syz.3.2082 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 462.037596][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.037610][T13076] Call Trace: [ 462.037619][T13076] [ 462.037628][T13076] dump_stack_lvl+0x189/0x250 [ 462.037660][T13076] ? __pfx____ratelimit+0x10/0x10 [ 462.037688][T13076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.037712][T13076] ? __pfx__printk+0x10/0x10 [ 462.037739][T13076] ? __might_fault+0xb0/0x130 [ 462.037770][T13076] ? rcu_is_watching+0x15/0xb0 [ 462.037792][T13076] should_fail_ex+0x414/0x560 [ 462.037821][T13076] _copy_from_iter+0x1db/0x16f0 [ 462.037843][T13076] ? rcu_is_watching+0x15/0xb0 [ 462.037863][T13076] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 462.037892][T13076] ? __pfx__copy_from_iter+0x10/0x10 [ 462.037911][T13076] ? __build_skb_around+0x257/0x3e0 [ 462.037952][T13076] ? netlink_sendmsg+0x642/0xb30 [ 462.037981][T13076] ? skb_put+0x11b/0x210 [ 462.038000][T13076] netlink_sendmsg+0x6b2/0xb30 [ 462.038033][T13076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.038065][T13076] ? aa_sock_msg_perm+0xf1/0x1d0 [ 462.038084][T13076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.038106][T13076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.038136][T13076] __sock_sendmsg+0x219/0x270 [ 462.038163][T13076] ____sys_sendmsg+0x505/0x830 [ 462.038185][T13076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.038210][T13076] ? import_iovec+0x74/0xa0 [ 462.038234][T13076] ___sys_sendmsg+0x21f/0x2a0 [ 462.038255][T13076] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.038293][T13076] ? __fget_files+0x2a/0x420 [ 462.038310][T13076] ? __fget_files+0x3a0/0x420 [ 462.038332][T13076] __x64_sys_sendmsg+0x19b/0x260 [ 462.038354][T13076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.038378][T13076] ? __pfx_ksys_write+0x10/0x10 [ 462.038403][T13076] ? rcu_is_watching+0x15/0xb0 [ 462.038424][T13076] ? rcu_is_watching+0x15/0xb0 [ 462.038445][T13076] do_syscall_64+0xfa/0x3b0 [ 462.038475][T13076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.038496][T13076] ? clear_bhb_loop+0x60/0xb0 [ 462.038518][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.038538][T13076] RIP: 0033:0x7fd256f8ebe9 [ 462.038556][T13076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.038575][T13076] RSP: 002b:00007fd257dbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.038597][T13076] RAX: ffffffffffffffda RBX: 00007fd2571b5fa0 RCX: 00007fd256f8ebe9 [ 462.038613][T13076] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 462.038627][T13076] RBP: 00007fd257dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 462.038640][T13076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.038652][T13076] R13: 00007fd2571b6038 R14: 00007fd2571b5fa0 R15: 00007fd2572dfa28 [ 462.038675][T13076] [ 462.348592][T13079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.371492][T13079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.380417][T13082] syzkaller1: entered promiscuous mode [ 462.386499][T13082] syzkaller1: entered allmulticast mode [ 462.470906][ T7700] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 462.600853][ T7700] usb 5-1: device descriptor read/64, error -71 [ 462.860868][ T7700] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 463.010994][ T7700] usb 5-1: device descriptor read/64, error -71 [ 463.149278][ T7700] usb usb5-port1: attempt power cycle [ 463.490830][ T7700] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 463.527442][ T7700] usb 5-1: device descriptor read/8, error -71 [ 463.800843][ T7700] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 463.827453][ T10] usb 1-1: USB disconnect, device number 72 [ 463.858287][ T7700] usb 5-1: device descriptor read/8, error -71 [ 463.984033][ T7700] usb usb5-port1: unable to enumerate USB device [ 464.190844][ T7718] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 464.661408][ T7718] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 464.690838][ T7718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.711012][ T7718] usb 2-1: Product: syz [ 464.720841][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 464.729636][ T7718] usb 2-1: Manufacturer: syz [ 464.735448][ T7718] usb 2-1: SerialNumber: syz [ 464.761080][ T7718] usb 2-1: config 0 descriptor?? [ 464.881008][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 464.892391][ T10] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 464.906418][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 464.916708][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.957278][ T10] usb 1-1: Product: syz [ 464.964576][ T10] usb 1-1: Manufacturer: syz [ 464.975109][ T10] usb 1-1: SerialNumber: syz [ 465.001541][ T10] usb 1-1: config 0 descriptor?? [ 465.013465][ T10] usb 1-1: bad CDC descriptors [ 465.019139][ T10] usb 1-1: unsupported MDLM descriptors [ 465.066744][T13166] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2099'. [ 465.108971][T13156] binder: 13150:13156 ioctl c0306201 200000000100 returned -11 [ 465.123028][T13156] fuse: Bad value for 'fd' [ 465.300915][ T7715] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 465.320935][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 465.413701][ T7718] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 465.441664][ T7718] usb 2-1: Firmware version (0.0) predates our first public release. [ 465.468210][ T7718] usb 2-1: Please update to version 0.2 or newer [ 465.492153][ T7715] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 465.557434][ T7715] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 465.571083][ T7715] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.581282][ T7715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.590959][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 465.593937][ T7715] usb 5-1: config 0 descriptor?? [ 465.665696][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.682832][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.697784][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.708588][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.722965][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 465.733843][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.742957][ T10] usb 4-1: Product: syz [ 465.747259][ T10] usb 4-1: Manufacturer: syz [ 465.754665][ T10] usb 4-1: SerialNumber: syz [ 465.772423][ T7718] usb 2-1: USB disconnect, device number 89 [ 465.778518][ T10] usb 4-1: bad CDC descriptors [ 465.785346][ T10] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 465.797103][ T10] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 465.866320][T13178] vlan2: entered promiscuous mode [ 466.022748][T13180] netlink: 'syz.2.2103': attribute type 29 has an invalid length. [ 466.081570][T13165] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2100'. [ 466.105047][ T7715] usb 5-1: string descriptor 0 read error: -71 [ 466.134873][ T7715] usb 5-1: USB disconnect, device number 74 [ 466.155623][T13183] vlan2: entered promiscuous mode [ 466.179971][ T7718] usb 4-1: USB disconnect, device number 96 [ 466.410936][ T5943] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 466.560988][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 466.569779][ T5943] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 466.579211][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.587513][ T5943] usb 2-1: Product: syz [ 466.591739][ T5943] usb 2-1: Manufacturer: syz [ 466.596387][ T5943] usb 2-1: SerialNumber: syz [ 466.602517][ T5943] usb 2-1: config 0 descriptor?? [ 466.609563][ T5943] gspca_main: se401-2.14.0 probing 047d:5003 [ 466.887897][T13201] sctp: [Deprecated]: syz.4.2109 (pid 13201) Use of int in maxseg socket option. [ 466.887897][T13201] Use struct sctp_assoc_value instead [ 467.009930][ T5943] gspca_se401: ExtraFeatures: 255 [ 467.019821][ T5943] gspca_se401: Too many frame sizes [ 467.050816][ T979] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 467.182020][ T7715] usb 1-1: USB disconnect, device number 73 [ 467.200874][ T979] usb 4-1: device descriptor read/64, error -71 [ 467.241762][T13204] syzkaller1: entered promiscuous mode [ 467.247740][T13204] syzkaller1: entered allmulticast mode [ 467.265273][ T5943] usb 2-1: USB disconnect, device number 90 [ 467.273201][T13204] FAULT_INJECTION: forcing a failure. [ 467.273201][T13204] name failslab, interval 1, probability 0, space 0, times 0 [ 467.285909][T13204] CPU: 1 UID: 0 PID: 13204 Comm: syz.2.2111 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 467.285931][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.285941][T13204] Call Trace: [ 467.285947][T13204] [ 467.285953][T13204] dump_stack_lvl+0x189/0x250 [ 467.285974][T13204] ? __pfx____ratelimit+0x10/0x10 [ 467.285995][T13204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.286012][T13204] ? __pfx__printk+0x10/0x10 [ 467.286031][T13204] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 467.286053][T13204] ? __pfx_xfrm_pol_bin_cmp+0x10/0x10 [ 467.286071][T13204] ? __pfx_rhashtable_lookup+0x10/0x10 [ 467.286089][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.286104][T13204] ? __pfx_xfrm_pol_bin_key+0x10/0x10 [ 467.286121][T13204] ? __pfx_xfrm_pol_bin_obj+0x10/0x10 [ 467.286141][T13204] should_fail_ex+0x414/0x560 [ 467.286161][T13204] should_failslab+0xa8/0x100 [ 467.286183][T13204] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 467.286204][T13204] ? __alloc_skb+0x112/0x2d0 [ 467.286225][T13204] ? unwind_next_frame+0xa5/0x2390 [ 467.286242][T13204] __alloc_skb+0x112/0x2d0 [ 467.286264][T13204] _sctp_make_chunk+0x5e/0x430 [ 467.286285][T13204] ? is_bpf_text_address+0x26/0x2b0 [ 467.286308][T13204] sctp_make_abort_violation+0xb9/0x660 [ 467.286326][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.286340][T13204] ? lock_release+0x4b/0x3e0 [ 467.286362][T13204] ? __pfx_sctp_make_abort_violation+0x10/0x10 [ 467.286388][T13204] ? is_bpf_text_address+0x292/0x2b0 [ 467.286409][T13204] ? sctp_auth_recv_cid+0x75/0x230 [ 467.286430][T13204] sctp_sf_abort_violation+0x6f/0xc60 [ 467.286453][T13204] ? __kernel_text_address+0xd/0x40 [ 467.286473][T13204] ? unwind_get_return_address+0x4d/0x90 [ 467.286491][T13204] sctp_sf_ootb+0x4df/0x7c0 [ 467.286515][T13204] sctp_do_sm+0x1e4/0x5a20 [ 467.286531][T13204] ? __pfx_sctp_cname+0x10/0x10 [ 467.286546][T13204] ? stack_depot_save_flags+0x40/0x860 [ 467.286570][T13204] ? __pfx_sctp_do_sm+0x10/0x10 [ 467.286585][T13204] ? ip_protocol_deliver_rcu+0x2dd/0x440 [ 467.286607][T13204] ? NF_HOOK+0x30c/0x3a0 [ 467.286626][T13204] ? __netif_receive_skb+0x143/0x380 [ 467.286659][T13204] ? sctp_inq_pop+0xc46/0x1010 [ 467.286674][T13204] ? sctp_auth_recv_cid+0x75/0x230 [ 467.286694][T13204] sctp_endpoint_bh_rcv+0x591/0x7e0 [ 467.286721][T13204] sctp_rcv+0x11c1/0x1820 [ 467.286734][T13204] ? lock_release+0x4b/0x3e0 [ 467.286760][T13204] ? __pfx_sctp_rcv+0x10/0x10 [ 467.286772][T13204] ? stack_trace_save+0x9c/0xe0 [ 467.286792][T13204] ? __pfx_raw_local_deliver+0x10/0x10 [ 467.286805][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.286819][T13204] ? lock_acquire+0x5f/0x360 [ 467.286840][T13204] ? __pfx_sctp4_rcv+0x10/0x10 [ 467.286858][T13204] ip_protocol_deliver_rcu+0x2dd/0x440 [ 467.286879][T13204] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 467.286900][T13204] ip_local_deliver_finish+0x3bb/0x6f0 [ 467.286923][T13204] NF_HOOK+0x30c/0x3a0 [ 467.286943][T13204] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 467.286963][T13204] ? NF_HOOK+0x9a/0x3a0 [ 467.286982][T13204] ? __pfx_NF_HOOK+0x10/0x10 [ 467.287001][T13204] ? ip_rcv_finish_core+0xda3/0x1c00 [ 467.287022][T13204] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 467.287044][T13204] ? skb_dst+0x4f/0xd0 [ 467.287063][T13204] ? ip_local_deliver+0x12a/0x1b0 [ 467.287084][T13204] NF_HOOK+0x30c/0x3a0 [ 467.287104][T13204] ? __pfx_ip_rcv_finish+0x10/0x10 [ 467.287124][T13204] ? NF_HOOK+0x9a/0x3a0 [ 467.287143][T13204] ? __pfx_NF_HOOK+0x10/0x10 [ 467.287161][T13204] ? ip_rcv_core+0x7f7/0xd00 [ 467.287181][T13204] ? __pfx_ip_rcv_finish+0x10/0x10 [ 467.287204][T13204] ? __pfx_ip_rcv+0x10/0x10 [ 467.287223][T13204] __netif_receive_skb+0x143/0x380 [ 467.287244][T13204] ? netif_receive_skb+0x115/0x790 [ 467.287262][T13204] netif_receive_skb+0x1cb/0x790 [ 467.287279][T13204] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 467.287293][T13204] ? _copy_from_iter+0x24c/0x16f0 [ 467.287307][T13204] ? __pfx_netif_receive_skb+0x10/0x10 [ 467.287324][T13204] ? skb_partial_csum_set+0x107/0x360 [ 467.287346][T13204] ? tun_rx_batched+0x160/0x730 [ 467.287361][T13204] tun_rx_batched+0x1b9/0x730 [ 467.287382][T13204] ? __pfx_tun_rx_batched+0x10/0x10 [ 467.287396][T13204] ? tun_get_user+0x266c/0x3e20 [ 467.287408][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.287423][T13204] ? lock_acquire+0x5f/0x360 [ 467.287443][T13204] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 467.287464][T13204] tun_get_user+0x2aa2/0x3e20 [ 467.287480][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.287494][T13204] ? lock_release+0x4b/0x3e0 [ 467.287514][T13204] ? tun_get_user+0x266c/0x3e20 [ 467.287529][T13204] ? aa_file_perm+0x44d/0x1550 [ 467.287544][T13204] ? __pfx_tun_get_user+0x10/0x10 [ 467.287556][T13204] ? _parse_integer_limit+0x1ae/0x1f0 [ 467.287579][T13204] ? kstrtoull+0x12f/0x1d0 [ 467.287602][T13204] ? ref_tracker_alloc+0x318/0x460 [ 467.287621][T13204] ? get_pid_task+0x20/0x1f0 [ 467.287638][T13204] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 467.287659][T13204] ? tun_get+0x1c/0x2f0 [ 467.287671][T13204] ? tun_get+0x1c/0x2f0 [ 467.287683][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.287696][T13204] ? tun_get+0x1c/0x2f0 [ 467.287707][T13204] ? lock_release+0x4b/0x3e0 [ 467.287727][T13204] ? common_file_perm+0x1b5/0x230 [ 467.287750][T13204] ? tun_get+0x1c/0x2f0 [ 467.287763][T13204] tun_chr_write_iter+0x113/0x200 [ 467.287786][T13204] vfs_write+0x5c6/0xb30 [ 467.287807][T13204] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 467.287829][T13204] ? __pfx_vfs_write+0x10/0x10 [ 467.287851][T13204] ? __fget_files+0x2a/0x420 [ 467.287866][T13204] ksys_write+0x145/0x250 [ 467.287885][T13204] ? __pfx_ksys_write+0x10/0x10 [ 467.287903][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.287918][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.287933][T13204] do_syscall_64+0xfa/0x3b0 [ 467.287953][T13204] ? rcu_is_watching+0x15/0xb0 [ 467.287966][T13204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.287981][T13204] ? clear_bhb_loop+0x60/0xb0 [ 467.287996][T13204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.288010][T13204] RIP: 0033:0x7f4e5d18ebe9 [ 467.288024][T13204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.288036][T13204] RSP: 002b:00007f4e5df19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.288052][T13204] RAX: ffffffffffffffda RBX: 00007f4e5d3b5fa0 RCX: 00007f4e5d18ebe9 [ 467.288063][T13204] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 467.288073][T13204] RBP: 00007f4e5df19090 R08: 0000000000000000 R09: 0000000000000000 [ 467.288082][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.288091][T13204] R13: 00007f4e5d3b6038 R14: 00007f4e5d3b5fa0 R15: 00007f4e5d4dfa28 [ 467.288108][T13204] [ 467.938302][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.081689][ T979] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 468.172419][T13214] syzkaller1: entered promiscuous mode [ 468.178104][T13214] syzkaller1: entered allmulticast mode [ 468.270923][ T979] usb 4-1: device descriptor read/64, error -71 [ 468.356283][T13221] netlink: 'syz.0.2117': attribute type 10 has an invalid length. [ 468.365370][T13221] team0: Device veth1_vlan failed to register rx_handler [ 468.411446][ T979] usb usb4-port1: attempt power cycle [ 468.787370][T13225] pim6reg1: entered promiscuous mode [ 468.793024][T13225] pim6reg1: entered allmulticast mode [ 468.960912][ T979] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 468.999374][ T979] usb 4-1: device descriptor read/8, error -71 [ 469.100971][ T5943] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 469.250929][ T979] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 469.266160][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 469.286623][ T5943] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 469.301667][ T979] usb 4-1: device descriptor read/8, error -71 [ 469.311864][ T5943] usb 3-1: config 0 has no interface number 0 [ 469.328384][ T5943] usb 3-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 469.366340][ T5943] usb 3-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.424068][ T5943] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 469.437450][ T979] usb usb4-port1: unable to enumerate USB device [ 469.467709][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.501159][ T5943] usb 3-1: Product: syz [ 469.515754][ T5943] usb 3-1: Manufacturer: syz [ 469.534108][ T5943] usb 3-1: SerialNumber: syz [ 469.576930][ T5943] usb 3-1: config 0 descriptor?? [ 469.596831][ T5943] xbox_remote_probe: Unexpected endpoint_in [ 470.462376][T13252] fuse: Unknown parameter 'mGN‡8o«ad' [ 470.749571][ T7718] IPVS: starting estimator thread 0... [ 470.809397][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 470.840988][T13263] IPVS: using max 53 ests per chain, 127200 per kthread [ 471.334689][ T5943] usb 3-1: USB disconnect, device number 83 [ 471.691777][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2131'. [ 471.728679][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2131'. [ 471.788138][T13276] sctp: [Deprecated]: syz.2.2130 (pid 13276) Use of int in maxseg socket option. [ 471.788138][T13276] Use struct sctp_assoc_value instead [ 471.789723][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2131'. [ 471.857399][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2131'. [ 472.170841][ T7718] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 472.400851][ T7718] usb 4-1: Using ep0 maxpacket: 8 [ 473.092352][ T7718] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.114801][ T7718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.130868][ T7718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.142401][ T7718] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.162417][ T7718] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.210931][ T7718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.455650][ T7718] usb 4-1: GET_CAPABILITIES returned 0 [ 473.482267][ T7718] usbtmc 4-1:16.0: can't read capabilities [ 473.640880][ T7715] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 473.770939][ T7715] usb 1-1: device descriptor read/64, error -71 [ 473.914724][T13304] syzkaller1: entered promiscuous mode [ 473.930978][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 473.938783][T13304] syzkaller1: entered allmulticast mode [ 473.951609][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.960763][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.969884][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.979011][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.988170][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.997294][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.010990][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.020131][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.020959][ T7715] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 474.029241][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.046316][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.055451][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.064560][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.077183][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.086320][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.095507][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.104608][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 474.117229][ T5943] usb 4-1: USB disconnect, device number 101 [ 474.155255][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.168290][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 474.180804][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.206895][ T7715] usb 1-1: device descriptor read/64, error -71 [ 474.210046][ T10] usb 3-1: config 0 descriptor?? [ 474.223028][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 474.341219][ T7715] usb usb1-port1: attempt power cycle [ 474.351289][T13310] FAULT_INJECTION: forcing a failure. [ 474.351289][T13310] name failslab, interval 1, probability 0, space 0, times 0 [ 474.382423][T13310] CPU: 1 UID: 0 PID: 13310 Comm: syz.1.2140 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 474.382454][T13310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.382468][T13310] Call Trace: [ 474.382477][T13310] [ 474.382488][T13310] dump_stack_lvl+0x189/0x250 [ 474.382518][T13310] ? __pfx____ratelimit+0x10/0x10 [ 474.382545][T13310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.382569][T13310] ? __pfx__printk+0x10/0x10 [ 474.382599][T13310] ? __pfx___might_resched+0x10/0x10 [ 474.382620][T13310] ? lock_acquire+0x5f/0x360 [ 474.382658][T13310] should_fail_ex+0x414/0x560 [ 474.382686][T13310] should_failslab+0xa8/0x100 [ 474.382717][T13310] kmem_cache_alloc_noprof+0x73/0x3c0 [ 474.382744][T13310] ? skb_clone+0x212/0x3a0 [ 474.382769][T13310] skb_clone+0x212/0x3a0 [ 474.382790][T13310] ? nfnetlink_rcv+0x486/0x2520 [ 474.382816][T13310] nfnetlink_rcv+0x4b4/0x2520 [ 474.382843][T13310] ? __dev_queue_xmit+0x1d79/0x3b50 [ 474.382870][T13310] ? __dev_queue_xmit+0x27b/0x3b50 [ 474.382899][T13310] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 474.382933][T13310] ? ref_tracker_free+0x63a/0x7d0 [ 474.382963][T13310] ? __asan_memcpy+0x40/0x70 [ 474.382985][T13310] ? __pfx_ref_tracker_free+0x10/0x10 [ 474.383014][T13310] ? __skb_clone+0x63/0x7a0 [ 474.383037][T13310] ? __skb_clone+0x483/0x7a0 [ 474.383060][T13310] ? skb_clone+0x246/0x3a0 [ 474.383085][T13310] ? __netlink_deliver_tap+0x807/0x850 [ 474.383113][T13310] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.383142][T13310] ? rcu_is_watching+0x15/0xb0 [ 474.383161][T13310] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.383189][T13310] ? lock_release+0x4b/0x3e0 [ 474.383224][T13310] netlink_unicast+0x82c/0x9e0 [ 474.383255][T13310] ? __pfx_netlink_unicast+0x10/0x10 [ 474.383282][T13310] ? netlink_sendmsg+0x642/0xb30 [ 474.383316][T13310] ? skb_put+0x11b/0x210 [ 474.383336][T13310] netlink_sendmsg+0x805/0xb30 [ 474.383371][T13310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.383403][T13310] ? aa_sock_msg_perm+0xf1/0x1d0 [ 474.383423][T13310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.383445][T13310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.383476][T13310] __sock_sendmsg+0x219/0x270 [ 474.383504][T13310] ____sys_sendmsg+0x505/0x830 [ 474.383528][T13310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.383553][T13310] ? import_iovec+0x74/0xa0 [ 474.383578][T13310] ___sys_sendmsg+0x21f/0x2a0 [ 474.383600][T13310] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.383638][T13310] ? __fget_files+0x2a/0x420 [ 474.383664][T13310] ? __fget_files+0x3a0/0x420 [ 474.383686][T13310] __x64_sys_sendmsg+0x19b/0x260 [ 474.383708][T13310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.383734][T13310] ? __pfx_ksys_write+0x10/0x10 [ 474.383760][T13310] ? rcu_is_watching+0x15/0xb0 [ 474.383783][T13310] ? rcu_is_watching+0x15/0xb0 [ 474.383804][T13310] do_syscall_64+0xfa/0x3b0 [ 474.383835][T13310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.383855][T13310] ? clear_bhb_loop+0x60/0xb0 [ 474.383878][T13310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.383899][T13310] RIP: 0033:0x7f195ff8ebe9 [ 474.383918][T13310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.383937][T13310] RSP: 002b:00007f1960d46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.383960][T13310] RAX: ffffffffffffffda RBX: 00007f19601b5fa0 RCX: 00007f195ff8ebe9 [ 474.383975][T13310] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 474.383988][T13310] RBP: 00007f1960d46090 R08: 0000000000000000 R09: 0000000000000000 [ 474.384001][T13310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.384014][T13310] R13: 00007f19601b6038 R14: 00007f19601b5fa0 R15: 00007f19602dfa28 [ 474.384037][T13310] [ 475.070894][ T7715] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 475.101267][ T7715] usb 1-1: device descriptor read/8, error -71 [ 475.244677][T13325] syzkaller1: entered promiscuous mode [ 475.250444][T13325] syzkaller1: entered allmulticast mode [ 475.342115][ T7715] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 475.371646][ T7715] usb 1-1: device descriptor read/8, error -71 [ 475.485988][ T7715] usb usb1-port1: unable to enumerate USB device [ 476.981932][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 477.003056][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 477.021137][T13339] syzkaller1: entered promiscuous mode [ 477.027052][T13338] fuse: Bad value for 'fd' [ 477.028765][T13339] syzkaller1: entered allmulticast mode [ 477.037064][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 477.079677][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 477.089050][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 477.103002][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 477.111878][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 477.130096][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 477.142287][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 477.163299][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 477.183289][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 477.202878][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 477.226847][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 477.241233][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 477.249275][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 477.256745][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 477.275557][ T10] pwc: Registered as video103. [ 477.302019][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 477.360250][ T10] usb 3-1: USB disconnect, device number 84 [ 477.531106][T13354] FAULT_INJECTION: forcing a failure. [ 477.531106][T13354] name failslab, interval 1, probability 0, space 0, times 0 [ 477.597968][T13354] CPU: 1 UID: 0 PID: 13354 Comm: syz.3.2149 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 477.598000][T13354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.598014][T13354] Call Trace: [ 477.598022][T13354] [ 477.598031][T13354] dump_stack_lvl+0x189/0x250 [ 477.598060][T13354] ? __pfx____ratelimit+0x10/0x10 [ 477.598088][T13354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.598113][T13354] ? __pfx__printk+0x10/0x10 [ 477.598143][T13354] ? __pfx___might_resched+0x10/0x10 [ 477.598162][T13354] ? lock_acquire+0x5f/0x360 [ 477.598192][T13354] should_fail_ex+0x414/0x560 [ 477.598221][T13354] should_failslab+0xa8/0x100 [ 477.598252][T13354] __kmalloc_cache_noprof+0x70/0x3d0 [ 477.598280][T13354] ? __io_uring_add_tctx_node+0x149/0x4e0 [ 477.598308][T13354] __io_uring_add_tctx_node+0x149/0x4e0 [ 477.598335][T13354] ? lock_release+0x4b/0x3e0 [ 477.598364][T13354] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 477.598391][T13354] ? __fget_files+0x2a/0x420 [ 477.598411][T13354] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 477.598438][T13354] __se_sys_io_uring_enter+0x2502/0x2b20 [ 477.598475][T13354] ? lock_release+0x4b/0x3e0 [ 477.598504][T13354] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 477.598530][T13354] ? rcu_is_watching+0x15/0xb0 [ 477.598550][T13354] ? lock_release+0x4b/0x3e0 [ 477.598584][T13354] ? vfs_write+0x956/0xb30 [ 477.598613][T13354] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 477.598638][T13354] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 477.598669][T13354] ? __pfx_vfs_write+0x10/0x10 [ 477.598696][T13354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.598728][T13354] ? __fget_files+0x3a0/0x420 [ 477.598749][T13354] ? fput+0xa0/0xd0 [ 477.598769][T13354] ? ksys_write+0x22a/0x250 [ 477.598802][T13354] ? __pfx_ksys_write+0x10/0x10 [ 477.598827][T13354] ? rcu_is_watching+0x15/0xb0 [ 477.598849][T13354] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 477.598877][T13354] do_syscall_64+0xfa/0x3b0 [ 477.598908][T13354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.598928][T13354] ? clear_bhb_loop+0x60/0xb0 [ 477.598952][T13354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.598976][T13354] RIP: 0033:0x7fd256f8ebe9 [ 477.598993][T13354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.599012][T13354] RSP: 002b:00007fd257d96038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 477.599035][T13354] RAX: ffffffffffffffda RBX: 00007fd2571b6090 RCX: 00007fd256f8ebe9 [ 477.599051][T13354] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000006 [ 477.599064][T13354] RBP: 00007fd257d96090 R08: 0000000000000000 R09: 0000000000000000 [ 477.599077][T13354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.599089][T13354] R13: 00007fd2571b6128 R14: 00007fd2571b6090 R15: 00007fd2572dfa28 [ 477.599112][T13354] [ 477.940898][ T7719] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 477.950837][ T5943] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 478.091984][ T7719] usb 2-1: Using ep0 maxpacket: 16 [ 478.100054][ T7719] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 478.113276][ T7719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.114094][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 478.121398][ T7719] usb 2-1: Product: syz [ 478.131581][ T7719] usb 2-1: Manufacturer: syz [ 478.136268][ T7719] usb 2-1: SerialNumber: syz [ 478.146989][ T5943] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 478.157556][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.168343][ T5943] usb 1-1: Product: syz [ 478.172748][ T5943] usb 1-1: Manufacturer: syz [ 478.184857][ T5943] usb 1-1: SerialNumber: syz [ 478.297628][T13396] sctp: [Deprecated]: syz.2.2157 (pid 13396) Use of int in maxseg socket option. [ 478.297628][T13396] Use struct sctp_assoc_value instead [ 478.353044][T13358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.383953][T13358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.437509][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.468821][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.715431][T13402] sctp: [Deprecated]: syz.3.2158 (pid 13402) Use of int in maxseg socket option. [ 478.715431][T13402] Use struct sctp_assoc_value instead [ 480.667673][ T7719] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.852174][ T7719] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 480.863668][ T5943] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.922788][ T7719] usb 2-1: USB disconnect, device number 91 [ 480.971508][ T5943] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 481.000048][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.050358][ T5943] usb 1-1: USB disconnect, device number 78 [ 481.079119][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.811912][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 481.987570][ T10] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 481.996802][ T10] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 482.005986][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.074111][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 482.084956][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.097048][ T10] usb 3-1: Product: syz [ 482.110053][ T10] usb 3-1: Manufacturer: syz [ 482.132611][ T10] usb 3-1: SerialNumber: syz [ 482.156465][ T10] usb 3-1: config 0 descriptor?? [ 482.280888][ T7719] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 482.440902][ T7719] usb 2-1: Using ep0 maxpacket: 8 [ 482.454722][ T7719] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 482.473947][ T7719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.492152][ T7719] usb 2-1: Product: syz [ 482.499417][ T7719] usb 2-1: Manufacturer: syz [ 482.504136][ T7719] usb 2-1: SerialNumber: syz [ 482.514443][ T7719] usb 2-1: config 0 descriptor?? [ 482.867077][T13444] fuse: Unknown parameter 'fd00000000000000000000' [ 482.888033][ T7719] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 482.897922][ T7719] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 482.912650][ T7719] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 482.919737][ T7719] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 482.935057][ T7719] usb 2-1: USB disconnect, device number 92 [ 483.814734][T13466] vlan0: entered promiscuous mode [ 483.938981][T13471] netlink: 'syz.0.2177': attribute type 13 has an invalid length. [ 484.083002][T13477] binder: 13475:13477 ioctl c0306201 200000000080 returned -14 [ 484.255957][T13485] FAULT_INJECTION: forcing a failure. [ 484.255957][T13485] name failslab, interval 1, probability 0, space 0, times 0 [ 484.284582][T13485] CPU: 0 UID: 0 PID: 13485 Comm: syz.1.2184 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 484.284610][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.284620][T13485] Call Trace: [ 484.284627][T13485] [ 484.284633][T13485] dump_stack_lvl+0x189/0x250 [ 484.284662][T13485] ? __pfx____ratelimit+0x10/0x10 [ 484.284682][T13485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.284699][T13485] ? __pfx__printk+0x10/0x10 [ 484.284720][T13485] ? fs_reclaim_acquire+0x7d/0x100 [ 484.284743][T13485] ? rcu_is_watching+0x15/0xb0 [ 484.284757][T13485] ? __pfx___might_resched+0x10/0x10 [ 484.284770][T13485] ? lock_acquire+0x5f/0x360 [ 484.284792][T13485] should_fail_ex+0x414/0x560 [ 484.284812][T13485] should_failslab+0xa8/0x100 [ 484.284834][T13485] __kmalloc_noprof+0xcb/0x4f0 [ 484.284854][T13485] ? __kasan_kmalloc+0x93/0xb0 [ 484.284872][T13485] ? nla_strdup+0x9d/0x140 [ 484.284895][T13485] nla_strdup+0x9d/0x140 [ 484.284919][T13485] nf_tables_newtable+0x491/0x1890 [ 484.284935][T13485] ? nfnetlink_subsys_unregister+0x1a2/0x1b0 [ 484.284960][T13485] nfnetlink_rcv+0x1132/0x2520 [ 484.284989][T13485] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 484.285013][T13485] ? ref_tracker_free+0x63a/0x7d0 [ 484.285043][T13485] ? __netlink_deliver_tap+0x807/0x850 [ 484.285064][T13485] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.285086][T13485] ? lock_release+0x4b/0x3e0 [ 484.285110][T13485] netlink_unicast+0x82c/0x9e0 [ 484.285132][T13485] ? __pfx_netlink_unicast+0x10/0x10 [ 484.285151][T13485] ? netlink_sendmsg+0x642/0xb30 [ 484.285171][T13485] ? skb_put+0x11b/0x210 [ 484.285185][T13485] netlink_sendmsg+0x805/0xb30 [ 484.285210][T13485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.285232][T13485] ? aa_sock_msg_perm+0xf1/0x1d0 [ 484.285247][T13485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.285263][T13485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.285285][T13485] __sock_sendmsg+0x219/0x270 [ 484.285304][T13485] ____sys_sendmsg+0x505/0x830 [ 484.285321][T13485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.285338][T13485] ? import_iovec+0x74/0xa0 [ 484.285356][T13485] ___sys_sendmsg+0x21f/0x2a0 [ 484.285371][T13485] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.285398][T13485] ? __fget_files+0x2a/0x420 [ 484.285410][T13485] ? __fget_files+0x3a0/0x420 [ 484.285426][T13485] __x64_sys_sendmsg+0x19b/0x260 [ 484.285441][T13485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.285459][T13485] ? __pfx_ksys_write+0x10/0x10 [ 484.285478][T13485] ? rcu_is_watching+0x15/0xb0 [ 484.285493][T13485] ? rcu_is_watching+0x15/0xb0 [ 484.285508][T13485] do_syscall_64+0xfa/0x3b0 [ 484.285529][T13485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.285544][T13485] ? clear_bhb_loop+0x60/0xb0 [ 484.285560][T13485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.285574][T13485] RIP: 0033:0x7f195ff8ebe9 [ 484.285588][T13485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.285604][T13485] RSP: 002b:00007f1960d46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.285621][T13485] RAX: ffffffffffffffda RBX: 00007f19601b5fa0 RCX: 00007f195ff8ebe9 [ 484.285638][T13485] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 484.285661][T13485] RBP: 00007f1960d46090 R08: 0000000000000000 R09: 0000000000000000 [ 484.285675][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.285687][T13485] R13: 00007f19601b6038 R14: 00007f19601b5fa0 R15: 00007f19602dfa28 [ 484.285709][T13485] [ 484.648185][T13488] fuse: Unknown parameter '0x0000000000000006' [ 484.779870][ T979] usb 3-1: USB disconnect, device number 85 [ 484.816343][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 484.877792][T13495] syzkaller1: entered promiscuous mode [ 484.896970][T13495] syzkaller1: entered allmulticast mode [ 485.090857][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 485.151261][T13501] vlan0: entered promiscuous mode [ 485.275142][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 485.291441][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 485.299593][ T10] usb 2-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 485.321806][ T10] usb 2-1: config 0 has no interface number 0 [ 485.331128][ T10] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.346220][ T10] usb 2-1: New USB device found, idVendor=e41d, idProduct=c1aa, bcdDevice=ce.6f [ 485.355370][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.363696][ T10] usb 2-1: Product: syz [ 485.368076][ T10] usb 2-1: Manufacturer: syz [ 485.374517][ T10] usb 2-1: SerialNumber: syz [ 485.392782][ T10] usb 2-1: config 0 descriptor?? [ 485.508807][T13513] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2193'. [ 485.516802][T13514] netlink: 'syz.4.2192': attribute type 10 has an invalid length. [ 485.516827][T13514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2192'. [ 485.529088][T13514] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 485.691601][ T10] usb 2-1: USB disconnect, device number 93 [ 485.839448][T13523] sctp: [Deprecated]: syz.4.2194 (pid 13523) Use of int in maxseg socket option. [ 485.839448][T13523] Use struct sctp_assoc_value instead [ 486.030845][ T7718] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 486.180844][ T7718] usb 4-1: Using ep0 maxpacket: 16 [ 486.263925][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2197'. [ 486.604753][T13544] syzkaller1: entered promiscuous mode [ 486.634045][T13544] syzkaller1: entered allmulticast mode [ 486.743342][ T7718] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 486.786064][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.837621][ T7718] usb 4-1: Product: syz [ 486.919528][ T7718] usb 4-1: Manufacturer: syz [ 486.962919][ T7718] usb 4-1: SerialNumber: syz [ 486.987893][T13549] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2202'. [ 487.284762][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 487.791268][T13591] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2206'. [ 487.810622][T13591] xt_policy: neither incoming nor outgoing policy selected [ 487.906935][T13594] syzkaller1: entered promiscuous mode [ 487.914142][T13594] syzkaller1: entered allmulticast mode [ 487.924364][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.934683][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.442278][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 488.590803][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 488.903423][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 488.915443][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.011635][ T10] usb 1-1: config 0 descriptor?? [ 489.052597][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 489.450211][ T10] gspca_sonixj: reg_r err -71 [ 489.455070][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 489.464527][ T10] usb 1-1: USB disconnect, device number 79 [ 490.310794][ T7718] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.432168][ T7718] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 490.482245][ T7718] usb 4-1: USB disconnect, device number 102 [ 490.544947][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.980832][ T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 490.995551][T13655] syzkaller1: entered promiscuous mode [ 491.004087][T13655] syzkaller1: entered allmulticast mode [ 491.077435][T13658] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 491.103918][T13658] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 491.135197][T13653] fuse: Bad value for 'group_id' [ 491.140343][T13653] fuse: Bad value for 'group_id' [ 491.151149][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 491.157790][ T10] usb 1-1: config 6 has an invalid interface number: 51 but max is 1 [ 491.187331][ T10] usb 1-1: config 6 has no interface number 1 [ 491.227356][ T10] usb 1-1: config 6 interface 0 has no altsetting 0 [ 491.259363][ T10] usb 1-1: config 6 interface 51 has no altsetting 0 [ 491.270846][ T5943] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 491.320377][ T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 491.344368][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.358635][ T10] usb 1-1: Product: syz [ 491.362363][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'. [ 491.384045][ T10] usb 1-1: Manufacturer: syz [ 491.388794][ T10] usb 1-1: SerialNumber: syz [ 491.470827][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 491.488902][ T5943] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 491.498070][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.506228][ T5943] usb 4-1: Product: syz [ 491.510442][ T5943] usb 4-1: Manufacturer: syz [ 491.515103][ T5943] usb 4-1: SerialNumber: syz [ 491.599449][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'. [ 491.735091][ T10] xr_serial 1-1:6.51: xr_serial converter detected [ 491.787117][ T10] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 491.794665][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 491.808125][ T10] usb 1-1: USB disconnect, device number 80 [ 491.817454][ T10] xr_serial 1-1:6.0: device disconnected [ 491.827906][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.839807][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.120953][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 492.267508][T13710] bond1 (unregistering): Released all slaves [ 492.273857][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 492.281577][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.292750][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 492.303170][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.313877][ T10] usb 1-1: config 0 descriptor?? [ 492.543182][T13748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2235'. [ 492.559116][T13672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2230'. [ 492.880808][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 492.886909][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 492.897170][ T10] usb 1-1: USB disconnect, device number 81 [ 493.010632][ T5943] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.067632][ T5943] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 493.083815][ T5943] usb 4-1: USB disconnect, device number 103 [ 493.104755][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.200476][T13756] syzkaller1: entered promiscuous mode [ 493.206457][T13756] syzkaller1: entered allmulticast mode [ 493.244174][T13759] loop6: detected capacity change from 0 to 63 [ 493.257411][ T7834] buffer_io_error: 17 callbacks suppressed [ 493.257426][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.271461][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.279380][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.287747][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.295848][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.314027][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.324135][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.341539][ T7834] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.349784][ T7834] loop6: unable to read partition table [ 493.350070][T13760] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 493.356663][T13759] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 493.377979][T13759] ldm_validate_partition_table(): Disk read failed. [ 493.391147][T13759] Dev loop6: unable to read RDB block 0 [ 493.397169][T13759] loop6: unable to read partition table [ 493.410887][T13759] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 493.453824][ T5232] ldm_validate_partition_table(): Disk read failed. [ 493.461853][ T5232] Dev loop6: unable to read RDB block 0 [ 493.469353][T13764] netlink: 'syz.4.2240': attribute type 13 has an invalid length. [ 493.469579][ T5232] loop6: unable to read partition table [ 493.594973][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 493.594993][ T30] audit: type=1326 audit(1755377231.571:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.651479][ T30] audit: type=1326 audit(1755377231.601:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.686741][ T30] audit: type=1326 audit(1755377231.601:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.710965][ T30] audit: type=1326 audit(1755377231.601:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.735597][ T30] audit: type=1326 audit(1755377231.601:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.761262][ T30] audit: type=1326 audit(1755377231.601:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.785885][ T30] audit: type=1326 audit(1755377231.601:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.816592][ T30] audit: type=1326 audit(1755377231.601:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.840666][ T30] audit: type=1326 audit(1755377231.601:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.865941][ T30] audit: type=1326 audit(1755377231.601:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13768 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5d18ebe9 code=0x7ffc0000 [ 493.941021][ T7718] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 494.051147][ T5943] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 494.093403][ T7718] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.106879][ T7718] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 494.118490][ T7718] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.118522][ T7718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.121579][T13769] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 494.124929][ T7718] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.212288][ T5943] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 494.220880][ T7721] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 494.221318][ T5943] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 494.239242][ T5943] usb 5-1: config 8 has no interface number 0 [ 494.246435][ T5943] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 542, setting to 64 [ 494.259234][ T5943] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.276855][ T5943] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 494.286390][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.297546][ T5943] usb 5-1: Product: syz [ 494.302540][ T5943] usb 5-1: Manufacturer: syz [ 494.307250][ T5943] usb 5-1: SerialNumber: syz [ 494.370896][ T7721] usb 2-1: Using ep0 maxpacket: 16 [ 494.387159][ T7721] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 494.396598][ T7721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.396633][ T7721] usb 2-1: Product: syz [ 494.409028][ T7721] usb 2-1: Manufacturer: syz [ 494.413818][ T7721] usb 2-1: SerialNumber: syz [ 494.504513][ T7718] usb 3-1: USB disconnect, device number 86 [ 494.563711][ T5943] usb 5-1: USB disconnect, device number 75 [ 494.626588][T13785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.639119][T13785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.102936][ T7721] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.154898][ T7721] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 495.190126][ T7721] usb 2-1: USB disconnect, device number 94 [ 495.220719][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.480884][ T7718] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 495.691049][ T7718] usb 3-1: device descriptor read/64, error -71 [ 495.931025][ T7718] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 496.112910][ T7718] usb 3-1: device descriptor read/64, error -71 [ 496.221685][ T7718] usb usb3-port1: attempt power cycle [ 496.455309][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2264'. [ 496.467713][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2264'. [ 496.580964][ T7718] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 496.603306][ T7718] usb 3-1: device descriptor read/8, error -71 [ 496.800940][ T7715] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 496.842321][ T7718] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 496.872096][ T7718] usb 3-1: device descriptor read/8, error -71 [ 497.072559][ T7718] usb usb3-port1: unable to enumerate USB device [ 497.086207][ T7715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.120924][ T7715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.141564][ T7715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.157341][ T7715] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.168036][ T7715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.189219][ T7715] usb 5-1: config 0 descriptor?? [ 497.445521][T13852] syzkaller1: entered promiscuous mode [ 497.454718][T13852] syzkaller1: entered allmulticast mode [ 497.475379][ T7715] usbhid 5-1:0.0: can't add hid device: -71 [ 497.485433][ T7715] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 497.524916][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 497.536571][ T7715] usb 5-1: USB disconnect, device number 76 [ 497.826909][T13871] vlan0: entered promiscuous mode [ 497.880865][ T5943] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 498.054272][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 498.061527][ T5943] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 498.069830][ T5943] usb 2-1: config 0 has no interface number 0 [ 498.079542][ T5943] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 498.081192][ T7715] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 498.089100][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 498.106711][ T5943] usb 2-1: Product: syz [ 498.111073][ T5943] usb 2-1: Manufacturer: syz [ 498.117635][ T5943] usb 2-1: config 0 descriptor?? [ 498.286473][ T7715] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 498.316986][ T7715] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 498.354025][ T7715] usb 5-1: config 8 has no interface number 0 [ 498.360477][ T7715] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 543, setting to 64 [ 498.377172][ T5943] usb 2-1: USB disconnect, device number 95 [ 498.385175][T13890] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2286'. [ 498.400480][ T7715] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.421240][T13890] xt_policy: neither incoming nor outgoing policy selected [ 498.462463][ T7715] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 498.489611][ T7715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.508001][ T7715] usb 5-1: Product: syz [ 498.514676][ T7715] usb 5-1: Manufacturer: syz [ 498.524501][ T7715] usb 5-1: SerialNumber: syz [ 498.770601][ T7715] usb 5-1: USB disconnect, device number 77 [ 499.019624][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2288'. [ 499.044398][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 499.148900][T13900] syzkaller1: entered promiscuous mode [ 499.166114][T13900] syzkaller1: entered allmulticast mode [ 499.191642][T13900] FAULT_INJECTION: forcing a failure. [ 499.191642][T13900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.226558][T13900] CPU: 1 UID: 0 PID: 13900 Comm: syz.1.2289 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 499.226590][T13900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.226604][T13900] Call Trace: [ 499.226613][T13900] [ 499.226624][T13900] dump_stack_lvl+0x189/0x250 [ 499.226653][T13900] ? __pfx____ratelimit+0x10/0x10 [ 499.226680][T13900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.226702][T13900] ? __pfx__printk+0x10/0x10 [ 499.226733][T13900] ? rcu_is_watching+0x15/0xb0 [ 499.226754][T13900] should_fail_ex+0x414/0x560 [ 499.226783][T13900] _copy_to_user+0x31/0xb0 [ 499.226807][T13900] simple_read_from_buffer+0xe1/0x170 [ 499.226839][T13900] proc_fail_nth_read+0x1b3/0x220 [ 499.226864][T13900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.226888][T13900] ? rw_verify_area+0x2a6/0x4d0 [ 499.226913][T13900] ? tun_chr_write_iter+0x18a/0x200 [ 499.226943][T13900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.226966][T13900] vfs_read+0x1fd/0xa30 [ 499.226990][T13900] ? fdget_pos+0x247/0x320 [ 499.227009][T13900] ? __pfx___mutex_lock+0x10/0x10 [ 499.227039][T13900] ? __pfx_vfs_read+0x10/0x10 [ 499.227068][T13900] ? __fget_files+0x3a0/0x420 [ 499.227085][T13900] ? __fget_files+0x2a/0x420 [ 499.227107][T13900] ksys_read+0x145/0x250 [ 499.227134][T13900] ? __pfx_ksys_read+0x10/0x10 [ 499.227158][T13900] ? rcu_is_watching+0x15/0xb0 [ 499.227180][T13900] ? rcu_is_watching+0x15/0xb0 [ 499.227201][T13900] do_syscall_64+0xfa/0x3b0 [ 499.227231][T13900] ? rcu_is_watching+0x15/0xb0 [ 499.227250][T13900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.227272][T13900] ? clear_bhb_loop+0x60/0xb0 [ 499.227294][T13900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.227314][T13900] RIP: 0033:0x7f195ff8d5fc [ 499.227336][T13900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 499.227361][T13900] RSP: 002b:00007f1960d46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.227384][T13900] RAX: ffffffffffffffda RBX: 00007f19601b5fa0 RCX: 00007f195ff8d5fc [ 499.227400][T13900] RDX: 000000000000000f RSI: 00007f1960d460a0 RDI: 0000000000000005 [ 499.227413][T13900] RBP: 00007f1960d46090 R08: 0000000000000000 R09: 0000000000000000 [ 499.227425][T13900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.227438][T13900] R13: 00007f19601b6038 R14: 00007f19601b5fa0 R15: 00007f19602dfa28 [ 499.227460][T13900] [ 499.914752][T13914] ip6erspan0: entered allmulticast mode [ 499.935032][T13911] syzkaller1: entered promiscuous mode [ 499.952580][T13911] syzkaller1: entered allmulticast mode [ 499.957597][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 499.970038][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2297'. [ 500.053409][T13924] loop6: detected capacity change from 0 to 63 [ 500.067605][T13924] buffer_io_error: 45 callbacks suppressed [ 500.067624][T13924] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.082099][T13924] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.090074][T13924] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.098168][T13924] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.118409][T13924] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.140834][ T5943] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 500.150109][T13924] loop6: unable to read partition table [ 500.150411][T13930] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 500.165080][T13924] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 500.177306][T13930] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 500.186009][T13931] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 500.187083][T13930] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 500.209103][T13930] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 500.270914][ T5943] usb 4-1: device descriptor read/64, error -71 [ 500.291021][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 500.387577][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 500.458400][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2303'. [ 500.473994][ T10] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 500.503720][ T10] usb 5-1: config 0 has no interface number 0 [ 500.531037][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 500.542467][ T5943] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 500.568745][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.631056][ T10] usb 5-1: Product: syz [ 500.658179][ T10] usb 5-1: Manufacturer: syz [ 500.689991][ T10] usb 5-1: SerialNumber: syz [ 500.693925][T13947] vlan2: entered promiscuous mode [ 500.703799][ T10] usb 5-1: config 0 descriptor?? [ 500.900916][ T5943] usb 4-1: device descriptor read/64, error -71 [ 500.918106][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 500.918126][ T30] audit: type=1326 audit(1755377238.891:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.4.2290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30e0b8ebe9 code=0x0 [ 501.035698][ T5943] usb usb4-port1: attempt power cycle [ 501.044380][ T10] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 501.081769][ T10] usb 5-1: No valid video chain found. [ 501.103688][ T10] usb 5-1: USB disconnect, device number 78 [ 501.424158][ T5943] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 501.451360][ T5943] usb 4-1: device descriptor read/8, error -71 [ 501.613815][T13958] sctp: [Deprecated]: syz.2.2308 (pid 13958) Use of int in maxseg socket option. [ 501.613815][T13958] Use struct sctp_assoc_value instead [ 501.673759][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.680112][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.692044][ T5943] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 501.721339][ T5943] usb 4-1: device descriptor read/8, error -71 [ 501.769188][T13966] syzkaller1: entered promiscuous mode [ 501.781096][T13966] syzkaller1: entered allmulticast mode [ 501.837337][ T5943] usb usb4-port1: unable to enumerate USB device [ 501.973829][ T30] audit: type=1326 audit(1755377239.951:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 501.986967][T13970] netlink: 384 bytes leftover after parsing attributes in process `syz.0.2311'. [ 502.021296][ T30] audit: type=1326 audit(1755377239.951:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.044105][ T30] audit: type=1326 audit(1755377239.951:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.070227][ T30] audit: type=1326 audit(1755377239.951:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.094527][ T30] audit: type=1326 audit(1755377239.951:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.127368][ T30] audit: type=1326 audit(1755377239.951:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.160886][ T30] audit: type=1326 audit(1755377239.951:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.185703][ T30] audit: type=1326 audit(1755377239.951:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.249900][ T30] audit: type=1326 audit(1755377239.951:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.0.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9e698ebe9 code=0x7ffc0000 [ 502.296849][T13976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2313'. [ 502.320863][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 503.160411][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.174554][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.184430][T13997] loop2: detected capacity change from 0 to 7 [ 503.193831][ T7834] Dev loop2: unable to read RDB block 7 [ 503.199466][ T7834] loop2: unable to read partition table [ 503.206695][ T7834] loop2: partition table beyond EOD, truncated [ 503.215088][T13997] Dev loop2: unable to read RDB block 7 [ 503.220953][T13997] loop2: unable to read partition table [ 503.228759][T13997] loop2: partition table beyond EOD, truncated [ 503.268812][T13997] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.300174][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 503.309747][T14001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2318'. [ 503.483478][T14010] loop6: detected capacity change from 0 to 63 [ 503.492225][T14010] ldm_validate_partition_table(): Disk read failed. [ 503.499193][T14010] Dev loop6: unable to read RDB block 0 [ 503.506664][T14010] loop6: unable to read partition table [ 503.513775][T14010] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 503.688131][T14016] netlink: 'syz.2.2325': attribute type 6 has an invalid length. [ 504.241120][ T979] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 504.400944][ T7715] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 504.432361][ T979] usb 3-1: Invalid ep0 maxpacket: 32 [ 504.560979][ T7715] usb 5-1: device descriptor read/64, error -71 [ 504.610837][ T979] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 504.760889][ T979] usb 3-1: Invalid ep0 maxpacket: 32 [ 504.767002][ T979] usb usb3-port1: attempt power cycle [ 504.800824][ T7715] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 504.960824][ T7715] usb 5-1: device descriptor read/64, error -71 [ 505.081262][ T7715] usb usb5-port1: attempt power cycle [ 505.110959][ T979] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 505.131379][ T979] usb 3-1: Invalid ep0 maxpacket: 32 [ 505.220827][ T5943] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 505.300454][ T979] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 505.333267][ T979] usb 3-1: Invalid ep0 maxpacket: 32 [ 505.343976][ T979] usb usb3-port1: unable to enumerate USB device [ 505.440899][ T7715] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 505.459309][T14042] syzkaller1: entered promiscuous mode [ 505.465318][T14042] syzkaller1: entered allmulticast mode [ 505.471802][ T7715] usb 5-1: device descriptor read/8, error -71 [ 505.524240][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.534269][ T5943] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 505.550909][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.570938][ T5943] usb 4-1: config 0 descriptor?? [ 505.642946][T14044] tipc: Enabled bearer , priority 0 [ 505.654820][T14044] tipc: Resetting bearer [ 505.664511][T14043] tipc: Disabling bearer [ 505.682327][T14046] tipc: Enabled bearer , priority 0 [ 505.690378][T14046] syzkaller0: entered promiscuous mode [ 505.696160][T14046] syzkaller0: entered allmulticast mode [ 505.709073][T14046] tipc: Resetting bearer [ 505.714983][ T7715] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 505.730245][T14045] tipc: Resetting bearer [ 505.737953][T14045] tipc: Disabling bearer [ 505.752656][ T7715] usb 5-1: device descriptor read/8, error -71 [ 505.881586][ T7715] usb usb5-port1: unable to enumerate USB device [ 506.011160][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 506.110862][ T7719] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 506.279804][ T7719] usb 1-1: Using ep0 maxpacket: 16 [ 506.289952][ T7719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 506.303101][ T7719] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 506.318750][ T7719] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 506.333246][ T7719] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.358529][ T7719] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.377128][ T7719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.397262][ T7719] usb 1-1: Product: syz [ 506.405399][ T7719] usb 1-1: Manufacturer: syz [ 506.417547][ T7719] usb 1-1: SerialNumber: syz [ 506.649329][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.678631][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.704665][ T7719] usb 1-1: 0:2 : does not exist [ 506.718459][ T7719] usb 1-1: USB disconnect, device number 82 [ 506.737367][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.021822][T14065] team_slave_0: entered promiscuous mode [ 507.027560][T14065] team_slave_1: entered promiscuous mode [ 507.034444][T14065] vlan2: entered promiscuous mode [ 507.040323][T14065] team0: entered promiscuous mode [ 507.650842][ T979] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 507.710858][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 507.805004][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 507.817285][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.845569][ T979] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 507.859949][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.877831][ T979] usb 1-1: Product: syz [ 507.887267][ T979] usb 1-1: Manufacturer: syz [ 507.997001][ T979] usb 1-1: SerialNumber: syz [ 508.019269][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 508.034472][ T979] usb 1-1: config 0 descriptor?? [ 508.044385][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 508.058166][ T979] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 508.083712][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 508.125822][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 508.203834][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 508.245100][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.290891][ T10] usb 5-1: Product: syz [ 508.312223][ T10] usb 5-1: Manufacturer: syz [ 508.333378][ T10] usb 5-1: SerialNumber: syz [ 508.371939][ T10] usb 5-1: config 0 descriptor?? [ 508.533240][T14101] syzkaller1: entered promiscuous mode [ 508.560703][T14101] syzkaller1: entered allmulticast mode [ 508.778158][ T10] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 509.200818][ T7715] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 509.355152][T14108] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2354'. [ 509.370557][ T7715] usb 3-1: Using ep0 maxpacket: 16 [ 509.472999][ T7715] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 509.657648][ T7715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.748250][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2356'. [ 509.888103][ T5943] usbhid 4-1:0.0: can't add hid device: -71 [ 509.903943][ T5943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 509.936705][ T5943] usb 4-1: USB disconnect, device number 108 [ 509.988245][ T7715] usb 3-1: Product: syz [ 510.008205][T14119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2357'. [ 510.017554][ T7715] usb 3-1: Manufacturer: syz [ 510.023034][ T7715] usb 3-1: SerialNumber: syz [ 510.288548][T14106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.320706][T14106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.696077][ T5943] usb 5-1: USB disconnect, device number 83 [ 510.821795][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 510.870653][ T7719] usb 1-1: USB disconnect, device number 83 [ 510.928694][T14129] vlan2: entered promiscuous mode [ 510.983334][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 510.995767][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 50, changing to 9 [ 511.008343][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 511.021505][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.038566][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.049261][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.061626][ T10] usb 2-1: config 0 descriptor?? [ 511.069656][T14121] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 511.177044][T14132] binder: 14131:14132 ioctl c0306201 200000000080 returned -14 [ 511.258933][ T7715] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.273551][ T7715] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 511.284745][ T7715] usb 3-1: USB disconnect, device number 95 [ 511.336911][T14133] syzkaller1: entered promiscuous mode [ 511.355612][ T7834] udevd[7834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.372475][T14133] syzkaller1: entered allmulticast mode [ 511.534132][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 511.561246][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001B/input/input42 [ 511.597807][ T10] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 511.655185][T14148] tipc: Enabled bearer , priority 0 [ 511.685219][T14148] syzkaller0: entered promiscuous mode [ 511.724453][T14148] syzkaller0: entered allmulticast mode [ 511.788951][T14148] tipc: Resetting bearer [ 511.796178][T14147] tipc: Resetting bearer [ 511.803553][T14147] tipc: Disabling bearer [ 512.028726][T14166] syzkaller1: entered promiscuous mode [ 512.034519][T14166] syzkaller1: entered allmulticast mode [ 512.200851][ T7715] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 512.411174][ T7715] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 512.500856][ T7718] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 512.531424][ T7715] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 512.540570][ T7715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.559918][ T7715] usb 5-1: Product: syz [ 512.581192][ T7715] usb 5-1: Manufacturer: syz [ 512.585847][ T7715] usb 5-1: SerialNumber: syz [ 512.691040][ T7715] usb 5-1: config 0 descriptor?? [ 512.696235][ T7718] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 512.708820][ T7718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.717749][ T7718] usb 3-1: Product: syz [ 512.731139][ T7718] usb 3-1: Manufacturer: syz [ 512.735840][ T7718] usb 3-1: SerialNumber: syz [ 512.762363][ T7718] usb 3-1: config 0 descriptor?? [ 512.802057][ T7718] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 513.135018][ T7715] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 513.410899][ T979] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 513.562283][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.575258][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.585311][ T979] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 513.599863][ T979] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 513.609183][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.626223][ T979] usb 1-1: config 0 descriptor?? [ 513.646210][ T979] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 513.731107][ T5943] usb 2-1: reset high-speed USB device number 97 using dummy_hcd [ 513.750962][ T7700] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 513.835985][ T5217] bcm5974 1-1:0.0: could not read from device [ 513.844501][ T5217] bcm5974 1-1:0.0: could not read from device [ 513.853564][ T979] usb 1-1: USB disconnect, device number 84 [ 513.860051][ T5217] bcm5974 1-1:0.0: could not read from device [ 513.867308][ T7837] bcm5974 1-1:0.0: could not read from device [ 513.872788][ T5943] usb 2-1: device descriptor read/64, error -71 [ 513.881354][ T5217] bcm5974 1-1:0.0: could not read from device [ 513.894917][ T7837] udevd[7837]: Error opening device "/dev/input/event5": No such device [ 513.904258][ T7837] udevd[7837]: Unable to EVIOCGABS device "/dev/input/event5" [ 513.911152][ T7700] usb 4-1: Using ep0 maxpacket: 8 [ 513.914416][ T7837] udevd[7837]: Unable to EVIOCGABS device "/dev/input/event5" [ 513.924980][ T7837] udevd[7837]: Unable to EVIOCGABS device "/dev/input/event5" [ 513.935211][ T7837] udevd[7837]: Unable to EVIOCGABS device "/dev/input/event5" [ 513.949718][ T7700] usb 4-1: config 0 has an invalid interface number: 38 but max is 0 [ 513.965060][ T7700] usb 4-1: config 0 has no interface number 0 [ 513.972094][ T7700] usb 4-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 513.987306][ T7700] usb 4-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.005190][ T7700] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 514.014716][ T7700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.023041][ T7700] usb 4-1: Product: syz [ 514.028107][ T7700] usb 4-1: Manufacturer: syz [ 514.033005][ T7700] usb 4-1: SerialNumber: syz [ 514.039370][ T7700] usb 4-1: config 0 descriptor?? [ 514.048492][ T7700] xbox_remote_probe: Unexpected endpoint_in [ 514.110814][ T5943] usb 2-1: reset high-speed USB device number 97 using dummy_hcd [ 514.240822][ T5943] usb 2-1: device descriptor read/64, error -71 [ 514.454764][ T7719] usb 4-1: USB disconnect, device number 109 [ 514.490989][ T5943] usb 2-1: reset high-speed USB device number 97 using dummy_hcd [ 514.511286][ T5943] usb 2-1: device descriptor read/8, error -71 [ 514.750947][ T5943] usb 2-1: reset high-speed USB device number 97 using dummy_hcd [ 514.771706][ T5943] usb 2-1: device descriptor read/8, error -71 [ 514.782015][ T7715] ------------[ cut here ]------------ [ 514.787714][ T7715] UBSAN: shift-out-of-bounds in drivers/net/usb/asix_devices.c:679:27 [ 514.796060][ T7715] shift exponent 154 is too large for 64-bit type 'unsigned long' [ 514.804374][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: kworker/1:8 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 514.804407][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.804422][ T7715] Workqueue: usb_hub_wq hub_event [ 514.804451][ T7715] Call Trace: [ 514.804458][ T7715] [ 514.804466][ T7715] dump_stack_lvl+0x189/0x250 [ 514.804560][ T7715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.804581][ T7715] ? __pfx__printk+0x10/0x10 [ 514.804609][ T7715] ubsan_epilogue+0xa/0x40 [ 514.804634][ T7715] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 514.804670][ T7715] ax88772_bind+0xdcf/0xfa0 [ 514.804699][ T7715] ? __pfx_ax88772_bind+0x10/0x10 [ 514.804724][ T7715] ? __raw_spin_lock_init+0x45/0x100 [ 514.804746][ T7715] ? usbnet_probe+0x915/0x2870 [ 514.804770][ T7715] usbnet_probe+0xa96/0x2870 [ 514.804797][ T7715] ? __pfx_usbnet_probe+0x10/0x10 [ 514.804814][ T7715] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 514.804836][ T7715] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 514.804857][ T7715] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 514.804877][ T7715] ? usb_disable_lpm+0x77/0x3e0 [ 514.804898][ T7715] usb_probe_interface+0x668/0xc30 [ 514.804925][ T7715] ? __pfx_usb_probe_interface+0x10/0x10 [ 514.804947][ T7715] really_probe+0x26a/0x9e0 [ 514.804968][ T7715] __driver_probe_device+0x18c/0x2f0 [ 514.804987][ T7715] driver_probe_device+0x4f/0x430 [ 514.805008][ T7715] __device_attach_driver+0x2ce/0x530 [ 514.805028][ T7715] bus_for_each_drv+0x251/0x2e0 [ 514.805054][ T7715] ? __pfx___device_attach_driver+0x10/0x10 [ 514.805073][ T7715] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.805100][ T7715] __device_attach+0x2b8/0x400 [ 514.805118][ T7715] ? __pfx___device_attach+0x10/0x10 [ 514.805136][ T7715] ? do_raw_spin_unlock+0x122/0x240 [ 514.805158][ T7715] bus_probe_device+0x185/0x260 [ 514.805183][ T7715] device_add+0x7b6/0xb50 [ 514.805200][ T7715] usb_set_configuration+0x1a87/0x20e0 [ 514.805232][ T7715] usb_generic_driver_probe+0x8d/0x150 [ 514.805253][ T7715] usb_probe_device+0x1c1/0x390 [ 514.805276][ T7715] ? __pfx_usb_probe_device+0x10/0x10 [ 514.805297][ T7715] really_probe+0x26a/0x9e0 [ 514.805318][ T7715] __driver_probe_device+0x18c/0x2f0 [ 514.805337][ T7715] driver_probe_device+0x4f/0x430 [ 514.805357][ T7715] __device_attach_driver+0x2ce/0x530 [ 514.805377][ T7715] bus_for_each_drv+0x251/0x2e0 [ 514.805405][ T7715] ? __pfx___device_attach_driver+0x10/0x10 [ 514.805424][ T7715] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.805451][ T7715] __device_attach+0x2b8/0x400 [ 514.805469][ T7715] ? __pfx___device_attach+0x10/0x10 [ 514.805497][ T7715] ? do_raw_spin_unlock+0x122/0x240 [ 514.805520][ T7715] bus_probe_device+0x185/0x260 [ 514.805545][ T7715] device_add+0x7b6/0xb50 [ 514.805563][ T7715] usb_new_device+0xa39/0x16f0 [ 514.805584][ T7715] ? __pfx_usb_new_device+0x10/0x10 [ 514.805602][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.805621][ T7715] hub_event+0x2958/0x4a20 [ 514.805659][ T7715] ? __pfx_hub_event+0x10/0x10 [ 514.805679][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.805695][ T7715] ? lock_acquire+0x5f/0x360 [ 514.805720][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.805735][ T7715] ? process_scheduled_works+0x9ef/0x17b0 [ 514.805753][ T7715] ? process_scheduled_works+0x9ef/0x17b0 [ 514.805770][ T7715] process_scheduled_works+0xade/0x17b0 [ 514.805796][ T7715] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.805818][ T7715] worker_thread+0x8a0/0xda0 [ 514.805844][ T7715] kthread+0x70e/0x8a0 [ 514.805865][ T7715] ? __pfx_worker_thread+0x10/0x10 [ 514.805881][ T7715] ? __pfx_kthread+0x10/0x10 [ 514.805902][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.805918][ T7715] ? __pfx_kthread+0x10/0x10 [ 514.805938][ T7715] ret_from_fork+0x3f9/0x770 [ 514.805955][ T7715] ? __pfx_ret_from_fork+0x10/0x10 [ 514.805974][ T7715] ? __switch_to_asm+0x39/0x70 [ 514.805996][ T7715] ? __switch_to_asm+0x33/0x70 [ 514.806016][ T7715] ? __pfx_kthread+0x10/0x10 [ 514.806037][ T7715] ret_from_fork_asm+0x1a/0x30 [ 514.806064][ T7715] [ 514.806195][ T7715] ---[ end trace ]--- [ 514.901231][ T10] usb 2-1: USB disconnect, device number 97 [ 514.902008][ T7715] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 514.902033][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: kworker/1:8 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 514.902065][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.902085][ T7715] Workqueue: usb_hub_wq hub_event [ 514.902121][ T7715] Call Trace: [ 514.902134][ T7715] [ 514.902145][ T7715] dump_stack_lvl+0x99/0x250 [ 514.902178][ T7715] ? __asan_memcpy+0x40/0x70 [ 514.902208][ T7715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.902237][ T7715] ? __pfx__printk+0x10/0x10 [ 514.902277][ T7715] vpanic+0x281/0x750 [ 514.902306][ T7715] ? __pfx_vpanic+0x10/0x10 [ 514.902341][ T7715] panic+0xb9/0xc0 [ 514.902368][ T7715] ? __pfx_panic+0x10/0x10 [ 514.902397][ T7715] ? __pfx__printk+0x10/0x10 [ 514.902434][ T7715] check_panic_on_warn+0x89/0xb0 [ 514.902469][ T7715] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 514.902520][ T7715] ax88772_bind+0xdcf/0xfa0 [ 514.902573][ T7715] ? __pfx_ax88772_bind+0x10/0x10 [ 514.902610][ T7715] ? __raw_spin_lock_init+0x45/0x100 [ 514.902641][ T7715] ? usbnet_probe+0x915/0x2870 [ 514.902671][ T7715] usbnet_probe+0xa96/0x2870 [ 514.902709][ T7715] ? __pfx_usbnet_probe+0x10/0x10 [ 514.902734][ T7715] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 514.902765][ T7715] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 514.902795][ T7715] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 514.902824][ T7715] ? usb_disable_lpm+0x77/0x3e0 [ 514.902855][ T7715] usb_probe_interface+0x668/0xc30 [ 514.902894][ T7715] ? __pfx_usb_probe_interface+0x10/0x10 [ 514.902925][ T7715] really_probe+0x26a/0x9e0 [ 514.902956][ T7715] __driver_probe_device+0x18c/0x2f0 [ 514.902984][ T7715] driver_probe_device+0x4f/0x430 [ 514.903014][ T7715] __device_attach_driver+0x2ce/0x530 [ 514.903046][ T7715] bus_for_each_drv+0x251/0x2e0 [ 514.903080][ T7715] ? __pfx___device_attach_driver+0x10/0x10 [ 514.903108][ T7715] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.903148][ T7715] __device_attach+0x2b8/0x400 [ 514.903177][ T7715] ? __pfx___device_attach+0x10/0x10 [ 514.903202][ T7715] ? do_raw_spin_unlock+0x122/0x240 [ 514.903235][ T7715] bus_probe_device+0x185/0x260 [ 514.903272][ T7715] device_add+0x7b6/0xb50 [ 514.903298][ T7715] usb_set_configuration+0x1a87/0x20e0 [ 514.903343][ T7715] usb_generic_driver_probe+0x8d/0x150 [ 514.903375][ T7715] usb_probe_device+0x1c1/0x390 [ 514.903411][ T7715] ? __pfx_usb_probe_device+0x10/0x10 [ 514.903447][ T7715] really_probe+0x26a/0x9e0 [ 514.903480][ T7715] __driver_probe_device+0x18c/0x2f0 [ 514.903514][ T7715] driver_probe_device+0x4f/0x430 [ 514.903550][ T7715] __device_attach_driver+0x2ce/0x530 [ 514.903580][ T7715] bus_for_each_drv+0x251/0x2e0 [ 514.903613][ T7715] ? __pfx___device_attach_driver+0x10/0x10 [ 514.903641][ T7715] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.903683][ T7715] __device_attach+0x2b8/0x400 [ 514.903709][ T7715] ? __pfx___device_attach+0x10/0x10 [ 514.903738][ T7715] ? do_raw_spin_unlock+0x122/0x240 [ 514.903769][ T7715] bus_probe_device+0x185/0x260 [ 514.903803][ T7715] device_add+0x7b6/0xb50 [ 514.903829][ T7715] usb_new_device+0xa39/0x16f0 [ 514.903860][ T7715] ? __pfx_usb_new_device+0x10/0x10 [ 514.903886][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.903914][ T7715] hub_event+0x2958/0x4a20 [ 514.903968][ T7715] ? __pfx_hub_event+0x10/0x10 [ 514.903996][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.904019][ T7715] ? lock_acquire+0x5f/0x360 [ 514.904056][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.904078][ T7715] ? process_scheduled_works+0x9ef/0x17b0 [ 514.904103][ T7715] ? process_scheduled_works+0x9ef/0x17b0 [ 514.904129][ T7715] process_scheduled_works+0xade/0x17b0 [ 514.904167][ T7715] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.904199][ T7715] worker_thread+0x8a0/0xda0 [ 514.904248][ T7715] kthread+0x70e/0x8a0 [ 514.904279][ T7715] ? __pfx_worker_thread+0x10/0x10 [ 514.904304][ T7715] ? __pfx_kthread+0x10/0x10 [ 514.904333][ T7715] ? rcu_is_watching+0x15/0xb0 [ 514.904361][ T7715] ? __pfx_kthread+0x10/0x10 [ 514.904392][ T7715] ret_from_fork+0x3f9/0x770 [ 514.904418][ T7715] ? __pfx_ret_from_fork+0x10/0x10 [ 514.904446][ T7715] ? __switch_to_asm+0x39/0x70 [ 514.904478][ T7715] ? __switch_to_asm+0x33/0x70 [ 514.904509][ T7715] ? __pfx_kthread+0x10/0x10 [ 514.904546][ T7715] ret_from_fork_asm+0x1a/0x30 [ 514.904585][ T7715] [ 514.908566][ T7715] Kernel Offset: disabled