last executing test programs: 8.143825173s ago: executing program 0 (id=1816): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x2000000}, 0x0) 7.954774313s ago: executing program 0 (id=1819): r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x10000, 0x3, 0x35c}, &(0x7f0000000080)=0x0, &(0x7f0000000580)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r7 = epoll_create(0x2) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000000140), 0x300) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x10000005}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x1, 0xffffffffffffffff, 0xfffffffffffffab2, 0x7, 0x5, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1) io_uring_enter(r2, 0x54, 0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r9 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00fe"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$FS_IOC_GETFLAGS(r9, 0x80046601, &(0x7f0000000040)) 7.835151197s ago: executing program 3 (id=1821): syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f00000001c0)) r0 = socket$key(0xf, 0x3, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r8, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r8, &(0x7f0000000000), 0x10) sendmsg$can_raw(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@can={{0x0, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "6ba4d89a879b4255"}, 0x10}, 0x1, 0x0, 0x0, 0x24000801}, 0x44) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r9, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r9, &(0x7f00000001c0), 0x10) dup3(r7, r8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r10, r2) sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100007e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r13, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010007bd7000fddbdf255500000008000300", @ANYRES32=0x0, @ANYBLOB="5ff69b9c2d1af28fbd834d15b35ddc0310f550390bbfead769aeaa79b3fb75f34b797531848ae89b851f056f4e9352fe664f7280f7e05f48335d8dba2075f4303b61ea0428eed39d8b02c3e66f627a38ebe531eafdb62d9ca53119c57ad316f4bf0c1a71e3495de83f02df927b4289c262ef81f3640aceebf129bf2cfb92b965b3cc5a45419ad5dd3f1e151ddd11c31e48e85f1de3d3c8daba240965c7c2567744a541d84b0097a33e4a3ccc33960ffe064d0f240b7187dc"], 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r14], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) 7.551275725s ago: executing program 3 (id=1823): symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 6.297476416s ago: executing program 4 (id=1828): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0xec, 0xffffffff, 0xffffffff, 0xec, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'gretap0\x00', {0x205b9e}}}}, {{@uncond, 0x0, 0x110, 0x134, 0x0, {0x0, 0x800000000000000}, [@common=@dst={{0x48}, {0x4, 0x0, 0x1, [0xfffe, 0x4, 0x2, 0xbb, 0x1, 0x4, 0x13d, 0xfff1, 0xc, 0x2, 0x3, 0x3612, 0x2, 0x3, 0x40, 0x8001], 0x5}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x344) 6.189804607s ago: executing program 4 (id=1830): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5f815d", 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x20004010) 5.935443162s ago: executing program 2 (id=1832): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0xffff7fff, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000)=r5, 0x10) io_submit(r1, 0x4, &(0x7f0000000600)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x7f, r0, &(0x7f0000000080)="8ddcd05a34531a13296fc74eb4428ad991c52b8d1e41bc9a04871f41b95abf7ebd0827bdb6ae5353c1f35a64b2d1287634857ee5b3c2295a2672a0479f6089cb4bb727e25c9b7ed76770e6df1464103c0b440422bb5d4588b354f2a5ed53db1879d7d85d7f6b853e924f3798c4030be6fa94738dd849081325b88dc6514c7a54648c19c34aad7b3e7e8453c75bcbe36df60a13ef9e8a51e8630d80253fcd2b06c29c9d34f62e6384d500f36069300df1e76dd349bfd52cb818f21063607c5c5a6320f875", 0xc4, 0x9a4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000002c0)="a342a81f72d7eff203e976cd99a8e7cc91d7050b1d10679c2cd69ae2ef76103c2437959a1aff14451b1fd1282deaa066db0dc1b7ac7f462a8aef94aac7799fd06bba21d4a391b50e201a0464308ffaa096ef42", 0x53, 0x120000000000000, 0x0, 0x3, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f00000003c0)="69945da9024ec1ff40cae640d1598888c1a46a13b193987f827e20b3a429a50489dc54b3d6603e3251e7a00bbf9a3ba6c9585ed07448723ced930398a60719969bcd317f105e86e703ac8ac367fd6abfd03d0fd182e03857c469654812652e3110778a992dca293efda699710f5147eb5b9dd0566624b9ef368a8bf0c81346597e81955b8527e63ab5e970c05a947a8d9aff7bcf0ff0805d58253d8a56bb4733d9171775c5c01850ec186e6adf23d64b5697a9cfef523a47a8bdf0a83b468e22131ac00c70988ed48923d6c11875e4b314ce176555db1f9979b3ef3a", 0xdc, 0x6, 0x0, 0x3, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000580)="4fd9f2c816fcc01d7489374beed8263f0f49739c628b36335286e643021ab8c15a0ecdea3e16408b69183b0f4fc69b3e511bec9b", 0x34, 0x5, 0x0, 0x1}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x20, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0xc4, 0x4, 0x1}}, @l2tp={0x2, 0x0, @multicast2, 0x3}, @phonet={0x23, 0x4c, 0x1, 0x6}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='vxcan1\x00', 0x80, 0x6, 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r12 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0xfffffffd, 0x80, 0x3, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r12, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.877160365s ago: executing program 3 (id=1833): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x517002, 0x0, 0xc}, 0x18) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x2080) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x4000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.31909265s ago: executing program 4 (id=1834): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x42) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000d6dea7a4c4000008000000a6004000"]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"0300", 0x0, 0x6, 0x3, 0x0, 0x0, "01cff78ea77000ebff00", "000200", "ebff00", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483d94574c99b9f16"]}) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x73) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x80ff, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r6], 0x38}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000200)={r8, 0x6}, &(0x7f0000000240)=0x8) 4.882772193s ago: executing program 0 (id=1835): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x7, 0x5, {0x5, 0xb, "1b080f"}}, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 4.51356546s ago: executing program 3 (id=1837): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) syz_fuse_handle_req(r0, &(0x7f00000018c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x80, &(0x7f0000000340)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(r6, &(0x7f00000005c0)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x114) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x5, 0x1f, 0x0, 0x17, 0xa, 0x9, 0x4, 0x7b, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delneigh={0x24, 0x1a, 0x401, 0x0, 0xfffffffc, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}}, 0x20040800) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x407, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}}, 0x1) 4.431065418s ago: executing program 2 (id=1838): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80301) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x58, 0xfffff000, 0x1dce}) r2 = syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {}, {@max_read={'max_read', 0x3d, 0x79c}}], [{@subj_user}, {@context={'context', 0x3d, 'root'}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@dont_appraise}]}}, 0x1, 0x0, &(0x7f0000000700)="f9dc01cca4d27bd447fed22ce52de3de29a382fe3bff869b6ad7f60ce78e6808bf2e4be9147510ccd41c7f147e94c5806ae7f98fac2ed48c43742ccd091130552437764190879c") statx(r2, &(0x7f0000000080)='./file1\x00', 0x1000, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r3, &(0x7f00000001c0)={0x1, 0x200, 0x80, 0x7, 0xa2, 0x3, 0x3, 0x2, 0x7f}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0xd0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8, 0x2, 0x0, 0x8, 0x1, 0x9, 0x6}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r6 = syz_clone(0x200800, &(0x7f0000000240)="49edf8283d4be2d411e97e09a83bc4b5d2e87b5f75e66440347eaddf0125427883949364cfb2ab6e2b4107f94b16fbe6f0f96c2b72e2aae684db8e1445b70ad28a3a631e1a68151c968bc7e633db639622e92898e74b599cb5c2135891dd6bd8b1a0ec68302cb6ef924513141ace250cbae38755fe1d753dd79f017c0bfdd9371e1cc3f174408a26eab2f3352b5fccf997994b618697f95a50d6db665db82b5c1390707169f8f674878950eb8009ab274ab2151a485eb2acc2f63da35a6f936d385672a08687d0dfc0e52e", 0xcb, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="540b694b8fcbaf92d31b5a8f61a3c82e35a9b7ba1842804d39e64d3863a9cc14e89c9758c0937f9c7423de5ac04ad60cee181c7b9ee4d42c1c5dd8322c397f680c92629ea5890e30cd508a87b356b306d61a363351e8d892c36b7063dd6840834a967410e4f2bf094be12d07b392bd3beb4d6092affd5f10ed6042ff35d8dd8570557170db1ff0b7ff7850ced8e8fd678be14b9d2f3ef1372dd8fb5fe97fc3a03fadc02254505d1761c379d0") r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000000)) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000480)={r6, r3, r4}, 0xc) 4.327718914s ago: executing program 2 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.066546249s ago: executing program 2 (id=1840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000540)={0x2, 0x201, 0x591b4a83}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002580)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x20000) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002030108000000000000000007e800100800010001"], 0x1c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000fd10008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 2.544133192s ago: executing program 3 (id=1844): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) lstat64(&(0x7f0000001240)='./cgroup\x00', &(0x7f0000000a00)) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x82, 0x0, 0x9, 0x1, 0x0, 0x7ffffffd}, 0x0, 0x0) time(0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x10e7, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) read$alg(r5, &(0x7f0000000240)=""/4096, 0xfffffdef) socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0xa4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @empty, 0x0, 0x5, [@dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @rand_addr=0x64010101, @loopback, @empty]}, 0x24) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfff37fa0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0xfffffffffffffe96, 0x1b, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0x48}}, 0x0) 2.127064254s ago: executing program 4 (id=1845): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x109301) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1.512368804s ago: executing program 0 (id=1846): socket$kcm(0x2, 0x5, 0x84) fsopen(&(0x7f0000000240)='xfs\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x13, r1, 0xffffd000) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000300)={0x1, 0x5}, 0x2) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0xfffffffd}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x71e, 0x0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 1.426306912s ago: executing program 0 (id=1847): r0 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x42051}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="b7c405d52bff47dfaaaaaabb080045000014000000200002907800000000e0000380110090"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.365334691s ago: executing program 3 (id=1848): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$BTRFS_IOC_SEND(r0, 0x40449426, &(0x7f0000000040)={{r0}, 0x3, &(0x7f0000000000)=[0x3, 0x7fff, 0x8000], 0x6, 0x8, 0x1}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x8, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$FIOCLEX(r0, 0x5451) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x32c, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1a, 0x3, "177eb6a62ca9d85a24335fd8905e5b52d351d9bfb08f"}, @TIPC_NLA_NODE_ID={0xe3, 0x3, "7222ee622a74c32890b6e6a35861a5473f7bde0d5cf0ce9808b5b4f21b768da508e3615e35941e59742e96477d35d53d33421a4fb9247832fec417f63449eeb82c8c585a02e61c653d3b391ebd9a385c99010a9497916d258b6b9264d321adcc0ec774c268f13651491adb483d333030f8d64420ac27930d79e1c27d499726b3d5473387278156724dd44f65f4635ee83218d245a773fdc066797ed9415ab988b6298409f13a8d71aabce8e86f991f93aa2208f80be71e93a6b02a338aec9647cce94dffda050f201a0ee4d9d6df8b143ba1c6f3dcb786184cbbb7d9767b37"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3242}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59d3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc89}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdf8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff3728}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40045}, 0x200000d4) syz_open_dev$hiddev(&(0x7f0000000700), 0x9, 0x8200) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) r6 = openat$bsg(0xffffff9c, &(0x7f0000000a40), 0x501582, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x18, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='syzkaller\x00', 0x4, 0xbb, &(0x7f00000008c0)=""/187, 0x41100, 0x30, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0x4, 0x9, 0xb2f}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[r1, r6, r1], &(0x7f0000000ac0)=[{0x3, 0x4, 0x6, 0x7}, {0x3, 0x5, 0x2, 0x8}, {0x3, 0x4, 0xd, 0xb}, {0x1, 0x1, 0x5, 0xb}, {0x5, 0x3, 0xc, 0x6}, {0x2, 0x2, 0x6, 0x2}, {0x4, 0x3, 0x4, 0x4}, {0x0, 0x3, 0xf, 0x4}, {0x1, 0x1, 0xe, 0x5}, {0x1, 0x2, 0x10, 0xb}], 0x10, 0x1, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x10, 0x80) getpeername$packet(r1, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d00)=0x14) sendmsg$nl_route(r7, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)=@getlink={0x84, 0x12, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x400, 0x85}, [@IFLA_MAP={0x20, 0xe, {0x200, 0x30, 0x7, 0x7, 0xff, 0x3}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_LINKMODE={0x5, 0x11, 0x81}, @IFLA_LINK={0x8}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "7eaca5becf819166156af5bb410fe1e1e4d8ab0fb048"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008840) write$binfmt_misc(r6, &(0x7f0000000e80), 0x0) r9 = fsmount(r1, 0x0, 0x9) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r7) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xfc, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) write$binfmt_script(r6, &(0x7f00000010c0)={'#! ', './file0', [{0x20, 'pci\x00'}, {0x20, 'syzkaller\x00'}], 0xa, "6259cea0fac4d2c25db61b6c8840849b116f6ecda0b1cea27a83eaa914b2897c624242bbc670534e0527e769c277a7db2c1a3ed7523a77f57f904ee4fcd597b699327f4b30169f2c9e132c1f6b8b8ed3d107effa17409c829f43ad52760bbf9bf66e73aa2b8fd2c5ca2c7e214c9c0b9212ab3060491beebdeb9f012c0af5c0a6fdbf72624549f628cf51b9"}, 0xa6) r11 = dup3(r4, r0, 0x0) connect$pppl2tp(r1, &(0x7f0000001180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x2, 0x2, 0x2, 0x1, {0xa, 0x4e23, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x3a) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect(0x2, 0xc7, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0xec, 0x2d, 0xfd, 0x10, 0x2ef5, 0xa, 0x6c38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x8, 0xfe, 0x60, 0x1, [{{0x9, 0x4, 0x74, 0xf6, 0x2, 0xb8, 0xe7, 0x30, 0x5, [@uac_as], [{{0x9, 0x5, 0xc, 0x4, 0x20, 0x8, 0x40, 0x5, [@generic={0x83, 0x21, "a9fe5315a1606c41c08ed7036c5a0c0929efb4cdde739a35ee4533fcfe0fa27e66df50e67b7852ed443c9ae2ca47c627f9a525a8bf3e6097f5dddf4b6e3336d5e668c20a69983f176541c797893002587b0bfa79cce2d9b7ba0ca69b2d800616068c18a9b2d79e91be5bf06b92a0c6e704028ef38cdc3c7a90ef150b273291d0cc"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3f7, 0x9, 0x9, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}]}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x200, 0x1, 0x1, 0x5, 0x10, 0x7}, 0x2d, &(0x7f0000001300)={0x5, 0xf, 0x2d, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x9, 0x0, 0x2, [0xffff0f, 0x1403f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3, 0x2, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xa, 0x1, 0xd}]}, 0x4, [{0x81, &(0x7f0000001340)=@string={0x81, 0x3, "9a94d71ac24b333dfa03195cdacbe4574bb58aeda858f95126504f4b8a0c8f5f15ae57d725977d59b66bd565a16ea81153e46b09f6db6ba7a7109c98c6478e96048a7ff6794ac5324c32d3a7259dff65d3e8db50e1c2e2339dd564092fd14c2adc65690ffdc6c74ce72469fbab4e8cc808185fd52637d4f1f4bbca90989e41"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x402}}, {0x1c, &(0x7f0000001440)=@string={0x1c, 0x3, "2d389cdaa2942406222b4d1892f76d94efcee0b97d6e1747d70c"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x400a}}]}) ioctl$TIOCSIG(r7, 0x40045436, 0x2b) 1.137221342s ago: executing program 0 (id=1849): socket(0xa, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x24, 0xbc, 0x62, 0x40, 0x5ac, 0x241, 0x40bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x5e, 0x2}}]}}]}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff00000002"], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x40000000000007b, 0x4004) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x28, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8}]}, 0x28}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0xb5dd}, &(0x7f0000000080)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.055626952s ago: executing program 4 (id=1850): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a008020140000040005"], 0x2c}, 0x1, 0x0, 0x0, 0x4885}, 0x4000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xff}}, @echo={0x8, 0x0, 0x0, 0x6}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) socket$inet6(0xa, 0x3, 0x87) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a008020140000040005"], 0x2c}, 0x1, 0x0, 0x0, 0x4885}, 0x4000000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) connect$inet6(r0, &(0x7f00000000c0), 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xff}}, @echo={0x8, 0x0, 0x0, 0x6}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) (async) 977.848127ms ago: executing program 2 (id=1852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}], 0x1c) r4 = socket$inet6_udp(0x2d, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES64=r5, @ANYRES64=r1, @ANYRES16=r3, @ANYRES64=r4, @ANYRESDEC=r3]) 952.830329ms ago: executing program 1 (id=1853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write(r0, &(0x7f0000000180)="2641abc59d920f76a303cb737c488363aa6f1715c3f59a06c3f289b3847a8bcebfe93a250b8aab3f0130e6442aa523325ae23cb1b8b61c40a1fc5a77e08441d037f5b63bbf0a716649882abdee9c9f21aa1649beca6f38922d38f5a4eb6e5358065c45e71fc51489b0b6e2f7fb172c706cb5d4", 0x73) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{0x0, 0x2c00, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f9", 0x8c}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df32850", 0x79}, {&(0x7f0000001280)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d21730bb95e7eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d5771054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e2375fabe7df2280d459b1651686a53ca52dce95704403ae4c868074e89477bf6ed2010000000000000090844ed9a26675199d50f9b391c1dec077b5099c00001fa09e3a9023c766a7e4a1d7d0a59dd9f4316bd2154efdacf022d6cec834a8dd506022cccba343f9c162b728167cfc9dd1c41dd70306ac850782665f8a6f361e504aeb9f35104560d71d647e1a532cdaa9b2e9733787feec8da97734c5effe69aceb61c9f7d2a30377dfbde4d860220c170749c135c557558595e98a7e448200dadb89f29d61f02e57d90123c4e932b932518c48b95eff6ad9479e46f4664f9164dae23cad5508e8a8192e41e60b6ef713e9b906d24efb37219aaef15f1fad9ab5097e7807cba99dda8ba26322fb1abb53", 0x190}], 0x3}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="26fe4ff3c5278004b07a2bdefd673c4f613586aaaa1b39afdf4df0b0dfe7d64d2523e0a6c0ff79b2b737dcb068d801ac5ad0cdf822412174264c75a5a8db35e1f374df74d04b736192d1f15199b741afa4be22a2ac969621cd06853ed66413e41e9afea1d4a5dfde712626286288e01da2c6b99bef53b9220a66c8d37311911b4201fb86ae4da7018b2485fde40586146faa8562a60ae483611512ae863758c90d80ceb62f3dd0356a220425ddfa8aaca1a957c6e2dc83fc71e3a965aba1", 0xbe}, {&(0x7f0000000740)="bb8ac27ccaa636524c91a10d89408162409d7f73ab0a3f77a38d177682aaa552bc07a04326ec737eda3c2a212828dd90a77329a632b7dd16607ebab41797e6", 0x3f}, {&(0x7f0000000a00)="f776ed694d2b389fca551b322cbc6dfe5406e81e60a468a1c8f9a88e277a4133b93a37ff976445a7d5a9988d27f2ee27688f1dc10fc644b94e58a952241691a2b519", 0x42}], 0x3}}], 0x2, 0xc0) 799.890928ms ago: executing program 1 (id=1854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) (async) remap_file_pages(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x5, 0x20) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000001040)=""/184, 0xb8}], 0x1, &(0x7f0000001240)=""/5, 0x5}, 0x7}], 0x1, 0x40002002, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4800) (async) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000380)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1, &(0x7f0000000240)=[{0x3, 0xb, 0xf2}, {0x8, 0x1}, {0xb, 0x4, 0x8}, {0x4ff, 0x9324, 0x183}, {0x8, 0x3, 0xc00000}, {0x3, 0x275, 0x8000000000000000}, {0x0, 0xbe33, 0x3}], 0x7, 0x7fffffff, 0x31, 0x4d, 0x8}) (async) r3 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x2, &(0x7f00000004c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}], [{@subj_user={'subj_user', 0x3d, 'pagemap\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}, 0x0, 0x0, &(0x7f00000005c0)="94b35128d014ee7054f09eceb53694d9f918b7b395799d30e894232625e24deb5d4e583a4c1f6920d6e437cb3598ffaefa1d068f9f61ea05ff1efc5614a7db051588d7583537cc84554c592cc8443312e8e4f74ca12d1ee790b51ce7a619375adaf5f92a1165fa4c90ef2ea1b3ff622087c152f5464784b6620a300c4e83eb2fefe5f074b6a8c7b819d7b98b4e8554513e0e4e9384068694048da917eee8532f3168ea11cccbc367d5c88b9c413e641106b814") openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x52080, 0x1aa) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8995, &(0x7f00000006c0)={'sit0\x00', @ifru_flags=0x1000}) (async) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="737461636b203a9a47d62aa50f45f72391baca3346e8a82f2f262d2a83d1003790dc28e51db159b8a94395b7bf21334d834d9e0425c94ffb1898ea25c2df3ddc1d7bf0754398494cbd1e4dcaa53d8e9377e19c690908cc54b287c5b6c52e6d92ec80f1793ae307ed5bda4fb0e2ac4b1fb48532484fce31e92e7d80af15f901673d8bc04a"], 0xab) (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') (async) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) (async) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1, 0x2, 0x0) 743.380998ms ago: executing program 2 (id=1855): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40001f26ed034228d0a067c20d5604c7f4dc8be2f800fbffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100000000000000000014003500626f6e643000"/40], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r3 = openat$ptmx(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000200)) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="d9170763"], 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8e81, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e23, @empty=0xffffff00}}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0xc7f, 0x0, 0x44, 0xfffffffffffffffe, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2, 0x6640) r8 = socket(0xf, 0x5, 0x0) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00160002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r9) recvmmsg(r9, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4093, 0xffd}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000000640)=""/113, 0x71}, {&(0x7f00000018c0)=""/145, 0x91}], 0x6}}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) 743.008477ms ago: executing program 1 (id=1856): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x840) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000100)=0x1fffffb, 0x7ffffffc) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) getsockname$packet(r4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x12, 0x0, &(0x7f0000000a00)="2cbd805c88d340ee699d2e7150f677048003", 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOCK(r8, &(0x7f0000000200)={0x8, 0x35, 0x2}, 0x8) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x2204) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0) 336.454944ms ago: executing program 1 (id=1857): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x10000002, 0x5, 0xffff, 0x1f, 0xfffffffb, 0xb6, 0xe, 0x7f, 0x3, 0x4, 0x7f, 0x4428, 0x404e, 0x6, 0x10, 0x6, 0x800, 0x1, 0x2, 0x9, 0x200, 0x1, 0xfffffffe, 0xf, 0x401, 0x9, 0x5, 0x6, 0x80000001, 0x8000, 0x3, 0x6]}) 179.111973ms ago: executing program 1 (id=1858): r0 = openat$hwrng(0xffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000240)="76bff284b7acc06dd2eb4248118cb4b343fc3ce2caa313794641ba50d083174faf757c6a184743461ffc4cda154e919d5da776375d601aa70ebe5c8565899a4935b2e9a74f4e4a993cd3ba46d15560d7d94b76482981bbf8496006949f284c0c8d17374966b08d4685cccdd76148c9620a09caffa1999bfea08f46eb4b864d3e7aec0d158728b597a5f3bed0073ed3c5cf211cac605ea2c1060c1d31ae66ee38209962de6617bae9ac779242bc98ed8cf199eb84b03601") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)={0x6}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = signalfd4(r5, &(0x7f00000000c0)={[0xff, 0x4]}, 0x8, 0x800) ioctl$SNDCTL_SYNTH_ID(r6, 0xc08c5114, &(0x7f0000000100)={"b6052cd4d832b3f3aea4895167812f07f9a8295cf3147f2fde06080a2b47", 0x7fffffff, 0x2, 0x0, 0x6, 0xba1f, 0x1, 0x40, 0x2, [0x200, 0x3a2, 0x9, 0xf527, 0xfffeffff, 0x4, 0x7, 0x1, 0x5, 0x7, 0x4, 0x9, 0x8, 0x6, 0x2, 0x3, 0x4, 0x7340977b, 0xd5d]}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 178.554327ms ago: executing program 4 (id=1859): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x0, 0x7, {[@ra={0x94, 0x4, 0xf000}]}}}], 0x10}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x480) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 0s ago: executing program 1 (id=1860): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@del={0xe0, 0x11, 0x1, 0x70bd2d, 0x25dfdbfc, {{'mcryptd(sha256-avx2)\x00'}, '\x00', '\x00', 0x2000, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0x11, 0x8848, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getdents64(r1, &(0x7f0000000100)=""/60, 0x3c) getdents64(r1, 0x0, 0xffffffff00000018) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) kernel console output (not intermixed with test programs): rcu_read_lock_any_held+0xbb/0x160 [ 437.217279][T10878] ? ksys_write+0x24e/0x2d0 [ 437.217335][T10878] __sys_recvmmsg+0x1aa/0x280 [ 437.217360][T10878] ? fput+0x9b/0xd0 [ 437.217379][T10878] ? __pfx___sys_recvmmsg+0x10/0x10 [ 437.217402][T10878] ? ksys_write+0x275/0x2d0 [ 437.217437][T10878] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 437.217465][T10878] __do_fast_syscall_32+0xb4/0x110 [ 437.217492][T10878] ? exc_page_fault+0x5f8/0x920 [ 437.217523][T10878] do_fast_syscall_32+0x34/0x80 [ 437.217551][T10878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.217577][T10878] RIP: 0023:0xf7ff7579 [ 437.217596][T10878] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 437.217615][T10878] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 437.217638][T10878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800066c0 [ 437.217653][T10878] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 437.217667][T10878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.217680][T10878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 437.217693][T10878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.217725][T10878] [ 438.006155][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 438.106865][ T5834] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 438.314910][ T5834] usb 2-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 438.338513][ T5898] usb 3-1: cp210x converter now attached to ttyUSB0 [ 438.433199][T10908] tipc: Can't bind to reserved service type 2 [ 438.476056][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.616843][ T5834] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 438.699674][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.757059][ T5834] usb 2-1: config 0 descriptor?? [ 438.785320][ T5898] usb 3-1: USB disconnect, device number 79 [ 438.801486][ T5834] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 439.687919][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 439.891739][T10918] netlink: 'syz.0.1561': attribute type 10 has an invalid length. [ 439.908055][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1561'. [ 439.932043][T10918] batman_adv: batadv0: Adding interface: virt_wifi0 [ 439.980918][T10918] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.002216][T10920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1561'. [ 440.135676][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.145824][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.146558][T10918] batman_adv: batadv0: Interface activated: virt_wifi0 [ 440.228305][ T5898] cp210x 3-1:0.0: device disconnected [ 440.418783][T10921] delete_channel: no stack [ 440.554553][T10932] kAFS: unparsable volume name [ 440.861257][ T5928] usb 2-1: USB disconnect, device number 81 [ 440.926797][T10943] netlink: 'syz.1.1570': attribute type 8 has an invalid length. [ 441.411944][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 441.925849][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 442.357080][T10972] input: syz0 as /devices/virtual/input/input108 [ 442.479674][T10975] netlink: 'syz.0.1581': attribute type 8 has an invalid length. [ 442.817205][T10978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1582'. [ 442.851253][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 443.021454][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 443.177051][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 443.509692][T11005] netlink: 'syz.3.1592': attribute type 8 has an invalid length. [ 444.308383][T11019] fuse: Bad value for 'fd' [ 444.359934][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1595'. [ 445.028675][T11027] FAULT_INJECTION: forcing a failure. [ 445.028675][T11027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.042288][T11027] CPU: 1 UID: 0 PID: 11027 Comm: syz.0.1599 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 445.042318][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.042331][T11027] Call Trace: [ 445.042341][T11027] [ 445.042351][T11027] dump_stack_lvl+0x241/0x360 [ 445.042393][T11027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.042442][T11027] ? __pfx__printk+0x10/0x10 [ 445.042484][T11027] should_fail_ex+0x424/0x570 [ 445.042512][T11027] _copy_to_user+0x31/0xb0 [ 445.042547][T11027] simple_read_from_buffer+0xc4/0x170 [ 445.042583][T11027] proc_fail_nth_read+0x1ef/0x260 [ 445.042609][T11027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.042635][T11027] ? rw_verify_area+0x246/0x630 [ 445.042658][T11027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.042682][T11027] vfs_read+0x21f/0xb90 [ 445.042712][T11027] ? __pfx___mutex_lock+0x10/0x10 [ 445.042741][T11027] ? __pfx_vfs_read+0x10/0x10 [ 445.042769][T11027] ? __fget_files+0x2a/0x420 [ 445.042790][T11027] ? __fget_files+0x39d/0x420 [ 445.042808][T11027] ? __fget_files+0x2a/0x420 [ 445.042837][T11027] ksys_read+0x19d/0x2d0 [ 445.042864][T11027] ? __pfx_ksys_read+0x10/0x10 [ 445.042891][T11027] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 445.042917][T11027] ? lockdep_hardirqs_on+0x9d/0x150 [ 445.042953][T11027] __do_fast_syscall_32+0xb4/0x110 [ 445.042980][T11027] ? exc_page_fault+0x5f8/0x920 [ 445.043010][T11027] do_fast_syscall_32+0x34/0x80 [ 445.043037][T11027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.043064][T11027] RIP: 0023:0xf70ed579 [ 445.043082][T11027] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 445.043100][T11027] RSP: 002b:00000000f50dd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 445.043122][T11027] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50dd620 [ 445.043137][T11027] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 445.043150][T11027] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 445.043163][T11027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.043175][T11027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.043207][T11027] [ 445.607363][T11036] FAULT_INJECTION: forcing a failure. [ 445.607363][T11036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.627490][T11036] CPU: 1 UID: 0 PID: 11036 Comm: syz.1.1602 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 445.627522][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.627536][T11036] Call Trace: [ 445.627545][T11036] [ 445.627555][T11036] dump_stack_lvl+0x241/0x360 [ 445.627595][T11036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.627626][T11036] ? __pfx__printk+0x10/0x10 [ 445.627669][T11036] should_fail_ex+0x424/0x570 [ 445.627697][T11036] _copy_to_user+0x31/0xb0 [ 445.627732][T11036] simple_read_from_buffer+0xc4/0x170 [ 445.627769][T11036] proc_fail_nth_read+0x1ef/0x260 [ 445.627796][T11036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.627823][T11036] ? rw_verify_area+0x246/0x630 [ 445.627846][T11036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.627878][T11036] vfs_read+0x21f/0xb90 [ 445.627908][T11036] ? __pfx___mutex_lock+0x10/0x10 [ 445.627937][T11036] ? __pfx_vfs_read+0x10/0x10 [ 445.627965][T11036] ? __fget_files+0x2a/0x420 [ 445.627987][T11036] ? __fget_files+0x39d/0x420 [ 445.628004][T11036] ? __fget_files+0x2a/0x420 [ 445.628031][T11036] ksys_read+0x19d/0x2d0 [ 445.628056][T11036] ? __pfx_ksys_read+0x10/0x10 [ 445.628082][T11036] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 445.628106][T11036] ? lockdep_hardirqs_on+0x9d/0x150 [ 445.628133][T11036] __do_fast_syscall_32+0xb4/0x110 [ 445.628158][T11036] ? exc_page_fault+0x5f8/0x920 [ 445.628187][T11036] do_fast_syscall_32+0x34/0x80 [ 445.628215][T11036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.628241][T11036] RIP: 0023:0xf707d579 [ 445.628260][T11036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 445.628278][T11036] RSP: 002b:00000000f506d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 445.628301][T11036] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f506d620 [ 445.628317][T11036] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 445.628330][T11036] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 445.628343][T11036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.628355][T11036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.628386][T11036] [ 445.944252][T11043] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1605'. [ 445.963651][T11043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1605'. [ 446.213697][T11049] netlink: 'syz.3.1606': attribute type 8 has an invalid length. [ 446.557161][ T47] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 446.717464][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 446.724725][ T47] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 446.754776][ T47] usb 1-1: config 8 has no interface number 0 [ 446.872420][ T47] usb 1-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 446.897883][ T47] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 446.976656][ T47] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 446.990783][ T47] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 447.393068][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.434167][ T47] usb 1-1: Product: syz [ 447.474667][ T47] usb 1-1: Manufacturer: syz [ 447.482199][T11066] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 447.515540][ T47] usb 1-1: SerialNumber: syz [ 447.699828][ T5864] syz_tun (unregistering): left allmulticast mode [ 447.736979][ T5898] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 447.804044][ T47] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 447.822458][ T47] vmk80xx 1-1:8.188: probe with driver vmk80xx failed with error -22 [ 447.902989][ T47] usb 1-1: USB disconnect, device number 50 [ 447.952319][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 447.978730][T11077] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1619'. [ 447.988462][T11077] net_ratelimit: 22 callbacks suppressed [ 447.988475][T11077] netlink: zone id is out of range [ 448.006840][T11077] netlink: zone id is out of range [ 448.012316][T11077] netlink: get zone limit has 8 unknown bytes [ 448.054628][ T5898] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 448.591426][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.609008][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.618216][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.691835][ T5898] usbtmc 2-1:16.0: bulk endpoints not found [ 448.819036][ T6520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.981957][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 449.104799][T11095] FAULT_INJECTION: forcing a failure. [ 449.104799][T11095] name failslab, interval 1, probability 0, space 0, times 0 [ 449.120217][T11095] CPU: 1 UID: 0 PID: 11095 Comm: syz.0.1626 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 449.120250][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 449.120264][T11095] Call Trace: [ 449.120274][T11095] [ 449.120284][T11095] dump_stack_lvl+0x241/0x360 [ 449.120324][T11095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.120357][T11095] ? __pfx__printk+0x10/0x10 [ 449.120389][T11095] ? __pfx_idr_alloc_u32+0x10/0x10 [ 449.120416][T11095] ? __pfx___might_resched+0x10/0x10 [ 449.120450][T11095] should_fail_ex+0x424/0x570 [ 449.120480][T11095] should_failslab+0xac/0x100 [ 449.120513][T11095] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 449.120546][T11095] ? __kernfs_new_node+0xa2/0x890 [ 449.120603][T11095] kstrdup+0x42/0x100 [ 449.120633][T11095] __kernfs_new_node+0xa2/0x890 [ 449.120656][T11095] ? __lock_acquire+0xad5/0xd80 [ 449.120697][T11095] ? __pfx___kernfs_new_node+0x10/0x10 [ 449.120731][T11095] ? kernfs_root+0x1c/0x230 [ 449.120756][T11095] ? kernfs_root+0x1c/0x230 [ 449.120782][T11095] kernfs_new_node+0x114/0x220 [ 449.120811][T11095] kernfs_create_link+0xa5/0x1f0 [ 449.120846][T11095] sysfs_do_create_link_sd+0x85/0x110 [ 449.120871][T11095] device_add_class_symlinks+0x1c5/0x250 [ 449.120903][T11095] device_add+0x553/0xbf0 [ 449.120936][T11095] input_register_device+0x9ed/0x10c0 [ 449.120981][T11095] uinput_create_device+0x40e/0x630 [ 449.121020][T11095] uinput_ioctl_handler+0x496/0x17f0 [ 449.121052][T11095] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 449.121110][T11095] __se_compat_sys_ioctl+0x50e/0xc30 [ 449.121142][T11095] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 449.121171][T11095] ? __fget_files+0x2a/0x420 [ 449.121198][T11095] ? fput+0x9b/0xd0 [ 449.121218][T11095] ? ksys_write+0x275/0x2d0 [ 449.121252][T11095] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 449.121280][T11095] ? lockdep_hardirqs_on+0x9d/0x150 [ 449.121310][T11095] __do_fast_syscall_32+0xb4/0x110 [ 449.121338][T11095] ? exc_page_fault+0x5f8/0x920 [ 449.121370][T11095] do_fast_syscall_32+0x34/0x80 [ 449.121399][T11095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.121426][T11095] RIP: 0023:0xf70ed579 [ 449.121444][T11095] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 449.121463][T11095] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 449.121486][T11095] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 449.121502][T11095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.121515][T11095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.121528][T11095] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 449.121541][T11095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.121580][T11095] [ 449.699294][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.709461][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.771560][ T6520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.791192][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.802920][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.813249][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.036025][ T6520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.073472][T11112] program syz.2.1631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.212811][ T6520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.324807][T11121] syz.2.1635: attempt to access beyond end of device [ 450.324807][T11121] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 450.522143][T11127] program syz.4.1636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.639243][T11126] syzkaller0: entered promiscuous mode [ 450.644889][T11126] syzkaller0: entered allmulticast mode [ 450.666539][ T5898] usb 2-1: USB disconnect, device number 82 [ 450.839534][T11134] x_tables: duplicate underflow at hook 3 [ 451.158896][T11140] input: syz1 as /devices/virtual/input/input110 [ 451.207279][ T5898] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 451.553640][ T5898] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 451.575832][ T5898] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 451.596968][ T5898] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 451.605993][ T5898] usb 2-1: config 0 has no interface number 0 [ 451.621343][ T5898] usb 2-1: config 0 has no interface number 1 [ 451.637661][ T5898] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 451.661189][ T5898] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 451.674576][ T5898] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 451.685792][ T5898] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 451.703691][ T5898] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 451.730085][ T5898] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 451.762558][ T5898] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 451.779763][ T5898] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 451.798653][ T5898] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 451.823854][ T5898] usb 2-1: config 0 interface 66 has no altsetting 0 [ 451.858147][ T5898] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 451.874691][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.889682][ T5898] usb 2-1: Product: syz [ 451.899402][ T5898] usb 2-1: Manufacturer: syz [ 451.910030][ T5898] usb 2-1: SerialNumber: syz [ 451.916776][ T5153] Bluetooth: hci1: command tx timeout [ 451.917873][ T5898] usb 2-1: config 0 descriptor?? [ 451.951698][ T5898] ljca 2-1:0.84: bulk endpoints not found [ 452.565161][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.575103][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.583315][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.591450][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.599463][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.611095][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.618958][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.627095][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.634540][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.642545][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.659216][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.667196][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.674963][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.683084][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.691054][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.698983][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.706913][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.714397][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.722367][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.730313][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.738450][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.746097][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.754739][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.762672][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.771324][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.783485][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.797034][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.804963][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.817887][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.825343][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.836515][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.845051][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.858632][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.866151][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.879728][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.901920][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.912124][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.922350][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.930082][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.937627][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.945095][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.954223][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.962418][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 452.969953][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.001277][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.036680][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.044218][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.079599][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.088504][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.096002][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.108599][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.116813][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.126940][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.134379][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.174723][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.184540][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.197478][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.205010][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.233147][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.240731][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.251794][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.266666][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.274206][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.293353][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.305007][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.312771][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.320309][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.328106][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.337894][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.352226][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.365591][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.383696][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.412273][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.426484][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.444892][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.456720][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.479941][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.520195][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.533061][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.540770][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.559537][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.574985][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.585489][T11158] program syz.4.1649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.595214][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.602804][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.616499][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.623956][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.646601][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.664683][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.676468][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.708352][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.715823][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.730045][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.740093][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.798638][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.807615][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.815081][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.823988][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.832735][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.871388][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.890686][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 453.908422][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.915996][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.933154][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.951626][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.966535][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.979837][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 453.999737][ T5153] Bluetooth: hci1: command tx timeout [ 454.016301][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.026224][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.034027][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.042462][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.051642][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.059226][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.067868][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.075518][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.105985][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.144297][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.152156][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.167078][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.182631][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.207530][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.227623][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.246367][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.258671][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.275382][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.296485][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.305475][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.322608][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.331197][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.342739][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.352022][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.389610][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.422974][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.446901][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.463176][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.486704][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.496003][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.509153][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.517408][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.525131][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.537380][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.544817][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.557705][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.565162][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.577315][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.584917][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.600079][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.607965][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.615612][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.629264][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.639268][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.647014][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.654624][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.667934][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.675477][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.687885][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.696042][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.709380][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.717431][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.724866][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.732867][ T5925] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 454.745467][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.754142][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.762325][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.769936][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.777562][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.785159][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.797280][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.805774][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.814581][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.822837][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.830442][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.838080][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.845665][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.853178][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.860805][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.868506][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.876130][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.883820][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.891843][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.899513][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 454.907149][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.919949][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.928261][ T5925] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 454.938705][ T5925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.950459][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.958897][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.969462][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.977027][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 454.984635][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.997818][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.005725][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.013446][ T5925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.022630][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.031028][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.038702][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.048021][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.055491][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.063199][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.074957][ T5925] usbtmc 5-1:16.0: bulk endpoints not found [ 455.091790][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.106464][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.124761][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.132377][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.140575][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.154555][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.162156][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.169628][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.177639][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.186816][ T5928] hid-generic 0008:0007:0001.0010: unknown main item tag 0x0 [ 455.234527][ T5928] hid-generic 0008:0007:0001.0010: hidraw0: HID v0.05 Device [syz0] on syz1 [ 455.402374][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'. [ 455.633688][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'. [ 455.688581][T11177] input: syz0 as /devices/virtual/input/input111 [ 455.715411][ T5898] ljca 2-1:0.66: probe with driver ljca failed with error -71 [ 455.781029][ T5898] usb 2-1: USB disconnect, device number 83 [ 456.066876][ T5153] Bluetooth: hci1: command tx timeout [ 456.140481][T11188] cgroup: fork rejected by pids controller in /syz0 [ 456.592399][T11285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1658'. [ 456.895113][ T6520] bridge_slave_1: left allmulticast mode [ 456.906462][ T6520] bridge_slave_1: left promiscuous mode [ 456.919855][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.949832][ T6520] bridge_slave_0: left allmulticast mode [ 456.962193][ T6520] bridge_slave_0: left promiscuous mode [ 456.974022][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.166477][ T5834] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 457.276994][T11268] delete_channel: no stack [ 457.317590][ T5834] usb 1-1: device descriptor read/64, error -71 [ 457.497531][ T5928] usb 5-1: USB disconnect, device number 59 [ 457.576833][ T5834] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 457.746704][ T5834] usb 1-1: device descriptor read/64, error -71 [ 457.876990][ T5834] usb usb1-port1: attempt power cycle [ 458.018455][ T6520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.030918][ T5928] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 458.041604][ T6520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.062982][ T6520] bond0 (unregistering): Released all slaves [ 458.081180][ T6520] bond1 (unregistering): Released all slaves [ 458.132757][T11335] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 458.140836][T11335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.148606][T11335] IPv6: NLM_F_CREATE should be set when creating new route [ 458.149933][ T5153] Bluetooth: hci1: command tx timeout [ 458.197169][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 458.266589][ T5834] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 458.276951][T11345] FAULT_INJECTION: forcing a failure. [ 458.276951][T11345] name failslab, interval 1, probability 0, space 0, times 0 [ 458.290890][T11345] CPU: 1 UID: 0 PID: 11345 Comm: syz.2.1665 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 458.290921][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 458.290935][T11345] Call Trace: [ 458.290944][T11345] [ 458.290954][T11345] dump_stack_lvl+0x241/0x360 [ 458.290994][T11345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.291026][T11345] ? __pfx__printk+0x10/0x10 [ 458.291070][T11345] should_fail_ex+0x424/0x570 [ 458.291099][T11345] should_failslab+0xac/0x100 [ 458.291131][T11345] __kmalloc_cache_noprof+0x73/0x370 [ 458.291161][T11345] ? sctp_add_bind_addr+0x89/0x3a0 [ 458.291195][T11345] sctp_add_bind_addr+0x89/0x3a0 [ 458.291229][T11345] sctp_copy_local_addr_list+0x313/0x500 [ 458.291261][T11345] ? sctp_copy_local_addr_list+0xad/0x500 [ 458.291290][T11345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 458.291321][T11345] ? sctp_v6_is_any+0x60/0x70 [ 458.291352][T11345] ? sctp_copy_one_addr+0x94/0x360 [ 458.291384][T11345] sctp_bind_addr_copy+0xad/0x3b0 [ 458.291413][T11345] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 458.291442][T11345] sctp_connect_new_asoc+0x337/0x700 [ 458.291468][T11345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 458.291486][T11345] ? sctp_sendmsg+0xf30/0x3620 [ 458.291513][T11345] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 458.291532][T11345] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 458.291560][T11345] sctp_sendmsg+0x2009/0x3620 [ 458.291604][T11345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 458.291629][T11345] ? aa_sk_perm+0x96f/0xac0 [ 458.291676][T11345] ? inet_sendmsg+0x330/0x390 [ 458.291706][T11345] __sock_sendmsg+0x1a6/0x270 [ 458.291739][T11345] __sys_sendto+0x365/0x4c0 [ 458.291767][T11345] ? __pfx___sys_sendto+0x10/0x10 [ 458.291803][T11345] ? __fget_files+0x2a/0x420 [ 458.291841][T11345] ? ksys_write+0x275/0x2d0 [ 458.291876][T11345] __ia32_sys_sendto+0xdd/0x100 [ 458.291901][T11345] __do_fast_syscall_32+0xb4/0x110 [ 458.291929][T11345] ? exc_page_fault+0x5f8/0x920 [ 458.291960][T11345] do_fast_syscall_32+0x34/0x80 [ 458.291988][T11345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.292014][T11345] RIP: 0023:0xf70ed579 [ 458.292033][T11345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 458.292051][T11345] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 458.292075][T11345] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 458.292090][T11345] RDX: 0000000000034000 RSI: 000000002000c851 RDI: 0000000080000140 [ 458.292103][T11345] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 458.292116][T11345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 458.292128][T11345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.292160][T11345] [ 458.619038][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.625739][T11106] chnl_net:caif_netlink_parms(): no params data found [ 458.665558][ T5834] usb 1-1: device descriptor read/8, error -71 [ 458.672400][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33635, setting to 1024 [ 458.701634][ T5928] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 458.761118][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.766839][ T6520] : left promiscuous mode [ 458.829029][ T5928] usb 5-1: config 0 descriptor?? [ 458.926958][ T5834] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 459.427218][ T5834] usb 1-1: device descriptor read/8, error -71 [ 459.517140][T11351] syzkaller0: entered promiscuous mode [ 459.525564][T11351] syzkaller0: entered allmulticast mode [ 459.546982][ T5834] usb usb1-port1: unable to enumerate USB device [ 459.696563][ T47] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 459.785389][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.845152][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.853387][T11106] bridge_slave_0: entered allmulticast mode [ 459.862139][T11106] bridge_slave_0: entered promiscuous mode [ 459.873304][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.882329][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.890057][T11106] bridge_slave_1: entered allmulticast mode [ 459.899563][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.935346][T11106] bridge_slave_1: entered promiscuous mode [ 459.941813][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 459.963604][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.008134][ T47] usb 2-1: config 0 descriptor?? [ 460.018899][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 460.076597][ T5898] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 460.222400][ T47] pwc: send_video_command error -71 [ 460.259190][ T47] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 460.268069][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 460.287722][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 460.316578][ T47] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 460.336078][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 460.386304][ T47] usb 2-1: USB disconnect, device number 84 [ 460.398022][ T5898] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.495661][ T5898] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 460.524475][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 460.542521][ T5898] usb 3-1: Product: syz [ 460.563825][ T5898] usb 3-1: Manufacturer: syz [ 460.591468][ T5898] usb 3-1: SerialNumber: syz [ 460.614927][T11368] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 460.661612][ T5898] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input112 [ 460.757301][ T47] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 460.957793][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.967149][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.020084][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.078031][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 461.138904][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.258177][ T47] usb 2-1: config 0 descriptor?? [ 461.479510][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 461.568603][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 461.623920][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 461.642484][ T5928] usb 5-1: USB disconnect, device number 60 [ 461.707277][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 461.739159][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 461.746996][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 461.776339][ T47] pwc: recv_control_msg error -71 req 04 val 1000 [ 461.790027][ T47] pwc: recv_control_msg error -71 req 04 val 1300 [ 461.804417][ T47] pwc: recv_control_msg error -71 req 04 val 1400 [ 461.818411][ T47] pwc: recv_control_msg error -71 req 02 val 2000 [ 461.825746][ T47] pwc: recv_control_msg error -71 req 02 val 2100 [ 461.842591][ T47] pwc: recv_control_msg error -71 req 04 val 1500 [ 461.862160][ T47] pwc: recv_control_msg error -71 req 02 val 2500 [ 461.878682][ T47] pwc: recv_control_msg error -71 req 02 val 2400 [ 461.886608][ T5925] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 461.893638][ T47] pwc: recv_control_msg error -71 req 02 val 2600 [ 461.908507][ T47] pwc: recv_control_msg error -71 req 02 val 2900 [ 461.923448][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 461.941462][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 461.960866][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 461.977519][ T47] pwc: Registered as video103. [ 461.984465][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input113 [ 462.025647][ T47] usb 2-1: USB disconnect, device number 85 [ 462.067099][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 462.078435][ T5925] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 462.107895][ T5925] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 462.143521][ T5925] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 462.167894][ T5925] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.199895][ T5925] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 462.218549][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.249719][ T5925] usbtmc 1-1:16.0: bulk endpoints not found [ 463.584011][T11381] syzkaller1: entered promiscuous mode [ 463.591356][T11381] syzkaller1: entered allmulticast mode [ 463.813582][T11106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.910029][ T5928] usb 3-1: USB disconnect, device number 80 [ 463.923098][ T6520] hsr_slave_0: left promiscuous mode [ 463.960171][ T6520] hsr_slave_1: left promiscuous mode [ 463.978490][ T5928] appletouch 3-1:1.0: input: appletouch disconnected [ 464.032193][T11411] netlink: 'syz.2.1680': attribute type 8 has an invalid length. [ 464.033321][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.075948][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.097641][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.114058][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.209403][ T6520] veth1_macvtap: left promiscuous mode [ 464.215450][ T6520] veth0_macvtap: left promiscuous mode [ 464.266956][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 464.417679][ T24] usb 2-1: device descriptor read/64, error -71 [ 464.650804][ T47] usb 1-1: USB disconnect, device number 55 [ 464.666519][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 464.826481][ T24] usb 2-1: device descriptor read/64, error -71 [ 464.886599][ T6520] team0 (unregistering): Port device team_slave_0 removed [ 464.936901][ T24] usb usb2-port1: attempt power cycle [ 465.286905][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 465.325093][T11106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.335387][ T24] usb 2-1: device descriptor read/8, error -71 [ 465.573760][T11436] fuse: Unknown parameter 'allowZother' [ 465.600347][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 465.618473][T11106] team0: Port device team_slave_0 added [ 465.635580][T11106] team0: Port device team_slave_1 added [ 465.642755][ T24] usb 2-1: device descriptor read/8, error -71 [ 465.682980][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 465.683002][ T30] audit: type=1326 audit(1744785939.570:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.4.1684" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x0 [ 465.729922][T11106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.754549][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.757199][ T24] usb usb2-port1: unable to enumerate USB device [ 465.780539][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.793712][ T47] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 465.804921][T11106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.816489][T11440] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 465.833032][T11440] bond0: (slave lo): Error: Device type is different from other slaves [ 465.842760][T11106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.852141][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.883813][ T5925] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 465.892583][T11106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.957078][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 466.049635][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.081560][ T5925] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 466.088769][T11106] hsr_slave_0: entered promiscuous mode [ 466.100952][T11106] hsr_slave_1: entered promiscuous mode [ 466.108233][T11106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.118540][T11106] Cannot create hsr debugfs directory [ 466.124151][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.153145][ T5925] usb 1-1: config 0 descriptor?? [ 466.181288][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 466.378743][ T5925] pwc: send_video_command error -71 [ 466.393610][ T5925] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 466.430185][ T5925] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 466.515166][ T5925] usb 1-1: USB disconnect, device number 56 [ 466.828142][ T5928] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 466.918502][ T5925] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 467.008741][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 467.021469][ T5928] usb 5-1: config 0 has an invalid interface number: 221 but max is 0 [ 467.034191][ T5928] usb 5-1: config 0 has no interface number 0 [ 467.144023][T11463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1688'. [ 467.177845][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.205873][ T5925] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 467.221565][ T5153] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 467.225723][ T5928] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 467.261881][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.293179][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.328998][ T5925] usb 1-1: config 0 descriptor?? [ 467.347855][ T5928] usb 5-1: Product: syz [ 467.360280][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 467.371609][ T5928] usb 5-1: Manufacturer: syz [ 467.385026][ T5928] usb 5-1: SerialNumber: syz [ 467.418639][ T5928] usb 5-1: config 0 descriptor?? [ 467.527709][T11106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.576993][T11106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.625039][T11106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.675023][ T5834] usb 5-1: USB disconnect, device number 61 [ 467.689224][T11106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.737829][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 467.761036][ T5925] pwc: recv_control_msg error -32 req 02 val 2700 [ 467.801008][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 467.812318][ T5925] pwc: recv_control_msg error -71 req 04 val 1000 [ 467.824128][ T5925] pwc: recv_control_msg error -71 req 04 val 1300 [ 467.844196][ T5925] pwc: recv_control_msg error -71 req 04 val 1400 [ 467.853798][ T5925] pwc: recv_control_msg error -71 req 02 val 2000 [ 467.865662][ T5925] pwc: recv_control_msg error -71 req 02 val 2100 [ 467.882948][ T5925] pwc: recv_control_msg error -71 req 04 val 1500 [ 467.905190][ T5925] pwc: recv_control_msg error -71 req 02 val 2500 [ 467.928211][ T5925] pwc: recv_control_msg error -71 req 02 val 2400 [ 467.935276][ T5925] pwc: recv_control_msg error -71 req 02 val 2600 [ 467.952255][ T5925] pwc: recv_control_msg error -71 req 02 val 2900 [ 467.960475][ T5925] pwc: recv_control_msg error -71 req 02 val 2800 [ 468.063542][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 468.124570][ T5925] pwc: recv_control_msg error -71 req 04 val 1100 [ 468.142624][ T5925] pwc: recv_control_msg error -71 req 04 val 1200 [ 468.172732][ T5925] pwc: Registered as video103. [ 468.186197][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input114 [ 468.235100][T11106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.322721][T11106] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.556452][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.563762][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.623870][ T5925] usb 1-1: USB disconnect, device number 57 [ 469.086473][ T5928] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 469.576436][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 469.595911][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.603127][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.612221][ T5928] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 469.613215][T11495] netlink: 'syz.1.1693': attribute type 8 has an invalid length. [ 469.645135][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.664717][ T47] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 469.703326][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 469.725273][ T47] usb 3-1: can't read configurations, error -71 [ 469.770371][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 469.781160][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 469.800754][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.810522][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.888595][T11501] FAULT_INJECTION: forcing a failure. [ 469.888595][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 469.904183][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.2.1695 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 469.904213][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.904226][T11501] Call Trace: [ 469.904235][T11501] [ 469.904245][T11501] dump_stack_lvl+0x241/0x360 [ 469.904282][T11501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.904314][T11501] ? __pfx__printk+0x10/0x10 [ 469.904342][T11501] ? __lock_acquire+0xad5/0xd80 [ 469.904375][T11501] should_fail_ex+0x424/0x570 [ 469.904403][T11501] should_failslab+0xac/0x100 [ 469.904434][T11501] kmem_cache_alloc_noprof+0x78/0x390 [ 469.904463][T11501] ? skb_clone+0x20c/0x390 [ 469.904492][T11501] skb_clone+0x20c/0x390 [ 469.904520][T11501] __netlink_deliver_tap+0x3c4/0x7f0 [ 469.904560][T11501] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.904588][T11501] netlink_deliver_tap+0x19d/0x1b0 [ 469.904617][T11501] netlink_unicast+0x7c6/0x9a0 [ 469.904650][T11501] ? __pfx_netlink_unicast+0x10/0x10 [ 469.904678][T11501] ? skb_put+0x114/0x1f0 [ 469.904701][T11501] netlink_sendmsg+0x8c3/0xcd0 [ 469.904743][T11501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.904776][T11501] ? __import_iovec+0x585/0x830 [ 469.904804][T11501] ? aa_sock_msg_perm+0x91/0x160 [ 469.904845][T11501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.904871][T11501] __sock_sendmsg+0x221/0x270 [ 469.904902][T11501] ____sys_sendmsg+0x523/0x860 [ 469.904954][T11501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.904995][T11501] __sys_sendmsg+0x271/0x360 [ 469.905024][T11501] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.905097][T11501] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 469.905123][T11501] ? lockdep_hardirqs_on+0x9d/0x150 [ 469.905152][T11501] __do_fast_syscall_32+0xb4/0x110 [ 469.905178][T11501] ? exc_page_fault+0x5f8/0x920 [ 469.905208][T11501] do_fast_syscall_32+0x34/0x80 [ 469.905235][T11501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.905260][T11501] RIP: 0023:0xf70ed579 [ 469.905278][T11501] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 469.905296][T11501] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 469.905318][T11501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 469.905332][T11501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.905344][T11501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.905356][T11501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 469.905368][T11501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.905397][T11501] [ 470.177830][ T5928] usbtmc 5-1:16.0: bulk endpoints not found [ 470.230329][T11106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.274460][T11106] veth0_vlan: entered promiscuous mode [ 470.346989][ T5902] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 470.358358][T11106] veth1_vlan: entered promiscuous mode [ 470.382803][T11106] veth0_macvtap: entered promiscuous mode [ 470.391723][T11106] veth1_macvtap: entered promiscuous mode [ 470.406508][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.416999][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.426857][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.437827][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.456509][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.471310][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.482710][T11106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.522648][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.599380][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.623659][ T5902] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 470.637624][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.693648][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.716513][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.741897][ T5902] usb 2-1: Product: syz [ 470.759093][ T5902] usb 2-1: Manufacturer: syz [ 470.776542][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.790917][ T5902] usb 2-1: SerialNumber: syz [ 470.801946][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.813806][ T5902] usb 2-1: config 0 descriptor?? [ 470.831584][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.845913][T11106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.867202][ T47] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 470.909412][T11106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.924975][T11106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.942772][T11106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.952117][ T5902] rtsx_usb 2-1:0.0: probe with driver rtsx_usb failed with error -22 [ 470.972357][T11106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.996782][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 471.028678][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.037665][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.046706][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 471.056617][ T5900] usb 2-1: USB disconnect, device number 90 [ 471.070885][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.096042][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.149144][ T47] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 471.159257][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.174986][ T47] usb 3-1: config 0 descriptor?? [ 471.180170][ T24] usb 1-1: device descriptor read/64, error -71 [ 471.223631][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.250374][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.295301][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.314243][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.441534][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 471.584257][ T5900] usb 5-1: USB disconnect, device number 62 [ 471.597371][ T24] usb 1-1: device descriptor read/64, error -71 [ 471.609491][ T47] gt683r_led 0003:1770:FF00.0011: ignoring exceeding usage max [ 471.693308][ T47] gt683r_led 0003:1770:FF00.0011: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 471.751034][ T24] usb usb1-port1: attempt power cycle [ 471.866292][T11537] netlink: 524 bytes leftover after parsing attributes in process `syz.4.1700'. [ 471.896253][T11503] input: syz0 as /devices/virtual/input/input115 [ 472.006487][ T5834] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 472.025422][ T5928] usb 3-1: USB disconnect, device number 82 [ 472.065773][T11545] gt683r_led 0003:1770:FF00.0011: failed to send set report request: -19 [ 472.089588][T11545] gt683r_led 0003:1770:FF00.0011: failed to send set report request: -19 [ 472.107153][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 472.156521][ T5925] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 472.164356][ T5834] usb 4-1: device descriptor read/64, error -71 [ 472.197121][ T24] usb 1-1: device descriptor read/8, error -71 [ 472.323364][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.339491][ T5925] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 472.352576][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.372766][T11556] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.386091][ T5925] usb 2-1: config 0 descriptor?? [ 472.398809][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 472.427138][ T5834] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 472.436544][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 472.478837][ T24] usb 1-1: device descriptor read/8, error -71 [ 472.568739][ T5834] usb 4-1: device descriptor read/64, error -71 [ 472.587313][ T24] usb usb1-port1: unable to enumerate USB device [ 472.605998][ T5925] pwc: send_video_command error -71 [ 472.647290][ T5925] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 472.655020][ T5925] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 472.715034][ T5925] usb 2-1: USB disconnect, device number 91 [ 472.759669][ T5834] usb usb4-port1: attempt power cycle [ 473.426816][ T5898] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 473.457240][ T5925] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 473.496513][ T5834] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 473.541857][ T5834] usb 4-1: device descriptor read/8, error -71 [ 473.596482][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 473.638280][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.663014][ T5925] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 473.672144][ T5898] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 473.672174][ T5898] usb 3-1: config 0 has no interface number 0 [ 473.672205][ T5898] usb 3-1: config 0 interface 161 has no altsetting 0 [ 473.678416][ T5898] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 473.688144][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.723480][ T5925] usb 2-1: config 0 descriptor?? [ 473.731335][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.742178][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 473.763223][ T5898] usb 3-1: Product: syz [ 473.769525][ T5898] usb 3-1: Manufacturer: syz [ 473.774172][ T5898] usb 3-1: SerialNumber: syz [ 473.782983][ T5898] usb 3-1: config 0 descriptor?? [ 473.796324][ T5898] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 473.807841][ T5834] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 473.822512][ T5898] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 473.918380][ T5834] usb 4-1: device descriptor read/8, error -71 [ 474.013472][ T5902] usb 3-1: USB disconnect, device number 83 [ 474.061798][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 474.071099][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'. [ 474.081958][ T5834] usb usb4-port1: unable to enumerate USB device [ 474.132796][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 474.177513][ T5925] pwc: recv_control_msg error -32 req 02 val 2700 [ 474.202044][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 474.223152][ T5925] pwc: recv_control_msg error -71 req 04 val 1000 [ 474.254064][ T5925] pwc: recv_control_msg error -71 req 04 val 1300 [ 474.285946][ T5925] pwc: recv_control_msg error -71 req 04 val 1400 [ 474.296724][ T5898] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 474.305387][ T5925] pwc: recv_control_msg error -71 req 02 val 2000 [ 474.314351][ T5925] pwc: recv_control_msg error -71 req 02 val 2100 [ 474.330901][ T5925] pwc: recv_control_msg error -71 req 04 val 1500 [ 475.140854][ T5925] pwc: recv_control_msg error -71 req 02 val 2500 [ 475.148253][ T5925] pwc: recv_control_msg error -71 req 02 val 2400 [ 475.157356][ T5925] pwc: recv_control_msg error -71 req 02 val 2600 [ 475.165425][ T5925] pwc: recv_control_msg error -71 req 02 val 2900 [ 475.179938][ T5925] pwc: recv_control_msg error -71 req 02 val 2800 [ 475.220970][ T5925] pwc: recv_control_msg error -71 req 04 val 1100 [ 475.237432][ T5925] pwc: recv_control_msg error -71 req 04 val 1200 [ 475.297415][T11664] fuse: Bad value for 'fd' [ 475.311426][T11664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1716'. [ 475.416478][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 475.418000][T11668] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1716'. [ 475.430919][ T5834] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 475.478290][ T5925] pwc: Registered as video103. [ 475.539129][T11670] input: syz0 as /devices/virtual/input/input116 [ 475.547920][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input117 [ 475.657190][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 475.673667][ T5898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 475.696454][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 475.764118][ T5834] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 475.796577][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.839606][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.848628][ T5898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.875100][ T5925] usb 2-1: USB disconnect, device number 92 [ 475.899188][ T5834] usb 3-1: Product: syz [ 475.922751][ T5834] usb 3-1: Manufacturer: syz [ 475.934999][ T5898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.959644][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.973238][ T5834] usb 3-1: SerialNumber: syz [ 476.027400][ T5834] usb 3-1: config 0 descriptor?? [ 476.063875][ T5834] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 476.258149][ T5898] usb 5-1: GET_CAPABILITIES returned 0 [ 476.288110][ T5898] usbtmc 5-1:16.0: can't read capabilities [ 476.526507][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 476.690668][ T24] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0 [ 476.709338][ T24] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0 [ 476.720273][ T24] usb 2-1: config 0 interface 0 altsetting 10 bulk endpoint 0xB has invalid maxpacket 0 [ 476.730603][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 476.747178][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 476.795719][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.804601][ T24] usb 2-1: Product: syz [ 476.825611][ T24] usb 2-1: Manufacturer: syz [ 476.845276][ T24] usb 2-1: SerialNumber: syz [ 476.857172][ T5834] pwc: Warning: more than 1 configuration available. [ 476.889035][ T5834] pwc: Failed to set LED on/off time (-71) [ 476.895335][ T5834] pwc: send_video_command error -71 [ 476.903815][ T5834] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 476.948641][ T5834] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 476.976164][ T5834] usb 3-1: USB disconnect, device number 84 [ 477.002541][ T24] usb 2-1: config 0 descriptor?? [ 477.106949][ T24] ir_toy 2-1:0.0: required endpoints not found [ 477.178052][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 477.235573][ T24] usb 2-1: USB disconnect, device number 93 [ 477.269407][T11755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1726'. [ 477.523718][T11773] input: syz0 as /devices/virtual/input/input118 [ 478.296405][ T5834] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 478.627362][ T5900] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 478.696621][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 478.735758][ T5834] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.796582][ T5834] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.824525][ T5834] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 478.833759][ T5834] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 478.895465][ T5834] usb 3-1: Product: syz [ 478.906810][ T5834] usb 3-1: Manufacturer: syz [ 478.936696][ T5900] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 478.961691][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.974003][ T5900] usb 1-1: config 0 descriptor?? [ 479.008147][ T5834] hub 3-1:4.0: USB hub found [ 479.077992][T11827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1738'. [ 479.142595][ T5900] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 479.151136][ T5900] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 479.195879][ T5834] hub 3-1:4.0: 2 ports detected [ 479.286020][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 479.295435][T11794] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1730'. [ 479.416459][ T5898] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 479.588993][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 479.609890][ T5834] hub 3-1:4.0: set hub depth failed [ 479.616444][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 479.648877][ T5834] usb 3-1: USB disconnect, device number 85 [ 479.660142][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 479.688466][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.730733][ T5898] usb 2-1: Product: syz [ 479.745162][ T5898] usb 2-1: Manufacturer: syz [ 479.766575][ T5898] usb 2-1: SerialNumber: syz [ 479.790661][ T5898] usb 2-1: config 0 descriptor?? [ 479.848086][ T5898] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 01 [ 480.140672][ T5898] usb 2-1: USB disconnect, device number 94 [ 480.210139][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1742'. [ 480.232955][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1742'. [ 480.544370][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 480.578885][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.705065][ T24] usb 1-1: USB disconnect, device number 62 [ 481.523606][T11620] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 481.575429][ T24] usb 5-1: USB disconnect, device number 63 [ 481.682430][T11927] futex_wake_op: syz.3.1750 tries to shift op by 36; fix this program [ 481.776705][ T5925] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 481.968094][ T5925] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 481.977104][ T5925] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 482.104078][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 482.114166][ T5925] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.138708][ T5925] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 482.149131][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 482.160989][ T5925] usb 2-1: Product: syz [ 482.168277][ T5925] usb 2-1: Manufacturer: syz [ 482.229902][ T5925] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 482.493570][ T5834] usb 2-1: USB disconnect, device number 95 [ 482.966473][ T5925] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 483.298467][T11966] syzkaller1: entered promiscuous mode [ 483.316232][T11966] syzkaller1: entered allmulticast mode [ 483.334533][T11966] FAULT_INJECTION: forcing a failure. [ 483.334533][T11966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.356718][T11966] CPU: 1 UID: 0 PID: 11966 Comm: syz.3.1755 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 483.356750][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 483.356764][T11966] Call Trace: [ 483.356773][T11966] [ 483.356782][T11966] dump_stack_lvl+0x241/0x360 [ 483.356823][T11966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.356854][T11966] ? __pfx__printk+0x10/0x10 [ 483.356897][T11966] should_fail_ex+0x424/0x570 [ 483.356926][T11966] _copy_from_iter+0x211/0x1c70 [ 483.356955][T11966] ? _copy_from_iter+0x288/0x1c70 [ 483.356986][T11966] ? skb_set_owner_w+0x246/0x380 [ 483.357031][T11966] ? sock_alloc_send_pskb+0x944/0xa70 [ 483.357055][T11966] ? __pfx__copy_from_iter+0x10/0x10 [ 483.357082][T11966] ? __pfx__copy_from_iter+0x10/0x10 [ 483.357116][T11966] ? page_copy_sane+0x154/0x260 [ 483.357145][T11966] copy_page_from_iter+0x7a/0x100 [ 483.357176][T11966] skb_copy_datagram_from_iter+0x2e0/0x6c0 [ 483.357215][T11966] tun_get_user+0x17f3/0x47c0 [ 483.357255][T11966] ? aa_file_perm+0x139/0xf60 [ 483.357288][T11966] ? aa_file_perm+0x139/0xf60 [ 483.357318][T11966] ? aa_file_perm+0x3f1/0xf60 [ 483.357348][T11966] ? __pfx_tun_get_user+0x10/0x10 [ 483.357374][T11966] ? __lock_acquire+0xad5/0xd80 [ 483.357401][T11966] ? ref_tracker_alloc+0x316/0x4c0 [ 483.357427][T11966] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 483.357469][T11966] ? tun_get+0x1e/0x2f0 [ 483.357488][T11966] ? tun_get+0x1e/0x2f0 [ 483.357506][T11966] ? tun_get+0x27d/0x2f0 [ 483.357526][T11966] tun_chr_write_iter+0x10d/0x1f0 [ 483.357562][T11966] vfs_write+0x70f/0xd10 [ 483.357593][T11966] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 483.357626][T11966] ? __pfx_vfs_write+0x10/0x10 [ 483.357671][T11966] ? __fget_files+0x2a/0x420 [ 483.357692][T11966] ? __fget_files+0x2a/0x420 [ 483.357719][T11966] ksys_write+0x19d/0x2d0 [ 483.357743][T11966] ? __pfx_ksys_write+0x10/0x10 [ 483.357768][T11966] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 483.357810][T11966] ? lockdep_hardirqs_on+0x9d/0x150 [ 483.357839][T11966] __do_fast_syscall_32+0xb4/0x110 [ 483.357865][T11966] ? exc_page_fault+0x5f8/0x920 [ 483.357893][T11966] do_fast_syscall_32+0x34/0x80 [ 483.357920][T11966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 483.357945][T11966] RIP: 0023:0xf712d579 [ 483.357963][T11966] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 483.357981][T11966] RSP: 002b:00000000f511d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 483.358003][T11966] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 483.358018][T11966] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 483.358031][T11966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.358042][T11966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 483.358055][T11966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.358084][T11966] [ 483.657280][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.708337][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.868360][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 483.930009][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 483.952530][ T5902] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 483.967133][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 483.978158][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.000638][ T5925] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 484.009982][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.018525][ T5925] usb 3-1: Product: syz [ 484.022740][ T5925] usb 3-1: Manufacturer: syz [ 484.035676][ T5925] usb 3-1: SerialNumber: syz [ 484.054522][ T5925] usb 3-1: config 0 descriptor?? [ 484.099881][ T5925] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 484.123602][ T5925] imon 3-1:0.0: unable to initialize intf0, err -90 [ 484.134386][T11545] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 484.143527][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 484.159787][ T5925] imon:imon_probe: failed to initialize context! [ 484.166173][ T5925] imon 3-1:0.0: unable to register, err -19 [ 484.197022][ T5902] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 484.222288][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.256470][ T5902] usb 2-1: Product: syz [ 484.275348][ T5925] usb 3-1: USB disconnect, device number 86 [ 484.292090][ T5902] usb 2-1: Manufacturer: syz [ 484.320523][ T5902] usb 2-1: SerialNumber: syz [ 484.328713][T11545] usb 5-1: Using ep0 maxpacket: 16 [ 484.364030][T11545] usb 5-1: unable to get BOS descriptor or descriptor too short [ 484.375727][ T5902] usb 2-1: config 0 descriptor?? [ 484.413408][T11545] usb 5-1: config 9 has an invalid interface number: 243 but max is 2 [ 484.445332][T11545] usb 5-1: config 9 has an invalid descriptor of length 122, skipping remainder of the config [ 484.476203][T11545] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 484.495615][T11545] usb 5-1: config 9 has no interface number 0 [ 484.505382][T11545] usb 5-1: config 9 interface 243 altsetting 8 endpoint 0x4 has an invalid bInterval 76, changing to 10 [ 484.525004][T11545] usb 5-1: config 9 interface 243 has no altsetting 0 [ 484.545397][T11545] usb 5-1: New USB device found, idVendor=12d1, idProduct=6456, bcdDevice=89.a6 [ 484.563269][T11545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.585242][T11545] usb 5-1: Product: syz [ 484.591479][T11545] usb 5-1: Manufacturer: syz [ 484.596820][T11545] usb 5-1: SerialNumber: syz [ 484.615716][ T5902] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.807670][ T30] audit: type=1326 audit(1744785958.700:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 484.829874][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.836204][ T30] audit: type=1326 audit(1744785958.700:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 484.858485][ T30] audit: type=1326 audit(1744785958.700:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 484.880504][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.917029][ T30] audit: type=1326 audit(1744785958.700:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 485.078618][ T30] audit: type=1326 audit(1744785958.700:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 485.100657][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.256227][ T30] audit: type=1326 audit(1744785958.700:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 485.386851][ T30] audit: type=1326 audit(1744785958.700:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 485.409401][T12025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1763'. [ 485.666587][ T30] audit: type=1326 audit(1744785958.700:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 485.688697][ T30] audit: type=1326 audit(1744785958.700:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 485.932545][ T30] audit: type=1326 audit(1744785959.190:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12017 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712d579 code=0x7ffc0000 [ 486.031885][ C1] sd 0:0:1:0: [sda] tag#6016 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 486.042414][ C1] sd 0:0:1:0: [sda] tag#6016 CDB: Write(6) 0a 00 4e 24 00 00 00 00 20 01 00 00 [ 486.164169][T12037] warning: `syz.2.1764' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 486.178012][T12040] syzkaller1: entered promiscuous mode [ 486.185626][T12040] syzkaller1: entered allmulticast mode [ 486.368956][ T5928] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 486.421520][ T5902] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 486.487958][ T5902] usb 2-1: USB disconnect, device number 96 [ 486.538809][ T5928] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.563491][ T5928] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 486.612056][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.630969][ T5928] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.710686][ T5928] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 486.720202][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 486.728335][ T5928] usb 1-1: Product: syz [ 486.732713][ T5928] usb 1-1: Manufacturer: syz [ 486.744298][ T5928] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 486.954509][ T5928] usb 1-1: USB disconnect, device number 63 [ 487.057526][T11545] option 5-1:9.243: GSM modem (1-port) converter detected [ 487.157822][T11545] usb 5-1: USB disconnect, device number 64 [ 487.255284][T12107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1770'. [ 487.310571][T11545] option 5-1:9.243: device disconnected [ 487.503906][T12127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1774'. [ 488.769971][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1781'. [ 488.779830][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1781'. [ 488.789688][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1781'. [ 488.801033][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1781'. [ 488.811339][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1781'. [ 488.821280][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1781'. [ 488.838516][T12154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1781'. [ 488.939562][T12159] input: syz0 as /devices/virtual/input/input119 [ 488.949891][T12159] FAULT_INJECTION: forcing a failure. [ 488.949891][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 488.963045][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.2.1782 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 488.963077][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.963092][T12159] Call Trace: [ 488.963102][T12159] [ 488.963111][T12159] dump_stack_lvl+0x241/0x360 [ 488.963153][T12159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.963185][T12159] ? __pfx__printk+0x10/0x10 [ 488.963229][T12159] should_fail_ex+0x424/0x570 [ 488.963259][T12159] should_failslab+0xac/0x100 [ 488.963291][T12159] kmem_cache_alloc_noprof+0x78/0x390 [ 488.963323][T12159] ? inet_bind_bucket_create+0x2f/0x270 [ 488.963358][T12159] inet_bind_bucket_create+0x2f/0x270 [ 488.963392][T12159] inet_csk_get_port+0x3c3/0x1850 [ 488.963423][T12159] ? inet_csk_get_port+0xec1/0x1850 [ 488.963472][T12159] __inet6_bind+0xa54/0xfd0 [ 488.963512][T12159] inet6_bind_sk+0x19a/0x300 [ 488.963540][T12159] ? __pfx_inet6_bind_sk+0x10/0x10 [ 488.963576][T12159] __sys_bind+0x1de/0x290 [ 488.963612][T12159] ? __pfx___sys_bind+0x10/0x10 [ 488.963669][T12159] __ia32_sys_bind+0x7a/0x90 [ 488.963703][T12159] __do_fast_syscall_32+0xb4/0x110 [ 488.963731][T12159] ? exc_page_fault+0x5f8/0x920 [ 488.963762][T12159] do_fast_syscall_32+0x34/0x80 [ 488.963791][T12159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.963818][T12159] RIP: 0023:0xf70ed579 [ 488.963836][T12159] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 488.963855][T12159] RSP: 002b:00000000f509b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 488.963878][T12159] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000480 [ 488.963893][T12159] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 488.963907][T12159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.963919][T12159] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 488.963932][T12159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.963964][T12159] [ 489.665539][T12184] ALSA: mixer_oss: invalid OSS volume '' [ 489.765589][T12192] netlink: 'syz.0.1789': attribute type 23 has an invalid length. [ 489.908234][ T5834] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 490.098560][ T5834] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 490.367689][ T5834] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 490.374971][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 490.385794][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.401669][ T5834] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.426505][ T5928] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 490.456019][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.471295][ T5834] usb 3-1: Product: syz [ 490.475618][ T5834] usb 3-1: Manufacturer: syz [ 490.503214][ T5834] cdc_wdm 3-1:1.0: skipping garbage [ 490.512970][ T5834] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 490.606515][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 490.673873][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 490.727628][ T5834] usb 3-1: USB disconnect, device number 87 [ 490.772885][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 490.790586][ T5928] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.810241][ T5928] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.833852][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.962672][ T5928] usb 4-1: Product: syz [ 491.012506][T12215] syz.1.1793: vmalloc error: size 70762496, failed to allocated page array size 138208, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 491.031135][T12215] CPU: 1 UID: 0 PID: 12215 Comm: syz.1.1793 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 491.031168][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.031183][T12215] Call Trace: [ 491.031192][T12215] [ 491.031202][T12215] dump_stack_lvl+0x241/0x360 [ 491.031244][T12215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.031278][T12215] ? __pfx__printk+0x10/0x10 [ 491.031309][T12215] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 491.031345][T12215] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 491.031377][T12215] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 491.031414][T12215] warn_alloc+0x27c/0x410 [ 491.031443][T12215] ? __pfx_warn_alloc+0x10/0x10 [ 491.031473][T12215] ? vb2_vmalloc_alloc+0xf2/0x340 [ 491.031500][T12215] ? __get_vm_area_node+0x1c8/0x2d0 [ 491.031533][T12215] ? __get_vm_area_node+0x25c/0x2d0 [ 491.031575][T12215] __vmalloc_node_range_noprof+0x634/0x1390 [ 491.031629][T12215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.031657][T12215] ? __kasan_kmalloc+0x9d/0xb0 [ 491.031691][T12215] vmalloc_user_noprof+0x74/0x80 [ 491.031713][T12215] ? vb2_vmalloc_alloc+0xf2/0x340 [ 491.031739][T12215] vb2_vmalloc_alloc+0xf2/0x340 [ 491.031770][T12215] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 491.031796][T12215] __vb2_queue_alloc+0xa16/0x16f0 [ 491.031869][T12215] vb2_core_reqbufs+0xd3b/0x17d0 [ 491.031917][T12215] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 491.031953][T12215] ? __video_do_ioctl+0x4e0/0xdd0 [ 491.031977][T12215] ? vb2_verify_memory_type+0x1f7/0x570 [ 491.032011][T12215] vb2_ioctl_reqbufs+0x4e3/0x830 [ 491.032053][T12215] __video_do_ioctl+0xc0b/0xdd0 [ 491.032087][T12215] ? __pfx___video_do_ioctl+0x10/0x10 [ 491.032125][T12215] video_usercopy+0x95c/0x1330 [ 491.032159][T12215] ? __pfx___video_do_ioctl+0x10/0x10 [ 491.032182][T12215] ? __pfx_video_usercopy+0x10/0x10 [ 491.032232][T12215] v4l2_ioctl+0x189/0x1e0 [ 491.032272][T12215] v4l2_compat_ioctl32+0x1d7/0x260 [ 491.032311][T12215] __se_compat_sys_ioctl+0x50e/0xc30 [ 491.032344][T12215] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 491.032405][T12215] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 491.032434][T12215] ? lockdep_hardirqs_on+0x9d/0x150 [ 491.032466][T12215] __do_fast_syscall_32+0xb4/0x110 [ 491.032494][T12215] ? ret_from_fork_asm+0x1a/0x30 [ 491.032514][T12215] ? lockdep_hardirqs_on+0x9d/0x150 [ 491.032546][T12215] do_fast_syscall_32+0x34/0x80 [ 491.032576][T12215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.032603][T12215] RIP: 0023:0xf707d579 [ 491.032623][T12215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 491.032643][T12215] RSP: 002b:00000000f506d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 491.032666][T12215] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 491.032682][T12215] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.032696][T12215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.032709][T12215] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 491.032722][T12215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.032753][T12215] [ 491.032763][T12215] Mem-Info: [ 491.137775][ T5928] usb 4-1: Manufacturer: syz [ 491.148754][T12215] active_anon:10476 inactive_anon:0 isolated_anon:0 [ 491.148754][T12215] active_file:12755 inactive_file:3194 isolated_file:0 [ 491.148754][T12215] unevictable:768 dirty:217 writeback:0 [ 491.148754][T12215] slab_reclaimable:9993 slab_unreclaimable:112341 [ 491.148754][T12215] mapped:30009 shmem:1403 pagetables:1034 [ 491.148754][T12215] sec_pagetables:0 bounce:0 [ 491.148754][T12215] kernel_misc_reclaimable:0 [ 491.148754][T12215] free:1295979 free_pcp:3395 free_cma:0 [ 491.441135][T12215] Node 0 active_anon:40004kB inactive_anon:0kB active_file:51020kB inactive_file:12768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120036kB dirty:864kB writeback:0kB shmem:4076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:11796kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 491.482809][T12215] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 491.524471][T12215] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.560791][T12215] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 491.602424][T12215] Node 0 DMA32 free:1255916kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:40396kB inactive_anon:0kB active_file:51020kB inactive_file:12680kB unevictable:1536kB writepending:864kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:16716kB local_pcp:4088kB free_cma:0kB [ 491.676444][T12215] lowmem_reserve[]: 0 0 0 0 0 [ 491.684648][T12215] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 491.746603][T12215] lowmem_reserve[]: 0 0 0 0 0 [ 491.751540][T12215] Node 1 Normal free:3907232kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.780254][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.787838][T12215] lowmem_reserve[]: 0 0 0 0 0 [ 491.793047][T12215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 491.806516][T12215] Node 0 DMA32: 25*4kB (UME) 12*8kB (ME) 240*16kB (UME) 284*32kB (UME) 261*64kB (UME) 200*128kB (UME) 83*256kB (UM) 56*512kB (UM) 31*1024kB (UME) 18*2048kB (UME) 264*4096kB (UM) = 1255300kB [ 491.850730][T12215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 491.862565][T12215] Node 1 Normal: 217*4kB (UME) 68*8kB (UME) 35*16kB (UME) 187*32kB (UME) 89*64kB (UME) 33*128kB (UME) 15*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 944*4096kB (M) = 3907284kB [ 491.881959][ T5928] usb 4-1: SerialNumber: syz [ 491.892084][T12215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.913932][T12215] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 491.923435][T12215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.933860][T12215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.946522][T12215] 17356 total pagecache pages [ 491.951312][T12215] 1 pages in swap cache [ 491.956475][T12215] Free swap = 118856kB [ 491.963197][T12215] Total swap = 124996kB [ 491.996473][T12215] 2097051 pages RAM [ 492.000343][T12215] 0 pages HighMem/MovableOnly [ 492.014742][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 492.014762][ T30] audit: type=1800 audit(1744785965.740:294): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1799" name="bus" dev="tmpfs" ino=1867 res=0 errno=0 [ 492.048537][T12215] 428585 pages reserved [ 492.087242][T12215] 0 pages cma reserved [ 492.391598][ T5900] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 492.616968][T12278] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 492.648068][T11545] IPVS: starting estimator thread 0... [ 492.812879][ T5928] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 492.821628][T12280] IPVS: using max 26 ests per chain, 62400 per kthread [ 492.856869][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 492.963224][T12275] FAULT_INJECTION: forcing a failure. [ 492.963224][T12275] name failslab, interval 1, probability 0, space 0, times 0 [ 492.977354][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.988330][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.999870][ T5900] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 493.009375][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.031293][ T5900] usb 3-1: config 0 descriptor?? [ 493.056281][T12275] CPU: 1 UID: 0 PID: 12275 Comm: syz.4.1801 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 493.056311][T12275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.056323][T12275] Call Trace: [ 493.056332][T12275] [ 493.056341][T12275] dump_stack_lvl+0x241/0x360 [ 493.056384][T12275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.056414][T12275] ? __pfx__printk+0x10/0x10 [ 493.056446][T12275] ? __pfx___might_resched+0x10/0x10 [ 493.056477][T12275] should_fail_ex+0x424/0x570 [ 493.056504][T12275] should_failslab+0xac/0x100 [ 493.056534][T12275] kmem_cache_alloc_noprof+0x78/0x390 [ 493.056563][T12275] ? getname_flags+0xb7/0x530 [ 493.056598][T12275] getname_flags+0xb7/0x530 [ 493.056633][T12275] do_sys_openat2+0xbf/0x1d0 [ 493.056664][T12275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.056693][T12275] ? __pfx_do_sys_openat2+0x10/0x10 [ 493.056725][T12275] ? __fget_files+0x2a/0x420 [ 493.056754][T12275] __ia32_sys_creat+0x124/0x170 [ 493.056773][T12275] ? __pfx___ia32_sys_creat+0x10/0x10 [ 493.056803][T12275] ? arch_syscall_is_vdso_sigreturn+0x16a/0x1a0 [ 493.056829][T12275] ? syscall_user_dispatch+0x4e/0x90 [ 493.056858][T12275] __do_fast_syscall_32+0xb4/0x110 [ 493.056885][T12275] ? exc_page_fault+0x5f8/0x920 [ 493.056915][T12275] do_fast_syscall_32+0x34/0x80 [ 493.056942][T12275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.056965][T12275] RIP: 0023:0xf7f25579 [ 493.056982][T12275] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 493.057001][T12275] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 493.057023][T12275] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 00000000d53049cc [ 493.057038][T12275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.057069][T12275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.057082][T12275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.057095][T12275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.057125][T12275] [ 493.275070][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 493.351499][T12294] __nla_validate_parse: 27 callbacks suppressed [ 493.351522][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1805'. [ 493.486709][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 493.494171][ T24] usb 1-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 493.504603][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 493.511847][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 493.526605][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.585765][T12299] syzkaller0: entered promiscuous mode [ 493.595107][T12299] syzkaller0: entered allmulticast mode [ 493.627442][ T24] usb 1-1: config 0 descriptor?? [ 493.677849][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 493.695421][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 493.731028][ T5928] usb 4-1: current rate 9338425 is different from the runtime rate 9338507 [ 493.751535][ T5900] gt683r_led 0003:1770:FF00.0012: ignoring exceeding usage max [ 493.888208][ T5900] gt683r_led 0003:1770:FF00.0012: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 493.971321][T12266] input: syz0 as /devices/virtual/input/input120 [ 493.988916][T12266] input: failed to attach handler leds to device input120, error: -6 [ 494.101500][ T5900] usb 3-1: USB disconnect, device number 88 [ 494.115370][ T24] gt683r_led 0003:1770:FF00.0012: failed to send set report request: -19 [ 494.153292][ T24] gt683r_led 0003:1770:FF00.0012: failed to send set report request: -19 [ 494.169926][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.194494][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.483742][ T5928] usb 4-1: USB disconnect, device number 56 [ 494.916480][ T5900] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 495.078952][ T5928] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 495.168607][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 495.198938][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 495.216047][ T5900] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 495.239366][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 495.249810][ T5900] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 495.270534][ T5928] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 495.273474][ T5900] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 495.279760][ T5928] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 495.288628][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 495.288655][ T5900] usb 3-1: Product: syz [ 495.288672][ T5900] usb 3-1: Manufacturer: syz [ 495.288688][ T5900] usb 3-1: SerialNumber: syz [ 495.309014][ T5900] usb 3-1: config 0 descriptor?? [ 495.342799][ T5900] usb 3-1: NFC: intf ffff88823bfa4000 id ffffffff8f73e2e0 [ 495.359493][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 495.374679][ T5928] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.423532][ T5928] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 495.425824][ T5900] nfcmrvl 3-1:0.0: NFC: registered with nci successfully [ 495.446930][ T5834] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 495.542680][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 495.558441][ T5900] usb 3-1: USB disconnect, device number 89 [ 495.599193][ T5928] usb 4-1: Product: syz [ 495.600722][ T5900] usb 3-1: NFC: intf ffff88823bfa4000 [ 495.611183][ T5928] usb 4-1: Manufacturer: syz [ 495.678725][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 495.705539][ T5834] usb 5-1: config 250 has an invalid interface number: 223 but max is 1 [ 495.732127][ T5928] cdc_wdm 4-1:1.0: skipping garbage [ 495.751039][ T5834] usb 5-1: config 250 has an invalid interface number: 228 but max is 1 [ 495.766779][ T5928] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 495.780979][ T5834] usb 5-1: config 250 has no interface number 0 [ 495.864748][ T5834] usb 5-1: config 250 has no interface number 1 [ 495.885053][ T5834] usb 5-1: config 250 interface 223 has no altsetting 0 [ 495.900163][ T5834] usb 5-1: config 250 interface 228 has no altsetting 0 [ 495.906152][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.943169][ T5834] usb 5-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice=70.0f [ 495.956033][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.964889][ T5834] usb 5-1: Product: syz [ 495.971750][ T5834] usb 5-1: Manufacturer: syz [ 495.977457][ T5834] usb 5-1: SerialNumber: syz [ 496.000327][ T5928] usb 4-1: USB disconnect, device number 57 [ 496.283819][ T5834] option 5-1:250.223: GSM modem (1-port) converter detected [ 496.366494][ T5900] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 496.394190][ T5834] cdc_mbim 5-1:250.228: CDC Union missing and no IAD found [ 496.409519][ T5834] cdc_mbim 5-1:250.228: bind() failure [ 496.447545][ T5834] option 5-1:250.228: GSM modem (1-port) converter detected [ 496.522131][ T5834] usb 5-1: USB disconnect, device number 65 [ 496.599201][ T5834] option 5-1:250.223: device disconnected [ 496.631063][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.639811][ T5834] option 5-1:250.228: device disconnected [ 496.656170][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 496.678834][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.723683][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 496.732980][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.765826][ T5900] usb 3-1: Product: syz [ 496.774843][ T5900] usb 3-1: Manufacturer: syz [ 496.786866][ T5900] usb 3-1: SerialNumber: syz [ 496.804354][ T5900] usb 3-1: config 0 descriptor?? [ 497.274044][ T5834] usb 1-1: USB disconnect, device number 64 [ 497.402562][T12496] input: syz0 as /devices/virtual/input/input121 [ 497.626499][ T5900] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 497.665897][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 497.746520][ T24] usb 3-1: USB disconnect, device number 90 [ 497.796919][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 497.813508][ T5900] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 497.831593][ T5900] usb 1-1: config 0 has no interface number 0 [ 497.876016][ T5900] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 497.920361][ T5900] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 497.950226][ T5900] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 497.963377][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.973571][ T5900] usb 1-1: Product: syz [ 497.976629][ T5834] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 497.986528][ T5900] usb 1-1: Manufacturer: syz [ 497.991397][ T5900] usb 1-1: SerialNumber: syz [ 498.012518][ T5900] usb 1-1: config 0 descriptor?? [ 498.022827][T12489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.030676][T12489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.126488][ T5925] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 498.137079][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 498.144485][ T5834] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 498.154120][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.164363][ T5834] usb 5-1: config 0 has no interface number 0 [ 498.170772][ T5834] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.185760][ T5834] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 498.194983][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 498.203298][ T5834] usb 5-1: Product: syz [ 498.208243][ T5834] usb 5-1: Manufacturer: syz [ 498.215757][ T5834] usb 5-1: config 0 descriptor?? [ 498.244119][T12489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.251786][T12489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.290313][ T5925] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 498.299227][ T5925] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 498.306600][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 498.315978][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.331967][ T5925] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 498.341755][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 498.350061][ T5925] usb 4-1: Product: syz [ 498.354306][ T5925] usb 4-1: Manufacturer: syz [ 498.373617][ T5925] cdc_wdm 4-1:1.0: skipping garbage [ 498.379665][ T5925] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 498.432631][ T5834] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 498.446744][ T5834] usb 5-1: qt2_attach - failed to power on unit: -71 [ 498.456337][ T5834] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 498.473119][ T5834] usb 5-1: USB disconnect, device number 66 [ 498.575968][ T5928] usb 4-1: USB disconnect, device number 58 [ 499.062706][T12572] x_tables: duplicate underflow at hook 3 [ 500.086207][T12604] program syz.4.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.376526][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 500.405016][ T5900] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 500.497268][ T5900] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 500.535945][ T5900] asix 1-1:0.251: probe with driver asix failed with error -5 [ 500.646505][ T24] usb 5-1: device descriptor read/64, error -71 [ 500.796561][ T5834] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 500.833564][ T5900] usb 1-1: USB disconnect, device number 65 [ 500.865449][T12628] fuse: Bad value for 'fd' [ 500.965081][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 501.008243][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.058921][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.066711][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 501.090617][ T5834] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 501.090653][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.115043][ T5834] usb 2-1: config 0 descriptor?? [ 501.164782][ T5900] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 501.235869][ T24] usb 5-1: device descriptor read/64, error -71 [ 501.327117][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 501.341878][ T24] usb usb5-port1: attempt power cycle [ 501.349722][ T5900] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 501.376165][ T5900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 501.412122][ T5900] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 501.440921][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.454608][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.471680][ T5900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 501.502667][ T5900] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.563277][ T5900] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.616689][ T5834] gt683r_led 0003:1770:FF00.0013: ignoring exceeding usage max [ 501.647115][ T5834] gt683r_led 0003:1770:FF00.0013: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 501.818226][T12621] input: syz0 as /devices/virtual/input/input122 [ 501.824891][T12621] input: failed to attach handler leds to device input122, error: -6 [ 501.826818][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 501.892399][ T5834] usb 2-1: USB disconnect, device number 97 [ 502.003858][T11545] gt683r_led 0003:1770:FF00.0013: failed to send set report request: -19 [ 502.060990][ T5928] gt683r_led 0003:1770:FF00.0013: failed to send set report request: -19 [ 502.146552][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.164646][ T5900] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 502.175338][ T24] usb 5-1: device descriptor read/8, error -71 [ 502.476087][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 502.487375][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 502.498718][ T24] usb 5-1: device descriptor read/8, error -71 [ 502.612430][ T24] usb usb5-port1: unable to enumerate USB device [ 502.876687][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 502.971511][T12707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1844'. [ 503.028778][T12707] wireguard0: entered promiscuous mode [ 503.029749][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.043244][T12707] wireguard0: entered allmulticast mode [ 503.058568][ T24] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 503.078393][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.106062][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.164915][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.174267][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.194773][ T24] usb 2-1: Product: syz [ 503.208797][ T24] usb 2-1: Manufacturer: syz [ 503.250914][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 503.279745][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 503.280109][T12719] lo: entered allmulticast mode [ 503.313140][T12719] tunl0: entered allmulticast mode [ 503.342760][T12719] gre0: entered allmulticast mode [ 503.360217][T12719] gretap0: entered allmulticast mode [ 503.365919][T12719] erspan0: entered allmulticast mode [ 503.375569][T12719] ip_vti0: entered allmulticast mode [ 503.383308][T12719] ip6_vti0: entered allmulticast mode [ 503.392434][T12719] sit0: entered allmulticast mode [ 503.399804][T12719] ip6tnl0: entered allmulticast mode [ 503.405507][T12719] ip6gre0: entered allmulticast mode [ 503.413779][T12719] syz_tun: entered allmulticast mode [ 503.423105][T12719] ip6gretap0: entered allmulticast mode [ 503.434056][T12719] bridge0: entered allmulticast mode [ 503.448310][T11545] usb 2-1: USB disconnect, device number 98 [ 503.465173][T12719] vcan0: entered allmulticast mode [ 503.499797][T12719] team0: entered allmulticast mode [ 503.512722][T12719] team_slave_0: entered allmulticast mode [ 503.520988][T12719] team_slave_1: entered allmulticast mode [ 503.531800][T12719] dummy0: entered allmulticast mode [ 503.542943][T12719] nlmon0: entered allmulticast mode [ 503.551697][T12719] caif0: entered allmulticast mode [ 503.558693][T12719] batadv0: entered allmulticast mode [ 503.564538][T12719] vxcan0: entered allmulticast mode [ 503.573573][T12719] vxcan1: entered allmulticast mode [ 503.580702][T12719] veth0: entered allmulticast mode [ 503.586244][T12719] veth1: entered allmulticast mode [ 503.595875][T12719] wg0: entered allmulticast mode [ 503.602718][T12719] wg1: entered allmulticast mode [ 503.611763][T12719] wg2: entered allmulticast mode [ 503.618850][T12719] veth0_to_bridge: entered allmulticast mode [ 503.632134][T12719] veth1_to_bridge: entered allmulticast mode [ 503.671272][T12719] veth0_to_bond: entered allmulticast mode [ 503.694873][T12719] veth1_to_bond: entered allmulticast mode [ 503.705725][T12719] veth0_to_team: left promiscuous mode [ 503.717627][T12719] veth1_to_team: entered allmulticast mode [ 503.730457][T12719] veth0_to_batadv: entered allmulticast mode [ 503.772087][T12719] batadv_slave_0: entered allmulticast mode [ 503.778794][T12719] veth1_to_batadv: entered allmulticast mode [ 503.784958][T11545] usb 1-1: USB disconnect, device number 66 [ 503.826176][T12719] batadv_slave_1: entered allmulticast mode [ 503.836985][T12719] xfrm0: entered allmulticast mode [ 503.842429][T12719] veth0_to_hsr: entered allmulticast mode [ 503.850007][T12719] hsr_slave_0: entered allmulticast mode [ 503.855985][T12719] veth1_to_hsr: entered allmulticast mode [ 503.907456][T12719] hsr_slave_1: entered allmulticast mode [ 503.917374][T12719] hsr0: entered allmulticast mode [ 503.924293][T12719] veth1_virt_wifi: entered allmulticast mode [ 503.946646][T12719] veth0_virt_wifi: entered allmulticast mode [ 503.963431][T12719] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 503.974313][T12719] veth1_macvtap: entered allmulticast mode [ 503.986059][T12719] veth0_macvtap: entered allmulticast mode [ 503.993726][T12719] macvtap0: entered allmulticast mode [ 504.000915][T12719] macsec0: entered allmulticast mode [ 504.014294][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 504.023417][T12719] geneve0: entered allmulticast mode [ 504.029519][T12719] geneve1: entered allmulticast mode [ 504.035042][T12719] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 504.043260][T12719] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 504.051159][T12719] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 504.059802][T12719] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 504.068847][T12719] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 504.076154][T12719] bond1: entered allmulticast mode [ 504.082190][T12719] : entered allmulticast mode [ 504.087505][T12719] ip6erspan0: left promiscuous mode [ 504.092755][T12719] ip6erspan0: entered allmulticast mode [ 504.104233][T12719] bond2: entered allmulticast mode [ 504.109802][T12719] team0.0000: entered allmulticast mode [ 504.115629][T12719] syztnl0: entered allmulticast mode [ 504.127310][T12719] vlan0009: entered allmulticast mode [ 504.256451][T11545] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 504.433459][T12764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 504.447613][T11545] usb 4-1: not running at top speed; connect to a high speed hub [ 504.467612][T11545] usb 4-1: config 8 has an invalid interface number: 116 but max is 0 [ 504.480847][T11545] usb 4-1: config 8 has no interface number 0 [ 504.498732][T12767] fuse: Bad value for 'fd' [ 504.509215][ T30] audit: type=1400 audit(1744785978.400:295): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A9A47D62AA50F45F72391BACA3346E8A82F2F262D2A83D1 pid=12766 comm="syz.1.1854" [ 504.589348][T11545] usb 4-1: config 8 interface 116 altsetting 246 endpoint 0xF has invalid maxpacket 1015, setting to 64 [ 504.636486][ T5900] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 504.647938][T11545] usb 4-1: config 8 interface 116 has no altsetting 0 [ 504.682596][T11545] usb 4-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=6c.38 [ 505.052476][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 505.080674][T11545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.106893][T11545] usb 4-1: Product: 㠭钢ؤ⬢ᡍ鑭컯맠湽䜗೗ [ 505.125313][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.133971][T11545] usb 4-1: Manufacturer: Ђ [ 505.145063][T11545] usb 4-1: SerialNumber: 䀊 [ 505.170988][T12796] syz_tun: entered promiscuous mode [ 505.188097][T12796] syz_tun: left promiscuous mode [ 505.226902][ T5900] usb 1-1: Product: syz [ 505.231317][ T5900] usb 1-1: Manufacturer: syz [ 505.235952][ T5900] usb 1-1: SerialNumber: syz [ 505.261213][ T5900] usb 1-1: config 0 descriptor?? [ 505.274361][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input123 [ 505.390505][T11545] plfxlc 4-1:8.116: Firmware Version: 0 [ 505.397691][T11545] plfxlc 4-1:8.116: Unit type is station [ 505.555633][ T5198] bcm5974 1-1:0.0: could not read from device [ 505.566863][ T5198] bcm5974 1-1:0.0: could not read from device [ 505.584063][ T5900] usb 1-1: USB disconnect, device number 67 [ 505.598555][ T5928] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 505.646917][T11545] plfxlc 4-1:8.116: vendor command failed (-71) [ 505.653487][T11545] plfxlc 4-1:8.116: FPGA download failed (-22) [ 505.663362][T11545] ------------[ cut here ]------------ [ 505.669835][T11545] WARNING: CPU: 0 PID: 11545 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x86/0xb0 [ 505.682097][T11545] Modules linked in: [ 505.686312][T11545] CPU: 0 UID: 0 PID: 11545 Comm: kworker/0:2 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 505.699471][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.710065][T11545] Workqueue: usb_hub_wq hub_event [ 505.715111][T11545] RIP: 0010:plfxlc_mac_release+0x86/0xb0 [ 505.720813][T11545] Code: d4 04 89 c3 31 ff 89 c6 e8 17 aa 66 fa 85 db 74 13 e8 ce a5 66 fa eb 05 e8 c7 a5 66 fa 5b 5d c3 cc cc cc cc e8 bb a5 66 fa 90 <0f> 0b 90 eb ee 48 c7 c1 60 10 60 90 80 e1 07 80 c1 03 38 c1 7c 9b [ 505.740848][T11545] RSP: 0018:ffffc9000452eb28 EFLAGS: 00010283 [ 505.747018][T11545] RAX: ffffffff875caf75 RBX: 0000000000000000 RCX: 0000000000100000 [ 505.755050][T11545] RDX: ffffc900187df000 RSI: 000000000003767e RDI: 000000000003767f [ 505.763431][T11545] RBP: 0000000000000001 R08: ffffffff875caf59 R09: 1ffff110056ebc5e [ 505.771886][T11545] R10: dffffc0000000000 R11: ffffed10056ebc5f R12: 00000000ffffffea [ 505.779899][T11545] R13: ffff88802b758e40 R14: ffff88805d708000 R15: dffffc0000000000 [ 505.787935][T11545] FS: 0000000000000000(0000) GS:ffff888124f93000(0000) knlGS:0000000000000000 [ 505.797704][T11545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.804318][T11545] CR2: 000000000c3c142e CR3: 0000000034f9e000 CR4: 00000000003526f0 [ 505.812629][T11545] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 505.820677][T11545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 505.829189][T11545] Call Trace: [ 505.832549][T11545] [ 505.835517][T11545] probe+0x2bd/0x930 [ 505.839544][T11545] ? __pfx_probe+0x10/0x10 [ 505.844072][T11545] ? __update_runtime_status+0x1af/0x3a0 [ 505.849825][T11545] ? __pm_runtime_set_status+0x6c1/0xa10 [ 505.855508][T11545] ? usb_disable_lpm+0x77/0x380 [ 505.860746][T11545] usb_probe_interface+0x650/0xbc0 [ 505.865925][T11545] ? __pfx_usb_probe_interface+0x10/0x10 [ 505.871714][T11545] really_probe+0x2b9/0xad0 [ 505.876280][T11545] __driver_probe_device+0x1a2/0x390 [ 505.881687][T11545] driver_probe_device+0x50/0x430 [ 505.887052][T11545] __device_attach_driver+0x2d6/0x530 [ 505.892645][T11545] bus_for_each_drv+0x258/0x2e0 [ 505.897830][T11545] ? __pfx___device_attach_driver+0x10/0x10 [ 505.903750][T11545] ? __pfx_bus_for_each_drv+0x10/0x10 [ 505.909375][T11545] __device_attach+0x341/0x530 [ 505.914158][T11545] ? __pfx___device_attach+0x10/0x10 [ 505.919733][T11545] ? do_raw_spin_unlock+0x13c/0x8b0 [ 505.924954][T11545] bus_probe_device+0x189/0x260 [ 505.929844][T11545] device_add+0x856/0xbf0 [ 505.934381][T11545] usb_set_configuration+0x1999/0x1fe0 [ 505.939913][T11545] usb_generic_driver_probe+0x88/0x140 [ 505.945379][T11545] usb_probe_device+0x1b8/0x380 [ 505.950509][T11545] ? __pfx_usb_probe_device+0x10/0x10 [ 505.956002][T11545] really_probe+0x2b9/0xad0 [ 505.960570][T11545] __driver_probe_device+0x1a2/0x390 [ 505.965875][T11545] driver_probe_device+0x50/0x430 [ 505.970986][T11545] __device_attach_driver+0x2d6/0x530 [ 505.976837][T11545] bus_for_each_drv+0x258/0x2e0 [ 505.981734][T11545] ? __pfx___device_attach_driver+0x10/0x10 [ 505.987887][T11545] ? __pfx_bus_for_each_drv+0x10/0x10 [ 505.993319][T11545] __device_attach+0x341/0x530 [ 505.998178][T11545] ? __pfx___device_attach+0x10/0x10 [ 506.004025][T11545] bus_probe_device+0x189/0x260 [ 506.009465][T11545] device_add+0x856/0xbf0 [ 506.013820][T11545] usb_new_device+0x1052/0x19a0 [ 506.018738][T11545] ? __pfx_usb_new_device+0x10/0x10 [ 506.023957][T11545] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.029196][T11545] ? lockdep_hardirqs_on+0x9d/0x150 [ 506.034448][T11545] hub_event+0x2bfd/0x50f0 [ 506.039207][T11545] ? __pfx_hub_event+0x10/0x10 [ 506.044010][T11545] ? __lock_acquire+0xad5/0xd80 [ 506.049097][T11545] ? process_scheduled_works+0x9cb/0x18e0 [ 506.054831][T11545] process_scheduled_works+0xac3/0x18e0 [ 506.060543][T11545] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.066960][T11545] ? assign_work+0x367/0x3d0 [ 506.071593][T11545] worker_thread+0x870/0xd50 [ 506.076248][T11545] ? __kthread_parkme+0x1a8/0x200 [ 506.081405][T11545] ? __pfx_worker_thread+0x10/0x10 [ 506.086595][T11545] kthread+0x7b7/0x940 [ 506.090717][T11545] ? __pfx_worker_thread+0x10/0x10 [ 506.095884][T11545] ? __pfx_kthread+0x10/0x10 [ 506.100898][T11545] ? __pfx_kthread+0x10/0x10 [ 506.105984][T11545] ? __pfx_kthread+0x10/0x10 [ 506.110964][T11545] ? __pfx_kthread+0x10/0x10 [ 506.115613][T11545] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.120902][T11545] ? lockdep_hardirqs_on+0x9d/0x150 [ 506.126147][T11545] ? __pfx_kthread+0x10/0x10 [ 506.131135][T11545] ret_from_fork+0x4b/0x80 [ 506.135600][T11545] ? __pfx_kthread+0x10/0x10 [ 506.140330][T11545] ret_from_fork_asm+0x1a/0x30 [ 506.145158][T11545] [ 506.148287][T11545] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.155604][T11545] CPU: 0 UID: 0 PID: 11545 Comm: kworker/0:2 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 506.167799][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 506.177931][T11545] Workqueue: usb_hub_wq hub_event [ 506.183031][T11545] Call Trace: [ 506.186336][T11545] [ 506.189296][T11545] dump_stack_lvl+0x241/0x360 [ 506.194025][T11545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.199273][T11545] ? __pfx__printk+0x10/0x10 [ 506.203922][T11545] ? vscnprintf+0x5d/0x90 [ 506.208294][T11545] panic+0x349/0x880 [ 506.212223][T11545] ? __warn+0x174/0x4d0 [ 506.216406][T11545] ? __pfx_panic+0x10/0x10 [ 506.220859][T11545] ? ret_from_fork_asm+0x1a/0x30 [ 506.225827][T11545] __warn+0x344/0x4d0 [ 506.229838][T11545] ? plfxlc_mac_release+0x86/0xb0 [ 506.234878][T11545] report_bug+0x2b3/0x500 [ 506.239250][T11545] ? plfxlc_mac_release+0x86/0xb0 [ 506.244281][T11545] ? plfxlc_mac_release+0x86/0xb0 [ 506.249310][T11545] ? plfxlc_mac_release+0x88/0xb0 [ 506.254341][T11545] handle_bug+0x89/0x170 [ 506.258604][T11545] exc_invalid_op+0x1a/0x50 [ 506.263124][T11545] asm_exc_invalid_op+0x1a/0x20 [ 506.268004][T11545] RIP: 0010:plfxlc_mac_release+0x86/0xb0 [ 506.273656][T11545] Code: d4 04 89 c3 31 ff 89 c6 e8 17 aa 66 fa 85 db 74 13 e8 ce a5 66 fa eb 05 e8 c7 a5 66 fa 5b 5d c3 cc cc cc cc e8 bb a5 66 fa 90 <0f> 0b 90 eb ee 48 c7 c1 60 10 60 90 80 e1 07 80 c1 03 38 c1 7c 9b [ 506.293273][T11545] RSP: 0018:ffffc9000452eb28 EFLAGS: 00010283 [ 506.299353][T11545] RAX: ffffffff875caf75 RBX: 0000000000000000 RCX: 0000000000100000 [ 506.307333][T11545] RDX: ffffc900187df000 RSI: 000000000003767e RDI: 000000000003767f [ 506.315314][T11545] RBP: 0000000000000001 R08: ffffffff875caf59 R09: 1ffff110056ebc5e [ 506.323295][T11545] R10: dffffc0000000000 R11: ffffed10056ebc5f R12: 00000000ffffffea [ 506.331276][T11545] R13: ffff88802b758e40 R14: ffff88805d708000 R15: dffffc0000000000 [ 506.339272][T11545] ? plfxlc_mac_release+0x69/0xb0 [ 506.344305][T11545] ? plfxlc_mac_release+0x85/0xb0 [ 506.349339][T11545] ? plfxlc_mac_release+0x85/0xb0 [ 506.354367][T11545] probe+0x2bd/0x930 [ 506.358287][T11545] ? __pfx_probe+0x10/0x10 [ 506.362743][T11545] ? __update_runtime_status+0x1af/0x3a0 [ 506.368474][T11545] ? __pm_runtime_set_status+0x6c1/0xa10 [ 506.374111][T11545] ? usb_disable_lpm+0x77/0x380 [ 506.378970][T11545] usb_probe_interface+0x650/0xbc0 [ 506.384102][T11545] ? __pfx_usb_probe_interface+0x10/0x10 [ 506.389749][T11545] really_probe+0x2b9/0xad0 [ 506.394274][T11545] __driver_probe_device+0x1a2/0x390 [ 506.399577][T11545] driver_probe_device+0x50/0x430 [ 506.404635][T11545] __device_attach_driver+0x2d6/0x530 [ 506.410049][T11545] bus_for_each_drv+0x258/0x2e0 [ 506.414914][T11545] ? __pfx___device_attach_driver+0x10/0x10 [ 506.420829][T11545] ? __pfx_bus_for_each_drv+0x10/0x10 [ 506.426220][T11545] __device_attach+0x341/0x530 [ 506.431003][T11545] ? __pfx___device_attach+0x10/0x10 [ 506.436335][T11545] ? do_raw_spin_unlock+0x13c/0x8b0 [ 506.441563][T11545] bus_probe_device+0x189/0x260 [ 506.446428][T11545] device_add+0x856/0xbf0 [ 506.450776][T11545] usb_set_configuration+0x1999/0x1fe0 [ 506.456288][T11545] usb_generic_driver_probe+0x88/0x140 [ 506.461765][T11545] usb_probe_device+0x1b8/0x380 [ 506.466631][T11545] ? __pfx_usb_probe_device+0x10/0x10 [ 506.472012][T11545] really_probe+0x2b9/0xad0 [ 506.476534][T11545] __driver_probe_device+0x1a2/0x390 [ 506.481836][T11545] driver_probe_device+0x50/0x430 [ 506.486875][T11545] __device_attach_driver+0x2d6/0x530 [ 506.492270][T11545] bus_for_each_drv+0x258/0x2e0 [ 506.497126][T11545] ? __pfx___device_attach_driver+0x10/0x10 [ 506.503031][T11545] ? __pfx_bus_for_each_drv+0x10/0x10 [ 506.508419][T11545] __device_attach+0x341/0x530 [ 506.513205][T11545] ? __pfx___device_attach+0x10/0x10 [ 506.518534][T11545] bus_probe_device+0x189/0x260 [ 506.523399][T11545] device_add+0x856/0xbf0 [ 506.527748][T11545] usb_new_device+0x1052/0x19a0 [ 506.532640][T11545] ? __pfx_usb_new_device+0x10/0x10 [ 506.537856][T11545] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.543063][T11545] ? lockdep_hardirqs_on+0x9d/0x150 [ 506.548285][T11545] hub_event+0x2bfd/0x50f0 [ 506.552755][T11545] ? __pfx_hub_event+0x10/0x10 [ 506.557528][T11545] ? __lock_acquire+0xad5/0xd80 [ 506.562408][T11545] ? process_scheduled_works+0x9cb/0x18e0 [ 506.568134][T11545] process_scheduled_works+0xac3/0x18e0 [ 506.573715][T11545] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.579747][T11545] ? assign_work+0x367/0x3d0 [ 506.584360][T11545] worker_thread+0x870/0xd50 [ 506.589084][T11545] ? __kthread_parkme+0x1a8/0x200 [ 506.594125][T11545] ? __pfx_worker_thread+0x10/0x10 [ 506.599248][T11545] kthread+0x7b7/0x940 [ 506.603331][T11545] ? __pfx_worker_thread+0x10/0x10 [ 506.608455][T11545] ? __pfx_kthread+0x10/0x10 [ 506.613069][T11545] ? __pfx_kthread+0x10/0x10 [ 506.617686][T11545] ? __pfx_kthread+0x10/0x10 [ 506.622294][T11545] ? __pfx_kthread+0x10/0x10 [ 506.626906][T11545] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.632111][T11545] ? lockdep_hardirqs_on+0x9d/0x150 [ 506.637322][T11545] ? __pfx_kthread+0x10/0x10 [ 506.641935][T11545] ret_from_fork+0x4b/0x80 [ 506.646360][T11545] ? __pfx_kthread+0x10/0x10 [ 506.650969][T11545] ret_from_fork_asm+0x1a/0x30 [ 506.655748][T11545] [ 506.659176][T11545] Kernel Offset: disabled [ 506.663507][T11545] Rebooting in 86400 seconds..